{ "openapi": "3.1.1", "info": { "title": "WalkPic API", "version": "1.1.0", "description": "Source-compatible WalkPic API v1 and v2 contract. Personal integration grants are implemented for eight starter JSON reads. Every protected operation remains subject to current server authorization, scopes and resource access." }, "servers": [ { "url": "https://walkpic.com", "description": "WalkPic public API origin" }, { "url": "https://walkpic-api.meshagent.app", "description": "Direct API service origin used by the web workspace broker" } ], "paths": { "/v1/publications/prepare": { "post": { "operationId": "contentPreparePublication", "tags": [ "Content" ], "summary": "PreparePublication", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/publications/prepare'", "line": 511, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/validation.ts", "selector": "export function validatePrepare", "line": 54, "sourceSha256": "0de11ea68901393a90ebe027c428cc2945dcee56c945656481fb74dd68cd62c1" }, { "file": "service/src/schema.ts", "selector": "NEW.type='prepare'", "line": 47, "sourceSha256": "5eaa6266e5b505f810e2de1e7798b23a6ad5af1d8346f710d064a6416edfbbc7" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required", "postSlowWorkAndCompatibility": [ "All four sharing audiences have publication/story text policy on a new prepare; acknowledged retry skips new-policy re-screen but still compares digest.", "Missing arrays are invalid; zero-length arrays allowed subject to nonempty publication rule.", "Replay returns current session status, not frozen original pending receipt." ] }, "parameters": [], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSessionStatus" } } } }, "400": { "description": "INVALID_REQUEST: field/shape/cross-field violation; LIMIT_EXCEEDED: route/photos/pins/aggregate bytes validation bounds; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "field/shape/cross-field violation" }, { "code": "LIMIT_EXCEEDED", "when": "route/photos/pins/aggregate bytes validation bounds" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "LIMIT_EXCEEDED" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/key content changed; RECIPIENT_CHANGED: recipient no longer approved/unblocked", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/key content changed" }, { "code": "RECIPIENT_CHANGED", "when": "recipient no longer approved/unblocked" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "RECIPIENT_CHANGED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "RECIPIENT_CHANGED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "422": { "description": "CONTENT_NOT_ALLOWED: new title/date/story denied", "x-walkpic-errors": [ { "code": "CONTENT_NOT_ALLOWED", "when": "new title/date/story denied" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ] }, "429": { "description": "LIMIT_EXCEEDED: 100 publications in previous day or >=5 pending", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "100 publications in previous day or >=5 pending" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/publisher.dart", "selector": "'/v1/publications/prepare'", "line": 470, "sourceSha256": "c155c7088e6fe96c449342a13767b06c2d84e9af6a4db008a059ce18c92f891f" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPrepareRequest" } } }, "description": "application/json prefix; maximum 800000 bytes", "x-walkpic-max-bytes": 800000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/uploads/{publicationId}/{photoId}": { "put": { "operationId": "contentUploadPhoto", "tags": [ "Content" ], "summary": "UploadPhoto", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const upload=path.match", "line": 528, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/publication_image_screening.ts", "selector": "const normalizeAndAssess", "line": 78, "sourceSha256": "7454ac0c7083ff8e43c10e478fff0e178101d4eb9efc151c587f077f5e11d2bd" }, { "file": "service/src/photo_quality.ts", "selector": "export const photoQualities", "line": 3, "sourceSha256": "046a5b9527ee4a15d821e8051f32255bf452e69aa7bbd7d1ff293aad6b227f51" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; publication owned by current actor; mutations delegate owner checks to current SQLite command transaction", "postSlowWorkAndCompatibility": [ "Normalized derivative follows frozen photoQuality; absent policy balanced. Wire cannot choose a model/policy/score at upload.", "Server persists discoverable unsettled cleanup before storage; exact pending/live owner/time proof checked around slow work; request disconnect aborts processing.", "Duplicate acknowledged photo still must supply original approved byte hash/count; early receipt omits sha256.", "UPLOAD_BUSY sets Retry-After:2; active admission spans body read through storage acknowledgement." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" }, { "name": "photoId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "description": "^[A-Za-z0-9_-]{1,64}$" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentUploadReceipt" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: unowned/missing publication or photo absent from approved manifest", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "unowned/missing publication or photo absent from approved manifest" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "UPLOAD_CLOSED: not pending, >=24h old, or post-processing/storage revalidation no longer pending/current; IMAGE_ASSESSMENT_REQUIRED: policy/proof changed during processing", "x-walkpic-errors": [ { "code": "UPLOAD_CLOSED", "when": "not pending, >=24h old, or post-processing/storage revalidation no longer pending/current" }, { "code": "IMAGE_ASSESSMENT_REQUIRED", "when": "policy/proof changed during processing" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IMAGE_ASSESSMENT_REQUIRED", "UPLOAD_CLOSED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "UPLOAD_CLOSED", "IMAGE_ASSESSMENT_REQUIRED" ] }, "413": { "description": "LIMIT_EXCEEDED: read exceeds 12M", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "read exceeds 12M" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: not exact image/jpeg", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "not exact image/jpeg" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "422": { "description": "ASSET_UNAVAILABLE: raw bytes/hash mismatch or invalid image; IMAGE_CONTENT_NOT_ALLOWED: enabled trusted assessor rejects", "x-walkpic-errors": [ { "code": "ASSET_UNAVAILABLE", "when": "raw bytes/hash mismatch or invalid image" }, { "code": "IMAGE_CONTENT_NOT_ALLOWED", "when": "enabled trusted assessor rejects" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ASSET_UNAVAILABLE", "IMAGE_CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "ASSET_UNAVAILABLE", "IMAGE_CONTENT_NOT_ALLOWED" ] }, "429": { "description": "UPLOAD_BUSY: >=2 admitted HTTP uploads; IMAGE_SCREENING_BUSY: >=2 screening operations; IMAGE_PROCESSING_UNAVAILABLE: normalizer returns IMAGE_PROCESSING_BUSY; HTTP code intentionally differs internal busy code", "x-walkpic-errors": [ { "code": "UPLOAD_BUSY", "when": ">=2 admitted HTTP uploads" }, { "code": "IMAGE_SCREENING_BUSY", "when": ">=2 screening operations" }, { "code": "IMAGE_PROCESSING_UNAVAILABLE", "when": "normalizer returns IMAGE_PROCESSING_BUSY; HTTP code intentionally differs internal busy code" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IMAGE_PROCESSING_UNAVAILABLE", "IMAGE_SCREENING_BUSY", "UPLOAD_BUSY" ] } } } } } ] } } }, "headers": { "Retry-After": { "schema": { "type": "string" }, "description": "2 for UPLOAD_BUSY; not guaranteed on other processing429" }, "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "UPLOAD_BUSY", "IMAGE_SCREENING_BUSY", "IMAGE_PROCESSING_UNAVAILABLE" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] }, "503": { "description": "IMAGE_PROCESSING_UNAVAILABLE: other non-ApiError processing failure; IMAGE_PROCESSING_ABORTED: request disconnected/processing canceled; IMAGE_SCREENING_UNAVAILABLE: missing configured policy/assessor/provider failure", "x-walkpic-errors": [ { "code": "IMAGE_PROCESSING_UNAVAILABLE", "when": "other non-ApiError processing failure" }, { "code": "IMAGE_PROCESSING_ABORTED", "when": "request disconnected/processing canceled" }, { "code": "IMAGE_SCREENING_UNAVAILABLE", "when": "missing configured policy/assessor/provider failure" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IMAGE_PROCESSING_ABORTED", "IMAGE_PROCESSING_UNAVAILABLE", "IMAGE_SCREENING_UNAVAILABLE" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IMAGE_PROCESSING_UNAVAILABLE", "IMAGE_PROCESSING_ABORTED", "IMAGE_SCREENING_UNAVAILABLE" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/publisher.dart", "selector": "'/v1/uploads/$sessionId/", "line": 555, "sourceSha256": "c155c7088e6fe96c449342a13767b06c2d84e9af6a4db008a059ce18c92f891f" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "image/jpeg": { "schema": { "$ref": "#/components/schemas/ContentBinaryJpeg" } } }, "description": "image/jpeg exactly (parameters rejected); maximum 12000000 bytes", "x-walkpic-max-bytes": 12000000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/status": { "get": { "operationId": "contentReadPublicationStatus", "tags": [ "Content" ], "summary": "ReadPublicationStatus", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(action==='status'&&method==='GET')", "line": 596, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; publication owned by current actor; mutations delegate owner checks to current SQLite command transaction", "postSlowWorkAndCompatibility": [ "unlistedToken only if state active and encrypted capability exists; closed pending session remains queryable while row persists." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentStatusReceipt" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not owned/missing publication", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not owned/missing publication" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/publisher.dart", "selector": "'/v1/publications/$publicationId/status'", "line": 645, "sourceSha256": "c155c7088e6fe96c449342a13767b06c2d84e9af6a4db008a059ce18c92f891f" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/commit": { "post": { "operationId": "contentCommitPublication", "tags": [ "Content" ], "summary": "CommitPublication", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(method==='POST'&&action==='commit')", "line": 599, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/schema.ts", "selector": "NEW.type='commit'", "line": 61, "sourceSha256": "5eaa6266e5b505f810e2de1e7798b23a6ad5af1d8346f710d064a6416edfbbc7" }, { "file": "service/src/publication_image_screening.ts", "selector": "async function beforeCommit", "line": 83, "sourceSha256": "7454ac0c7083ff8e43c10e478fff0e178101d4eb9efc151c587f077f5e11d2bd" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; publication owned by current actor; mutations delegate owner checks to current SQLite command transaction", "postSlowWorkAndCompatibility": [ "Already-active retry returns current capability before rechecking text/photos/recipients.", "Successful initial commit is atomic state active + publication outbox; valid capability generated if link_enabled. Restriction means logical revoke with retryable physical cleanup, not provider-copy erasure." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentCommitReceipt" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not owned/missing publication", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not owned/missing publication" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "UPLOAD_CLOSED: pending >=24h, including SQL before-command expiry guard; ASSET_UNAVAILABLE: approved photo not uploaded; SQL error mapping409 differs upload mismatch422; RECIPIENT_CHANGED: recipient no longer approved/unblocked; IMAGE_SCREENING_PENDING: more than two legacy stored photos require current screening; retry advances persisted proofs; IMAGE_ASSESSMENT_REQUIRED: current policy/proof changed", "x-walkpic-errors": [ { "code": "UPLOAD_CLOSED", "when": "pending >=24h, including SQL before-command expiry guard" }, { "code": "ASSET_UNAVAILABLE", "when": "approved photo not uploaded; SQL error mapping409 differs upload mismatch422" }, { "code": "RECIPIENT_CHANGED", "when": "recipient no longer approved/unblocked" }, { "code": "IMAGE_SCREENING_PENDING", "when": "more than two legacy stored photos require current screening; retry advances persisted proofs" }, { "code": "IMAGE_ASSESSMENT_REQUIRED", "when": "current policy/proof changed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ASSET_UNAVAILABLE", "IMAGE_ASSESSMENT_REQUIRED", "IMAGE_SCREENING_PENDING", "RECIPIENT_CHANGED", "UPLOAD_CLOSED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "UPLOAD_CLOSED", "ASSET_UNAVAILABLE", "RECIPIENT_CHANGED", "IMAGE_SCREENING_PENDING", "IMAGE_ASSESSMENT_REQUIRED" ] }, "410": { "description": "REVISION_REVOKED: not pending/active", "x-walkpic-errors": [ { "code": "REVISION_REVOKED", "when": "not pending/active" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "REVISION_REVOKED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "REVISION_REVOKED" ] }, "422": { "description": "CONTENT_NOT_ALLOWED: pending title/date/story now denied", "x-walkpic-errors": [ { "code": "CONTENT_NOT_ALLOWED", "when": "pending title/date/story now denied" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] }, "503": { "description": "IMAGE_SCREENING_UNAVAILABLE: enabled policy lacks valid processor/proof", "x-walkpic-errors": [ { "code": "IMAGE_SCREENING_UNAVAILABLE", "when": "enabled policy lacks valid processor/proof" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IMAGE_SCREENING_UNAVAILABLE" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IMAGE_SCREENING_UNAVAILABLE" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/publisher.dart", "selector": "'/v1/publications/$publicationId/commit'", "line": 638, "sourceSha256": "c155c7088e6fe96c449342a13767b06c2d84e9af6a4db008a059ce18c92f891f" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": false, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentJsonValue" } }, "*/*": { "schema": { "type": "string", "format": "binary" } } }, "description": "Ignored/unread body: native JSON caller values accepted but never parsed, validated or used by this branch. Any Content-Type/bytes accepted; no application body limit asserted.", "x-walkpic-ignored": true }, "x-walkpic-ignored-request-body": true, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/cancel": { "post": { "operationId": "contentCancelPublication", "tags": [ "Content" ], "summary": "CancelPublication", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(method==='POST'&&(action==='restrict'||action==='cancel'))", "line": 613, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/schema.ts", "selector": "NEW.type IN ('restrict','cancel')", "line": 71, "sourceSha256": "5eaa6266e5b505f810e2de1e7798b23a6ad5af1d8346f710d064a6416edfbbc7" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; publication owned by current actor; mutations delegate owner checks to current SQLite command transaction", "postSlowWorkAndCompatibility": [ "Idempotency receipt replay preserves earlier acknowledgement; command ID actor/action/key and digest action:publicationId.", "Restriction can act on owned nonactive rows; no requirePost read in this branch. Clears capability hashes/ciphers and queues exact publication deletion." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentCloseReceipt" } } } }, "400": { "description": "INVALID_REQUEST: nonobject/invalid coerced key; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "nonobject/invalid coerced key" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not owned/missing", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not owned/missing" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: same actor/action/coerced key refers to different publication; ALREADY_COMMITTED: cancel of active publication", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "same actor/action/coerced key refers to different publication" }, { "code": "ALREADY_COMMITTED", "when": "cancel of active publication" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "ALREADY_COMMITTED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/publisher.dart", "selector": "'/v1/publications/$publicationId/cancel'", "line": 813, "sourceSha256": "c155c7088e6fe96c449342a13767b06c2d84e9af6a4db008a059ce18c92f891f" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLegacyKeyRequest" } } }, "description": "application/json prefix; maximum 2000000 bytes", "x-walkpic-max-bytes": 2000000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/restrict": { "post": { "operationId": "contentRestrictPublication", "tags": [ "Content" ], "summary": "RestrictPublication", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(method==='POST'&&(action==='restrict'||action==='cancel'))", "line": 613, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/schema.ts", "selector": "NEW.type IN ('restrict','cancel')", "line": 71, "sourceSha256": "5eaa6266e5b505f810e2de1e7798b23a6ad5af1d8346f710d064a6416edfbbc7" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; publication owned by current actor; mutations delegate owner checks to current SQLite command transaction", "postSlowWorkAndCompatibility": [ "Idempotency receipt replay preserves earlier acknowledgement; command ID actor/action/key and digest action:publicationId.", "Restriction can act on owned nonactive rows; no requirePost read in this branch. Clears capability hashes/ciphers and queues exact publication deletion." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentCloseReceipt" } } } }, "400": { "description": "INVALID_REQUEST: nonobject/invalid coerced key; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "nonobject/invalid coerced key" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not owned/missing", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not owned/missing" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: same actor/action/coerced key refers to different publication", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "same actor/action/coerced key refers to different publication" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/publisher.dart", "selector": "'/v1/publications/$publicationId/restrict'", "line": 657, "sourceSha256": "c155c7088e6fe96c449342a13767b06c2d84e9af6a4db008a059ce18c92f891f" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLegacyKeyRequest" } } }, "description": "application/json prefix; maximum 2000000 bytes", "x-walkpic-max-bytes": 2000000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/link/rotate": { "post": { "operationId": "contentRotatePublicationLink", "tags": [ "Content" ], "summary": "RotatePublicationLink", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const link=path.match", "line": 624, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/schema.ts", "selector": "NEW.type='link_rotate'", "line": 132, "sourceSha256": "5eaa6266e5b505f810e2de1e7798b23a6ad5af1d8346f710d064a6416edfbbc7" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; publication owned by current actor; mutations delegate owner checks to current SQLite command transaction", "postSlowWorkAndCompatibility": [ "Can enable secondary capability on public/followers/specific; rotation invalidates previous token. Revoke disables link and returns null token. Exact key replay can return original token acknowledgement even after later rotation; current access still checks present token hash." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLinkReceipt" } } } }, "400": { "description": "INVALID_REQUEST: invalid coerced key; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "invalid coerced key" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not owned/missing", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not owned/missing" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "REVISION_REVOKED: initial owned publication not active; IDEMPOTENCY_CONFLICT: same actor/action/key targets changed publication", "x-walkpic-errors": [ { "code": "REVISION_REVOKED", "when": "initial owned publication not active" }, { "code": "IDEMPOTENCY_CONFLICT", "when": "same actor/action/key targets changed publication" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "REVISION_REVOKED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "REVISION_REVOKED", "IDEMPOTENCY_CONFLICT" ] }, "410": { "description": "REVISION_REVOKED: state changes before atomic SQL link command; shared SQL mapping", "x-walkpic-errors": [ { "code": "REVISION_REVOKED", "when": "state changes before atomic SQL link command; shared SQL mapping" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "REVISION_REVOKED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "REVISION_REVOKED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLegacyKeyRequest" } } }, "description": "application/json prefix; maximum 2000000 bytes", "x-walkpic-max-bytes": 2000000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/link/revoke": { "post": { "operationId": "contentRevokePublicationLink", "tags": [ "Content" ], "summary": "RevokePublicationLink", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const link=path.match", "line": 624, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/schema.ts", "selector": "NEW.type='link_rotate'", "line": 132, "sourceSha256": "5eaa6266e5b505f810e2de1e7798b23a6ad5af1d8346f710d064a6416edfbbc7" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; publication owned by current actor; mutations delegate owner checks to current SQLite command transaction", "postSlowWorkAndCompatibility": [ "Can enable secondary capability on public/followers/specific; rotation invalidates previous token. Revoke disables link and returns null token. Exact key replay can return original token acknowledgement even after later rotation; current access still checks present token hash." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLinkReceipt" } } } }, "400": { "description": "INVALID_REQUEST: invalid coerced key; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "invalid coerced key" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not owned/missing", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not owned/missing" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "REVISION_REVOKED: initial owned publication not active; IDEMPOTENCY_CONFLICT: same actor/action/key targets changed publication", "x-walkpic-errors": [ { "code": "REVISION_REVOKED", "when": "initial owned publication not active" }, { "code": "IDEMPOTENCY_CONFLICT", "when": "same actor/action/key targets changed publication" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "REVISION_REVOKED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "REVISION_REVOKED", "IDEMPOTENCY_CONFLICT" ] }, "410": { "description": "REVISION_REVOKED: state changes before atomic SQL link command; shared SQL mapping", "x-walkpic-errors": [ { "code": "REVISION_REVOKED", "when": "state changes before atomic SQL link command; shared SQL mapping" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "REVISION_REVOKED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "REVISION_REVOKED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLegacyKeyRequest" } } }, "description": "application/json prefix; maximum 2000000 bytes", "x-walkpic-max-bytes": 2000000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}": { "get": { "operationId": "contentReadPublication", "tags": [ "Content" ], "summary": "ReadPublication", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const pub=path.match", "line": 739, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/publication_reads.ts", "selector": "export async function publicationSnapshot", "line": 18, "sourceSha256": "618d274230b50c3cd932009160481603e0576078ce0a223740c244a6fedf46c7" }, { "file": "service/src/explore_acl.ts", "selector": "export function readableSql", "line": 9, "sourceSha256": "ec9aa58b740dc665ccde7109ff1fceb999f7364c67c0ec1e69740ba2f2a6b527" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; absent Authorization allows public/capability reads; malformed or expired supplied bearer ->401; active publication/live owner/unblocked viewer plus owner OR public OR live unlisted capability OR approved follower (and selected recipient for specific)", "postSlowWorkAndCompatibility": [ "One SQL snapshot authorizes all returned fields and current user/session. Access revisions are current authorization/presentation hashes, not durable lease rights." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "optional fallback capability string; first value; header takes precedence", "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicationDetail" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: missing/restricted/cancelled/deleted owner/blocked/unauthorized/current session unavailable", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "missing/restricted/cancelled/deleted owner/blocked/unauthorized/current session unavailable" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "'/v1/publications/$id/access'", "line": 237, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" }, { "file": "app/lib/web/viewer_api.dart", "selector": "Future publication", "line": 55, "sourceSha256": "caaf10ed201ac6bef7a347f13b4c1c1be8075e238800b507d8c486272576a668" } ], "security": [ {}, { "BearerAuth": [] }, { "PublicationLink": [] }, { "LegacyPublicationLinkQuery": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed", "token": "optional fallback capability string; first value; header takes precedence" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/access": { "get": { "operationId": "contentReadPublicationAccess", "tags": [ "Content" ], "summary": "ReadPublicationAccess", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const pub=path.match", "line": 739, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/publication_reads.ts", "selector": "export async function publicationSnapshot", "line": 18, "sourceSha256": "618d274230b50c3cd932009160481603e0576078ce0a223740c244a6fedf46c7" }, { "file": "service/src/explore_acl.ts", "selector": "export function readableSql", "line": 9, "sourceSha256": "ec9aa58b740dc665ccde7109ff1fceb999f7364c67c0ec1e69740ba2f2a6b527" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; absent Authorization allows public/capability reads; malformed or expired supplied bearer ->401; active publication/live owner/unblocked viewer plus owner OR public OR live unlisted capability OR approved follower (and selected recipient for specific)", "postSlowWorkAndCompatibility": [ "One SQL snapshot authorizes all returned fields and current user/session. Access revisions are current authorization/presentation hashes, not durable lease rights." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "optional fallback capability string; first value; header takes precedence", "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicationAccess" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: missing/restricted/cancelled/deleted owner/blocked/unauthorized/current session unavailable", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "missing/restricted/cancelled/deleted owner/blocked/unauthorized/current session unavailable" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "'/v1/publications/$id/access'", "line": 237, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" } ], "security": [ {}, { "BearerAuth": [] }, { "PublicationLink": [] }, { "LegacyPublicationLinkQuery": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed", "token": "optional fallback capability string; first value; header takes precedence" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/media/{photoId}": { "get": { "operationId": "contentReadPublicationPhoto", "tags": [ "Content" ], "summary": "ReadPublicationPhoto", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const media=path.match", "line": 682, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/app.ts", "selector": "const mediaRange=", "line": 64, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/publication_image_screening.ts", "selector": "async function verifyMedia", "line": 117, "sourceSha256": "7454ac0c7083ff8e43c10e478fff0e178101d4eb9efc151c587f077f5e11d2bd" }, { "file": "service/src/approved_media_storage.ts", "selector": "async download(", "line": 70, "sourceSha256": "baf70a9f446f8e85f2c935f5cd4894c9388611d4a81f2e978f4edc613c599fe6" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; absent Authorization allows public/capability reads; malformed or expired supplied bearer ->401; active publication/live owner/unblocked viewer plus owner OR public OR live unlisted capability OR approved follower (and selected recipient for specific)", "postSlowWorkAndCompatibility": [ "Reauthorizes current publication/live owner/live actor/block/follow/recipient/token plus exact storage_key/stored_hash/stored_bytes/uploaded_at after storage before headers. This final media SQL does not include session expiry/revocation; initial auth checks session.", "Right endpoint clamps to last byte; suffix count beyond total produces entire JPEG with206. HEAD does same download/ACL/range work as GET, returns selected Content-Length and no bytes.", "No full/original/size/download query changes rendition; unknown query keys ignored. If-Range/If-None-Match not inspected; no ETag/Content-Disposition sent by this branch." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" }, { "name": "photoId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "description": "^[A-Za-z0-9_-]{1,64}$" }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "fallback capability", "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." }, { "name": "Range", "in": "header", "required": false, "schema": { "type": "string", "pattern": "^bytes=(?:[0-9]+-[0-9]*|-[0-9]+)$" }, "description": "Single range only. Safe integer indices, suffix>0, current size validation. Clamp final index; multipart/invalid/unsatisfiable416." } ], "responses": { "200": { "description": "Selected approved JPEG bytes", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." }, "Content-Type": { "schema": { "type": "string", "const": "image/jpeg" } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" } }, "Accept-Ranges": { "schema": { "type": "string", "const": "bytes" } }, "X-WalkPic-Media-Length": { "description": "Decoded selected JPEG byte count emitted alongside Content-Length. Remains observable when a hosting gateway reframes HTTP and removes Content-Length. For 206 this is the selected chunk length, not the full object length.", "schema": { "type": "string", "pattern": "^[0-9]+$" } } }, "content": { "image/jpeg": { "schema": { "$ref": "#/components/schemas/ContentBinaryJpeg" } } } }, "206": { "description": "Selected approved JPEG bytes", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." }, "Content-Type": { "schema": { "type": "string", "const": "image/jpeg" } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" } }, "Accept-Ranges": { "schema": { "type": "string", "const": "bytes" } }, "Content-Range": { "schema": { "type": "string", "pattern": "^bytes [0-9]+-[0-9]+/[0-9]+$" } }, "X-WalkPic-Media-Length": { "description": "Decoded selected JPEG byte count emitted alongside Content-Length. Remains observable when a hosting gateway reframes HTTP and removes Content-Length. For 206 this is the selected chunk length, not the full object length.", "schema": { "type": "string", "pattern": "^[0-9]+$" } } }, "content": { "image/jpeg": { "schema": { "$ref": "#/components/schemas/ContentBinaryJpeg" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not current readable/photo missing/exact object changed after storage", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not current readable/photo missing/exact object changed after storage" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "416": { "description": "INVALID_RANGE: invalid/multiple/out-of-bounds range; Content-Range:bytes */total", "x-walkpic-errors": [ { "code": "INVALID_RANGE", "when": "invalid/multiple/out-of-bounds range; Content-Range:bytes */total" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_RANGE" ] } } } } } ] } } }, "headers": { "Content-Range": { "schema": { "type": "string", "pattern": "^bytes \\*/[0-9]+$" } }, "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_RANGE" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] }, "503": { "description": "MEDIA_UNAVAILABLE: provider unavailable or current screening proof/hash does not match", "x-walkpic-errors": [ { "code": "MEDIA_UNAVAILABLE", "when": "provider unavailable or current screening proof/hash does not match" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "MEDIA_UNAVAILABLE" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "MEDIA_UNAVAILABLE" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "Future media(", "line": 1113, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" }, { "file": "app/lib/web/viewer_api.dart", "selector": "Future photo(", "line": 73, "sourceSha256": "caaf10ed201ac6bef7a347f13b4c1c1be8075e238800b507d8c486272576a668" }, { "file": "app/lib/web/workspace_api.dart", "selector": "Future media(", "line": 223, "sourceSha256": "fe9e2d3ee7f6c6c90c06cf0b77a963b3d2338ee2bbc92035a13be13573ac84a3" } ], "security": [ {}, { "BearerAuth": [] }, { "PublicationLink": [] }, { "LegacyPublicationLinkQuery": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed", "token": "fallback capability" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } }, "head": { "operationId": "contentHeadPublicationPhoto", "tags": [ "Content" ], "summary": "HeadPublicationPhoto", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const media=path.match", "line": 682, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/app.ts", "selector": "const mediaRange=", "line": 64, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/publication_image_screening.ts", "selector": "async function verifyMedia", "line": 117, "sourceSha256": "7454ac0c7083ff8e43c10e478fff0e178101d4eb9efc151c587f077f5e11d2bd" }, { "file": "service/src/approved_media_storage.ts", "selector": "async download(", "line": 70, "sourceSha256": "baf70a9f446f8e85f2c935f5cd4894c9388611d4a81f2e978f4edc613c599fe6" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; absent Authorization allows public/capability reads; malformed or expired supplied bearer ->401; active publication/live owner/unblocked viewer plus owner OR public OR live unlisted capability OR approved follower (and selected recipient for specific)", "postSlowWorkAndCompatibility": [ "Reauthorizes current publication/live owner/live actor/block/follow/recipient/token plus exact storage_key/stored_hash/stored_bytes/uploaded_at after storage before headers. This final media SQL does not include session expiry/revocation; initial auth checks session.", "Right endpoint clamps to last byte; suffix count beyond total produces entire JPEG with206. HEAD does same download/ACL/range work as GET, returns selected Content-Length and no bytes.", "No full/original/size/download query changes rendition; unknown query keys ignored. If-Range/If-None-Match not inspected; no ETag/Content-Disposition sent by this branch." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" }, { "name": "photoId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "description": "^[A-Za-z0-9_-]{1,64}$" }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "fallback capability", "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." }, { "name": "Range", "in": "header", "required": false, "schema": { "type": "string", "pattern": "^bytes=(?:[0-9]+-[0-9]*|-[0-9]+)$" }, "description": "Single range only. Safe integer indices, suffix>0, current size validation. Clamp final index; multipart/invalid/unsatisfiable416." } ], "responses": { "200": { "description": "Selected JPEG metadata; HEAD has no body and performs same storage/ACL work.", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." }, "Content-Type": { "schema": { "type": "string", "const": "image/jpeg" } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" } }, "Accept-Ranges": { "schema": { "type": "string", "const": "bytes" } }, "X-WalkPic-Media-Length": { "description": "Decoded selected JPEG byte count emitted alongside Content-Length. Remains observable when a hosting gateway reframes HTTP and removes Content-Length. For 206 this is the selected chunk length, not the full object length.", "schema": { "type": "string", "pattern": "^[0-9]+$" } } }, "x-walkpic-no-response-body": true }, "206": { "description": "Selected JPEG metadata; HEAD has no body and performs same storage/ACL work.", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." }, "Content-Type": { "schema": { "type": "string", "const": "image/jpeg" } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" } }, "Accept-Ranges": { "schema": { "type": "string", "const": "bytes" } }, "Content-Range": { "schema": { "type": "string", "pattern": "^bytes [0-9]+-[0-9]+/[0-9]+$" } }, "X-WalkPic-Media-Length": { "description": "Decoded selected JPEG byte count emitted alongside Content-Length. Remains observable when a hosting gateway reframes HTTP and removes Content-Length. For 206 this is the selected chunk length, not the full object length.", "schema": { "type": "string", "pattern": "^[0-9]+$" } } }, "x-walkpic-no-response-body": true }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "x-walkpic-no-response-body": true, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not current readable/photo missing/exact object changed after storage", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not current readable/photo missing/exact object changed after storage" } ], "x-walkpic-no-response-body": true, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "416": { "description": "INVALID_RANGE: invalid/multiple/out-of-bounds range; Content-Range:bytes */total", "x-walkpic-errors": [ { "code": "INVALID_RANGE", "when": "invalid/multiple/out-of-bounds range; Content-Range:bytes */total" } ], "x-walkpic-no-response-body": true, "headers": { "Content-Range": { "schema": { "type": "string", "pattern": "^bytes \\*/[0-9]+$" } }, "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_RANGE" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "x-walkpic-no-response-body": true, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] }, "503": { "description": "MEDIA_UNAVAILABLE: provider unavailable or current screening proof/hash does not match", "x-walkpic-errors": [ { "code": "MEDIA_UNAVAILABLE", "when": "provider unavailable or current screening proof/hash does not match" } ], "x-walkpic-no-response-body": true, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "MEDIA_UNAVAILABLE" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "Future media(", "line": 1113, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" }, { "file": "app/lib/web/viewer_api.dart", "selector": "Future photo(", "line": 73, "sourceSha256": "caaf10ed201ac6bef7a347f13b4c1c1be8075e238800b507d8c486272576a668" }, { "file": "app/lib/web/workspace_api.dart", "selector": "Future media(", "line": 223, "sourceSha256": "fe9e2d3ee7f6c6c90c06cf0b77a963b3d2338ee2bbc92035a13be13573ac84a3" } ], "security": [ {}, { "BearerAuth": [] }, { "PublicationLink": [] }, { "LegacyPublicationLinkQuery": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed", "token": "fallback capability" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/media/{photoId}/access": { "get": { "operationId": "contentReadPhotoExportAccess", "tags": [ "Content" ], "summary": "ReadPhotoExportAccess", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const exportAccess=path.match", "line": 680, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/photo_export_access.ts", "selector": "export async function photoExportAccess", "line": 9, "sourceSha256": "a0bbdd0cb74d7aff9174fa65a27cc7cbafe48acc4817388d8a5b5df922f81dd9" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; absent Authorization allows public/capability reads; malformed or expired supplied bearer ->401; active publication/live owner/unblocked viewer plus owner OR public OR live unlisted capability OR approved follower (and selected recipient for specific)", "postSlowWorkAndCompatibility": [ "No media/storage work; intended fresh authorization immediately before external save/share/location use after potentially slow OS permission prompt." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" }, { "name": "photoId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "description": "^[A-Za-z0-9_-]{1,64}$" }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "fallback capability", "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPhotoExportAccess" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: exact uploaded photo/current readable ACL/live actor/session lost", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "exact uploaded photo/current readable ACL/live actor/session lost" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/published_walk_page.dart", "selector": "'/v1/publications/${widget.publicationId}/media/$id/access'", "line": 1165, "sourceSha256": "cc59db559bf44d0a29eccffb618375d0a7bada3693acaa07b91493e5a3ae623f" } ], "security": [ {}, { "BearerAuth": [] }, { "PublicationLink": [] }, { "LegacyPublicationLinkQuery": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed", "token": "fallback capability" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/story": { "put": { "operationId": "contentUpdatePublicationStory", "tags": [ "Content" ], "summary": "UpdatePublicationStory", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const storyRoute=path.match", "line": 639, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/publication_story.ts", "selector": "export async function updatePublicationStory", "line": 76, "sourceSha256": "0b842775d37f6486e94a8fc0ae02d368c38f560eaf3bf4bbb58198ea6450a53e" }, { "file": "service/src/publication_story_schema.ts", "selector": "NEW.type='story_update'", "line": 5, "sourceSha256": "5110fd43c7e86ebc0efcb3df1807b37fb887b745e319bd69b0f7e647a1b7d82e" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required, active owned publication/live owner/current session", "postSlowWorkAndCompatibility": [ "Fresh command UUID each edit: stale retry cannot resurrect a prior acknowledged story; client must refresh/reconcile.", "After write reauthenticate and reread current publication/revision before response; storyRevision increments from expectedRevision." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentStoryUpdateReceipt" } } } }, "400": { "description": "INVALID_REQUEST: fields/story/revision invalid; LIMIT_EXCEEDED: normalized story>256k; INVALID_INPUT: SQL moment reference invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "fields/story/revision invalid" }, { "code": "LIMIT_EXCEEDED", "when": "normalized story>256k" }, { "code": "INVALID_INPUT", "when": "SQL moment reference invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "LIMIT_EXCEEDED", "INVALID_INPUT" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not active owner/access changed", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not active owner/access changed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "VERSION_CHANGED: expected revision stale or story changed again after write", "x-walkpic-errors": [ { "code": "VERSION_CHANGED", "when": "expected revision stale or story changed again after write" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "VERSION_CHANGED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "VERSION_CHANGED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "422": { "description": "CONTENT_NOT_ALLOWED: story/checkin text denied", "x-walkpic-errors": [ { "code": "CONTENT_NOT_ALLOWED", "when": "story/checkin text denied" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "Future savePublicationStory(", "line": 779, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentStoryUpdateRequest" } } }, "description": "application/json prefix; maximum 264192 bytes", "x-walkpic-max-bytes": 264192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/story-speech": { "post": { "operationId": "contentPreviewStorySpeech", "tags": [ "Content" ], "summary": "PreviewStorySpeech", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/story-speech'", "line": 663, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/story_speech.ts", "selector": "export function validateSpeechBody", "line": 18, "sourceSha256": "e35bbed46bbb7522be217884a2f55ffba22dc8677cacb3737032bbf247999e27" }, { "file": "service/src/story_speech.ts", "selector": "export function createStorySpeech", "line": 60, "sourceSha256": "e35bbed46bbb7522be217884a2f55ffba22dc8677cacb3737032bbf247999e27" }, { "file": "service/src/story_recordings.ts", "selector": "export async function saveRecording", "line": 27, "sourceSha256": "8ec91a1c230588432a2d68f17454863a741eaf6ce5674e92ee5654f03a7cd911" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live owner and refreshed session", "postSlowWorkAndCompatibility": [ "Fixed gpt-4o-mini-tts and built-in voices; no client model/provider/url.", "JSON audioBase64+mimeType, never raw audio/ranged audio/SSE. Provider response is bounded streaming upstream only.", "Publication render accepts any valid submitted transcript, not only approved story narration; approved story exact narration/voice gates cross-scope author draft recording reuse only.", "Durable cache keyed by normalized text/voice/scope; reused response adds newAiTokens:0; fresh null. Post-provider and post-save authorization; caller abort rejects late result." ] }, "parameters": [], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSpeechReceipt" } } } }, "400": { "description": "INVALID_REQUEST: text/voice/unknown key invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "text/voice/unknown key invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: owner/session changed or aborted after provider/save; AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "owner/session changed or aborted after provider/save" }, { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "409": { "description": "RECORDING_NOT_SAVED: access changed/cache500 entries or64MB per owner reached", "x-walkpic-errors": [ { "code": "RECORDING_NOT_SAVED", "when": "access changed/cache500 entries or64MB per owner reached" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RECORDING_NOT_SAVED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "RECORDING_NOT_SAVED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "429": { "description": "RATE_LIMITED: >=2 active fresh generation, >=12 per scoped client/min, >=60 global/min, same persistent key in flight", "x-walkpic-errors": [ { "code": "RATE_LIMITED", "when": ">=2 active fresh generation, >=12 per scoped client/min, >=60 global/min, same persistent key in flight" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "RATE_LIMITED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] }, "503": { "description": "SPEECH_UNAVAILABLE: not enabled/provider failure/wrong audio MIME/empty or >2M audio/recording JSON>2.8M", "x-walkpic-errors": [ { "code": "SPEECH_UNAVAILABLE", "when": "not enabled/provider failure/wrong audio MIME/empty or >2M audio/recording JSON>2.8M" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "SPEECH_UNAVAILABLE" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "SPEECH_UNAVAILABLE" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "Future prepareNarrationRecording(", "line": 764, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSpeechRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/story-speech": { "post": { "operationId": "contentRenderPublicationStorySpeech", "tags": [ "Content" ], "summary": "RenderPublicationStorySpeech", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const speechRoute=path.match", "line": 670, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/story_speech.ts", "selector": "export function validateSpeechBody", "line": 18, "sourceSha256": "e35bbed46bbb7522be217884a2f55ffba22dc8677cacb3737032bbf247999e27" }, { "file": "service/src/story_speech.ts", "selector": "export function createStorySpeech", "line": 60, "sourceSha256": "e35bbed46bbb7522be217884a2f55ffba22dc8677cacb3737032bbf247999e27" }, { "file": "service/src/story_recordings.ts", "selector": "export async function saveRecording", "line": 27, "sourceSha256": "8ec91a1c230588432a2d68f17454863a741eaf6ce5674e92ee5654f03a7cd911" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; absent Authorization allows public/capability reads; malformed or expired supplied bearer ->401; active publication/live owner/unblocked viewer plus owner OR public OR live unlisted capability OR approved follower (and selected recipient for specific)", "postSlowWorkAndCompatibility": [ "Fixed gpt-4o-mini-tts and built-in voices; no client model/provider/url.", "JSON audioBase64+mimeType, never raw audio/ranged audio/SSE. Provider response is bounded streaming upstream only.", "Publication render accepts any valid submitted transcript, not only approved story narration; approved story exact narration/voice gates cross-scope author draft recording reuse only.", "Durable cache keyed by normalized text/voice/scope; reused response adds newAiTokens:0; fresh null. Post-provider and post-save authorization; caller abort rejects late result." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "fallback capability", "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSpeechReceipt" } } } }, "400": { "description": "INVALID_REQUEST: text/voice/unknown key invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "text/voice/unknown key invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: missing unreadable publication or post-slow-work user/publication snapshot changed", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "missing unreadable publication or post-slow-work user/publication snapshot changed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "RECORDING_NOT_SAVED: access changed/cache500 entries or64MB per owner reached", "x-walkpic-errors": [ { "code": "RECORDING_NOT_SAVED", "when": "access changed/cache500 entries or64MB per owner reached" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RECORDING_NOT_SAVED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "RECORDING_NOT_SAVED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "429": { "description": "RATE_LIMITED: >=2 active fresh generation, >=12 per scoped client/min, >=60 global/min, same persistent key in flight", "x-walkpic-errors": [ { "code": "RATE_LIMITED", "when": ">=2 active fresh generation, >=12 per scoped client/min, >=60 global/min, same persistent key in flight" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "RATE_LIMITED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] }, "503": { "description": "SPEECH_UNAVAILABLE: not enabled/provider failure/wrong audio MIME/empty or >2M audio/recording JSON>2.8M", "x-walkpic-errors": [ { "code": "SPEECH_UNAVAILABLE", "when": "not enabled/provider failure/wrong audio MIME/empty or >2M audio/recording JSON>2.8M" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "SPEECH_UNAVAILABLE" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "SPEECH_UNAVAILABLE" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "Future prepareNarrationRecording(", "line": 764, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" }, { "file": "app/lib/web/viewer_api.dart", "selector": "Future storySpeech(", "line": 88, "sourceSha256": "caaf10ed201ac6bef7a347f13b4c1c1be8075e238800b507d8c486272576a668" } ], "security": [ {}, { "BearerAuth": [] }, { "PublicationLink": [] }, { "LegacyPublicationLinkQuery": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed", "token": "fallback capability" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSpeechRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/photo-narration": { "post": { "operationId": "contentDescribePhoto", "tags": [ "Content" ], "summary": "DescribePhoto", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/photo-narration'", "line": 656, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/photo_narration.ts", "selector": "export function validatePhotoNarration", "line": 16, "sourceSha256": "afc36e188f94196d4636673c4ff924adfa2c083b2f32854f84b976630e36067e" }, { "file": "service/src/photo_narration.ts", "selector": "export function createPhotoNarration", "line": 79, "sourceSha256": "afc36e188f94196d4636673c4ff924adfa2c083b2f32854f84b976630e36067e" }, { "file": "service/src/photo_narration.ts", "selector": "export function validatePhotoLabelResult", "line": 110, "sourceSha256": "afc36e188f94196d4636673c4ff924adfa2c083b2f32854f84b976630e36067e" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session before provider and twice after slow work/save", "postSlowWorkAndCompatibility": [ "Default purpose narration; null caption/purpose treated like absence. Null point allowed; point never inferred from server Photos/geolocation.", "Fixed gpt-6-luna, store:false, bounded Responses output; no raw image identity/feelings or precise landmark inference claim.", "Owner-scoped durable digest includes purpose/model/context; text/label response, not uploaded/publication image." ] }, "parameters": [], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPhotoNarrationReceipt" } } } }, "400": { "description": "INVALID_REQUEST: bounds/base64/JPEG/point/caption/purpose/unknown field invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "bounds/base64/JPEG/point/caption/purpose/unknown field invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: actor/session changed or aborted; AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "actor/session changed or aborted" }, { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "409": { "description": "RECORDING_NOT_SAVED: current owner/recording limits refuse durable save", "x-walkpic-errors": [ { "code": "RECORDING_NOT_SAVED", "when": "current owner/recording limits refuse durable save" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RECORDING_NOT_SAVED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "RECORDING_NOT_SAVED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "429": { "description": "RATE_LIMITED: >=2 active, same scoped digest pending, >=12 per actor/min", "x-walkpic-errors": [ { "code": "RATE_LIMITED", "when": ">=2 active, same scoped digest pending, >=12 per actor/min" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "RATE_LIMITED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] }, "503": { "description": "PHOTO_NARRATION_UNAVAILABLE: not enabled/provider failure or malformed result", "x-walkpic-errors": [ { "code": "PHOTO_NARRATION_UNAVAILABLE", "when": "not enabled/provider failure or malformed result" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PHOTO_NARRATION_UNAVAILABLE" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "PHOTO_NARRATION_UNAVAILABLE" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "Future preparePhotoNarration(", "line": 742, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPhotoNarrationRequest" } } }, "description": "application/json prefix; maximum 1410000 bytes", "x-walkpic-max-bytes": 1410000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/library/publications": { "get": { "operationId": "contentListOwnedPublications", "tags": [ "Content" ], "summary": "ListOwnedPublications", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/library/publications'", "line": 720, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/owned_library.ts", "selector": "export async function ownedLibrary", "line": 14, "sourceSha256": "42b084d61a731d25bb9d9b04de7bd18ea66d39db93871a6b16dffaa9f396edc8" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; current actor owner index of active rows/live owners", "postSlowWorkAndCompatibility": [ "Signed15min cursor scoped actor+limit freezes highest own commit sequence; active access/current owner filtered each page; all audiences included.", "Immutable active published-owner index differs legacy sharing-management list." ] }, "parameters": [ { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "default": "50", "pattern": "^[1-9][0-9]*$", "x-walkpic-field-rules": { "numericRange": [ 1, 100 ] } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "x-walkpic-field-rules": { "opaque": true } }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentOwnedPage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query field or invalid limit/filter; INVALID_CURSOR: signature/scope/shape invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query field or invalid limit/filter" }, { "code": "INVALID_CURSOR", "when": "signature/scope/shape invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "410": { "description": "CURSOR_EXPIRED: older than15min or >60s in future", "x-walkpic-errors": [ { "code": "CURSOR_EXPIRED", "when": "older than15min or >60s in future" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/owned_library.dart", "selector": "'/v1/library/publications?$query'", "line": 331, "sourceSha256": "55965641e29c56212030819e2b48c1a5668ce306236e7797b914de8000051d01" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "allowed": [ "limit", "cursor" ], "unknown": "reject", "duplicates": "reject", "limit": { "type": "string", "default": "50", "pattern": "^[1-9][0-9]*$", "numericRange": [ 1, 100 ] }, "cursor": { "type": "string", "maxLength": 2000, "opaque": true } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/library/publications/{publicationId}/audience": { "get": { "operationId": "contentReadOwnedAudience", "tags": [ "Content" ], "summary": "ReadOwnedAudience", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(/^\\/v1\\/library\\/publications", "line": 719, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/owned_library.ts", "selector": "export async function ownedAudience", "line": 69, "sourceSha256": "42b084d61a731d25bb9d9b04de7bd18ea66d39db93871a6b16dffaa9f396edc8" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; active publication owner, live actor/current session", "postSlowWorkAndCompatibility": [ "Route matcher allows any non-slash ID, not UUID format; no normalization. Public/unlisted yields people empty. Followers/specific list current approved alive unblocked recipients, order lower(displayName/handle),id; peopleCount counts all even when list truncated200." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "minLength": 1, "pattern": "^[^/]+$" }, "description": "any non-slash string; query by exact ID; missing/unowned ->404" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentOwnedAudience" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: not current active owner", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "not current active owner" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/received_walk_library.dart", "selector": "'/v1/library/publications/${widget.publicationId}/audience'", "line": 499, "sourceSha256": "8c17762ec1cebf499bd98711dd10524acc2adc9180f4fcc6210330a6681f59f4" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/library/received": { "get": { "operationId": "contentListReceivedPublications", "tags": [ "Content" ], "summary": "ListReceivedPublications", "x-walkpic-source": [ { "file": "service/src/received_library.ts", "selector": "export async function receivedLibrary", "line": 20, "sourceSha256": "c019b3e7294528746188212c4f0f2afbca0acc3123d0a3975cc7f89381a11860" }, { "file": "service/src/received_library.ts", "selector": "const eligible =", "line": 15, "sourceSha256": "c019b3e7294528746188212c4f0f2afbca0acc3123d0a3975cc7f89381a11860" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; accessible nonowner non-unlisted by approved followed author OR explicitly saved public walk", "postSlowWorkAndCompatibility": [ "Capabilities never retained. Signed15min cursor scope actor+limit+sorted authors+saved filter; commit highwater frozen, current ACL/live caller/session rechecked every page; other recipients never disclosed." ] }, "parameters": [ { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "default": "50", "pattern": "^[1-9][0-9]*$", "x-walkpic-field-rules": { "numericRange": [ 1, 100 ] } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "x-walkpic-field-rules": { "opaque": true } }, "style": "form", "explode": true }, { "name": "authors", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-normalization": "drop empty segments, lexical sort; duplicates reject; not strict UUID", "x-walkpic-field-rules": { "csvMaxCount": 20, "itemPattern": "^[-A-Za-z0-9_]{1,64}$" } }, "style": "form", "explode": true }, { "name": "saved", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "true", "false" ], "default": "false" }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentReceivedPage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query field or invalid limit/filter; INVALID_CURSOR: signature/scope/shape invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query field or invalid limit/filter" }, { "code": "INVALID_CURSOR", "when": "signature/scope/shape invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "410": { "description": "CURSOR_EXPIRED: older than15min or >60s in future", "x-walkpic-errors": [ { "code": "CURSOR_EXPIRED", "when": "older than15min or >60s in future" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/received_library.dart", "selector": "'/v1/library/received?$query'", "line": 263, "sourceSha256": "29c692187abd372ed32242d4dcdeb85272cd1d8af0fd03fb025632e5bd6d0b43" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "allowed": [ "limit", "cursor", "authors", "saved" ], "unknown": "reject", "duplicates": "reject", "limit": { "type": "string", "default": "50", "pattern": "^[1-9][0-9]*$", "numericRange": [ 1, 100 ] }, "cursor": { "type": "string", "maxLength": 2000, "opaque": true }, "authors": { "type": "string", "csvMaxCount": 20, "itemPattern": "^[-A-Za-z0-9_]{1,64}$", "normalization": "drop empty segments, lexical sort; duplicates reject; not strict UUID" }, "saved": { "type": "string", "enum": [ "true", "false" ], "default": "false" } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/library/people": { "get": { "operationId": "contentListReceivedAuthors", "tags": [ "Content" ], "summary": "ListReceivedAuthors", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/library/people'", "line": 718, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/received_library.ts", "selector": "if (people)", "line": 24, "sourceSha256": "c019b3e7294528746188212c4f0f2afbca0acc3123d0a3975cc7f89381a11860" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; same received eligibility", "postSlowWorkAndCompatibility": [ "Returns eligible distinct authors only, sorted lower(coalesce displayName,handle),id." ] }, "parameters": [ { "name": "query", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 100, "default": "", "x-walkpic-normalization": "no trim; SQL case-insensitive substring" }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPeoplePage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query or query length>100", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query or query length>100" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/received_library.dart", "selector": "'/v1/library/people?", "line": 327, "sourceSha256": "29c692187abd372ed32242d4dcdeb85272cd1d8af0fd03fb025632e5bd6d0b43" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "allowed": [ "query" ], "unknown": "reject", "duplicates": "reject", "query": { "type": "string", "default": "", "maxLength": 100, "normalization": "no trim; SQL case-insensitive substring" } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/library/received/access": { "post": { "operationId": "contentRevalidateReceivedPublications", "tags": [ "Content" ], "summary": "RevalidateReceivedPublications", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/library/received/access'", "line": 716, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/received_library.ts", "selector": "export async function verifyReceivedLibrary", "line": 73, "sourceSha256": "c019b3e7294528746188212c4f0f2afbca0acc3123d0a3975cc7f89381a11860" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; fresh current received eligibility", "postSlowWorkAndCompatibility": [ "Unknown body fields ignored; empty IDs returns empty items. Unauthorized IDs silently omitted rather than individual errors; SQL output order not guaranteed to match requested order." ] }, "parameters": [], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentReceivedAccessReceipt" } } } }, "400": { "description": "INVALID_REQUEST: invalid IDs/duplicate/>500; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "invalid IDs/duplicate/>500" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/received_library.dart", "selector": "'/v1/library/received/access'", "line": 158, "sourceSha256": "29c692187abd372ed32242d4dcdeb85272cd1d8af0fd03fb025632e5bd6d0b43" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentReceivedAccessRequest" } } }, "description": "application/json prefix; maximum 40000 bytes", "x-walkpic-max-bytes": 40000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/saved": { "get": { "operationId": "contentListSavedPublications", "tags": [ "Content" ], "summary": "ListSavedPublications", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/saved'", "line": 725, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/saved.ts", "selector": "export async function savedPublications", "line": 52, "sourceSha256": "13c9b9f7638799cd63cb0d10af10408d1edd11033013d1016c099e82611a58d3" }, { "file": "service/src/saved_schema.ts", "selector": "export const saveableSql", "line": 5, "sourceSha256": "b9df34e097e40be4425922a471f7b96cadf4cc91ef6d71d47542386415791a4c" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; private saver-owned reference index", "postSlowWorkAndCompatibility": [ "Signed15min actor+limit scope/high sequence snapshot; current saveable ACL on protected LEFT JOIN. Unavailable reference survives target restriction/deletion without leaking fields. Unlisted/capability-only content never saveable, even owner." ] }, "parameters": [ { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "default": "20", "pattern": "^\\d+$", "x-walkpic-field-rules": { "numericRange": [ 1, 50 ], "legacy": "leading zeros accepted" } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "x-walkpic-field-rules": { "opaque": true } }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSavedPage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query field or invalid limit/filter; INVALID_CURSOR: signature/scope/shape invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query field or invalid limit/filter" }, { "code": "INVALID_CURSOR", "when": "signature/scope/shape invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "410": { "description": "CURSOR_EXPIRED: older than15min or >60s in future", "x-walkpic-errors": [ { "code": "CURSOR_EXPIRED", "when": "older than15min or >60s in future" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/saved_walks_controller.dart", "selector": "path: '/v1/saved'", "line": 83, "sourceSha256": "feaa5cda545792c1bdfc2c1271ab89040a1929b2c9b2d5edc7f8f8e3374881b1" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "allowed": [ "limit", "cursor" ], "unknown": "reject", "duplicates": "reject", "limit": { "type": "string", "default": "20", "pattern": "^\\d+$", "numericRange": [ 1, 50 ], "legacy": "leading zeros accepted" }, "cursor": { "type": "string", "maxLength": 2000, "opaque": true } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/saved": { "put": { "operationId": "contentSetPublicationSaved", "tags": [ "Content" ], "summary": "SetPublicationSaved", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const saved=path.match", "line": 728, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/saved.ts", "selector": "export async function setPublicationSaved", "line": 86, "sourceSha256": "13c9b9f7638799cd63cb0d10af10408d1edd11033013d1016c099e82611a58d3" }, { "file": "service/src/saved_schema.ts", "selector": "WHEN NEW.type='saved_set'", "line": 16, "sourceSha256": "b9df34e097e40be4425922a471f7b96cadf4cc91ef6d71d47542386415791a4c" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; Save requires live current saveable publication, Remove remains allowed after access loss", "postSlowWorkAndCompatibility": [ "Stable requestId lowercased; actor-scoped receipt hash retains no request UUID. Replay does not recreate relations and response reports current presence; old Save replay after newer Remove returns false." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSavedReceipt" } } } }, "400": { "description": "INVALID_REQUEST: query not empty/exact two fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "query not empty/exact two fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: strict path UUID fails or Save target not saveable", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "strict path UUID fails or Save target not saveable" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: same actor/request UUID with changed action/target", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "same actor/request UUID with changed action/target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "Future setPublicationSaved(", "line": 1218, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "allowed": [], "unknown": "reject all", "duplicates": "reject all" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSavedRequest" } } }, "description": "application/json prefix; maximum 2000 bytes", "x-walkpic-max-bytes": 2000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/publications/{publicationId}/like": { "put": { "operationId": "contentSetPublicationLike", "tags": [ "Content" ], "summary": "SetPublicationLike", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const like=path.match", "line": 733, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/explore.ts", "selector": "export async function setPublicationLike", "line": 236, "sourceSha256": "6834f24d650201c75eeba52907674eaaa0a1ed87fc86fd4ed62e44cc235adf20" }, { "file": "service/src/explore_acl.ts", "selector": "export function eligibleLikeSql", "line": 23, "sourceSha256": "ec9aa58b740dc665ccde7109ff1fceb999f7364c67c0ec1e69740ba2f2a6b527" }, { "file": "service/src/explore_schema.ts", "selector": "const likeGuard =", "line": 18, "sourceSha256": "99129589f2f3317809b3532b9cf43b58b0b94a5a2ed97aac5f9be6f6ae1f0b89" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; Like requires current readable nonowner target; withdrawal allowed after revoke/block/missing target", "postSlowWorkAndCompatibility": [ "Remove after access loss returns204 if current metrics cannot be read. Aggregate counts include only currently readable/live/unblocked nonowner likers." ] }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "optional capability used for Like; stored hash gates later aggregate eligibility", "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLikeReceipt" } } } }, "204": { "description": "Successful withdrawal; current target inaccessible so no metrics/body.", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } } }, "400": { "description": "INVALID_REQUEST: exact one boolean field invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "exact one boolean field invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: Like target not readable", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "Like target not readable" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "SELF_LIKE: owner attempt via schema guard", "x-walkpic-errors": [ { "code": "SELF_LIKE", "when": "owner attempt via schema guard" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "SELF_LIKE" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "SELF_LIKE" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/publication_likes.dart", "selector": "'/v1/publications/$id/like'", "line": 44, "sourceSha256": "df7442c9dc8733137dafe8df1039c8dfc853581bacacd38f7fdea20f2f738866" } ], "security": [ { "BearerAuth": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed", "token": "optional capability used for Like; stored hash gates later aggregate eligibility" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLikeRequest" } } }, "description": "application/json prefix; maximum 2000 bytes", "x-walkpic-max-bytes": 2000 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/explore": { "get": { "operationId": "contentExplorePublications", "tags": [ "Content" ], "summary": "ExplorePublications", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/explore'", "line": 761, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/explore.ts", "selector": "export function exploreQuery", "line": 38, "sourceSha256": "6834f24d650201c75eeba52907674eaaa0a1ed87fc86fd4ed62e44cc235adf20" }, { "file": "service/src/explore.ts", "selector": "export async function explorePublications", "line": 124, "sourceSha256": "6834f24d650201c75eeba52907674eaaa0a1ed87fc86fd4ed62e44cc235adf20" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; current active public publications/live owners/unblocked viewer", "postSlowWorkAndCompatibility": [ "Signed15min cursor binds query+viewer, freezes commit and like event sequence; current ACL/privacy still rechecked.", "Geometry viewport intersection of approved segments/pins, including dateline splitting; missing duration omitted with duration filter and ordered last otherwise.", "Rankings newest/time commit; mostLiked/week descending; distance/duration ascending; distanceDesc descending; ties committedAt/id descending." ] }, "parameters": [ { "name": "sort", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "newest", "mostLiked", "week", "distance", "distanceDesc", "duration" ], "default": "newest" }, "style": "form", "explode": true }, { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "default": "20", "pattern": "^\\d+(?:\\.\\d+)?$", "x-walkpic-field-rules": { "mustBeNumericInteger": true, "numericRange": [ 1, 50 ], "legacy": "20.0 accepted" } }, "style": "form", "explode": true }, { "name": "bbox", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-normalization": "-0 ->0", "x-walkpic-field-rules": { "format": "west,south,east,north", "numericSyntax": "^-?(?:\\d+(?:\\d*)?|\\.\\d+)$", "ranges": "west/east[-180,180], south>=-90, north<=90, south<=north; west>east dateline allowed" } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 3000, "x-walkpic-field-rules": { "opaque": true } }, "style": "form", "explode": true }, { "name": "maxDistanceMeters", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^\\d+(?:\\.\\d+)?$", "x-walkpic-field-rules": { "numericRange": [ 0, 1000000000 ] } }, "style": "form", "explode": true }, { "name": "maxDurationSeconds", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^\\d+(?:\\.\\d+)?$", "x-walkpic-field-rules": { "mustBeNumericInteger": true, "numericRange": [ 0, 31536000 ] } }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentExplorePage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query field or invalid limit/filter; INVALID_CURSOR: signature/scope/shape invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query field or invalid limit/filter" }, { "code": "INVALID_CURSOR", "when": "signature/scope/shape invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "410": { "description": "CURSOR_EXPIRED: older than15min or >60s in future", "x-walkpic-errors": [ { "code": "CURSOR_EXPIRED", "when": "older than15min or >60s in future" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/explore.dart", "selector": "Uri(path: '/v1/explore'", "line": 143, "sourceSha256": "7b2e08c334bf3eb315fee405ab68887ae7283d4563e176a3175a09ade92d13e3" } ], "security": [ {}, { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "allowed": [ "bbox", "sort", "limit", "cursor", "maxDistanceMeters", "maxDurationSeconds" ], "unknown": "reject", "duplicates": "reject", "sort": { "type": "string", "enum": [ "newest", "mostLiked", "week", "distance", "distanceDesc", "duration" ], "default": "newest" }, "limit": { "type": "string", "default": "20", "pattern": "^\\d+(?:\\.\\d+)?$", "mustBeNumericInteger": true, "numericRange": [ 1, 50 ], "legacy": "20.0 accepted" }, "bbox": { "type": "string", "format": "west,south,east,north", "numericSyntax": "^-?(?:\\d+(?:\\d*)?|\\.\\d+)$", "ranges": "west/east[-180,180], south>=-90, north<=90, south<=north; west>east dateline allowed", "normalization": "-0 ->0" }, "cursor": { "type": "string", "maxLength": 3000, "opaque": true }, "maxDistanceMeters": { "type": "string", "pattern": "^\\d+(?:\\.\\d+)?$", "numericRange": [ 0, 1000000000 ] }, "maxDurationSeconds": { "type": "string", "pattern": "^\\d+(?:\\.\\d+)?$", "mustBeNumericInteger": true, "numericRange": [ 0, 31536000 ] } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/discover": { "get": { "operationId": "contentDiscoverPublications", "tags": [ "Content" ], "summary": "DiscoverPublications", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/discover'", "line": 762, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; active public/live owner/unblocked viewer", "postSlowWorkAndCompatibility": [ "legacy fixed50 newest, no cursor/filter validation" ] }, "parameters": [], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLegacyFeed" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "security": [ {}, { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/feed": { "get": { "operationId": "contentReadFeed", "tags": [ "Content" ], "summary": "ReadFeed", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/feed'", "line": 745, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; own or approved followed author, readable current snapshot, non-unlisted", "postSlowWorkAndCompatibility": [ "fixed50 newest, no cursor/query filters" ] }, "parameters": [], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLegacyFeed" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/publications": { "get": { "operationId": "contentListManagedPublications", "tags": [ "Content" ], "summary": "ListManagedPublications", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/publications'", "line": 754, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; own sharing-management list", "postSlowWorkAndCompatibility": [ "fixed100 by createdAt,id descending; includes pending/active/restricted/cancelled; adds status to legacySummary" ] }, "parameters": [], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentLegacyManagementList" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/place-visits/{visitId}": { "put": { "operationId": "contentSharePlaceVisit", "tags": [ "Content" ], "summary": "SharePlaceVisit", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const placeVisit=path.match", "line": 721, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/place_visits.ts", "selector": "export async function savePublicPlaceVisit", "line": 31, "sourceSha256": "078d987a8fc62a1d603d7281b16ff2fa895482fe4d63a0f87dd163f306bf6f09" }, { "file": "service/src/place_visits.ts", "selector": "NEW.type='place_visit_write'", "line": 13, "sourceSha256": "078d987a8fc62a1d603d7281b16ff2fa895482fe4d63a0f87dd163f306bf6f09" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; standalone visit actor ownership; PUT checks live actor/session in transaction", "postSlowWorkAndCompatibility": [ "Path lowercased; PUT checkin.id must exactly equal lowercased path, visibility private rejected, omitted/null/public normalized public. DELETE removes matching visits from all actor publication stories and increments revisions; no raw-body/idempotency key read." ] }, "parameters": [ { "name": "visitId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentVisitReceipt" } } } }, "400": { "description": "INVALID_REQUEST: strict UUID/body/checkin invalid or private visibility on PUT; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "strict UUID/body/checkin invalid or private visibility on PUT" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: visit owned by another actor", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "visit owned by another actor" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "422": { "description": "CONTENT_NOT_ALLOWED: name/address/review denied", "x-walkpic-errors": [ { "code": "CONTENT_NOT_ALLOWED", "when": "name/address/review denied" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/public_place_visits.dart", "selector": "Future savePublicPlaceVisit", "line": 6, "sourceSha256": "a35c4d7ba96236cc4704d035b8f93e01d34775c723e0af92277dc301e75439c1" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentVisitRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } }, "delete": { "operationId": "contentRemovePlaceVisit", "tags": [ "Content" ], "summary": "RemovePlaceVisit", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const placeVisit=path.match", "line": 721, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/place_visits.ts", "selector": "export async function removePublicPlaceVisit", "line": 42, "sourceSha256": "078d987a8fc62a1d603d7281b16ff2fa895482fe4d63a0f87dd163f306bf6f09" }, { "file": "service/src/place_visits.ts", "selector": "NEW.type='place_visit_remove'", "line": 21, "sourceSha256": "078d987a8fc62a1d603d7281b16ff2fa895482fe4d63a0f87dd163f306bf6f09" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; standalone visit actor ownership; PUT checks live actor/session in transaction", "postSlowWorkAndCompatibility": [ "Path lowercased; PUT checkin.id must exactly equal lowercased path, visibility private rejected, omitted/null/public normalized public. DELETE removes matching visits from all actor publication stories and increments revisions; no raw-body/idempotency key read." ] }, "parameters": [ { "name": "visitId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentVisitRemoveReceipt" } } } }, "400": { "description": "INVALID_REQUEST: strict UUID/body/checkin invalid or private visibility on PUT", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "strict UUID/body/checkin invalid or private visibility on PUT" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: visit owned by another actor", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "visit owned by another actor" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/public_place_visits.dart", "selector": "Future removePublicPlaceVisit", "line": 19, "sourceSha256": "a35c4d7ba96236cc4704d035b8f93e01d34775c723e0af92277dc301e75439c1" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": false, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentJsonValue" } }, "*/*": { "schema": { "type": "string", "format": "binary" } } }, "description": "Ignored/unread body: native JSON caller values accepted but never parsed, validated or used by this branch. Any Content-Type/bytes accepted; no application body limit asserted.", "x-walkpic-ignored": true }, "x-walkpic-ignored-request-body": true, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/places": { "get": { "operationId": "contentListRatedPlaceVisits", "tags": [ "Content" ], "summary": "ListRatedPlaceVisits", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/v1/places'", "line": 724, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/rated_places.ts", "selector": "export async function ratedPlaceVisits", "line": 14, "sourceSha256": "8ab39186c51ad650c6a33d33bf3d31d818c71ca23dd52b794684ef184eae0cca" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional for visible; mine requires Bearer; current active readable visits/live owners/unblocked actor", "postSlowWorkAndCompatibility": [ "Pages10 source entries (walks/standalone visits), not10 checkins; each walk can contribute up to100 visits. Reads11 to decide nextCursor.", "Cursor is plain lexical entry_key v:/w:, not signed/expiring/highwater. Private checkins omitted. No unlisted capability/token support; story visits visible via owner/public/follow+specific rules.", "standalone=1 opts into independent public visits; no private/local automatic backfill." ] }, "parameters": [ { "name": "scope", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "visible", "mine" ], "default": "visible" }, "style": "form", "explode": true }, { "name": "ownerId", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-pattern-rule": "[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)", "x-walkpic-field-rules": { "nullableInAbsence": true, "legacy": "empty owner accepted by regex guard but filters to no matching owner" } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-pattern-rule": "(?:[vw]:)?[0-9a-f-]{36}, case insensitive", "x-walkpic-field-rules": { "legacy": "bare ID upgraded to w:; empty cursor bypasses format guard but filters by empty string" } }, "style": "form", "explode": true }, { "name": "standalone", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "1" ] }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPlacesPage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate scope/cursor/owner/standalone invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate scope/cursor/owner/standalone invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: mine without actor; AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "mine without actor" }, { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/rated_places.dart", "selector": "'/v1/places?scope=", "line": 161, "sourceSha256": "48264ace73bbf6e4ce60edd2003e25f54b44935d22b8f01d59ec95cc93fd8b1c" } ], "security": [ {}, { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "allowed": [ "cursor", "scope", "ownerId", "standalone" ], "unknown": "reject", "duplicates": "reject", "scope": { "type": "string", "enum": [ "visible", "mine" ], "default": "visible" }, "ownerId": { "type": "string", "pattern": "[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)", "nullableInAbsence": true, "legacy": "empty owner accepted by regex guard but filters to no matching owner" }, "cursor": { "type": "string", "pattern": "(?:[vw]:)?[0-9a-f-]{36}, case insensitive", "legacy": "bare ID upgraded to w:; empty cursor bypasses format guard but filters by empty string" }, "standalone": { "type": "string", "enum": [ "1" ], "optional": true } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/discussions/place/{targetId}": { "get": { "operationId": "contentReadPlaceDiscussion", "tags": [ "Content" ], "summary": "ReadPlaceDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export function interactionTarget", "line": 13, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions.ts", "selector": "export async function readContentDiscussion", "line": 19, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "export const interactionTargetAccessSql", "line": 4, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; live caller/session; place hash structurally valid (no place existence lookup), photo exact uploaded/current readable publication", "postSlowWorkAndCompatibility": [ "30comments descending sequence; nextBefore string|null. Reported-by-viewer and blocked/deleted author comments omitted; reaction counts exclude blocked/deleted authors. Query token is rejected here; use capability header." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "description": "^[a-f0-9]{64}$" }, { "name": "before", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^[1-9][0-9]{0,15}$", "x-walkpic-normalization": "Number conversion; no extra safe-integer validator (up to16digits)" }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussion" } } } }, "400": { "description": "INVALID_REQUEST: before/unknown/duplicate query", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "before/unknown/duplicate query" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: invalid target/photo access lost", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "invalid target/photo access lost" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "String get path => '/v1/discussions/", "line": 52, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ {}, { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "allowed": [ "before" ], "unknown": "reject, including token query", "duplicates": "reject", "before": { "type": "string", "pattern": "^[1-9][0-9]{0,15}$", "normalization": "Number conversion; no extra safe-integer validator (up to16digits)" } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/discussions/place/{targetId}/comment": { "post": { "operationId": "contentCommentOnPlaceDiscussion", "tags": [ "Content" ], "summary": "CommentOnPlaceDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export async function mutateContentDiscussion", "line": 32, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "const access=", "line": 7, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session and current target access in SQL transaction", "postSlowWorkAndCompatibility": [ "Stable actor/request UUID digest; replay never recreates deleted comments. Reaction null withdraws. Remove unknown comment and Report missing comment still acknowledge applied if target access valid. Report hides comment only for reporter and does not return public report receipt." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "description": "^[a-f0-9]{64}$" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionCommentApplied" } } } }, "400": { "description": "INVALID_REQUEST: request UUID/action fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "request UUID/action fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target lost or existing remove comment not owned/exact target", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target lost or existing remove comment not owned/exact target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/request UUID reused for changed action/content", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/request UUID reused for changed action/content" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "422": { "description": "CONTENT_NOT_ALLOWED: comment text denied", "x-walkpic-errors": [ { "code": "CONTENT_NOT_ALLOWED", "when": "comment text denied" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "Future _mutate(", "line": 196, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionCommentRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/discussions/place/{targetId}/reaction": { "post": { "operationId": "contentReactToPlaceDiscussion", "tags": [ "Content" ], "summary": "ReactToPlaceDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export async function mutateContentDiscussion", "line": 32, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "const access=", "line": 7, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session and current target access in SQL transaction", "postSlowWorkAndCompatibility": [ "Stable actor/request UUID digest; replay never recreates deleted comments. Reaction null withdraws. Remove unknown comment and Report missing comment still acknowledge applied if target access valid. Report hides comment only for reporter and does not return public report receipt." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "description": "^[a-f0-9]{64}$" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionApplied" } } } }, "400": { "description": "INVALID_REQUEST: request UUID/action fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "request UUID/action fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target lost or existing remove comment not owned/exact target", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target lost or existing remove comment not owned/exact target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/request UUID reused for changed action/content", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/request UUID reused for changed action/content" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "Future _mutate(", "line": 196, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionReactionRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/discussions/place/{targetId}/remove": { "post": { "operationId": "contentRemoveCommentFromPlaceDiscussion", "tags": [ "Content" ], "summary": "RemoveCommentFromPlaceDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export async function mutateContentDiscussion", "line": 32, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "const access=", "line": 7, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session and current target access in SQL transaction", "postSlowWorkAndCompatibility": [ "Stable actor/request UUID digest; replay never recreates deleted comments. Reaction null withdraws. Remove unknown comment and Report missing comment still acknowledge applied if target access valid. Report hides comment only for reporter and does not return public report receipt." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "description": "^[a-f0-9]{64}$" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionApplied" } } } }, "400": { "description": "INVALID_REQUEST: request UUID/action fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "request UUID/action fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target lost or existing remove comment not owned/exact target", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target lost or existing remove comment not owned/exact target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/request UUID reused for changed action/content", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/request UUID reused for changed action/content" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "Future _mutate(", "line": 196, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionRemoveRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/discussions/place/{targetId}/report": { "post": { "operationId": "contentReportCommentInPlaceDiscussion", "tags": [ "Content" ], "summary": "ReportCommentInPlaceDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export async function mutateContentDiscussion", "line": 32, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "const access=", "line": 7, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session and current target access in SQL transaction", "postSlowWorkAndCompatibility": [ "Stable actor/request UUID digest; replay never recreates deleted comments. Reaction null withdraws. Remove unknown comment and Report missing comment still acknowledge applied if target access valid. Report hides comment only for reporter and does not return public report receipt." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "description": "^[a-f0-9]{64}$" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionApplied" } } } }, "400": { "description": "INVALID_REQUEST: request UUID/action fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "request UUID/action fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target lost or existing remove comment not owned/exact target", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target lost or existing remove comment not owned/exact target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/request UUID reused for changed action/content", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/request UUID reused for changed action/content" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "Future _mutate(", "line": 196, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionReportRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/discussions/photo/{targetId}": { "get": { "operationId": "contentReadPhotoDiscussion", "tags": [ "Content" ], "summary": "ReadPhotoDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export function interactionTarget", "line": 13, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions.ts", "selector": "export async function readContentDiscussion", "line": 19, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "export const interactionTargetAccessSql", "line": 4, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; live caller/session; place hash structurally valid (no place existence lookup), photo exact uploaded/current readable publication", "postSlowWorkAndCompatibility": [ "30comments descending sequence; nextBefore string|null. Reported-by-viewer and blocked/deleted author comments omitted; reaction counts exclude blocked/deleted authors. Query token is rejected here; use capability header." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$" }, "description": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$ (lowercase ID fragment only)" }, { "name": "before", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^[1-9][0-9]{0,15}$", "x-walkpic-normalization": "Number conversion; no extra safe-integer validator (up to16digits)" }, "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussion" } } } }, "400": { "description": "INVALID_REQUEST: before/unknown/duplicate query", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "before/unknown/duplicate query" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: invalid target/photo access lost", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "invalid target/photo access lost" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "String get path => '/v1/discussions/", "line": 52, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ {}, { "BearerAuth": [] }, { "PublicationLink": [] }, { "BearerAuth": [], "PublicationLink": [] } ], "x-walkpic-query-behavior": { "allowed": [ "before" ], "unknown": "reject, including token query", "duplicates": "reject", "before": { "type": "string", "pattern": "^[1-9][0-9]{0,15}$", "normalization": "Number conversion; no extra safe-integer validator (up to16digits)" } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" } } }, "/v1/discussions/photo/{targetId}/comment": { "post": { "operationId": "contentCommentOnPhotoDiscussion", "tags": [ "Content" ], "summary": "CommentOnPhotoDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export async function mutateContentDiscussion", "line": 32, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "const access=", "line": 7, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session and current target access in SQL transaction", "postSlowWorkAndCompatibility": [ "Stable actor/request UUID digest; replay never recreates deleted comments. Reaction null withdraws. Remove unknown comment and Report missing comment still acknowledge applied if target access valid. Report hides comment only for reporter and does not return public report receipt." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$" }, "description": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$ (lowercase ID fragment only)" }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "Legacy first-value capability fallback; prefer header/fragment.", "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionCommentApplied" } } } }, "400": { "description": "INVALID_REQUEST: request UUID/action fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "request UUID/action fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target lost or existing remove comment not owned/exact target", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target lost or existing remove comment not owned/exact target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/request UUID reused for changed action/content", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/request UUID reused for changed action/content" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "422": { "description": "CONTENT_NOT_ALLOWED: comment text denied", "x-walkpic-errors": [ { "code": "CONTENT_NOT_ALLOWED", "when": "comment text denied" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "Future _mutate(", "line": 196, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ { "BearerAuth": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionCommentRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/discussions/photo/{targetId}/reaction": { "post": { "operationId": "contentReactToPhotoDiscussion", "tags": [ "Content" ], "summary": "ReactToPhotoDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export async function mutateContentDiscussion", "line": 32, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "const access=", "line": 7, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session and current target access in SQL transaction", "postSlowWorkAndCompatibility": [ "Stable actor/request UUID digest; replay never recreates deleted comments. Reaction null withdraws. Remove unknown comment and Report missing comment still acknowledge applied if target access valid. Report hides comment only for reporter and does not return public report receipt." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$" }, "description": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$ (lowercase ID fragment only)" }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "Legacy first-value capability fallback; prefer header/fragment.", "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionApplied" } } } }, "400": { "description": "INVALID_REQUEST: request UUID/action fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "request UUID/action fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target lost or existing remove comment not owned/exact target", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target lost or existing remove comment not owned/exact target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/request UUID reused for changed action/content", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/request UUID reused for changed action/content" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "Future _mutate(", "line": 196, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ { "BearerAuth": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionReactionRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/discussions/photo/{targetId}/remove": { "post": { "operationId": "contentRemoveCommentFromPhotoDiscussion", "tags": [ "Content" ], "summary": "RemoveCommentFromPhotoDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export async function mutateContentDiscussion", "line": 32, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "const access=", "line": 7, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session and current target access in SQL transaction", "postSlowWorkAndCompatibility": [ "Stable actor/request UUID digest; replay never recreates deleted comments. Reaction null withdraws. Remove unknown comment and Report missing comment still acknowledge applied if target access valid. Report hides comment only for reporter and does not return public report receipt." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$" }, "description": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$ (lowercase ID fragment only)" }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "Legacy first-value capability fallback; prefer header/fragment.", "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionApplied" } } } }, "400": { "description": "INVALID_REQUEST: request UUID/action fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "request UUID/action fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target lost or existing remove comment not owned/exact target", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target lost or existing remove comment not owned/exact target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/request UUID reused for changed action/content", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/request UUID reused for changed action/content" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "Future _mutate(", "line": 196, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ { "BearerAuth": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionRemoveRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/discussions/photo/{targetId}/report": { "post": { "operationId": "contentReportCommentInPhotoDiscussion", "tags": [ "Content" ], "summary": "ReportCommentInPhotoDiscussion", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "const discussion=path.match", "line": 210, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/content_interactions.ts", "selector": "export async function mutateContentDiscussion", "line": 32, "sourceSha256": "c994aa8ea67d52f77a4fecb7a7b54efa9c302053df774fb4d4d38433f8a998bd" }, { "file": "service/src/content_interactions_schema.ts", "selector": "const access=", "line": 7, "sourceSha256": "7fb73332d4201d4230b0b1ebb1064805282a02f12ec564b0b30627253e3cb5da" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; live actor/session and current target access in SQL transaction", "postSlowWorkAndCompatibility": [ "Stable actor/request UUID digest; replay never recreates deleted comments. Reaction null withdraws. Remove unknown comment and Report missing comment still acknowledge applied if target access valid. Report hides comment only for reporter and does not return public report receipt." ] }, "parameters": [ { "name": "targetId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$" }, "description": "^[a-f0-9-]{36}:[A-Za-z0-9_-]{1,64}$ (lowercase ID fragment only)" }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." }, { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "Legacy first-value capability fallback; prefer header/fragment.", "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionApplied" } } } }, "400": { "description": "INVALID_REQUEST: request UUID/action fields invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "request UUID/action fields invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target lost or existing remove comment not owned/exact target", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target lost or existing remove comment not owned/exact target" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: actor/request UUID reused for changed action/content", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "actor/request UUID reused for changed action/content" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/content_discussion.dart", "selector": "Future _mutate(", "line": 196, "sourceSha256": "184d5412c80487de5faf3cdc808a77380aab152946ef9c810aca81a930b091d4" } ], "security": [ { "BearerAuth": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentDiscussionReportRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/reports": { "post": { "operationId": "contentCreatePublicReport", "tags": [ "Content" ], "summary": "CreatePublicReport", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(/^\\/v1\\/reports", "line": 768, "sourceSha256": "05b2529b53ea12879d31a7d31b04ddf0b8fd55849f2d584bc3bb9a5e50fddb2c" }, { "file": "service/src/public_reports.ts", "selector": "export function createPublicReports", "line": 33, "sourceSha256": "d2ecf7cc20b2e6103ac3cc5eaa7213d976221ceb68cf9c18b8a796a7d7a54c1b" }, { "file": "service/src/public_reports.ts", "selector": "const receipt=", "line": 18, "sourceSha256": "d2ecf7cc20b2e6103ac3cc5eaa7213d976221ceb68cf9c18b8a796a7d7a54c1b" }, { "file": "service/src/public_reports.ts", "selector": "NEW.type='public_report'", "line": 89, "sourceSha256": "d2ecf7cc20b2e6103ac3cc5eaa7213d976221ceb68cf9c18b8a796a7d7a54c1b" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer optional; fresh current readable publication/capability or searchable/self profile; malformed supplied bearer still401", "postSlowWorkAndCompatibility": [ "Anonymous POST supported; key scopes null actor and is not receipt-read authentication. Signed-in replay retains original response without target content reads; anonymous replay reauthorizes target.", "Only bounded existing publication title/date or profile handle/displayName screened by text rules; supplied reason excluded. No model enforcement decision/content snapshot.", "Reason primary-store deadline30days, bounded purge200. Receipt remains after reason purge; responseOnly unresolved/action none." ] }, "parameters": [ { "name": "token", "in": "query", "required": false, "schema": { "type": "string" }, "description": "fallback capability for publication target", "style": "form", "explode": true }, { "name": "X-PhotoTracker-Link", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Opaque live capability. Header takes precedence over first token query. Header array is rejected; no service token format/length validation." } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicReportReceipt" } } } }, "201": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicReportReceipt" } } } }, "400": { "description": "INVALID_REQUEST: one strict UUID target+bounded reason+optional key invalid; INVALID_REQUEST: JSON malformed", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "one strict UUID target+bounded reason+optional key invalid" }, { "code": "INVALID_REQUEST", "when": "JSON malformed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: target inaccessible/missing or receipt identity gone", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "target inaccessible/missing or receipt identity gone" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "409": { "description": "IDEMPOTENCY_CONFLICT: same actor/key target/reason changed", "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "same actor/key target/reason changed" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ] }, "413": { "description": "LIMIT_EXCEEDED: body exceeds route byte limit", "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "body exceeds route byte limit" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ] }, "415": { "description": "INVALID_REQUEST: Content-Type does not start application/json", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Content-Type does not start application/json" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/public_reports.dart", "selector": "Future submit()", "line": 157, "sourceSha256": "6050ae37237e5cdd52d94dd8d0a9042ad11d2425fdb6113180b74d789d1e58a3" }, { "file": "app/lib/web/viewer_api.dart", "selector": "Future> report(", "line": 134, "sourceSha256": "caaf10ed201ac6bef7a347f13b4c1c1be8075e238800b507d8c486272576a668" } ], "security": [ {}, { "BearerAuth": [] }, { "PublicationLink": [] }, { "LegacyPublicationLinkQuery": [] }, { "BearerAuth": [], "PublicationLink": [] }, { "BearerAuth": [], "LegacyPublicationLinkQuery": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed", "token": "fallback capability for publication target" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicReportRequest" } } }, "description": "application/json prefix; maximum 8192 bytes", "x-walkpic-max-bytes": 8192 }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } }, "get": { "operationId": "contentListPublicReports", "tags": [ "Content" ], "summary": "ListPublicReports", "x-walkpic-source": [ { "file": "service/src/public_reports.ts", "selector": "if(method==='GET'&&(path==='/v1/reports'||detail))", "line": 67, "sourceSha256": "d2ecf7cc20b2e6103ac3cc5eaa7213d976221ceb68cf9c18b8a796a7d7a54c1b" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; only actor-owned receipts/live reporter", "postSlowWorkAndCompatibility": [ "List fixed50 newest createdAt/id; no supported cursor despite ignored query fields." ] }, "parameters": [], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicReportsPage" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: detail not owned/missing; no anonymous read", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "detail not owned/missing; no anonymous read" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/public_reports.dart", "selector": "'GET',\n '/v1/reports'", "line": 345, "sourceSha256": "6050ae37237e5cdd52d94dd8d0a9042ad11d2425fdb6113180b74d789d1e58a3" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/reports/{reportId}": { "get": { "operationId": "contentReadPublicReport", "tags": [ "Content" ], "summary": "ReadPublicReport", "x-walkpic-source": [ { "file": "service/src/public_reports.ts", "selector": "if(method==='GET'&&(path==='/v1/reports'||detail))", "line": 67, "sourceSha256": "d2ecf7cc20b2e6103ac3cc5eaa7213d976221ceb68cf9c18b8a796a7d7a54c1b" } ], "x-walkpic-authorization": { "implementedFacts": "Bearer required; only actor-owned receipts/live reporter", "postSlowWorkAndCompatibility": [ "List fixed50 newest createdAt/id; no supported cursor despite ignored query fields." ] }, "parameters": [ { "name": "reportId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicReportReceipt" } } } }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: detail not owned/missing; no anonymous read", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "detail not owned/missing; no anonymous read" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/public_reports.dart", "selector": "'GET',\n '/v1/reports'", "line": 345, "sourceSha256": "6050ae37237e5cdd52d94dd8d0a9042ad11d2425fdb6113180b74d789d1e58a3" } ], "security": [ { "BearerAuth": [] } ], "x-walkpic-query-behavior": { "unknown": "ignored, no query validation in this branch", "duplicate": "first value only where URLSearchParams.get is consumed" }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/activity": { "get": { "operationId": "contentListActivity", "tags": [ "Content" ], "summary": "List current authorized walk/photo activity", "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "before", "in": "query", "required": false, "schema": { "type": "string" }, "description": "First value converted with Number(value); safe nonnegative integer required. Empty/whitespace->0, scientific/hex allowed if safe. Duplicates use first; absent MAX_SAFE_INTEGER. Unknown query keys rejected400 INVALID_INPUT.", "style": "form", "explode": true } ], "responses": { "200": { "description": "Up to20 current authorized activity items; plain row-sequence cursor", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentActivityPage" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } } }, "400": { "description": "INVALID_INPUT: invalid Number-coerced before or unknown query key", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_INPUT", "when": "Number(before) not safe integer>=0 or unknown query name" } ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_INPUT" ] }, "401": { "description": "AUTH_REQUIRED: current bearer required", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped failure", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-source": [ { "file": "service/src/walk_activity.ts", "selector": "export async function walkActivity", "line": 47, "sourceSha256": "cc241604691bff66ed8ea3bdb0342f4ce141e3ba87f164db14455cf0a9439ae6" } ], "x-walkpic-authorization": { "implementedFacts": "Recipient actor=current live user/session, current active publication readableSql with no retained capability; exact uploaded photo and current positive activity count required for photo kinds. Block/follow/recipient/restriction/deletion filters apply before LIMIT.", "deliveryFacts": "Commit and durable fanout one statement; feed receipt does not grant chat consent.20item page+21st determines nextCursor, rowid descending; no signed cursor/expiry.", "x-walkpic-query-behavior": "Only before accepted; duplicates allowed first; numeric coercion annotated, no new decimal-only regex" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": false, "scalarSelection": "first" } } }, "/v1/auth/apple/challenge": { "post": { "operationId": "identityCreateAppleChallenge", "tags": [ "Identity" ], "summary": "Issue a one-use Apple challenge valid for 300 seconds", "description": "Issue a one-use Apple challenge valid for 300 seconds. Authorization and body are not read.", "security": [], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityAppleChallenge" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "AUTH_NOT_CONFIGURED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_NOT_CONFIGURED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-34" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/auth/apple": { "post": { "operationId": "identityExchangeApple", "tags": [ "Identity" ], "summary": "Exchange native or web Apple authorization", "description": "Exchange native or web Apple authorization. Verify issuer, RS256 audience and nonce hash, exchange code with Apple, verify same subject, and atomically resolve identity/session. Supplied display name may be truncated or emptied without blocking sign-in. Service token bundle is not the browser cookie broker response.", "security": [], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityLoginResponse" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "INVALID_REQUEST; VERIFIED_EMAIL_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_CHALLENGE_EXPIRED; APPLE_REJECTED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "APPLE_REJECTED", "AUTH_CHALLENGE_EXPIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "APPLE_REJECTED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "409": { "description": "EMAIL_IN_USE; IDEMPOTENCY_CONFLICT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "EMAIL_IN_USE", "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "EMAIL_IN_USE", "IDEMPOTENCY_CONFLICT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "410": { "description": "ACCOUNT_DELETED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "ACCOUNT_DELETED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "AUTH_NOT_CONFIGURED; APPLE_UNAVAILABLE", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "APPLE_UNAVAILABLE", "AUTH_NOT_CONFIGURED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_NOT_CONFIGURED", "APPLE_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityAppleRequest" } } }, "x-walkpic-max-bytes": 20000 }, "x-walkpic-source-selectors": [ "selector-34", "selector-35" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/auth/email/request": { "post": { "operationId": "identityRequestEmailCode", "tags": [ "Identity" ], "summary": "Send a six-digit, ten-minute, one-use email code", "description": "Send a six-digit, ten-minute, one-use email code. At most one per email per 60 seconds, five per email/hour and 100 total/hour. New request consumes earlier challenges; sender failure scrubs/consumes the challenge. Extra properties ignored.", "security": [], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityEmailChallenge" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "INVALID_EMAIL", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_EMAIL", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_EMAIL", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "429": { "description": "EMAIL_RATE_LIMIT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "EMAIL_RATE_LIMIT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "EMAIL_RATE_LIMIT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "EMAIL_UNAVAILABLE", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "EMAIL_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "EMAIL_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityEmailRequest" } } }, "x-walkpic-max-bytes": 2000 }, "x-walkpic-source-selectors": [ "selector-36" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/auth/email/verify": { "post": { "operationId": "identityVerifyEmailCode", "tags": [ "Identity" ], "summary": "Verify the exact email challenge/code with at most five durable attempts", "description": "Verify the exact email challenge/code with at most five durable attempts. Uniform failure includes expired, consumed, wrong or deleted-account challenge. Extra properties ignored; browser broker keeps challenge ID server-side.", "security": [], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityLoginResponse" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "EMAIL_CODE_INVALID", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "EMAIL_CODE_INVALID" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "EMAIL_CODE_INVALID" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "EMAIL_UNAVAILABLE", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "EMAIL_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "EMAIL_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityEmailVerifyRequest" } } }, "x-walkpic-max-bytes": 2000 }, "x-walkpic-source-selectors": [ "selector-37" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/auth/review": { "post": { "operationId": "identityReviewLogin", "tags": [ "Identity" ], "summary": "Configured review account sign-in", "description": "Configured review account sign-in. Disabled review credentials return 404, absent identity returns 503; process-local limit eight attempts per fifteen minutes. Username is trimmed/lowercased for comparison. Extra properties ignored.", "security": [], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityLoginResponse" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "INVALID_REQUEST", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "INVALID_CREDENTIALS", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CREDENTIALS" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_CREDENTIALS" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "429": { "description": "TOO_MANY_ATTEMPTS", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "TOO_MANY_ATTEMPTS" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "TOO_MANY_ATTEMPTS" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "AUTH_NOT_CONFIGURED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_NOT_CONFIGURED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityReviewRequest" } } }, "x-walkpic-max-bytes": 2000 }, "x-walkpic-source-selectors": [ "selector-38" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/auth/refresh": { "post": { "operationId": "identityRefreshSession", "tags": [ "Identity" ], "summary": "Rotate session using refresh token, with exact durable old-hash receipt replay", "description": "Rotate session using refresh token, with exact durable old-hash receipt replay. New refresh checks non-revoked live account/refresh expiry. Authorization header is not used. Response has tokens only, no user.", "security": [], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityTokenBundle" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "INVALID_REQUEST", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "AUTH_NOT_CONFIGURED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_NOT_CONFIGURED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityRefreshRequest" } } }, "x-walkpic-max-bytes": 2000 }, "x-walkpic-source-selectors": [ "selector-39" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/auth/logout": { "post": { "operationId": "identityLogout", "tags": [ "Identity" ], "summary": "Revoke the exact verified current session and optionally delete one owned notification device", "description": "Revoke the exact verified current session and optionally delete one owned notification device. Require nonempty verified session_id before any device write; injected profile-only legacy actors cannot perform real logout. Extra body properties ignored.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentitySignedOut" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "AUTH_NOT_CONFIGURED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_NOT_CONFIGURED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityLogoutRequest" } } }, "x-walkpic-max-bytes": 4096 }, "x-walkpic-source-selectors": [ "selector-50" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/config": { "get": { "operationId": "identityConfiguration", "tags": [ "Identity" ], "summary": "Read configuration and account-specific capabilities", "description": "Read configuration and account-specific capabilities. Absence of credentials is allowed; supplied malformed/expired Bearer is rejected. Anonymous messaging features and version gates are false/zero. Cache-Control private, no-store.", "security": [ {}, { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityConfiguration" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-32" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/maps/token": { "get": { "operationId": "identityMapToken", "tags": [ "Identity" ], "summary": "Return a thirty-minute ES256 MapKit token", "description": "Return a thirty-minute ES256 MapKit token. Public pre-auth handler ignores supplied Authorization. Missing signing configuration returns MAP_UNAVAILABLE; no secret signing key returned.", "security": [], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityMapToken" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "MAP_UNAVAILABLE", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "MAP_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "MAP_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "Origin", "in": "header", "required": false, "schema": { "type": "string" }, "description": "Optional approved webAppOrigin/viewerOrigin selects signed JWT origin; otherwise configured publicOrigin." } ], "x-walkpic-source-selectors": [ "selector-40" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/me": { "get": { "operationId": "identityMe", "tags": [ "Identity" ], "summary": "Read the current public user profile, with legacy name/displayName fields and no email", "description": "Read the current public user profile, with legacy name/displayName fields and no email.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityMe" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-51", "selector-52", "selector-53" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." }, "patch": { "operationId": "identityUpdateProfile", "tags": [ "Identity" ], "summary": "Update handle, display name and searchable setting", "description": "Update handle, display name and searchable setting. POST is the maintained legacy alias. Preserve String handle coercion, trim display name and searchable false-only semantics; do not update approvalRequired. Extra properties ignored.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityMe" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "INVALID_REQUEST", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "409": { "description": "HANDLE_TAKEN", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "HANDLE_TAKEN" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "HANDLE_TAKEN" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "422": { "description": "CONTENT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityProfileRequest" } } }, "x-walkpic-max-bytes": 2000000 }, "x-walkpic-source-selectors": [ "selector-51", "selector-52", "selector-53" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." }, "post": { "operationId": "identityUpdateProfileLegacy", "tags": [ "Identity" ], "summary": "Update handle, display name and searchable setting", "description": "Update handle, display name and searchable setting. POST is the maintained legacy alias. Preserve String handle coercion, trim display name and searchable false-only semantics; do not update approvalRequired. Extra properties ignored.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityMe" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "INVALID_REQUEST", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "409": { "description": "HANDLE_TAKEN", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "HANDLE_TAKEN" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "HANDLE_TAKEN" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "422": { "description": "CONTENT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityProfileRequest" } } }, "x-walkpic-max-bytes": 2000000 }, "x-walkpic-source-selectors": [ "selector-51", "selector-52", "selector-53" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." }, "delete": { "operationId": "identityDeleteAccount", "tags": [ "Identity" ], "summary": "Accept irreversible account deletion with confirm DELETE and optional receipt capability", "description": "Accept irreversible account deletion with confirm DELETE and optional receipt capability. Sessions and publication/social access are revoked atomically, while asynchronous cleanup remains pending. Legacy requests without capability remain valid.", "security": [ { "BearerAuth": [] } ], "responses": { "202": { "description": "Deletion accepted; asynchronous cleanup remains pending.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityDeletionAccepted" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "CONFIRM_REQUIRED; INVALID_REQUEST", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONFIRM_REQUIRED", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CONFIRM_REQUIRED", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "410": { "description": "ACCOUNT_DELETED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "ACCOUNT_DELETED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityDeletionRequest" } } }, "x-walkpic-max-bytes": 2000000 }, "x-walkpic-source-selectors": [ "selector-51", "selector-52", "selector-53" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-browser-transport": "Browser broker uses sealed HttpOnly cookies and Origin/CSRF gates; service tokens never returned to browser JavaScript. /auth/email keeps challengeId server-side and returns timing/signedIn instead of service challenge/token bundle. Proxy /api reads require sealed session even public service reads. Browser error envelope may omit code. These separate broker routes are not implied by this service operation." } }, "/v1/account-deletion/status": { "get": { "operationId": "identityDeletionStatus", "tags": [ "Identity" ], "summary": "Read own deletion progress using Authorization: Deletion <43-character capability>", "description": "Read own deletion progress using Authorization: Deletion <43-character capability>. This independent read-only capability bypasses Bearer authentication because acceptance revokes that session. Missing/malformed/unknown capability is uniformly NOT_FOUND. Provider copies remain unverified.", "security": [ { "DeletionReceipt": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityDeletionStatus" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Possession of the exact deletion receipt capability; no session or integration scope substitutes for it.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-46" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-header-constraints": { "Authorization": { "required": true, "pattern": "^Deletion [A-Za-z0-9_-]{43}$" } }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/people": { "get": { "operationId": "identitySearchPeople", "tags": [ "Identity" ], "summary": "Search up to 25 searchable non-deleted other accounts, excluding either-direction blocks when an actor is present", "description": "Search up to 25 searchable non-deleted other accounts, excluding either-direction blocks when an actor is present. Missing credentials allowed; supplied invalid session rejected.", "security": [ {}, { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityPeople" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "q", "in": "query", "required": false, "schema": { "type": "string" }, "description": "First q value is trimmed/lowercased; fewer than two UTF16 units returns empty. No maximum, repeat-key or unknown-key validation." } ], "x-walkpic-source-selectors": [ "selector-54" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/people/{personId}": { "get": { "operationId": "identityPersonProfile", "tags": [ "Identity" ], "summary": "Read searchable profile or own profile and at most 100 currently readable publications", "description": "Read searchable profile or own profile and at most 100 currently readable publications. Current live-caller/publication ACL SQL is separate from profile visibility. Missing/deleted/nonsearchable other account or either-direction block returns NOT_FOUND. No service /people/{id}/publications child route exists despite broker allowlist compatibility.", "security": [ {}, { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityPersonProfile" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Dispatch/security semantics described in this operation; no integration grant scopes are asserted.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "Legacy dispatcher shape, not canonical UUID normalization; current SQL exact identifier match." } ], "x-walkpic-source-selectors": [ "selector-23" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/followers": { "get": { "operationId": "identityListFollowers", "tags": [ "Identity" ], "summary": "List at most 500 non-deleted accounts ordered by handle, excluding self", "description": "List at most 500 non-deleted accounts ordered by handle, excluding self. Followers are approved, following includes pending/approved, requests are pending, and blocked entries use blocked. Legacy prefix/split routing accepts extra suffix segments after this recognized list.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowPeople" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-56" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/following": { "get": { "operationId": "identityListFollowing", "tags": [ "Identity" ], "summary": "List at most 500 non-deleted accounts ordered by handle, excluding self", "description": "List at most 500 non-deleted accounts ordered by handle, excluding self. Followers are approved, following includes pending/approved, requests are pending, and blocked entries use blocked. Legacy prefix/split routing accepts extra suffix segments after this recognized list.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowPeople" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-56" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/blocked": { "get": { "operationId": "identityListBlocked", "tags": [ "Identity" ], "summary": "List at most 500 non-deleted accounts ordered by handle, excluding self", "description": "List at most 500 non-deleted accounts ordered by handle, excluding self. Followers are approved, following includes pending/approved, requests are pending, and blocked entries use blocked. Legacy prefix/split routing accepts extra suffix segments after this recognized list.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowPeople" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-56" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/requests": { "get": { "operationId": "identityListRequests", "tags": [ "Identity" ], "summary": "List at most 500 non-deleted accounts ordered by handle, excluding self", "description": "List at most 500 non-deleted accounts ordered by handle, excluding self. Followers are approved, following includes pending/approved, requests are pending, and blocked entries use blocked. Legacy prefix/split routing accepts extra suffix segments after this recognized list.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowPeople" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-56" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/{personId}/request": { "post": { "operationId": "identityFollowRequest", "tags": [ "Identity" ], "summary": "Perform request on current social relationship", "description": "Perform request on current social relationship. Body and query are ignored. Current non-deleted/non-self/unblocked target required except unblock, which idempotently deletes only own block. Approve/decline requires incoming pending follow. A follow is not independent chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowRequestResponse" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/IdentityUuid" }, "description": "Validated canonical shape but case retained for SQL lookup." } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-57" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/{personId}/approve": { "post": { "operationId": "identityFollowApprove", "tags": [ "Identity" ], "summary": "Perform approve on current social relationship", "description": "Perform approve on current social relationship. Body and query are ignored. Current non-deleted/non-self/unblocked target required except unblock, which idempotently deletes only own block. Approve/decline requires incoming pending follow. A follow is not independent chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowApproved" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/IdentityUuid" }, "description": "Validated canonical shape but case retained for SQL lookup." } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-57" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/{personId}/decline": { "post": { "operationId": "identityFollowDecline", "tags": [ "Identity" ], "summary": "Perform decline on current social relationship", "description": "Perform decline on current social relationship. Body and query are ignored. Current non-deleted/non-self/unblocked target required except unblock, which idempotently deletes only own block. Approve/decline requires incoming pending follow. A follow is not independent chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowDeclined" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/IdentityUuid" }, "description": "Validated canonical shape but case retained for SQL lookup." } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-57" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/{personId}/cancel": { "post": { "operationId": "identityFollowCancel", "tags": [ "Identity" ], "summary": "Perform cancel on current social relationship", "description": "Perform cancel on current social relationship. Body and query are ignored. Current non-deleted/non-self/unblocked target required except unblock, which idempotently deletes only own block. Approve/decline requires incoming pending follow. A follow is not independent chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowCancelled" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/IdentityUuid" }, "description": "Validated canonical shape but case retained for SQL lookup." } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-57" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/{personId}/remove": { "post": { "operationId": "identityFollowRemove", "tags": [ "Identity" ], "summary": "Perform remove on current social relationship", "description": "Perform remove on current social relationship. Body and query are ignored. Current non-deleted/non-self/unblocked target required except unblock, which idempotently deletes only own block. Approve/decline requires incoming pending follow. A follow is not independent chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowerRemoved" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/IdentityUuid" }, "description": "Validated canonical shape but case retained for SQL lookup." } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-57" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/{personId}/unfollow": { "post": { "operationId": "identityFollowUnfollow", "tags": [ "Identity" ], "summary": "Perform unfollow on current social relationship", "description": "Perform unfollow on current social relationship. Body and query are ignored. Current non-deleted/non-self/unblocked target required except unblock, which idempotently deletes only own block. Approve/decline requires incoming pending follow. A follow is not independent chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityUnfollowed" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/IdentityUuid" }, "description": "Validated canonical shape but case retained for SQL lookup." } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-57" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/{personId}/block": { "post": { "operationId": "identityFollowBlock", "tags": [ "Identity" ], "summary": "Perform block on current social relationship", "description": "Perform block on current social relationship. Body and query are ignored. Current non-deleted/non-self/unblocked target required except unblock, which idempotently deletes only own block. Approve/decline requires incoming pending follow. A follow is not independent chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityBlocked" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/IdentityUuid" }, "description": "Validated canonical shape but case retained for SQL lookup." } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-57" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/follows/{personId}/unblock": { "post": { "operationId": "identityFollowUnblock", "tags": [ "Identity" ], "summary": "Perform unblock on current social relationship", "description": "Perform unblock on current social relationship. Body and query are ignored. Current non-deleted/non-self/unblocked target required except unblock, which idempotently deletes only own block. Approve/decline requires incoming pending follow. A follow is not independent chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityUnblocked" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current non-revoked, unexpired Bearer session and non-deleted account; additional domain authorization described in this operation.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/IdentityUuid" }, "description": "Validated canonical shape but case retained for SQL lookup." } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-57" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/messaging/counts": { "get": { "operationId": "messagingCounts", "tags": [ "Messaging" ], "summary": "Current authorized unread messages/conversations and pending requests, optionally including trusted current plan counts", "description": "Current authorized unread messages/conversations and pending requests, optionally including trusted current plan counts. No query keys accepted; private no-store.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingCounts" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-source-selectors": [ "selector-222" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/messaging/people": { "get": { "operationId": "messagingSearchPeople", "tags": [ "Messaging" ], "summary": "Discover at most 50 eligible peers with current searchable/follow/block visibility, ranked approved follows first", "description": "Discover at most 50 eligible peers with current searchable/follow/block visibility, ranked approved follows first. Missing/invalid pilot configuration never widens discovery; explicit authenticated rollout does not grant chat consent.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingPeoplePage" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT; INVALID_CURSOR", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_CURSOR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "410": { "description": "CURSOR_EXPIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "q", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-normalized-constraints": { "normalization": [ "trim", "lowercase" ], "maxUtf16CodeUnits": 120, "forbiddenPattern": "[\\u0000-\\u001F\\u007F]" } }, "description": "Nonempty normalized search shorter than two characters returns empty." }, { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^0*(?:[1-9]|[1-4][0-9]|50)$", "default": "50", "description": "Unsigned decimal string, including leading zeros; numeric value must be 1..50." } }, { "name": "cursor", "in": "query", "required": false, "schema": { "anyOf": [ { "type": "string", "maxLength": 2000, "pattern": "^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$", "description": "Opaque HMAC-bound cursor: actor/resource/limit/direction, 15-minute age, no more than 60 seconds future skew. Never a capability or membership grant." }, { "type": "string", "const": "" } ] }, "description": "Empty cursor is ignored on discovery, unlike history/list cursor handlers." } ], "x-walkpic-source-selectors": [ "selector-223" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/messaging/people/{personId}": { "get": { "operationId": "messagingPersonProfile", "tags": [ "Messaging" ], "summary": "Read current eligible peer profile and server-computed open/send/request action", "description": "Read current eligible peer profile and server-computed open/send/request action. Conversation ID may be null. Current blocks/deletion/discovery ACL enforced; no query keys accepted.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingPersonProfile" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "personId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "x-walkpic-source-selectors": [ "selector-195", "selector-219" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations": { "get": { "operationId": "messagingListConversations", "tags": [ "Messaging" ], "summary": "List current readable conversations plus own neutral outgoing requests", "description": "List current readable conversations plus own neutral outgoing requests. Cursor binds account, resource, limit and direction; a cursor never grants membership or restores access.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingConversationPage" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT; INVALID_CURSOR", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_CURSOR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "410": { "description": "CURSOR_EXPIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^0*(?:[1-9]|[1-4][0-9]|50)$", "default": "20", "description": "Unsigned decimal string, including leading zeros; numeric value must be 1..50." } }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "pattern": "^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$", "description": "Opaque HMAC-bound cursor: actor/resource/limit/direction, 15-minute age, no more than 60 seconds future skew. Never a capability or membership grant." } } ], "x-walkpic-source-selectors": [ "selector-225" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/message-requests": { "get": { "operationId": "messagingListRequests", "tags": [ "Messaging" ], "summary": "List current visible, unexpired invitations, or select one with conversationId", "description": "List current visible, unexpired invitations, or select one with conversationId. Selected mode requires limit 1 and no cursor. Direct request exposes only introduction, never hidden history.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingInvitationPage" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT; INVALID_CURSOR", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_CURSOR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "410": { "description": "CURSOR_EXPIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^0*(?:[1-9]|[1-4][0-9]|50)$", "description": "Unsigned decimal string, including leading zeros; numeric value must be 1..50." }, "description": "Default 20; default 1 when conversationId supplied. Selected request requires numeric value 1.", "x-walkpic-default": { "conversationIdAbsent": "20", "conversationIdPresent": "1" } }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "pattern": "^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$", "description": "Opaque HMAC-bound cursor: actor/resource/limit/direction, 15-minute age, no more than 60 seconds future skew. Never a capability or membership grant." } }, { "name": "conversationId", "in": "query", "required": false, "schema": { "$ref": "#/components/schemas/MessagingUuid" }, "description": "Select one current request; limit must be 1 and cursor absent." } ], "x-walkpic-source-selectors": [ "selector-226" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/direct": { "post": { "operationId": "messagingCreateDirect", "tags": [ "Messaging" ], "summary": "Create/open direct conversation and send introduction", "description": "Create/open direct conversation and send introduction. Mutual approved follows may start active; otherwise recipient consent is an invitation and state request_sent. Request UUID/digest scoped actor; fresh201, acknowledged replay200. Pending initiator send blocked; new sends enforce current recipient enrollment/visibility and durable quotas; replay acknowledgment does not grant protected history.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingDirectReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "201": { "description": "New durable acknowledgment.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingDirectReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "403": { "description": "REQUEST_PENDING; CONTACT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "REQUEST_PENDING", "CONTACT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "IDEMPOTENCY_CONFLICT; CONVERSATION_CLOSED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "CONVERSATION_CLOSED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "422": { "description": "CONTENT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "429": { "description": "RATE_LIMITED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "schema": { "type": "string", "const": "60" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingDirectRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-227" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/group": { "post": { "operationId": "messagingCreateGroup", "tags": [ "Messaging" ], "summary": "Create a group with one to nineteen distinct eligible invitees", "description": "Create a group with one to nineteen distinct eligible invitees. Owner active; invitees must accept their current seven-day invitation. At most twenty reserved members; durable group/invitation/contact quotas. Fresh201 and same acknowledged replay200.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingGroupReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "201": { "description": "New durable acknowledgment.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingGroupReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "403": { "description": "REQUEST_PENDING; CONTACT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "REQUEST_PENDING", "CONTACT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "IDEMPOTENCY_CONFLICT; GROUP_FULL; INVITATION_CHANGED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "GROUP_FULL", "INVITATION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "422": { "description": "CONTENT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "429": { "description": "RATE_LIMITED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "schema": { "type": "string", "const": "60" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingGroupRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-228" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/message-requests/{conversationId}/respond": { "post": { "operationId": "messagingRespondToRequest", "tags": [ "Messaging" ], "summary": "Accept or decline own current invitation version", "description": "Accept or decline own current invitation version. Transaction checks current visible/unexpired invitation; response reads current membership. Accepting group sets visible history boundary, while direct introduction is retained.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingRespondReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "IDEMPOTENCY_CONFLICT; INVITATION_CHANGED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingRespondRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-195", "selector-219" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/{conversationId}": { "get": { "operationId": "messagingConversationDetail", "tags": [ "Messaging" ], "summary": "Read a current authorized detail snapshot", "description": "Read a current authorized detail snapshot. Neutral outgoing request has no protected roster/membership and all permissions false. Current group owner alone receives pending invitations.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingConversationDetail" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "x-walkpic-source-selectors": [ "selector-230" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." }, "patch": { "operationId": "messagingRenameGroup", "tags": [ "Messaging" ], "summary": "Rename an open group as its current owner with expectedVersion", "description": "Rename an open group as its current owner with expectedVersion.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingRenameReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "VERSION_CHANGED; CONVERSATION_CLOSED; IDEMPOTENCY_CONFLICT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT", "VERSION_CHANGED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "VERSION_CHANGED", "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "422": { "description": "CONTENT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingRenameRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-195", "selector-219" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/{conversationId}/view": { "get": { "operationId": "messagingConversationView", "tags": [ "Messaging" ], "summary": "Read detail and newest history in one current identity/authorization snapshot", "description": "Read detail and newest history in one current identity/authorization snapshot. Ordinary view accepts no cursor. Production identity projection joins current session and protected data; custom injected auth preserves its own adapter path. Unreadable outgoing request returns empty items, null nextCursor and zero snapshotSeq.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingConversationView" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "503": { "description": "PLAN_CARDS_UNAVAILABLE", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } }, { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^0*(?:[1-9]|[1-4][0-9]|50)$", "default": "30", "description": "Unsigned decimal string, including leading zeros; numeric value must be 1..50." } }, { "name": "planCards", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "1" ] }, "description": "Optional exact string 1 enables current authorized plan-card projection; requires live planner gate." } ], "x-walkpic-source-selectors": [ "selector-195", "selector-219" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/{conversationId}/messages": { "get": { "operationId": "messagingHistory", "tags": [ "Messaging" ], "summary": "Read older snapshot history or forward updates", "description": "Read older snapshot history or forward updates. History items returned ascending after newest-first page selection. afterSeq selects updates with hasMore/nextAfterSeq; cursor selects older history with nextCursor/snapshotSeq. Current access loss denies content even for an authentic old cursor.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingMessagePage" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT; INVALID_CURSOR", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_CURSOR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "410": { "description": "CURSOR_EXPIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "503": { "description": "PLAN_CARDS_UNAVAILABLE", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } }, { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^0*(?:[1-9]|[1-4][0-9]|50)$", "default": "30", "description": "Unsigned decimal string, including leading zeros; numeric value must be 1..50." } }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "pattern": "^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$", "description": "Opaque HMAC-bound cursor: actor/resource/limit/direction, 15-minute age, no more than 60 seconds future skew. Never a capability or membership grant." } }, { "name": "afterSeq", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^[0-9]+$", "x-walkpic-parsed-integer-maximum": 9007199254740991 }, "description": "Safe nonnegative decimal sequence for updates; mutually exclusive cursor." }, { "name": "planCards", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "1" ] }, "description": "Optional exact string 1 enables current authorized plan-card projection; requires live planner gate." } ], "x-walkpic-source-selectors": [ "selector-232" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." }, "post": { "operationId": "messagingSendMessage", "tags": [ "Messaging" ], "summary": "Send text or a currently accessible existing shared walk", "description": "Send text or a currently accessible existing shared walk. Ordinary namespace rejects membership extras. Fresh201 and acknowledged replay200; actor/request UUID digest protects immutable retries. New text checked before durable command; already acknowledged content remains recoverable despite later content policy changes, then current conversation is checked.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingSendReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "201": { "description": "New durable acknowledgment.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingSendReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "403": { "description": "REQUEST_PENDING; CONTACT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "REQUEST_PENDING", "CONTACT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "IDEMPOTENCY_CONFLICT; CONVERSATION_CLOSED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "CONVERSATION_CLOSED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "422": { "description": "CONTENT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "429": { "description": "RATE_LIMITED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "schema": { "type": "string", "const": "60" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingSendRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-233" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/{conversationId}/read": { "put": { "operationId": "messagingMarkRead", "tags": [ "Messaging" ], "summary": "Advance own read boundary monotonically to the actual message sequence no greater than throughSeq", "description": "Advance own read boundary monotonically to the actual message sequence no greater than throughSeq. Current membership required; return current authorized unread count.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingReadReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "IDEMPOTENCY_CONFLICT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingReadRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-234" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/{conversationId}/invitations": { "post": { "operationId": "messagingInviteMembers", "tags": [ "Messaging" ], "summary": "Invite eligible people as current group owner; expectedVersion and current reserved-member/contact limits apply", "description": "Invite eligible people as current group owner; expectedVersion and current reserved-member/contact limits apply.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingInviteReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "403": { "description": "CONTACT_NOT_ALLOWED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "VERSION_CHANGED; INVITATION_CHANGED; GROUP_FULL; CONVERSATION_CLOSED; IDEMPOTENCY_CONFLICT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONVERSATION_CLOSED", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "VERSION_CHANGED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "VERSION_CHANGED", "INVITATION_CHANGED", "GROUP_FULL", "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "429": { "description": "RATE_LIMITED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "schema": { "type": "string", "const": "60" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingInviteRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-195", "selector-219" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/{conversationId}/members/{memberId}/remove": { "post": { "operationId": "messagingRemoveMember", "tags": [ "Messaging" ], "summary": "Remove another active/invited group member as current owner, with expectedVersion; return removed true and current version", "description": "Remove another active/invited group member as current owner, with expectedVersion; return removed true and current version.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingRemovalReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "VERSION_CHANGED; INVITATION_CHANGED; CONVERSATION_CLOSED; IDEMPOTENCY_CONFLICT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "VERSION_CHANGED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "VERSION_CHANGED", "INVITATION_CHANGED", "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } }, { "name": "memberId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingVersionRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-195", "selector-219" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/{conversationId}/leave": { "post": { "operationId": "messagingLeaveGroup", "tags": [ "Messaging" ], "summary": "Leave a group as a current non-owner member", "description": "Leave a group as a current non-owner member. Owner must end group rather than leave; own left membership verified before acknowledgment.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingLeaveReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "OWNER_MUST_END_GROUP; IDEMPOTENCY_CONFLICT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "OWNER_MUST_END_GROUP" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "OWNER_MUST_END_GROUP", "IDEMPOTENCY_CONFLICT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingLeaveRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-195", "selector-219" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/conversations/{conversationId}/close": { "post": { "operationId": "messagingCloseGroup", "tags": [ "Messaging" ], "summary": "Close a group as current owner with expectedVersion; revoke pending invites and return closed state/current version", "description": "Close a group as current owner with expectedVersion; revoke pending invites and return closed state/current version.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingCloseReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "VERSION_CHANGED; CONVERSATION_CLOSED; IDEMPOTENCY_CONFLICT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT", "VERSION_CHANGED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "VERSION_CHANGED", "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "name": "conversationId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingVersionRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-195", "selector-219" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/message-reports/preview": { "post": { "operationId": "messagingPreviewReport", "tags": [ "Messaging" ], "summary": "Build exact current server-selected message or group-invitation evidence", "description": "Build exact current server-selected message or group-invitation evidence. Return signed account/target/evidence-bound preview and selected-text automation descriptor. Preview does not accept reason/requestId/previewToken or client-authored evidence.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingReportPreview" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingReportTarget" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-261" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/message-reports": { "post": { "operationId": "messagingSubmitReport", "tags": [ "Messaging" ], "summary": "Submit exact preview target, normalized reason, request UUID and preview token", "description": "Submit exact preview target, normalized reason, request UUID and preview token. Fresh201, same content-free own acknowledgment replay200 even after preview expiry/moderation. New submission revalidates scope/expiry/exact current evidence and transaction snapshot. Automatic removal uses only exact selected text, never reason, and concernResolved remains false.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingReportReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "201": { "description": "New durable acknowledgment.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingReportReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "409": { "description": "IDEMPOTENCY_CONFLICT; REPORT_CHANGED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "REPORT_CHANGED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "REPORT_CHANGED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "410": { "description": "REPORT_PREVIEW_EXPIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "REPORT_PREVIEW_EXPIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "REPORT_PREVIEW_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "429": { "description": "RATE_LIMITED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "schema": { "type": "string", "const": "60" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingReportRequest" } } }, "x-walkpic-max-bytes": 24000 }, "x-walkpic-source-selectors": [ "selector-261" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/message-reports/{reportId}": { "get": { "operationId": "messagingReportReceipt", "tags": [ "Messaging" ], "summary": "Recover only own immutable content-free report acknowledgment", "description": "Recover only own immutable content-free report acknowledgment. Current account/command actor/report reporter ownership required; group leave retains receipt but unlinking/account deletion/purge revokes it. GET report readback ignores extra/repeated query keys, unlike other messaging reads.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MessagingReportReceipt" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "404": { "description": "NOT_FOUND", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session and live account; messagingEnabled must be exactly true and actor must be in canonical UUID pilot cohort (maximum 50) or explicitly enabled authenticated rollout. Enrollment does not replace current conversation membership, consent, block, visibility, recipient or report ACLs.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "reportId", "in": "path", "required": true, "schema": { "$ref": "#/components/schemas/MessagingUuid" } } ], "x-walkpic-source-selectors": [ "selector-261" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-body-and-query": "Mutation query keys forbidden; allowed GET keys must each occur once, except GET report receipt ignores query. JSON max24000 bytes where read.", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth.", "x-walkpic-notification-transport": "Chat APNs messages use fixed neutral alert text and routing IDs only, no message text/evidence/reason. Revalidate claim/device/account/membership/block/redaction after key signing before push. Shared /notifications controls apply; no direct chat-notification HTTP route or browser /api messaging allowlist route currently exists." } }, "/v1/notifications/follows": { "get": { "operationId": "identityFollowNotifications", "tags": [ "Identity" ], "summary": "Read at most fifty current incoming follow requests and total pending count with configured delivery availability", "description": "Read at most fifty current incoming follow requests and total pending count with configured delivery availability.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityFollowNotifications" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND when notification handler or requested device operation is unavailable.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session/live account. Notification routes dispatch only when configured notification handler exists; absence falls through to 404. Seen/device actions scoped current user, not possession of arbitrary ID.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-292" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/notifications/seen": { "post": { "operationId": "identityMarkNotificationsSeen", "tags": [ "Identity" ], "summary": "Mark only current recipient notification IDs seen", "description": "Mark only current recipient notification IDs seen. Empty/duplicate arrays and extra object fields accepted.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityNotificationSeen" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND when notification handler or requested device operation is unavailable.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session/live account. Notification routes dispatch only when configured notification handler exists; absence falls through to 404. Seen/device actions scoped current user, not possession of arbitrary ID.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityNotificationSeenRequest" } } }, "x-walkpic-max-bytes": 4096 }, "x-walkpic-source-selectors": [ "selector-292" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/notifications/settings": { "get": { "operationId": "identityNotificationSettings", "tags": [ "Identity" ], "summary": "Read notification settings; missing row defaults both settings true", "description": "Read notification settings; missing row defaults both settings true. Delivery availability is separate from user settings.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityNotificationSettings" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND when notification handler or requested device operation is unavailable.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session/live account. Notification routes dispatch only when configured notification handler exists; absence falls through to 404. Seen/device actions scoped current user, not possession of arbitrary ID.", "x-walkpic-query-properties": "ignored", "x-walkpic-source-selectors": [ "selector-292" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." }, "put": { "operationId": "identityUpdateNotificationSettings", "tags": [ "Identity" ], "summary": "Set both boolean email/push settings; unknown properties rejected", "description": "Set both boolean email/push settings; unknown properties rejected.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityNotificationSettingsUpdated" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND when notification handler or requested device operation is unavailable.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session/live account. Notification routes dispatch only when configured notification handler exists; absence falls through to 404. Seen/device actions scoped current user, not possession of arbitrary ID.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityNotificationSettingsRequest" } } }, "x-walkpic-max-bytes": 4096 }, "x-walkpic-source-selectors": [ "selector-292" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/notifications/devices": { "post": { "operationId": "identityRegisterNotificationDevice", "tags": [ "Identity" ], "summary": "Register/reassign one physical push token atomically to current account; token normalized lowercase and configured push/environment required", "description": "Register/reassign one physical push token atomically to current account; token normalized lowercase and configured push/environment required. Extra fields accepted.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityNotificationDeviceRegistered" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "INVALID_INPUT", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND when notification handler or requested device operation is unavailable.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "413": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "415": { "description": "JSON object/body parsing or media-type/byte-limit failure.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "503": { "description": "PUSH_UNAVAILABLE", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PUSH_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "PUSH_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session/live account. Notification routes dispatch only when configured notification handler exists; absence falls through to 404. Seen/device actions scoped current user, not possession of arbitrary ID.", "x-walkpic-query-properties": "ignored", "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityNotificationDeviceRequest" } } }, "x-walkpic-max-bytes": 4096 }, "x-walkpic-source-selectors": [ "selector-292" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/notifications/devices/{deviceId}": { "delete": { "operationId": "identityRemoveNotificationDevice", "tags": [ "Identity" ], "summary": "Idempotently remove only own device ID; body and query ignored", "description": "Idempotently remove only own device ID; body and query ignored.", "security": [ { "BearerAuth": [] } ], "responses": { "200": { "description": "Successful response; for creation/send/report this includes the identical acknowledged replay.", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/IdentityNotificationDeviceRemoved" } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "private, no-store" } } } }, "401": { "description": "AUTH_REQUIRED", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "404": { "description": "NOT_FOUND when notification handler or requested device operation is unavailable.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } }, "500": { "description": "Unexpected provider/runtime failure; sanitized INTERNAL_ERROR envelope.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Current Bearer session/live account. Notification routes dispatch only when configured notification handler exists; absence falls through to 404. Seen/device actions scoped current user, not possession of arbitrary ID.", "x-walkpic-query-properties": "ignored", "parameters": [ { "name": "deviceId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[a-fA-F0-9-]{36}$" } } ], "x-walkpic-request-body": "Ignored; no content-type, shape or byte-limit validation at this handler. No requestBody schema is imposed.", "x-walkpic-source-selectors": [ "selector-292" ], "x-walkpic-source-manifest": "docs/evidence/typescript-api-20261004/parallel-contract-identity-messaging-facts.json", "x-walkpic-response-headers": { "Cache-Control": "private, no-store" }, "x-walkpic-json-parsing": "Content-Type must start with application/json where a body is read; invalid JSON400, media type415, byte overflow413. Paths strip one trailing slash; unknown route/method generally404; shared OPTIONS204 before auth." } }, "/v1/integrations/clients": { "get": { "operationId": "identityListIntegrationClients", "tags": [ "integrations" ], "summary": "identityListIntegrationClients", "security": [ { "BearerAuth": [] } ], "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(/^\\/v1\\/integrations", "line": 307, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "Exact current human bearer; derived integration sessions are excluded.", "revalidation": "Current actor/grant authorization after slow work and serialized response preparation. Existing domain access rules remain authoritative." }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [], "responses": { "200": { "description": "Implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalIntegrationClients" } } } }, "400": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "401": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "500": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "503": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_NOT_CONFIGURED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" }, { "code": "INTEGRATIONS_UNAVAILABLE", "when": "Known integration schema unavailable" } ] } } } }, "/v1/integrations/grants": { "get": { "operationId": "identityListIntegrationGrants", "tags": [ "integrations" ], "summary": "identityListIntegrationGrants", "security": [ { "BearerAuth": [] } ], "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(/^\\/v1\\/integrations", "line": 307, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "Exact current human bearer; derived integration sessions are excluded.", "revalidation": "Current actor/grant authorization after slow work and serialized response preparation. Existing domain access rules remain authoritative." }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "in": "query", "name": "limit", "schema": { "type": "string", "pattern": "^(?:[1-9]|[1-4][0-9]|50)$", "default": "20" } }, { "in": "query", "name": "cursor", "schema": { "type": "string", "minLength": 1, "maxLength": 512 } } ], "responses": { "200": { "description": "Implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantList" } } } }, "400": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" }, { "code": "INVALID_CURSOR", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "401": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "500": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "503": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_NOT_CONFIGURED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" }, { "code": "INTEGRATIONS_UNAVAILABLE", "when": "Known integration schema unavailable" } ] } } }, "post": { "operationId": "identityCreateIntegrationGrant", "tags": [ "integrations" ], "summary": "identityCreateIntegrationGrant", "security": [ { "BearerAuth": [] } ], "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(/^\\/v1\\/integrations", "line": 307, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "Exact current human bearer; derived integration sessions are excluded.", "revalidation": "Current actor/grant authorization after slow work and serialized response preparation. Existing domain access rules remain authoritative." }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [], "responses": { "200": { "description": "Implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantAlreadyIssued" } } } }, "201": { "description": "Implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantIssued" } } } }, "400": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "401": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "409": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "413": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "415": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "429": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } }, "Retry-After": { "required": true, "schema": { "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "GRANT_LIMIT_EXCEEDED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "GRANT_LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "GRANT_LIMIT_EXCEEDED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "500": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "503": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_NOT_CONFIGURED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" }, { "code": "INTEGRATIONS_UNAVAILABLE", "when": "Known integration schema unavailable" } ] } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantIssueRequest" } } }, "x-walkpic-max-body-bytes": 4096, "x-walkpic-standard-json-media-type": true } } }, "/v1/integrations/grants/{grantId}/revoke": { "post": { "operationId": "identityRevokeIntegrationGrant", "tags": [ "integrations" ], "summary": "identityRevokeIntegrationGrant", "security": [ { "BearerAuth": [] } ], "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(/^\\/v1\\/integrations", "line": 307, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "Exact current human bearer; derived integration sessions are excluded.", "revalidation": "Current actor/grant authorization after slow work and serialized response preparation. Existing domain access rules remain authoritative." }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [ { "in": "path", "name": "grantId", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } } ], "responses": { "200": { "description": "Implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantRevoked" } } } }, "400": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "401": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "404": { "description": "Concrete revocation path outside admitted UUID-shaped route; authority is checked before this fallback", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "Invalid concrete revocation path does not match admitted UUID-shaped route" } ] }, "409": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "413": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "415": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "500": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "503": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_NOT_CONFIGURED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" }, { "code": "INTEGRATIONS_UNAVAILABLE", "when": "Known integration schema unavailable" } ] } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantRevokeRequest" } } }, "x-walkpic-max-body-bytes": 4096, "x-walkpic-standard-json-media-type": true } } }, "/v1/integrations/grants/revoke-all": { "post": { "operationId": "identityRevokeAllIntegrationGrants", "tags": [ "integrations" ], "summary": "identityRevokeAllIntegrationGrants", "security": [ { "BearerAuth": [] } ], "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(/^\\/v1\\/integrations", "line": 307, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "Exact current human bearer; derived integration sessions are excluded.", "revalidation": "Current actor/grant authorization after slow work and serialized response preparation. Existing domain access rules remain authoritative." }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [], "responses": { "200": { "description": "Implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantsRevoked" } } } }, "400": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "401": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "409": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "413": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "415": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "500": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "503": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_NOT_CONFIGURED", "INTEGRATIONS_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_NOT_CONFIGURED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" }, { "code": "INTEGRATIONS_UNAVAILABLE", "when": "Known integration schema unavailable" } ] } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantRevokeAllRequest" } } }, "x-walkpic-max-body-bytes": 4096, "x-walkpic-standard-json-media-type": true } } }, "/v1/integrations/refresh": { "post": { "operationId": "integrationRefreshPersonalGrant", "tags": [ "integrations" ], "summary": "integrationRefreshPersonalGrant", "security": [ { "IntegrationRefresh": [] } ], "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(/^\\/v1\\/integrations", "line": 307, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "Exact refresh bearer bound atomically to clientId and grantId; no access/human credential fallback.", "revalidation": "Current actor/grant authorization after slow work and serialized response preparation. Existing domain access rules remain authoritative." }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "parameters": [], "responses": { "200": { "description": "Implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantRotated" } } } }, "400": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "401": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "409": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "IDEMPOTENCY_CONFLICT", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "413": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "LIMIT_EXCEEDED", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "415": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "429": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } }, "Retry-After": { "required": true, "schema": { "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INTEGRATION_REFRESH_TOO_EARLY" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTEGRATION_REFRESH_TOO_EARLY" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INTEGRATION_REFRESH_TOO_EARLY", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "500": { "description": "Static error; credential and provider details are never returned", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "Explicit management authority, validation, conflict, quota or transport boundary" } ] }, "503": { "description": "Integration schema unavailable", "headers": { "Cache-Control": { "required": true, "schema": { "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "enum": [ "INTEGRATIONS_UNAVAILABLE" ] }, "message": { "type": "string" } } } } }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTEGRATIONS_UNAVAILABLE" ] } } } } } ] } } }, "x-walkpic-errors": [ { "code": "INTEGRATIONS_UNAVAILABLE", "when": "Known integration schema unavailable" } ] } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PersonalGrantRefreshRequest" } } }, "x-walkpic-max-body-bytes": 4096, "x-walkpic-standard-json-media-type": true } } }, "/v2/publications/{publicationId}": { "get": { "operationId": "integrationReadPublication", "tags": [ "integrations" ], "summary": "Integration ReadPublication", "x-walkpic-source": [ { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" }, { "file": "service/src/app.ts", "selector": "await runIntegrationRequest", "line": 791, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "IntegrationBearer is mandatory. Full human BearerAuth, omitted credentials, invalid grants and independent link/writer capabilities cannot substitute for it.", "scopes": [ "publications:read" ], "revalidation": "Current grant/token/client/account/session and exact scopes before each SQL snapshot and after preparation/serialization, before response. Existing current resource ACL remains required.", "source": { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" } }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicationDetail" } } } }, "400": { "description": "Invalid versioned integration path or query metadata.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: missing/restricted/cancelled/deleted owner/blocked/unauthorized/current session unavailable", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "missing/restricted/cancelled/deleted owner/blocked/unauthorized/current session unavailable" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "'/v1/publications/$id/access'", "line": 237, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" }, { "file": "app/lib/web/viewer_api.dart", "selector": "Future publication", "line": 55, "sourceSha256": "caaf10ed201ac6bef7a347f13b4c1c1be8075e238800b507d8c486272576a668" } ], "security": [ { "IntegrationBearer": [] } ], "x-walkpic-query-behavior": { "allowed": [], "unknown": "reject", "duplicates": "reject", "capabilities": "Query token and X-PhotoTracker-Link are forbidden; a current integration grant is the sole credential." }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "description": "Versioned, grant-authorized read using the same current domain visibility and response shape as contentReadPublication. " } }, "/v2/publications/{publicationId}/access": { "get": { "operationId": "integrationReadPublicationAccess", "tags": [ "integrations" ], "summary": "Integration ReadPublicationAccess", "x-walkpic-source": [ { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" }, { "file": "service/src/app.ts", "selector": "await runIntegrationRequest", "line": 791, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "IntegrationBearer is mandatory. Full human BearerAuth, omitted credentials, invalid grants and independent link/writer capabilities cannot substitute for it.", "scopes": [ "publications:read" ], "revalidation": "Current grant/token/client/account/session and exact scopes before each SQL snapshot and after preparation/serialization, before response. Existing current resource ACL remains required.", "source": { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" } }, "parameters": [ { "name": "publicationId", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "{\"routeMatcher\": \"[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)\", \"note\": \"GET/SQL functions do not all revalidate strict UUID; requirePost/getPublication and saved-set do. Unknown IDs return404 except unlike withdrawal204.\"}" } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPublicationAccess" } } } }, "400": { "description": "Invalid versioned integration path or query metadata.", "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "const": "no-store" } } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "404": { "description": "NOT_FOUND: missing/restricted/cancelled/deleted owner/blocked/unauthorized/current session unavailable", "x-walkpic-errors": [ { "code": "NOT_FOUND", "when": "missing/restricted/cancelled/deleted owner/blocked/unauthorized/current session unavailable" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/api.dart", "selector": "'/v1/publications/$id/access'", "line": 237, "sourceSha256": "151d057b1c10a8c0c28fdd70254d313ba9d439ef83abab86a9f9f3134b4fbfe0" } ], "security": [ { "IntegrationBearer": [] } ], "x-walkpic-query-behavior": { "allowed": [], "unknown": "reject", "duplicates": "reject", "capabilities": "Query token and X-PhotoTracker-Link are forbidden; a current integration grant is the sole credential." }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "description": "Versioned, grant-authorized read using the same current domain visibility and response shape as contentReadPublicationAccess. " } }, "/v2/library/publications": { "get": { "operationId": "integrationListOwnedPublications", "tags": [ "integrations" ], "summary": "Integration ListOwnedPublications", "x-walkpic-source": [ { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" }, { "file": "service/src/app.ts", "selector": "await runIntegrationRequest", "line": 791, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "IntegrationBearer is mandatory. Full human BearerAuth, omitted credentials, invalid grants and independent link/writer capabilities cannot substitute for it.", "scopes": [ "library:owned:read" ], "revalidation": "Current grant/token/client/account/session and exact scopes before each SQL snapshot and after preparation/serialization, before response. Existing current resource ACL remains required.", "source": { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" } }, "parameters": [ { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "default": "50", "pattern": "^[1-9][0-9]*$", "x-walkpic-field-rules": { "numericRange": [ 1, 100 ] } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "x-walkpic-field-rules": { "opaque": true } }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentOwnedPage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query field or invalid limit/filter; INVALID_CURSOR: signature/scope/shape invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query field or invalid limit/filter" }, { "code": "INVALID_CURSOR", "when": "signature/scope/shape invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "410": { "description": "CURSOR_EXPIRED: older than15min or >60s in future", "x-walkpic-errors": [ { "code": "CURSOR_EXPIRED", "when": "older than15min or >60s in future" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/owned_library.dart", "selector": "'/v1/library/publications?$query'", "line": 331, "sourceSha256": "55965641e29c56212030819e2b48c1a5668ce306236e7797b914de8000051d01" } ], "security": [ { "IntegrationBearer": [] } ], "x-walkpic-query-behavior": { "allowed": [ "limit", "cursor" ], "unknown": "reject", "duplicates": "reject", "limit": { "type": "string", "default": "50", "pattern": "^[1-9][0-9]*$", "numericRange": [ 1, 100 ] }, "cursor": { "type": "string", "maxLength": 2000, "opaque": true } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" }, "description": "Versioned, grant-authorized read using the same current domain visibility and response shape as contentListOwnedPublications. " } }, "/v2/library/received": { "get": { "operationId": "integrationListReceivedPublications", "tags": [ "integrations" ], "summary": "Integration ListReceivedPublications", "x-walkpic-source": [ { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" }, { "file": "service/src/app.ts", "selector": "await runIntegrationRequest", "line": 791, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "IntegrationBearer is mandatory. Full human BearerAuth, omitted credentials, invalid grants and independent link/writer capabilities cannot substitute for it.", "scopes": [ "library:received:read" ], "revalidation": "Current grant/token/client/account/session and exact scopes before each SQL snapshot and after preparation/serialization, before response. Existing current resource ACL remains required.", "source": { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" } }, "parameters": [ { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "default": "50", "pattern": "^[1-9][0-9]*$", "x-walkpic-field-rules": { "numericRange": [ 1, 100 ] } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "x-walkpic-field-rules": { "opaque": true } }, "style": "form", "explode": true }, { "name": "authors", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-normalization": "drop empty segments, lexical sort; duplicates reject; not strict UUID", "x-walkpic-field-rules": { "csvMaxCount": 20, "itemPattern": "^[-A-Za-z0-9_]{1,64}$" } }, "style": "form", "explode": true }, { "name": "saved", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "true", "false" ], "default": "false" }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentReceivedPage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query field or invalid limit/filter; INVALID_CURSOR: signature/scope/shape invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query field or invalid limit/filter" }, { "code": "INVALID_CURSOR", "when": "signature/scope/shape invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "410": { "description": "CURSOR_EXPIRED: older than15min or >60s in future", "x-walkpic-errors": [ { "code": "CURSOR_EXPIRED", "when": "older than15min or >60s in future" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/received_library.dart", "selector": "'/v1/library/received?$query'", "line": 263, "sourceSha256": "29c692187abd372ed32242d4dcdeb85272cd1d8af0fd03fb025632e5bd6d0b43" } ], "security": [ { "IntegrationBearer": [] } ], "x-walkpic-query-behavior": { "allowed": [ "limit", "cursor", "authors", "saved" ], "unknown": "reject", "duplicates": "reject", "limit": { "type": "string", "default": "50", "pattern": "^[1-9][0-9]*$", "numericRange": [ 1, 100 ] }, "cursor": { "type": "string", "maxLength": 2000, "opaque": true }, "authors": { "type": "string", "csvMaxCount": 20, "itemPattern": "^[-A-Za-z0-9_]{1,64}$", "normalization": "drop empty segments, lexical sort; duplicates reject; not strict UUID" }, "saved": { "type": "string", "enum": [ "true", "false" ], "default": "false" } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" }, "description": "Versioned, grant-authorized read using the same current domain visibility and response shape as contentListReceivedPublications. " } }, "/v2/library/people": { "get": { "operationId": "integrationListReceivedAuthors", "tags": [ "integrations" ], "summary": "Integration ListReceivedAuthors", "x-walkpic-source": [ { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" }, { "file": "service/src/app.ts", "selector": "await runIntegrationRequest", "line": 791, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "IntegrationBearer is mandatory. Full human BearerAuth, omitted credentials, invalid grants and independent link/writer capabilities cannot substitute for it.", "scopes": [ "library:received:read" ], "revalidation": "Current grant/token/client/account/session and exact scopes before each SQL snapshot and after preparation/serialization, before response. Existing current resource ACL remains required.", "source": { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" } }, "parameters": [ { "name": "query", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 100, "default": "", "x-walkpic-normalization": "no trim; SQL case-insensitive substring" }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPeoplePage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query or query length>100", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query or query length>100" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/received_library.dart", "selector": "'/v1/library/people?", "line": 327, "sourceSha256": "29c692187abd372ed32242d4dcdeb85272cd1d8af0fd03fb025632e5bd6d0b43" } ], "security": [ { "IntegrationBearer": [] } ], "x-walkpic-query-behavior": { "allowed": [ "query" ], "unknown": "reject", "duplicates": "reject", "query": { "type": "string", "default": "", "maxLength": 100, "normalization": "no trim; SQL case-insensitive substring" } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" }, "description": "Versioned, grant-authorized read using the same current domain visibility and response shape as contentListReceivedAuthors. " } }, "/v2/saved": { "get": { "operationId": "integrationListSavedPublications", "tags": [ "integrations" ], "summary": "Integration ListSavedPublications", "x-walkpic-source": [ { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" }, { "file": "service/src/app.ts", "selector": "await runIntegrationRequest", "line": 791, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "IntegrationBearer is mandatory. Full human BearerAuth, omitted credentials, invalid grants and independent link/writer capabilities cannot substitute for it.", "scopes": [ "saved:read" ], "revalidation": "Current grant/token/client/account/session and exact scopes before each SQL snapshot and after preparation/serialization, before response. Existing current resource ACL remains required.", "source": { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" } }, "parameters": [ { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "default": "20", "pattern": "^\\d+$", "x-walkpic-field-rules": { "numericRange": [ 1, 50 ], "legacy": "leading zeros accepted" } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 2000, "x-walkpic-field-rules": { "opaque": true } }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentSavedPage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query field or invalid limit/filter; INVALID_CURSOR: signature/scope/shape invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query field or invalid limit/filter" }, { "code": "INVALID_CURSOR", "when": "signature/scope/shape invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "410": { "description": "CURSOR_EXPIRED: older than15min or >60s in future", "x-walkpic-errors": [ { "code": "CURSOR_EXPIRED", "when": "older than15min or >60s in future" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/services/saved_walks_controller.dart", "selector": "path: '/v1/saved'", "line": 83, "sourceSha256": "feaa5cda545792c1bdfc2c1271ab89040a1929b2c9b2d5edc7f8f8e3374881b1" } ], "security": [ { "IntegrationBearer": [] } ], "x-walkpic-query-behavior": { "allowed": [ "limit", "cursor" ], "unknown": "reject", "duplicates": "reject", "limit": { "type": "string", "default": "20", "pattern": "^\\d+$", "numericRange": [ 1, 50 ], "legacy": "leading zeros accepted" }, "cursor": { "type": "string", "maxLength": 2000, "opaque": true } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" }, "description": "Versioned, grant-authorized read using the same current domain visibility and response shape as contentListSavedPublications. " } }, "/v2/explore": { "get": { "operationId": "integrationExplorePublications", "tags": [ "integrations" ], "summary": "Integration ExplorePublications", "x-walkpic-source": [ { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" }, { "file": "service/src/app.ts", "selector": "await runIntegrationRequest", "line": 791, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "IntegrationBearer is mandatory. Full human BearerAuth, omitted credentials, invalid grants and independent link/writer capabilities cannot substitute for it.", "scopes": [ "explore:read" ], "revalidation": "Current grant/token/client/account/session and exact scopes before each SQL snapshot and after preparation/serialization, before response. Existing current resource ACL remains required.", "source": { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" } }, "parameters": [ { "name": "sort", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "newest", "mostLiked", "week", "distance", "distanceDesc", "duration" ], "default": "newest" }, "style": "form", "explode": true }, { "name": "limit", "in": "query", "required": false, "schema": { "type": "string", "default": "20", "pattern": "^\\d+(?:\\.\\d+)?$", "x-walkpic-field-rules": { "mustBeNumericInteger": true, "numericRange": [ 1, 50 ], "legacy": "20.0 accepted" } }, "style": "form", "explode": true }, { "name": "bbox", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-normalization": "-0 ->0", "x-walkpic-field-rules": { "format": "west,south,east,north", "numericSyntax": "^-?(?:\\d+(?:\\d*)?|\\.\\d+)$", "ranges": "west/east[-180,180], south>=-90, north<=90, south<=north; west>east dateline allowed" } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "maxLength": 3000, "x-walkpic-field-rules": { "opaque": true } }, "style": "form", "explode": true }, { "name": "maxDistanceMeters", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^\\d+(?:\\.\\d+)?$", "x-walkpic-field-rules": { "numericRange": [ 0, 1000000000 ] } }, "style": "form", "explode": true }, { "name": "maxDurationSeconds", "in": "query", "required": false, "schema": { "type": "string", "pattern": "^\\d+(?:\\.\\d+)?$", "x-walkpic-field-rules": { "mustBeNumericInteger": true, "numericRange": [ 0, 31536000 ] } }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentExplorePage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate query field or invalid limit/filter; INVALID_CURSOR: signature/scope/shape invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate query field or invalid limit/filter" }, { "code": "INVALID_CURSOR", "when": "signature/scope/shape invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_CURSOR" ] }, "401": { "description": "AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "410": { "description": "CURSOR_EXPIRED: older than15min or >60s in future", "x-walkpic-errors": [ { "code": "CURSOR_EXPIRED", "when": "older than15min or >60s in future" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/explore.dart", "selector": "Uri(path: '/v1/explore'", "line": 143, "sourceSha256": "7b2e08c334bf3eb315fee405ab68887ae7283d4563e176a3175a09ade92d13e3" } ], "security": [ { "IntegrationBearer": [] } ], "x-walkpic-query-behavior": { "allowed": [ "bbox", "sort", "limit", "cursor", "maxDistanceMeters", "maxDurationSeconds" ], "unknown": "reject", "duplicates": "reject", "sort": { "type": "string", "enum": [ "newest", "mostLiked", "week", "distance", "distanceDesc", "duration" ], "default": "newest" }, "limit": { "type": "string", "default": "20", "pattern": "^\\d+(?:\\.\\d+)?$", "mustBeNumericInteger": true, "numericRange": [ 1, 50 ], "legacy": "20.0 accepted" }, "bbox": { "type": "string", "format": "west,south,east,north", "numericSyntax": "^-?(?:\\d+(?:\\d*)?|\\.\\d+)$", "ranges": "west/east[-180,180], south>=-90, north<=90, south<=north; west>east dateline allowed", "normalization": "-0 ->0" }, "cursor": { "type": "string", "maxLength": 3000, "opaque": true }, "maxDistanceMeters": { "type": "string", "pattern": "^\\d+(?:\\.\\d+)?$", "numericRange": [ 0, 1000000000 ] }, "maxDurationSeconds": { "type": "string", "pattern": "^\\d+(?:\\.\\d+)?$", "mustBeNumericInteger": true, "numericRange": [ 0, 31536000 ] } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" }, "description": "Versioned, grant-authorized read using the same current domain visibility and response shape as contentExplorePublications. " } }, "/v2/places": { "get": { "operationId": "integrationListRatedPlaceVisits", "tags": [ "integrations" ], "summary": "Integration ListRatedPlaceVisits", "x-walkpic-source": [ { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" }, { "file": "service/src/app.ts", "selector": "await runIntegrationRequest", "line": 791, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-authorization": { "authentication": "IntegrationBearer is mandatory. Full human BearerAuth, omitted credentials, invalid grants and independent link/writer capabilities cannot substitute for it.", "scopes": [ "places:read" ], "revalidation": "Current grant/token/client/account/session and exact scopes before each SQL snapshot and after preparation/serialization, before response. Existing current resource ACL remains required.", "source": { "file": "service/src/integration_request.ts", "selector": "integrationRequestContext", "line": 14, "sha256": "0f2ba2ab4843ab47fb6a3751339bdd9598824baf6666a75b25ea897563f5165a" } }, "parameters": [ { "name": "scope", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "visible", "mine" ], "default": "visible" }, "style": "form", "explode": true }, { "name": "ownerId", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-pattern-rule": "[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)", "x-walkpic-field-rules": { "nullableInAbsence": true, "legacy": "empty owner accepted by regex guard but filters to no matching owner" } }, "style": "form", "explode": true }, { "name": "cursor", "in": "query", "required": false, "schema": { "type": "string", "x-walkpic-pattern-rule": "(?:[vw]:)?[0-9a-f-]{36}, case insensitive", "x-walkpic-field-rules": { "legacy": "bare ID upgraded to w:; empty cursor bypasses format guard but filters by empty string" } }, "style": "form", "explode": true }, { "name": "standalone", "in": "query", "required": false, "schema": { "type": "string", "enum": [ "1" ] }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful implemented response", "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "private, no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ContentPlacesPage" } } } }, "400": { "description": "INVALID_REQUEST: unknown/duplicate scope/cursor/owner/standalone invalid", "x-walkpic-errors": [ { "code": "INVALID_REQUEST", "when": "unknown/duplicate scope/cursor/owner/standalone invalid" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INVALID_REQUEST" ] }, "401": { "description": "AUTH_REQUIRED: mine without actor; AUTH_REQUIRED: required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook", "x-walkpic-errors": [ { "code": "AUTH_REQUIRED", "when": "mine without actor" }, { "code": "AUTH_REQUIRED", "when": "required bearer absent, or optional/required supplied bearer malformed/expired/revoked; production authenticate hook" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "AUTH_REQUIRED" ] }, "500": { "description": "INTERNAL_ERROR: unmapped internal failure; generic public message", "x-walkpic-errors": [ { "code": "INTERNAL_ERROR", "when": "unmapped internal failure; generic public message" } ], "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } }, "headers": { "Cache-Control": { "required": true, "schema": { "type": "string", "enum": [ "no-store" ] }, "description": "Always set by common headers, then exact dispatch success/error override as source specifies." } }, "x-walkpic-error-codes": [ "INTERNAL_ERROR" ] } }, "x-walkpic-callers": [ { "file": "app/lib/ui/rated_places.dart", "selector": "'/v1/places?scope=", "line": 161, "sourceSha256": "48264ace73bbf6e4ce60edd2003e25f54b44935d22b8f01d59ec95cc93fd8b1c" } ], "security": [ { "IntegrationBearer": [] } ], "x-walkpic-query-behavior": { "allowed": [ "cursor", "scope", "ownerId", "standalone" ], "unknown": "reject", "duplicates": "reject", "scope": { "type": "string", "enum": [ "visible", "mine" ], "default": "visible" }, "ownerId": { "type": "string", "pattern": "[0-9a-f-]{36} (case insensitive; route matcher alone is not strict UUID structure)", "nullableInAbsence": true, "legacy": "empty owner accepted by regex guard but filters to no matching owner" }, "cursor": { "type": "string", "pattern": "(?:[vw]:)?[0-9a-f-]{36}, case insensitive", "legacy": "bare ID upgraded to w:; empty cursor bypasses format guard but filters by empty string" }, "standalone": { "type": "string", "enum": [ "1" ], "optional": true } }, "x-walkpic-proxy-notes": [ "Does not allow prepare/upload/commit/cancel routes; cannot publish raw native JPEG through this broker.", "Does not allow owned audience endpoint, /v1/discover, /v1/place-visits writes or /v1/reports/{id}; broad generic client call to these returns broker404.", "Allows reports root, story/AI, libraries, media/access; method live mutation405 independent walking audit." ], "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true, "scalarSelection": "first" }, "description": "Versioned, grant-authorized read using the same current domain visibility and response shape as contentListRatedPlaceVisits. " } }, "/v1/planning/sources/features.json": { "get": { "operationId": "planningGetFeatureSourceAlias", "summary": "GetFeatureSourceAlias", "tags": [ "Planning" ], "security": [], "parameters": [], "responses": { "307": { "description": "Empty redirect to current immutable content-addressed catalog", "headers": { "Location": { "description": "Current /v1/planning/sources/{sha256}.json", "schema": { "type": "string" }, "required": true }, "Cache-Control": { "description": "Alias never immutable", "schema": { "type": "string", "const": "no-store" }, "required": true } } }, "404": { "description": "Empty body for any query or unsupported/current-hash mismatch path", "headers": { "Cache-Control": { "description": "Unsupported source request", "schema": { "type": "string", "const": "no-store" }, "required": true } } } }, "x-walkpic-authorization": "Public immutable derivative source; no account/private content.", "x-walkpic-source": { "file": "service/src/walking_feature_source.ts", "selector": "const alias", "sha256": "a7d4f5e8249405528fb52987d9b941db862b190b1bce86898fc7c51d37a34c2d" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "any query returns empty404; even otherwise supported resource", "source": { "file": "service/src/walking_feature_source.ts", "line": 16, "selector": "if (!['GET', 'HEAD']", "sha256": "a7d4f5e8249405528fb52987d9b941db862b190b1bce86898fc7c51d37a34c2d", "excerpt": " if (!['GET', 'HEAD'].includes(req.method ?? '') || url.search || ![alias, walkingFeatureSourcePath].includes(url.pathname)) {\n res.writeHead(404, {'Cache-Control': 'no-store'}); res.end(); return true;\n }\n if (url.pathname === alias) {" } }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } }, "head": { "operationId": "planningHeadFeatureSourceAlias", "summary": "HeadFeatureSourceAlias", "tags": [ "Planning" ], "security": [], "parameters": [], "responses": { "307": { "description": "Empty redirect to current immutable content-addressed catalog", "headers": { "Location": { "description": "Current /v1/planning/sources/{sha256}.json", "schema": { "type": "string" }, "required": true }, "Cache-Control": { "description": "Alias never immutable", "schema": { "type": "string", "const": "no-store" }, "required": true } } }, "404": { "description": "Empty body for any query or unsupported/current-hash mismatch path", "headers": { "Cache-Control": { "description": "Unsupported source request", "schema": { "type": "string", "const": "no-store" }, "required": true } } } }, "x-walkpic-authorization": "Public immutable derivative source; no account/private content.", "x-walkpic-source": { "file": "service/src/walking_feature_source.ts", "selector": "const alias", "sha256": "a7d4f5e8249405528fb52987d9b941db862b190b1bce86898fc7c51d37a34c2d" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "any query returns empty404; even otherwise supported resource", "source": { "file": "service/src/walking_feature_source.ts", "line": 16, "selector": "if (!['GET', 'HEAD']", "sha256": "a7d4f5e8249405528fb52987d9b941db862b190b1bce86898fc7c51d37a34c2d", "excerpt": " if (!['GET', 'HEAD'].includes(req.method ?? '') || url.search || ![alias, walkingFeatureSourcePath].includes(url.pathname)) {\n res.writeHead(404, {'Cache-Control': 'no-store'}); res.end(); return true;\n }\n if (url.pathname === alias) {" } }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/planning/sources/{sha256}.json": { "get": { "operationId": "planningGetFeatureSource", "summary": "GetFeatureSource", "tags": [ "Planning" ], "security": [], "parameters": [ { "name": "sha256", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "type": "string", "enum": [ "017cf43d78d7ababeba3b634600202c71d63f5491181f502d9ec678a3de7580c" ], "pattern": "^[a-f0-9]{64}$", "description": "Currently bundled immutable catalog SHA256; every other source identifier returns empty404" } }, { "name": "If-None-Match", "in": "header", "required": false, "description": "Only exact quoted content SHA ETag returns304.", "schema": { "type": "string" } } ], "responses": { "200": { "description": "Exact immutable public derivative catalog", "headers": { "ETag": { "description": "Quoted exact JSON bytes SHA", "schema": { "type": "string", "pattern": "^\"[a-f0-9]{64}\"$" }, "required": true }, "Cache-Control": { "description": "Immutable catalog", "schema": { "type": "string", "const": "public, max-age=31536000, immutable" }, "required": true }, "Content-Disposition": { "description": "Source download filename", "schema": { "type": "string", "const": "attachment; filename=\"walkpic-paris-osm-features.json\"" }, "required": true }, "Content-Location": { "description": "Exact content-addressed resource", "schema": { "type": "string" }, "required": true }, "Link": { "description": "ODbL license link", "schema": { "type": "string" }, "required": true }, "Content-Length": { "description": "UTF8 JSON.stringify(catalog)+newline byte count", "schema": { "type": "string", "pattern": "^\\d+$" }, "required": true } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningFeatureCatalog" } } } }, "304": { "description": "Empty body; exact If-None-Match match", "headers": { "ETag": { "description": "Quoted exact JSON bytes SHA", "schema": { "type": "string", "pattern": "^\"[a-f0-9]{64}\"$" }, "required": true }, "Cache-Control": { "description": "Immutable catalog", "schema": { "type": "string", "const": "public, max-age=31536000, immutable" }, "required": true }, "Content-Disposition": { "description": "Source download filename", "schema": { "type": "string", "const": "attachment; filename=\"walkpic-paris-osm-features.json\"" }, "required": true }, "Content-Location": { "description": "Exact content-addressed resource", "schema": { "type": "string" }, "required": true }, "Link": { "description": "ODbL license link", "schema": { "type": "string" }, "required": true } } }, "404": { "description": "Empty body for any query or unsupported/current-hash mismatch path", "headers": { "Cache-Control": { "description": "Unsupported source request", "schema": { "type": "string", "const": "no-store" }, "required": true } } } }, "x-walkpic-authorization": "Public immutable derivative source; no account/private content.", "x-walkpic-source": { "file": "service/src/walking_feature_source.ts", "selector": "export const walkingFeatureSourcePath", "sha256": "a7d4f5e8249405528fb52987d9b941db862b190b1bce86898fc7c51d37a34c2d" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "any query returns empty404; even otherwise supported resource", "source": { "file": "service/src/walking_feature_source.ts", "line": 16, "selector": "if (!['GET', 'HEAD']", "sha256": "a7d4f5e8249405528fb52987d9b941db862b190b1bce86898fc7c51d37a34c2d", "excerpt": " if (!['GET', 'HEAD'].includes(req.method ?? '') || url.search || ![alias, walkingFeatureSourcePath].includes(url.pathname)) {\n res.writeHead(404, {'Cache-Control': 'no-store'}); res.end(); return true;\n }\n if (url.pathname === alias) {" } }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } }, "head": { "operationId": "planningHeadFeatureSource", "summary": "HeadFeatureSource", "tags": [ "Planning" ], "security": [], "parameters": [ { "name": "sha256", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "type": "string", "enum": [ "017cf43d78d7ababeba3b634600202c71d63f5491181f502d9ec678a3de7580c" ], "pattern": "^[a-f0-9]{64}$", "description": "Currently bundled immutable catalog SHA256; every other source identifier returns empty404" } }, { "name": "If-None-Match", "in": "header", "required": false, "description": "Only exact quoted content SHA ETag returns304.", "schema": { "type": "string" } } ], "responses": { "200": { "description": "Exact immutable public derivative catalog; HEAD has no body", "headers": { "ETag": { "description": "Quoted exact JSON bytes SHA", "schema": { "type": "string", "pattern": "^\"[a-f0-9]{64}\"$" }, "required": true }, "Cache-Control": { "description": "Immutable catalog", "schema": { "type": "string", "const": "public, max-age=31536000, immutable" }, "required": true }, "Content-Disposition": { "description": "Source download filename", "schema": { "type": "string", "const": "attachment; filename=\"walkpic-paris-osm-features.json\"" }, "required": true }, "Content-Location": { "description": "Exact content-addressed resource", "schema": { "type": "string" }, "required": true }, "Link": { "description": "ODbL license link", "schema": { "type": "string" }, "required": true }, "Content-Length": { "description": "UTF8 JSON.stringify(catalog)+newline byte count", "schema": { "type": "string", "pattern": "^\\d+$" }, "required": true } } }, "304": { "description": "Empty body; exact If-None-Match match", "headers": { "ETag": { "description": "Quoted exact JSON bytes SHA", "schema": { "type": "string", "pattern": "^\"[a-f0-9]{64}\"$" }, "required": true }, "Cache-Control": { "description": "Immutable catalog", "schema": { "type": "string", "const": "public, max-age=31536000, immutable" }, "required": true }, "Content-Disposition": { "description": "Source download filename", "schema": { "type": "string", "const": "attachment; filename=\"walkpic-paris-osm-features.json\"" }, "required": true }, "Content-Location": { "description": "Exact content-addressed resource", "schema": { "type": "string" }, "required": true }, "Link": { "description": "ODbL license link", "schema": { "type": "string" }, "required": true } } }, "404": { "description": "Empty body for any query or unsupported/current-hash mismatch path", "headers": { "Cache-Control": { "description": "Unsupported source request", "schema": { "type": "string", "const": "no-store" }, "required": true } } } }, "x-walkpic-authorization": "Public immutable derivative source; no account/private content.", "x-walkpic-source": { "file": "service/src/walking_feature_source.ts", "selector": "export const walkingFeatureSourcePath", "sha256": "a7d4f5e8249405528fb52987d9b941db862b190b1bce86898fc7c51d37a34c2d" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "any query returns empty404; even otherwise supported resource", "source": { "file": "service/src/walking_feature_source.ts", "line": 16, "selector": "if (!['GET', 'HEAD']", "sha256": "a7d4f5e8249405528fb52987d9b941db862b190b1bce86898fc7c51d37a34c2d", "excerpt": " if (!['GET', 'HEAD'].includes(req.method ?? '') || url.search || ![alias, walkingFeatureSourcePath].includes(url.pathname)) {\n res.writeHead(404, {'Cache-Control': 'no-store'}); res.end(); return true;\n }\n if (url.pathname === alias) {" } }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/events": { "get": { "operationId": "planningOpenChangeEvents", "summary": "OpenChangeEvents", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "liveId", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUUID" }, "minItems": 0, "x-walkpic-distinct-values-maximum": 16, "x-walkpic-normalization": "deduplicate case-sensitive strings before enforcing limit; repeated subscriptions accepted" }, "style": "form", "explode": true } ], "responses": { "200": { "description": "Successful EventStream", "content": { "text/event-stream": { "schema": { "$ref": "#/components/schemas/PlanningEventStream" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Connection": { "description": "SSE", "schema": { "type": "string", "const": "keep-alive" }, "required": true }, "X-Accel-Buffering": { "description": "Disable proxy buffering", "schema": { "type": "string", "const": "no" }, "required": true } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } }, "503": { "description": "Empty body; maximum stream clients reached", "headers": { "Retry-After": { "description": "Retry delay seconds", "schema": { "type": "string", "const": "30" }, "required": true }, "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } } } }, "x-walkpic-authorization": "Authenticated current account/session required; stream contains invalidations only.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "path==='/v1/events'", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": [ "liveId" ], "unknown": "other query keys ignored", "duplicates": "liveId repeats accepted then unique set", "fields": { "liveId": { "type": "array query values", "items": "case-insensitive UUID", "maxUniqueItems": 16 } }, "source": { "file": "service/src/change_events.ts", "line": 100, "selector": "const liveIds=", "sha256": "ea15ef21728066cd7b46422948a71a49f0e842401a833961ddc7605887122a95", "excerpt": " const liveIds=[...new Set(new URL(req.url??'/v1/events','http://localhost').searchParams.getAll('liveId'))];\n if(liveIds.length>16||liveIds.some(id=>!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(id)))fail(400,'INVALID_INPUT','Choose valid live subscriptions');\n if(clients.size>=maxClients){res.writeHead(503,{'Retry-After':'30'});res.end();return;}\n res.writeHead(200,{'Content-Type':'text/event-stream','Cache-Control':'private, no-store','Connection':'keep-alive','X-Accel-Buffering':'no'});" } }, "x-walkpic-error-mapping": { "beforeHeaders": [ "AUTH_REQUIRED from auth (identity shared contract)", "INVALID_INPUT400 subscription UUID/count" ], "capacity": { "status": 503, "Retry-After": "30", "body": "empty" }, "afterHeaders": "authorization expiration ends stream; adapter/SQL failure destroys stream rather than JSON error" }, "x-walkpic-transport": "SSE; initial changed, heartbeat authorized; no private event data; authorization loss closes and post-header failures destroy connection.", "x-walkpic-invalidation-classifier": { "source": "service/src/app.ts::http.createServer finish callback (ordered branches)", "precedence": [ "planned mutations schedule ACL revision reconciliation", "live mutations schedule recipient-scoped live snapshot reconciliation", "end/block/unfollow/remove/restrict/cancel/logout/link suffix or DELETE -> access-changed", "remaining discussion mutations -> content-changed", "conversation/message-request/message-report -> chat-changed", "notifications -> social-changed", "remaining successful mutations -> changed" ], "notableCases": [ "discussion/remove emits access-changed before discussion branch", "publication link rotate/revoke falls through changed", "story/saves/likes/reports fall through changed" ], "eventData": {} }, "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT" ], "401": [ "AUTH_REQUIRED" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/live-walks": { "post": { "operationId": "planningStartLiveWalk", "summary": "StartLiveWalk", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [], "responses": { "200": { "description": "Successful LiveStartReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLiveStartReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "413": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "current active actor and liveReadableSql; owner/live-only write checks expires 14400 seconds after start; deletion/logout/block/follow changes revoke access", "x-walkpic-source": { "file": "service/src/live_walks.ts", "selector": "path==='/v1/live-walks'&&method==='POST'", "sha256": "f76ca5651013552a0cb9e25d8ece4e6fdf3573e4b8d1601143caa547a8ee6bfc" }, "x-walkpic-query-policy": { "allowed": "all", "unknown": "ignored on live detail/points/end/start and live-photoGET; handler does not inspect params for these actions" }, "x-walkpic-error-mapping": { "specific": { "INVALID_INPUT": 400, "AUTH_REQUIRED": 401, "NOT_FOUND": 404, "REVISION_REVOKED": 410, "VERSION_CHANGED": 409, "IDEMPOTENCY_CONFLICT": 409, "LIMIT_EXCEEDED SQL trigger": 429, "LIMIT_EXCEEDED read/normalized photo cap": 413, "IMAGE_PROCESSING_BUSY": 503, "IMAGE_PROCESSING_UNAVAILABLE": 503, "IMAGE_CONTENT_NOT_ALLOWED": 422, "ASSET_UNAVAILABLE live photo hash proof": 503, "INTERNAL_ERROR": 500 }, "Retry-After": "no automatic60 for live path", "notes": [ "live photo read/media SDK unknown failures may generic500; explicit returned bytes/hash mismatch503", "missing JPEG Content-Type not explicitly rejected415; native sends image/jpeg", "writer auth unknown array/header invalid401 and expired/current mismatch410" ] }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLiveStartRequest" } } }, "x-walkpic-max-body-bytes": 50000, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-transport": "JSON live receipts/reads; photo PUT bounded raw image, dataSaver JPEG normalization and current screening proof; photo GET base64 JSON with repeated hash/ACL checks.", "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT", "INVALID_REQUEST" ], "401": [ "AUTH_REQUIRED" ], "409": [ "IDEMPOTENCY_CONFLICT" ], "413": [ "LIMIT_EXCEEDED" ], "415": [ "INVALID_REQUEST" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } }, "get": { "operationId": "planningListLiveWalks", "summary": "ListLiveWalks", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "ownerId", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string" } } ], "responses": { "200": { "description": "Successful LivePage", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLivePage" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "current active actor and liveReadableSql; owner/live-only write checks expires 14400 seconds after start; deletion/logout/block/follow changes revoke access", "x-walkpic-source": { "file": "service/src/live_walks.ts", "selector": "path==='/v1/live-walks'&&method==='GET'", "sha256": "f76ca5651013552a0cb9e25d8ece4e6fdf3573e4b8d1601143caa547a8ee6bfc" }, "x-walkpic-query-policy": { "allowed": [ "ownerId" ], "duplicates": "not rejected; URLSearchParams.get consumes first", "fields": { "ownerId": { "type": "raw string", "no UUID validation": true } }, "source": { "file": "service/src/live_walks.ts", "line": 130, "selector": "if(path==='/v1/live-walks'&&method==='GET')", "sha256": "f76ca5651013552a0cb9e25d8ece4e6fdf3573e4b8d1601143caa547a8ee6bfc", "excerpt": " if(path==='/v1/live-walks'&&method==='GET'){\n if([...params.keys()].some(k=>k!=='ownerId'))fail(400,'INVALID_INPUT','Use a valid live walk filter');\n const {rows}=await db.query(`WITH input(viewer,session_id) AS(VALUES(?,?)) SELECT p.*,owner.display_name,owner.handle FROM pt_live_walks p JOIN pt_users owner ON owner.id=p.owner_id CROSS JOIN input i WHERE ${liveCallerSql} AND ${liveReadableSql} AND p.state='active' AND (? IS NULL OR p.owner_id=?) ORDER BY p.updated_at DESC,p.id LIMIT 50`,[...input(user),params.get('ownerId'),params.get('ownerId')]);\n return {items:rows.map(summary)};\n }" } }, "x-walkpic-error-mapping": { "specific": { "INVALID_INPUT": 400, "AUTH_REQUIRED": 401, "NOT_FOUND": 404, "REVISION_REVOKED": 410, "VERSION_CHANGED": 409, "IDEMPOTENCY_CONFLICT": 409, "LIMIT_EXCEEDED SQL trigger": 429, "LIMIT_EXCEEDED read/normalized photo cap": 413, "IMAGE_PROCESSING_BUSY": 503, "IMAGE_PROCESSING_UNAVAILABLE": 503, "IMAGE_CONTENT_NOT_ALLOWED": 422, "ASSET_UNAVAILABLE live photo hash proof": 503, "INTERNAL_ERROR": 500 }, "Retry-After": "no automatic60 for live path", "notes": [ "live photo read/media SDK unknown failures may generic500; explicit returned bytes/hash mismatch503", "missing JPEG Content-Type not explicitly rejected415; native sends image/jpeg", "writer auth unknown array/header invalid401 and expired/current mismatch410" ] }, "x-walkpic-transport": "JSON live receipts/reads; photo PUT bounded raw image, dataSaver JPEG normalization and current screening proof; photo GET base64 JSON with repeated hash/ACL checks.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT" ], "401": [ "AUTH_REQUIRED" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/live-walks/{liveId}": { "get": { "operationId": "planningGetLiveWalk", "summary": "GetLiveWalk", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "liveId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful LiveDetail", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLiveDetail" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "current active actor and liveReadableSql; owner/live-only write checks expires 14400 seconds after start; deletion/logout/block/follow changes revoke access", "x-walkpic-source": { "file": "service/src/live_walks.ts", "selector": "if(method==='GET'&&!action)", "sha256": "f76ca5651013552a0cb9e25d8ece4e6fdf3573e4b8d1601143caa547a8ee6bfc" }, "x-walkpic-query-policy": { "allowed": "all", "unknown": "ignored on live detail/points/end/start and live-photoGET; handler does not inspect params for these actions" }, "x-walkpic-error-mapping": { "specific": { "INVALID_INPUT": 400, "AUTH_REQUIRED": 401, "NOT_FOUND": 404, "REVISION_REVOKED": 410, "VERSION_CHANGED": 409, "IDEMPOTENCY_CONFLICT": 409, "LIMIT_EXCEEDED SQL trigger": 429, "LIMIT_EXCEEDED read/normalized photo cap": 413, "IMAGE_PROCESSING_BUSY": 503, "IMAGE_PROCESSING_UNAVAILABLE": 503, "IMAGE_CONTENT_NOT_ALLOWED": 422, "ASSET_UNAVAILABLE live photo hash proof": 503, "INTERNAL_ERROR": 500 }, "Retry-After": "no automatic60 for live path", "notes": [ "live photo read/media SDK unknown failures may generic500; explicit returned bytes/hash mismatch503", "missing JPEG Content-Type not explicitly rejected415; native sends image/jpeg", "writer auth unknown array/header invalid401 and expired/current mismatch410" ] }, "x-walkpic-transport": "JSON live receipts/reads; photo PUT bounded raw image, dataSaver JPEG normalization and current screening proof; photo GET base64 JSON with repeated hash/ACL checks.", "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/live-walks/{liveId}/points": { "post": { "operationId": "planningAppendLivePoints", "summary": "AppendLivePoints", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] }, { "LiveWriter": [] } ], "parameters": [ { "name": "liveId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful LivePointsReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLivePointsReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "413": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "current active actor and liveReadableSql; owner/live-only write checks expires 14400 seconds after start; deletion/logout/block/follow changes revoke access presence of nonempty writer header selects capability auth before bearer; malformed writer does not fall back writer header accepted only points,end,photos action path; hash bound to live session,owner,active/unexpired account Nonempty LiveWriter header takes precedence; invalid capability never falls back to bearer. Only exact owner-bound active/unexpired session points/end/photo write paths accept this capability.", "x-walkpic-source": { "file": "service/src/live_walks.ts", "selector": "if(method==='POST'&&action==='points')", "sha256": "f76ca5651013552a0cb9e25d8ece4e6fdf3573e4b8d1601143caa547a8ee6bfc" }, "x-walkpic-query-policy": { "allowed": "all", "unknown": "ignored on live detail/points/end/start and live-photoGET; handler does not inspect params for these actions" }, "x-walkpic-error-mapping": { "specific": { "INVALID_INPUT": 400, "AUTH_REQUIRED": 401, "NOT_FOUND": 404, "REVISION_REVOKED": 410, "VERSION_CHANGED": 409, "IDEMPOTENCY_CONFLICT": 409, "LIMIT_EXCEEDED SQL trigger": 429, "LIMIT_EXCEEDED read/normalized photo cap": 413, "IMAGE_PROCESSING_BUSY": 503, "IMAGE_PROCESSING_UNAVAILABLE": 503, "IMAGE_CONTENT_NOT_ALLOWED": 422, "ASSET_UNAVAILABLE live photo hash proof": 503, "INTERNAL_ERROR": 500 }, "Retry-After": "no automatic60 for live path", "notes": [ "live photo read/media SDK unknown failures may generic500; explicit returned bytes/hash mismatch503", "missing JPEG Content-Type not explicitly rejected415; native sends image/jpeg", "writer auth unknown array/header invalid401 and expired/current mismatch410" ] }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLivePointsRequest" } } }, "x-walkpic-max-body-bytes": 50000, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-transport": "JSON live receipts/reads; photo PUT bounded raw image, dataSaver JPEG normalization and current screening proof; photo GET base64 JSON with repeated hash/ACL checks.", "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT", "INVALID_REQUEST" ], "401": [ "AUTH_REQUIRED" ], "409": [ "IDEMPOTENCY_CONFLICT", "VERSION_CHANGED" ], "410": [ "REVISION_REVOKED" ], "413": [ "LIMIT_EXCEEDED" ], "415": [ "INVALID_REQUEST" ], "429": [ "LIMIT_EXCEEDED" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/live-walks/{liveId}/end": { "post": { "operationId": "planningEndLiveWalk", "summary": "EndLiveWalk", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] }, { "LiveWriter": [] } ], "parameters": [ { "name": "liveId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful LiveEndReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLiveEndReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "413": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "current active actor and liveReadableSql; owner/live-only write checks expires 14400 seconds after start; deletion/logout/block/follow changes revoke access presence of nonempty writer header selects capability auth before bearer; malformed writer does not fall back writer header accepted only points,end,photos action path; hash bound to live session,owner,active/unexpired account Nonempty LiveWriter header takes precedence; invalid capability never falls back to bearer. Only exact owner-bound active/unexpired session points/end/photo write paths accept this capability.", "x-walkpic-source": { "file": "service/src/live_walks.ts", "selector": "if(method==='POST'&&action==='end')", "sha256": "f76ca5651013552a0cb9e25d8ece4e6fdf3573e4b8d1601143caa547a8ee6bfc" }, "x-walkpic-query-policy": { "allowed": "all", "unknown": "ignored on live detail/points/end/start and live-photoGET; handler does not inspect params for these actions" }, "x-walkpic-error-mapping": { "specific": { "INVALID_INPUT": 400, "AUTH_REQUIRED": 401, "NOT_FOUND": 404, "REVISION_REVOKED": 410, "VERSION_CHANGED": 409, "IDEMPOTENCY_CONFLICT": 409, "LIMIT_EXCEEDED SQL trigger": 429, "LIMIT_EXCEEDED read/normalized photo cap": 413, "IMAGE_PROCESSING_BUSY": 503, "IMAGE_PROCESSING_UNAVAILABLE": 503, "IMAGE_CONTENT_NOT_ALLOWED": 422, "ASSET_UNAVAILABLE live photo hash proof": 503, "INTERNAL_ERROR": 500 }, "Retry-After": "no automatic60 for live path", "notes": [ "live photo read/media SDK unknown failures may generic500; explicit returned bytes/hash mismatch503", "missing JPEG Content-Type not explicitly rejected415; native sends image/jpeg", "writer auth unknown array/header invalid401 and expired/current mismatch410" ] }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLiveEndRequest" } } }, "x-walkpic-max-body-bytes": 50000, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-transport": "JSON live receipts/reads; photo PUT bounded raw image, dataSaver JPEG normalization and current screening proof; photo GET base64 JSON with repeated hash/ACL checks.", "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT", "INVALID_REQUEST" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ], "409": [ "IDEMPOTENCY_CONFLICT" ], "410": [ "REVISION_REVOKED" ], "413": [ "LIMIT_EXCEEDED" ], "415": [ "INVALID_REQUEST" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/live-walks/{liveId}/photos/{photoId}": { "put": { "operationId": "planningUploadLivePhoto", "summary": "UploadLivePhoto", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] }, { "LiveWriter": [] } ], "parameters": [ { "name": "liveId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "photoId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningStopId" } }, { "name": "takenAt", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "x-walkpic-coercion": "Date.parse; any recognized finite date accepted", "x-walkpic-date-parse": true } }, { "name": "lat", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "x-walkpic-coercion": "Number; finite; empty/whitespace and valid scientific/hex lexical forms preserved", "x-walkpic-minimum": -90, "x-walkpic-maximum": 90, "x-walkpic-number-coercion": { "finite": true, "minimum": -90, "maximum": 90 } } }, { "name": "lng", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "x-walkpic-coercion": "Number; finite; empty/whitespace and valid scientific/hex lexical forms preserved", "x-walkpic-minimum": -180, "x-walkpic-maximum": 180, "x-walkpic-number-coercion": { "finite": true, "minimum": -180, "maximum": 180 } } } ], "responses": { "200": { "description": "Successful LivePhotoReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLivePhotoReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "413": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "422": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "IMAGE_CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IMAGE_CONTENT_NOT_ALLOWED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IMAGE_CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } }, "503": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "IMAGE_PROCESSING_BUSY", "IMAGE_PROCESSING_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IMAGE_PROCESSING_BUSY", "IMAGE_PROCESSING_UNAVAILABLE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IMAGE_PROCESSING_BUSY", "IMAGE_PROCESSING_UNAVAILABLE" ] } } } } } ] } } } } }, "x-walkpic-authorization": "current active actor and liveReadableSql; owner/live-only write checks expires 14400 seconds after start; deletion/logout/block/follow changes revoke access presence of nonempty writer header selects capability auth before bearer; malformed writer does not fall back writer header accepted only points,end,photos action path; hash bound to live session,owner,active/unexpired account Nonempty LiveWriter header takes precedence; invalid capability never falls back to bearer. Only exact owner-bound active/unexpired session points/end/photo write paths accept this capability.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(livePhoto)", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": [ "takenAt", "lat", "lng" ], "duplicates": "not rejected; first value consumed", "fields": { "takenAt": { "type": "string", "required": false, "constraint": "finite Date.parse; no canonical/recent-time constraint" }, "lat": { "type": "numeric query string", "required": false, "minimum": -90, "maximum": 90 }, "lng": { "type": "numeric query string", "required": false, "minimum": -180, "maximum": 180 } }, "crossConstraints": [ "lat/lng both present or both absent", "Number(query) means empty or whitespace lat/lng are accepted as0" ], "source": { "file": "service/src/live_walks.ts", "line": 109, "selector": "const captured=parameters.get", "sha256": "f76ca5651013552a0cb9e25d8ece4e6fdf3573e4b8d1601143caa547a8ee6bfc", "excerpt": " const captured=parameters.get('takenAt'),lat=parameters.get('lat'),lng=parameters.get('lng');\n if(captured!==null&&!Number.isFinite(Date.parse(captured))||[...parameters.keys()].some(k=>!['takenAt','lat','lng'].includes(k))||(lat===null)!==(lng===null)||lat!==null&&(!Number.isFinite(Number(lat))||Math.abs(Number(lat))>90||!Number.isFinite(Number(lng))||Math.abs(Number(lng))>180))fail(400,'INVALID_INPUT','Use valid photo time and location');\n const digest=sha256(JSON.stringify([proof.hash,captured,lat,lng]));\n return db.command('live_photo',`live_photo:${user.id}:${id}:${photoId}`,digest,{ownerId:user.id,...(user.writerHash?{writerHash:user.writerHash}:{}),sessionId:id,photoId,takenAt:captured,lat:lat===null?null:Number(lat),lng:lng===null?null:Number(lng),...proof});" } }, "x-walkpic-error-mapping": { "specific": { "INVALID_INPUT": 400, "AUTH_REQUIRED": 401, "NOT_FOUND": 404, "REVISION_REVOKED": 410, "VERSION_CHANGED": 409, "IDEMPOTENCY_CONFLICT": 409, "LIMIT_EXCEEDED SQL trigger": 429, "LIMIT_EXCEEDED read/normalized photo cap": 413, "IMAGE_PROCESSING_BUSY": 503, "IMAGE_PROCESSING_UNAVAILABLE": 503, "IMAGE_CONTENT_NOT_ALLOWED": 422, "ASSET_UNAVAILABLE live photo hash proof": 503, "INTERNAL_ERROR": 500 }, "Retry-After": "no automatic60 for live path", "notes": [ "live photo read/media SDK unknown failures may generic500; explicit returned bytes/hash mismatch503", "missing JPEG Content-Type not explicitly rejected415; native sends image/jpeg", "writer auth unknown array/header invalid401 and expired/current mismatch410" ] }, "requestBody": { "required": true, "content": { "image/jpeg": { "schema": { "$ref": "#/components/schemas/PlanningLivePhotoBytes" } }, "image/png": { "schema": { "$ref": "#/components/schemas/PlanningLivePhotoBytes" } }, "application/octet-stream": { "schema": { "$ref": "#/components/schemas/PlanningLivePhotoBytes" } }, "*/*": { "schema": { "$ref": "#/components/schemas/PlanningLivePhotoBytes" } } }, "x-walkpic-max-body-bytes": 4000000 }, "x-walkpic-transport": "JSON live receipts/reads; photo PUT bounded raw image, dataSaver JPEG normalization and current screening proof; photo GET base64 JSON with repeated hash/ACL checks.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ], "409": [ "IDEMPOTENCY_CONFLICT", "VERSION_CHANGED" ], "410": [ "REVISION_REVOKED" ], "413": [ "LIMIT_EXCEEDED" ], "422": [ "IMAGE_CONTENT_NOT_ALLOWED" ], "429": [ "LIMIT_EXCEEDED" ], "503": [ "IMAGE_PROCESSING_BUSY", "IMAGE_PROCESSING_UNAVAILABLE" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } }, "get": { "operationId": "planningGetLivePhoto", "summary": "GetLivePhoto", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "liveId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "photoId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningStopId" } } ], "responses": { "200": { "description": "Successful LivePhoto", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningLivePhoto" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } }, "503": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ASSET_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ASSET_UNAVAILABLE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ASSET_UNAVAILABLE" ] } } } } } ] } } } } }, "x-walkpic-authorization": "current active actor and liveReadableSql; owner/live-only write checks expires 14400 seconds after start; deletion/logout/block/follow changes revoke access", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(method==='GET'){\n const photo=", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": "all", "unknown": "ignored on live detail/points/end/start and live-photoGET; handler does not inspect params for these actions" }, "x-walkpic-error-mapping": { "specific": { "INVALID_INPUT": 400, "AUTH_REQUIRED": 401, "NOT_FOUND": 404, "REVISION_REVOKED": 410, "VERSION_CHANGED": 409, "IDEMPOTENCY_CONFLICT": 409, "LIMIT_EXCEEDED SQL trigger": 429, "LIMIT_EXCEEDED read/normalized photo cap": 413, "IMAGE_PROCESSING_BUSY": 503, "IMAGE_PROCESSING_UNAVAILABLE": 503, "IMAGE_CONTENT_NOT_ALLOWED": 422, "ASSET_UNAVAILABLE live photo hash proof": 503, "INTERNAL_ERROR": 500 }, "Retry-After": "no automatic60 for live path", "notes": [ "live photo read/media SDK unknown failures may generic500; explicit returned bytes/hash mismatch503", "missing JPEG Content-Type not explicitly rejected415; native sends image/jpeg", "writer auth unknown array/header invalid401 and expired/current mismatch410" ] }, "x-walkpic-transport": "JSON live receipts/reads; photo PUT bounded raw image, dataSaver JPEG normalization and current screening proof; photo GET base64 JSON with repeated hash/ACL checks.", "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ], "503": [ "ASSET_UNAVAILABLE" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/route-request": { "post": { "operationId": "planningInterpretRouteRequest", "summary": "InterpretRouteRequest", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [], "responses": { "200": { "description": "Successful Interpretation", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningInterpretation" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "413": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } }, "503": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ROUTE_REQUEST_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_REQUEST_UNAVAILABLE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_REQUEST_UNAVAILABLE" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "path==='/v1/route-request'", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": "all", "unknown": "service ignores query keys because app checks normalized path only; browser proxy allows exact query-free route-request" }, "x-walkpic-error-mapping": { "codes": { "INVALID_REQUEST": 400, "NOT_FOUND": 404, "AUTH_REQUIRED postslow": 401, "RATE_LIMITED": 429, "ROUTE_REQUEST_UNAVAILABLE": 503, "LIMIT_EXCEEDED readJson": 413, "INTERNAL_ERROR for invalid output from trusted injected interpreter": 500 }, "rate": [ "global2 active", "6 requests/actor/minute", "bounded1000 actor windows" ], "provider": "MeshAgent Responses strict schema + completed status + 64000 response byte bound; provider/parse exception503", "Retry-After": "not explicitly emitted by route-request app branch" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRouteRequest" } } }, "x-walkpic-max-body-bytes": 8192, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-query-properties": { "additionalProperties": true, "uniqueKeys": false }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_REQUEST" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ], "413": [ "LIMIT_EXCEEDED" ], "415": [ "INVALID_REQUEST" ], "429": [ "RATE_LIMITED" ], "503": [ "ROUTE_REQUEST_UNAVAILABLE" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/planning/intakes": { "post": { "operationId": "planningAdmitWalkingIntent", "summary": "AdmitWalkingIntent", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [], "responses": { "200": { "description": "Successful Intake", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningIntake" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } } } } } ] } } }, "x-walkpic-code-messages": { "INVALID_REQUEST": "A valid JSON request is required.", "INVALID_WALKING_INTAKE": "Check the declared walking points.", "INVALID_WALKING_PREPARATION": "Check the route preparation request.", "INVALID_WALKING_REQUEST": "Check the walking stops and time budget." } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "AUTH_REQUIRED": "Sign in required." } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } }, "x-walkpic-code-messages": { "NOT_FOUND": "Endpoint not found.", "WALKING_PREPARATION_GONE": "This route preparation is no longer available. Calculate it again." } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } } } } } ] } } }, "x-walkpic-code-messages": { "IDEMPOTENCY_CONFLICT": "This request identifier has already been used.", "ROUTE_CANCELLED": "The route calculation was cancelled.", "WALKING_INTAKE_GONE": "Choose the walking points again before calculating.", "WALKING_IN_PROGRESS": "This calculation is already in progress." } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "LIMIT_EXCEEDED": "Request too large." } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_ENDPOINT_MISMATCH": "Move the stop to a connected walking access point.", "ROUTE_EVIDENCE_INVALID": "The walking connection could not be verified.", "ROUTE_OUTSIDE_COVERAGE": "This walk is outside the supported area.", "ROUTE_UNRESOLVED": "Unable to find a complete walking connection." } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_BUSY": "Another route calculation is in progress.", "WALKING_CAPACITY": "Walking route preparation is busy. Try again later.", "WALKING_RATE_LIMITED": "Too many route requests. Try again later." } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_POLICY_UNAVAILABLE": "Walking route preparation is not available.", "ROUTE_UNAVAILABLE": "Unable to calculate a walking route right now.", "WALKING_POLICY_CHANGED": "Walking route preparation is not available.", "WALKING_PREPARATION_CORRUPT": "This route preparation could not be verified." } }, "504": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_TIMEOUT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_TIMEOUT": "The walking route calculation took too long." } } }, "x-walkpic-authorization": "verified runtime approval + current policy + cleanupHealthy owner-bound intake/preparation cancel allowed even when routing disabled or runtime absent", "x-walkpic-source": { "file": "service/src/walking_preparations_api.ts", "selector": "const admitting =", "sha256": "0c73b55b42504e61f0946b42b1421843ac2c3a08b4a42a3cf408487887e1fe69" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningIntakeRequest" } } }, "x-walkpic-max-body-bytes": 8192, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/planning/snaps": { "post": { "operationId": "planningSnapWalkingStops", "summary": "SnapWalkingStops", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [], "responses": { "200": { "description": "Successful Snaps", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningSnaps" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } } } } } ] } } }, "x-walkpic-code-messages": { "INVALID_REQUEST": "A valid JSON request is required.", "INVALID_WALKING_INTAKE": "Check the declared walking points.", "INVALID_WALKING_PREPARATION": "Check the route preparation request.", "INVALID_WALKING_REQUEST": "Check the walking stops and time budget." } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "AUTH_REQUIRED": "Sign in required." } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } }, "x-walkpic-code-messages": { "NOT_FOUND": "Endpoint not found.", "WALKING_PREPARATION_GONE": "This route preparation is no longer available. Calculate it again." } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } } } } } ] } } }, "x-walkpic-code-messages": { "IDEMPOTENCY_CONFLICT": "This request identifier has already been used.", "ROUTE_CANCELLED": "The route calculation was cancelled.", "WALKING_INTAKE_GONE": "Choose the walking points again before calculating.", "WALKING_IN_PROGRESS": "This calculation is already in progress." } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "LIMIT_EXCEEDED": "Request too large." } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_ENDPOINT_MISMATCH": "Move the stop to a connected walking access point.", "ROUTE_EVIDENCE_INVALID": "The walking connection could not be verified.", "ROUTE_OUTSIDE_COVERAGE": "This walk is outside the supported area.", "ROUTE_UNRESOLVED": "Unable to find a complete walking connection." } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_BUSY": "Another route calculation is in progress.", "WALKING_CAPACITY": "Walking route preparation is busy. Try again later.", "WALKING_RATE_LIMITED": "Too many route requests. Try again later." } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_POLICY_UNAVAILABLE": "Walking route preparation is not available.", "ROUTE_UNAVAILABLE": "Unable to calculate a walking route right now.", "WALKING_POLICY_CHANGED": "Walking route preparation is not available.", "WALKING_PREPARATION_CORRUPT": "This route preparation could not be verified." } }, "504": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_TIMEOUT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_TIMEOUT": "The walking route calculation took too long." } } }, "x-walkpic-authorization": "verified runtime approval + current policy + cleanupHealthy owner-bound intake/preparation cancel allowed even when routing disabled or runtime absent", "x-walkpic-source": { "file": "service/src/walking_preparations_api.ts", "selector": "const snapping =", "sha256": "0c73b55b42504e61f0946b42b1421843ac2c3a08b4a42a3cf408487887e1fe69" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningWalkingRequest" } } }, "x-walkpic-max-body-bytes": 8192, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/planning/routes": { "post": { "operationId": "planningCalculateWalkingRoute", "summary": "CalculateWalkingRoute", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "X-WalkPic-Route-Profiles", "in": "header", "required": false, "description": "Only exact value1 includes profile fields; absent, repeated/array or other values omit them.", "schema": { "type": "string" } } ], "responses": { "200": { "description": "Successful Preparation", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPreparation" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } } } } } ] } } }, "x-walkpic-code-messages": { "INVALID_REQUEST": "A valid JSON request is required.", "INVALID_WALKING_INTAKE": "Check the declared walking points.", "INVALID_WALKING_PREPARATION": "Check the route preparation request.", "INVALID_WALKING_REQUEST": "Check the walking stops and time budget." } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "AUTH_REQUIRED": "Sign in required." } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } }, "x-walkpic-code-messages": { "NOT_FOUND": "Endpoint not found.", "WALKING_PREPARATION_GONE": "This route preparation is no longer available. Calculate it again." } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } } } } } ] } } }, "x-walkpic-code-messages": { "IDEMPOTENCY_CONFLICT": "This request identifier has already been used.", "ROUTE_CANCELLED": "The route calculation was cancelled.", "WALKING_INTAKE_GONE": "Choose the walking points again before calculating.", "WALKING_IN_PROGRESS": "This calculation is already in progress." } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "LIMIT_EXCEEDED": "Request too large." } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_ENDPOINT_MISMATCH": "Move the stop to a connected walking access point.", "ROUTE_EVIDENCE_INVALID": "The walking connection could not be verified.", "ROUTE_OUTSIDE_COVERAGE": "This walk is outside the supported area.", "ROUTE_UNRESOLVED": "Unable to find a complete walking connection." } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_BUSY": "Another route calculation is in progress.", "WALKING_CAPACITY": "Walking route preparation is busy. Try again later.", "WALKING_RATE_LIMITED": "Too many route requests. Try again later." } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_POLICY_UNAVAILABLE": "Walking route preparation is not available.", "ROUTE_UNAVAILABLE": "Unable to calculate a walking route right now.", "WALKING_POLICY_CHANGED": "Walking route preparation is not available.", "WALKING_PREPARATION_CORRUPT": "This route preparation could not be verified." } }, "504": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_TIMEOUT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_TIMEOUT": "The walking route calculation took too long." } } }, "x-walkpic-authorization": "verified runtime approval + current policy + cleanupHealthy owner-bound intake/preparation cancel allowed even when routing disabled or runtime absent", "x-walkpic-source": { "file": "service/src/walking_preparations_api.ts", "selector": "const calculating =", "sha256": "0c73b55b42504e61f0946b42b1421843ac2c3a08b4a42a3cf408487887e1fe69" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningWalkingRequest" } } }, "x-walkpic-max-body-bytes": 8192, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/planning/routes/cancel": { "post": { "operationId": "planningCancelWalkingCalculation", "summary": "CancelWalkingCalculation", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [], "responses": { "200": { "description": "Successful Cancelled", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCancelled" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } } } } } ] } } }, "x-walkpic-code-messages": { "INVALID_REQUEST": "A valid JSON request is required.", "INVALID_WALKING_INTAKE": "Check the declared walking points.", "INVALID_WALKING_PREPARATION": "Check the route preparation request.", "INVALID_WALKING_REQUEST": "Check the walking stops and time budget." } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "AUTH_REQUIRED": "Sign in required." } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } }, "x-walkpic-code-messages": { "NOT_FOUND": "Endpoint not found.", "WALKING_PREPARATION_GONE": "This route preparation is no longer available. Calculate it again." } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } } } } } ] } } }, "x-walkpic-code-messages": { "IDEMPOTENCY_CONFLICT": "This request identifier has already been used.", "ROUTE_CANCELLED": "The route calculation was cancelled.", "WALKING_INTAKE_GONE": "Choose the walking points again before calculating.", "WALKING_IN_PROGRESS": "This calculation is already in progress." } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "LIMIT_EXCEEDED": "Request too large." } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_ENDPOINT_MISMATCH": "Move the stop to a connected walking access point.", "ROUTE_EVIDENCE_INVALID": "The walking connection could not be verified.", "ROUTE_OUTSIDE_COVERAGE": "This walk is outside the supported area.", "ROUTE_UNRESOLVED": "Unable to find a complete walking connection." } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_BUSY": "Another route calculation is in progress.", "WALKING_CAPACITY": "Walking route preparation is busy. Try again later.", "WALKING_RATE_LIMITED": "Too many route requests. Try again later." } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_POLICY_UNAVAILABLE": "Walking route preparation is not available.", "ROUTE_UNAVAILABLE": "Unable to calculate a walking route right now.", "WALKING_POLICY_CHANGED": "Walking route preparation is not available.", "WALKING_PREPARATION_CORRUPT": "This route preparation could not be verified." } }, "504": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_TIMEOUT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_TIMEOUT": "The walking route calculation took too long." } } }, "x-walkpic-authorization": "verified runtime approval + current policy + cleanupHealthy owner-bound intake/preparation cancel allowed even when routing disabled or runtime absent", "x-walkpic-source": { "file": "service/src/walking_preparations_api.ts", "selector": "path === '/v1/planning/routes/cancel'", "sha256": "0c73b55b42504e61f0946b42b1421843ac2c3a08b4a42a3cf408487887e1fe69" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCancelRequest" } } }, "x-walkpic-max-body-bytes": 1024, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/planning/preparations/{preparationId}": { "get": { "operationId": "planningGetWalkingPreparation", "summary": "GetWalkingPreparation", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "preparationId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "X-WalkPic-Route-Profiles", "in": "header", "required": false, "description": "Only exact value1 includes profile fields; absent, repeated/array or other values omit them.", "schema": { "type": "string" } } ], "responses": { "200": { "description": "Successful Preparation", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPreparation" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST", "INVALID_WALKING_INTAKE", "INVALID_WALKING_PREPARATION", "INVALID_WALKING_REQUEST" ] } } } } } ] } } }, "x-walkpic-code-messages": { "INVALID_REQUEST": "A valid JSON request is required.", "INVALID_WALKING_INTAKE": "Check the declared walking points.", "INVALID_WALKING_PREPARATION": "Check the route preparation request.", "INVALID_WALKING_REQUEST": "Check the walking stops and time budget." } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "AUTH_REQUIRED": "Sign in required." } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } }, "x-walkpic-code-messages": { "NOT_FOUND": "Endpoint not found.", "WALKING_PREPARATION_GONE": "This route preparation is no longer available. Calculate it again." } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "IDEMPOTENCY_CONFLICT", "ROUTE_CANCELLED", "WALKING_INTAKE_GONE", "WALKING_IN_PROGRESS" ] } } } } } ] } } }, "x-walkpic-code-messages": { "IDEMPOTENCY_CONFLICT": "This request identifier has already been used.", "ROUTE_CANCELLED": "The route calculation was cancelled.", "WALKING_INTAKE_GONE": "Choose the walking points again before calculating.", "WALKING_IN_PROGRESS": "This calculation is already in progress." } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "LIMIT_EXCEEDED": "Request too large." } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_EVIDENCE_INVALID", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_UNRESOLVED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_ENDPOINT_MISMATCH": "Move the stop to a connected walking access point.", "ROUTE_EVIDENCE_INVALID": "The walking connection could not be verified.", "ROUTE_OUTSIDE_COVERAGE": "This walk is outside the supported area.", "ROUTE_UNRESOLVED": "Unable to find a complete walking connection." } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_BUSY", "WALKING_CAPACITY", "WALKING_RATE_LIMITED" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_BUSY": "Another route calculation is in progress.", "WALKING_CAPACITY": "Walking route preparation is busy. Try again later.", "WALKING_RATE_LIMITED": "Too many route requests. Try again later." } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_POLICY_UNAVAILABLE", "ROUTE_UNAVAILABLE", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_CORRUPT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_POLICY_UNAVAILABLE": "Walking route preparation is not available.", "ROUTE_UNAVAILABLE": "Unable to calculate a walking route right now.", "WALKING_POLICY_CHANGED": "Walking route preparation is not available.", "WALKING_PREPARATION_CORRUPT": "This route preparation could not be verified." } }, "504": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "ROUTE_TIMEOUT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ROUTE_TIMEOUT" ] } } } } } ] } } }, "x-walkpic-code-messages": { "ROUTE_TIMEOUT": "The walking route calculation took too long." } } }, "x-walkpic-authorization": "verified runtime approval + current policy + cleanupHealthy owner-bound intake/preparation cancel allowed even when routing disabled or runtime absent", "x-walkpic-source": { "file": "service/src/walking_preparations_api.ts", "selector": "const read =", "sha256": "0c73b55b42504e61f0946b42b1421843ac2c3a08b4a42a3cf408487887e1fe69" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "mapping": { "AUTH_REQUIRED": { "status": 401, "message": "Sign in required." }, "INVALID_REQUEST": { "status": 400, "message": "A valid JSON request is required." }, "INVALID_WALKING_REQUEST": { "status": 400, "message": "Check the walking stops and time budget." }, "INVALID_WALKING_INTAKE": { "status": 400, "message": "Check the declared walking points." }, "WALKING_INTAKE_GONE": { "status": 409, "message": "Choose the walking points again before calculating." }, "INVALID_WALKING_PREPARATION": { "status": 400, "message": "Check the route preparation request." }, "LIMIT_EXCEEDED": { "status": 413, "message": "Request too large." }, "NOT_FOUND": { "status": 404, "message": "Endpoint not found." }, "IDEMPOTENCY_CONFLICT": { "status": 409, "message": "This request identifier has already been used." }, "WALKING_PREPARATION_GONE": { "status": 404, "message": "This route preparation is no longer available. Calculate it again." }, "WALKING_IN_PROGRESS": { "status": 409, "message": "This calculation is already in progress." }, "WALKING_POLICY_CHANGED": { "status": 503, "message": "Walking route preparation is not available." }, "WALKING_PREPARATION_CORRUPT": { "status": 503, "message": "This route preparation could not be verified." }, "WALKING_RATE_LIMITED": { "status": 429, "message": "Too many route requests. Try again later." }, "WALKING_CAPACITY": { "status": 429, "message": "Walking route preparation is busy. Try again later." }, "ROUTE_POLICY_UNAVAILABLE": { "status": 503, "message": "Walking route preparation is not available." }, "ROUTE_UNAVAILABLE": { "status": 503, "message": "Unable to calculate a walking route right now." }, "ROUTE_UNRESOLVED": { "status": 422, "message": "Unable to find a complete walking connection." }, "ROUTE_OUTSIDE_COVERAGE": { "status": 422, "message": "This walk is outside the supported area." }, "ROUTE_EVIDENCE_INVALID": { "status": 422, "message": "The walking connection could not be verified." }, "ROUTE_ENDPOINT_MISMATCH": { "status": 422, "message": "Move the stop to a connected walking access point." }, "ROUTE_CANCELLED": { "status": 409, "message": "The route calculation was cancelled." }, "ROUTE_TIMEOUT": { "status": 504, "message": "The walking route calculation took too long." }, "ROUTE_BUSY": { "status": 429, "message": "Another route calculation is in progress." } }, "unknownExceptions": { "status": 503, "code": "ROUTE_UNAVAILABLE", "message": "static sanitized" }, "AUTH_REQUIRED sentinel": 401, "Retry-After": "60 iff429", "notes": [ "lower-level invalid walking request defaults422 but adapter maps it400", "WALKING_POLICY_CHANGED low-level409 may map503 here", "unresolved route legs normally return200 with options[] rather than generic422", "snaps use internal8s AbortSignal and may surface ROUTE_CANCELLED409; controller shutdown availability may become ROUTE_POLICY_UNAVAILABLE503" ] }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/route-plans": { "get": { "operationId": "planningListReusableRoutes", "summary": "ListReusableRoutes", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "scope", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "enum": [ "mine", "shared", "explore" ], "default": "mine" } }, { "name": "limit", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "pattern": "^\\d+$", "default": "20", "x-walkpic-coercion": "Number", "x-walkpic-parsed-integer-minimum": 1, "x-walkpic-parsed-integer-maximum": 50 } }, { "name": "cursor", "in": "query", "required": false, "description": "Opaque signed actor/filter/limit-bound cursor; do not construct. Logical expiry15minutes.", "schema": { "type": "string" } } ], "responses": { "200": { "description": "Successful RoutePlanPage", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRoutePlanPage" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "path==='/v1/route-plans'&&method==='GET'", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": [ "scope", "limit", "cursor" ], "duplicates": "reject all", "fields": { "scope": { "default": "mine", "enum": [ "mine", "shared", "explore" ] }, "limit": { "default": "20", "minimum": 1, "maximum": 50 }, "cursor": { "signature": "HMAC", "binding": [ "actor", "scope", "limit" ], "TTLms": 900000, "length": "no explicit cursor length cap in this validator" } }, "source": { "file": "service/src/route_plans.ts", "line": 63, "selector": "async list(", "sha256": "6ff3269f2a14ab8900eb9a8b3e084ac06698025575546e8968be6aab057e1954", "excerpt": " async list({actorId,params=new URLSearchParams()}: {actorId: string; params?: URLSearchParams}){\n actorId=uuid(actorId);for(const key of params.keys())check(['scope','cursor','limit'].includes(key)&¶ms.getAll(key).length===1);\n const scope=params.get('scope')??'mine',limitText=params.get('limit')??'20';check((scope==='mine'||scope==='shared'||scope==='explore')&&/^\\d+$/.test(limitText)&&+limitText>=1&&+limitText<=50);\n const limit=+limitText,key=createHmac('sha256',secret).update('walkpic-route-plan-cursor-v1').digest(),bound=digest([actorId,scope,limit]);\n let high=Number.MAX_SAFE_INTEGER,after=high;\n if(params.has('cursor')){const pieces=params.get('cursor')!.split('.');check(pieces.length===2&&pieces.every(p=>/^[a-zA-Z0-9_-]+$/.test(p)),'INVALID_CURSOR');const signature=createHmac('sha256',key).update(pieces[0]).digest(),actual=Buffer.from(pieces[1],'base64url');check(actual.length===signature.length&&timingSafeEqual(actual,signature),'INVALID_CURSOR');let data: unknown;try{data=JSON.parse(Buffer.from(pieces[0],'base64url').toString())}catch{fail('INVALID_CURSOR')}check(isRecord(data)&&data.bound===bound&&safeInteger(data.high)&&safeInteger(data.last)&&data.last>=1&&data.last<=data.high&&safeInteger(data.at)&&data.at<=Date.now()+60000&&Date.now()-data.at<900000,'INVALID_CURSOR');high=data.high;after=data.last}\n const filter={mine:'p.owner_id=c.actor',shared:\"p.owner_id<>c.actor AND p.audience IN('followers','specific')\",explore:\"p.audience='public'\"}[scope];\n const {rows}=await db.query(`WITH caller AS(SELECT ? actor) SELECT p.sequence,p.id,p.owner_id,p.audience,p.version,p.authored_json,p.created_at,u.display_name owner_name,u.handle owner_handle,json_extract(p.route_json,'$.totals') totals_json FROM caller c CROSS JOIN pt_route_plans p JOIN pt_users u ON u.id=p.owner_id WHERE p.sequence<=? AND p.sequencelimit){const data=Buffer.from(JSON.stringify({bound,high:high===Number.MAX_SAFE_INTEGER?rows[0].sequence:high,last:page.at(-1)!.sequence,at:Date.now()})).toString('base64url');cursor=data+'.'+createHmac('sha256',key).update(data).digest('base64url')}\n return {items:page.map(row=>fromRow(row,actorId)),cursor};\n },\n async restrict({actorId,routePlanId,body}: {actorId: string; routePlanId: string; body: unknown}){\n actorId=uuid(actorId);routePlanId=uuid(routePlanId);exact(body,['requestId','expectedVersion']);check(safeInteger(body.expectedVersion)&&body.expectedVersion>=1);const requestId=uuid(body.requestId),hash=digest({routePlanId,requestId,expectedVersion:body.expectedVersion}),id=commandId('restrict',actorId,requestId);\n await live(actorId);return await replay(id,hash,actorId)??command('route_plan_restrict',id,hash,{actorId,routePlanId,expectedVersion:body.expectedVersion});\n }," } }, "x-walkpic-error-mapping": { "defaultValidation": { "status": 400, "code": "INVALID_PLAN" }, "specific": [ "CONTENT_NOT_ALLOWED422", "INVALID_CURSOR400", "NOT_FOUND404", "AUTH_REQUIRED401", "known command conflicts409", "normalizeWalkingRequest INVALID_WALKING_REQUEST422 directly survives ordinary app error adapter", "body read LIMIT_EXCEEDED413", "unknown provider/db500 INTERNAL_ERROR" ], "Retry-After": "none explicitly set by this adapter", "queryReject": "nonlist query404 NOT_FOUND" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_CURSOR", "INVALID_PLAN" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } }, "post": { "operationId": "planningCreateReusableRoute", "summary": "CreateReusableRoute", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [], "responses": { "200": { "description": "Successful RoutePlanReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRoutePlanReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST", "INVALID_WALKING_PREPARATION", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST", "INVALID_WALKING_PREPARATION", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST", "INVALID_WALKING_PREPARATION", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED", "WALKING_IN_PROGRESS", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED", "WALKING_IN_PROGRESS", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED", "WALKING_IN_PROGRESS", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "413": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED", "INVALID_WALKING_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED", "INVALID_WALKING_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED", "INVALID_WALKING_REQUEST" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR", "WALKING_PREPARATION_CORRUPT" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR", "WALKING_PREPARATION_CORRUPT" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR", "WALKING_PREPARATION_CORRUPT" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "path==='/v1/route-plans'&&method==='POST'", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "defaultValidation": { "status": 400, "code": "INVALID_PLAN" }, "specific": [ "CONTENT_NOT_ALLOWED422", "INVALID_CURSOR400", "NOT_FOUND404", "AUTH_REQUIRED401", "known command conflicts409", "normalizeWalkingRequest INVALID_WALKING_REQUEST422 directly survives ordinary app error adapter", "body read LIMIT_EXCEEDED413", "unknown provider/db500 INTERNAL_ERROR" ], "Retry-After": "none explicitly set by this adapter", "queryReject": "nonlist query404 NOT_FOUND" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCreateRoutePlanRequest" } } }, "x-walkpic-max-body-bytes": 24000, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_PLAN", "INVALID_REQUEST", "INVALID_WALKING_PREPARATION" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "409": [ "IDEMPOTENCY_CONFLICT", "PLAN_CHANGED", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "RECIPIENT_CHANGED", "WALKING_IN_PROGRESS", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "413": [ "LIMIT_EXCEEDED" ], "415": [ "INVALID_REQUEST" ], "422": [ "CONTENT_NOT_ALLOWED", "INVALID_WALKING_REQUEST" ], "500": [ "WALKING_PREPARATION_CORRUPT" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/route-plans/{routePlanId}": { "get": { "operationId": "planningGetReusableRoute", "summary": "GetReusableRoute", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "routePlanId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful RoutePlanDetail", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRoutePlanDetail" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "else if(match&&method==='GET'", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "defaultValidation": { "status": 400, "code": "INVALID_PLAN" }, "specific": [ "CONTENT_NOT_ALLOWED422", "INVALID_CURSOR400", "NOT_FOUND404", "AUTH_REQUIRED401", "known command conflicts409", "normalizeWalkingRequest INVALID_WALKING_REQUEST422 directly survives ordinary app error adapter", "body read LIMIT_EXCEEDED413", "unknown provider/db500 INTERNAL_ERROR" ], "Retry-After": "none explicitly set by this adapter", "queryReject": "nonlist query404 NOT_FOUND" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_PLAN" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/route-plans/{routePlanId}/access": { "get": { "operationId": "planningGetReusableRouteAccess", "summary": "GetReusableRouteAccess", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "routePlanId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful RoutePlanAccess", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRoutePlanAccess" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_PLAN", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "else if(match&&method==='GET'", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "defaultValidation": { "status": 400, "code": "INVALID_PLAN" }, "specific": [ "CONTENT_NOT_ALLOWED422", "INVALID_CURSOR400", "NOT_FOUND404", "AUTH_REQUIRED401", "known command conflicts409", "normalizeWalkingRequest INVALID_WALKING_REQUEST422 directly survives ordinary app error adapter", "body read LIMIT_EXCEEDED413", "unknown provider/db500 INTERNAL_ERROR" ], "Retry-After": "none explicitly set by this adapter", "queryReject": "nonlist query404 NOT_FOUND" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_PLAN" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/route-plans/{routePlanId}/restrict": { "post": { "operationId": "planningRestrictReusableRoute", "summary": "RestrictReusableRoute", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "routePlanId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful RoutePlanReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRoutePlanReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "PLAN_LIMIT", "PLAN_SOURCE_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "PLAN_LIMIT", "PLAN_SOURCE_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "PLAN_LIMIT", "PLAN_SOURCE_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "413": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "else if(match&&method==='POST'", "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "defaultValidation": { "status": 400, "code": "INVALID_PLAN" }, "specific": [ "CONTENT_NOT_ALLOWED422", "INVALID_CURSOR400", "NOT_FOUND404", "AUTH_REQUIRED401", "known command conflicts409", "normalizeWalkingRequest INVALID_WALKING_REQUEST422 directly survives ordinary app error adapter", "body read LIMIT_EXCEEDED413", "unknown provider/db500 INTERNAL_ERROR" ], "Retry-After": "none explicitly set by this adapter", "queryReject": "nonlist query404 NOT_FOUND" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRestrictRoutePlanRequest" } } }, "x-walkpic-max-body-bytes": 1024, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_PLAN", "INVALID_REQUEST" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ], "409": [ "IDEMPOTENCY_CONFLICT", "PLAN_CHANGED", "PLAN_LIMIT", "PLAN_SOURCE_CHANGED", "RECIPIENT_CHANGED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "413": [ "LIMIT_EXCEEDED" ], "415": [ "INVALID_REQUEST" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/plans": { "get": { "operationId": "planningListOutings", "summary": "ListOutings", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "scope", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "enum": [ "mine", "following", "explore" ], "default": "mine" } }, { "name": "limit", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "pattern": "^\\d+$", "default": "20", "x-walkpic-coercion": "Number", "x-walkpic-parsed-integer-minimum": 1, "x-walkpic-parsed-integer-maximum": 50 } }, { "name": "cursor", "in": "query", "required": false, "description": "Opaque signed actor/filter/limit-bound cursor; do not construct. Logical expiry15minutes.", "schema": { "type": "string", "maxLength": 2000 } }, { "name": "bbox", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "pattern": "^[-+]?(?:\\d+(?:\\.\\d*)?|\\.\\d+),[-+]?(?:\\d+(?:\\.\\d*)?|\\.\\d+),[-+]?(?:\\d+(?:\\.\\d*)?|\\.\\d+),[-+]?(?:\\d+(?:\\.\\d*)?|\\.\\d+)$", "x-walkpic-constraints": [ "0=-90,north<=90,south<=north; dateline west>east allowed" } }, { "name": "window", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "enum": [ "upcoming", "calendar" ] } }, { "name": "from", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "$ref": "#/components/schemas/PlanningUtcInstant" } }, { "name": "until", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "$ref": "#/components/schemas/PlanningUtcInstant" } } ], "responses": { "200": { "description": "Successful PlanPage", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPlanPage" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "if(method==='GET')body=", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [ "scope", "limit", "cursor", "bbox", "window", "from", "until" ], "duplicates": "reject all", "fields": { "scope": { "default": "mine", "enum": [ "mine", "following", "explore" ] }, "limit": { "default": "20", "pattern": "^\\d+$", "minimum": 1, "maximum": 50 }, "cursor": { "maxLength": 2000, "signed": true, "TTLms": 900000, "actor/filter/limitBound": true }, "bbox": { "format": "west,south,east,north decimal numbers", "scope": "explore only", "west/east": [ -180, 180 ], "southMinimum": -90, "northMaximum": 90, "south<=north": true, "west>east": "supported dateline crossing" }, "window": { "enum": [ "upcoming", "calendar" ], "requires": [ "from", "until" ] }, "from": { "format": "canonical YYYY-MM-DDTHH:mm:ss.sssZ", "inclusive": true }, "until": { "format": "canonical YYYY-MM-DDTHH:mm:ss.sssZ", "exclusive": true } }, "crossConstraints": [ "050)fail();\n let bbox: number[] | null=null;\n if(params.has('bbox')){\n if(scope!=='explore')fail();\n const parts=params.get('bbox')!.split(',');\n if(parts.length!==4||parts.some(x=>!/^[-+]?(?:\\d+(?:\\.\\d*)?|\\.\\d+)$/.test(x)))fail();\n bbox=parts.map(Number).map(x=>Object.is(x,-0)?0:x);\n const [w,s,e,n]=bbox;if(!bbox.every(Number.isFinite)||w< -180||w>180||e< -180||e>180||s< -90||n>90||s>n)fail();\n }\n const query: PlannedWalkQuery={scope,limit:+raw,bbox};\n if(params.has('window')){\n const window=params.get('window'),from=params.get('from'),until=params.get('until');\n if(!(window==='upcoming'||window==='calendar')||!canonicalInstant(from)||!canonicalInstant(until))fail();\n const span=Date.parse(until)-Date.parse(from);\n if(span<=0||span>93*86400000)fail();\n return {...query,window,from,until};\n }\n if(params.has('from')||params.has('until'))fail();\n // Keep the original normalized object exactly, including key order, so\n // outstanding legacy sequence cursors remain usable across this upgrade.\n return query;\n}\nconst canonicalInstant=(value: unknown): value is string=>typeof value==='string'&&/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/.test(value)&&\n Number.isFinite(Date.parse(value))&&new Date(value).toISOString()===value;\nconst signature=(key: string | Buffer,value: string)=>createHmac('sha256',key).update(value).digest('base64url');\nconst encode=(key: string | Buffer,data: PlanCursor)=>{const value=Buffer.from(JSON.stringify(data)).toString('base64url');return `${value}.${signature(key,value)}`};\nfunction decode(key: string | Buffer,encoded: unknown,scope: string,window?: string): PlanCursor{\n if(typeof encoded!=='string'||encoded.length>2000)fail('INVALID_CURSOR');" } }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } }, "post": { "operationId": "planningCreateOuting", "summary": "CreateOuting", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [], "responses": { "200": { "description": "Successful PlanRevisionReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPlanRevisionReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(method==='POST'&&!query.size)", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCreatePlanRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}": { "get": { "operationId": "planningGetOuting", "summary": "GetOuting", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "revisionId", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful PlanDetail", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPlanDetail" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "}else if(!action&&method==='GET')", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [ "revisionId" ], "duplicates": "revisionId max1", "fields": { "revisionId": { "type": "UUID", "required": false, "selects": "current matching revision only" } }, "source": { "file": "service/src/planned_walk_api.ts", "line": 83, "selector": "if([...query.keys()].some(k=>k!=='revisionId')", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0", "excerpt": " if([...query.keys()].some(k=>k!=='revisionId')||query.getAll('revisionId').length>1)fail('INVALID_INPUT',400);\n body=await store.get({...bound,...(query.has('revisionId')?{revisionId:query.get('revisionId')!}:{})});" } }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } }, "patch": { "operationId": "planningPatchOuting", "summary": "PatchOuting", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful PlanRevisionReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPlanRevisionReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "if(!action&&method==='PATCH')", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPatchPlanRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/metadata": { "patch": { "operationId": "planningEditOutingMetadata", "summary": "EditOutingMetadata", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful PlanRevisionReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPlanRevisionReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(action==='metadata'", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPlanMetadataRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/reschedule": { "patch": { "operationId": "planningRescheduleOuting", "summary": "RescheduleOuting", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful PlanRevisionReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPlanRevisionReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(action==='reschedule'", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningReschedulePlanRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/close": { "post": { "operationId": "planningCloseOuting", "summary": "CloseOuting", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful PlanCloseReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningPlanCloseReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(action==='close'", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningClosePlanRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/join-requests": { "get": { "operationId": "planningListOutingJoinRequests", "summary": "ListOutingJoinRequests", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "limit", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "pattern": "^\\d+$", "default": "20", "x-walkpic-coercion": "Number", "x-walkpic-parsed-integer-minimum": 1, "x-walkpic-parsed-integer-maximum": 50 } }, { "name": "cursor", "in": "query", "required": false, "description": "Opaque signed actor/filter/limit-bound cursor; do not construct. Logical expiry15minutes.", "schema": { "type": "string", "maxLength": 2000 } } ], "responses": { "200": { "description": "Successful JoinRequestPage", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningJoinRequestPage" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "}else if(action==='join-requests'&&method==='GET')", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [ "limit", "cursor" ], "duplicates": "reject all", "fields": { "limit": { "default": "20", "minimum": 1, "maximum": 50 }, "cursor": { "maximumLength": 2000, "TTLms": 900000, "binding": [ "actor", "plan", "limit" ] } }, "source": { "file": "service/src/planned_walk_attendance.ts", "line": 96, "selector": "async requests(", "sha256": "dbb3e5aa534d95bf189e8e2e8a3e376a00be8b0e4e14d4c265ebf260d8f66feb", "excerpt": " async requests({actorId,planId,params=new URLSearchParams()}: {actorId: string; planId: string; params?: URLSearchParams}){\n actorId=await actor(actorId);planId=uuid(planId);\n for(const k of params.keys())if(!['limit','cursor'].includes(k)||params.getAll(k).length!==1)fail();\n const raw=params.get('limit')??'20';if(!/^\\d+$/.test(raw)||+raw<1||+raw>50)fail();const limit=+raw,scope=sha256(JSON.stringify([actorId,planId,limit]));\n if(!await one(db,'SELECT 1 FROM pt_plans WHERE id=? AND host_id=?',[planId,actorId]))fail('NOT_FOUND',404);\n let snapshot: JoinCursor;\n if(params.has('cursor')){\n const value=params.get('cursor')!;if(value.length>2000)fail('INVALID_CURSOR');const parts=value.split('.');\n if(parts.length!==2||parts.some(x=>!/^[a-zA-Z0-9_-]+$/.test(x)))fail('INVALID_CURSOR');\n const expected=Buffer.from(sign(parts[0])),actual=Buffer.from(parts[1]);if(expected.length!==actual.length||!timingSafeEqual(expected,actual))fail('INVALID_CURSOR');\n let decoded: unknown;try{decoded=JSON.parse(Buffer.from(parts[0],'base64url').toString())}catch{fail('INVALID_CURSOR')}\n if(!isRecord(decoded)||decoded.scope!==scope||!safeInteger(decoded.high)||decoded.high<0||!safeInteger(decoded.last)||decoded.last<1||decoded.last>decoded.high||!safeInteger(decoded.at))fail('INVALID_CURSOR');\n snapshot=decoded as unknown as JoinCursor;\n if(snapshot.at>Date.now()+60000||Date.now()-snapshot.at>900000)fail('CURSOR_EXPIRED',410);\n }else snapshot={scope,high:(await one<{high: number}>(db,'SELECT COALESCE(MAX(sequence),0) high FROM pt_plan_join_order'))!.high,at:Date.now()};\n const rows=(await db.query(`WITH host AS(SELECT ? id) SELECT a.user_id,u.handle,u.display_name,a.request_note,a.requested_logistics_version,p.logistics_version,o.sequence\n FROM pt_plans p CROSS JOIN host h JOIN pt_plan_attendance a ON a.plan_id=p.id JOIN pt_users u ON u.id=a.user_id\n JOIN pt_plan_join_order o ON o.plan_id=a.plan_id AND o.user_id=a.user_id\n WHERE p.id=? AND p.host_id=h.id AND ${readablePlan('p','h.id')} AND a.state='requested' AND ${readablePlan('p','a.user_id')}\n AND o.sequence<=? AND o.sequence PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } }, "post": { "operationId": "planningRequestOutingJoin", "summary": "RequestOutingJoin", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful AttendanceReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningAttendanceReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(action==='join-requests'&&method==='POST')", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningJoinPlanRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/join-requests/{requesterId}/respond": { "post": { "operationId": "planningRespondOutingJoin", "summary": "RespondOutingJoin", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "requesterId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful AttendanceReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningAttendanceReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(response&&", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRespondJoinRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/attendance": { "post": { "operationId": "planningUpdateOutingAttendance", "summary": "UpdateOutingAttendance", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful AttendanceReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningAttendanceReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(action==='attendance'", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningAttendanceRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/attendees/{attendeeId}/remove": { "post": { "operationId": "planningRemoveOutingAttendee", "summary": "RemoveOutingAttendee", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "attendeeId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful AttendanceReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningAttendanceReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(remove&&", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningRemoveAttendeeRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plan-chats": { "get": { "operationId": "planningListOutingChats", "summary": "ListOutingChats", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "limit", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "pattern": "^\\d+$", "default": "20", "x-walkpic-coercion": "Number", "x-walkpic-parsed-integer-minimum": 1, "x-walkpic-parsed-integer-maximum": 50 } }, { "name": "cursor", "in": "query", "required": false, "description": "Opaque signed actor/filter/limit-bound cursor; do not construct. Logical expiry15minutes.", "schema": { "type": "string", "maxLength": 2000 } } ], "responses": { "200": { "description": "Successful InboxPage", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningInboxPage" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "if(method==='GET'&&(path==='/v1/plan-chats'", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [ "limit", "cursor" ], "duplicates": "reject all", "fields": { "limit": { "default": "20", "minimum": 1, "maximum": 50 }, "cursor": { "maxLength": 2000, "TTLms": 900000, "binding": [ "actor", "limit" ] } }, "source": { "file": "service/src/plan_chat_inbox.ts", "line": 36, "selector": "function options(", "sha256": "b0eeb954cce7578211729ef1d8822ddfb460a0f890241973773a228abf36f6ee", "excerpt": "function options(params: URLSearchParams,counts=false){\n const allowed=counts?[]:['limit','cursor'];\n for(const key of params.keys())if(!allowed.includes(key)||params.getAll(key).length!==1)fail(400,'INVALID_INPUT','Invalid outing chat parameter.');\n const raw=params.get('limit')??'20';if(!/^\\d+$/.test(raw)||+raw<1||+raw>50)fail(400,'INVALID_INPUT','Choose between 1 and 50 outing chats.');return +raw;\n}\nconst ownUnread=`(SELECT count(*) FROM pt_plan_chat_messages_v1 unseen" } }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plan-chats/counts": { "get": { "operationId": "planningGetOutingChatCounts", "summary": "GetOutingChatCounts", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [], "responses": { "200": { "description": "Successful InboxCounts", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningInboxCounts" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "if(method==='GET'&&(path==='/v1/plan-chats'", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/chat/view": { "get": { "operationId": "planningGetOutingChatView", "summary": "GetOutingChatView", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "limit", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "pattern": "^\\d+$", "default": "30", "x-walkpic-coercion": "Number", "x-walkpic-parsed-integer-minimum": 1, "x-walkpic-parsed-integer-maximum": 50 } }, { "name": "cursor", "in": "query", "required": false, "description": "Opaque signed actor/filter/limit-bound cursor; do not construct. Logical expiry15minutes.", "schema": { "type": "string", "maxLength": 2000 } }, { "name": "planCards", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "const": "1" } } ], "responses": { "200": { "description": "Successful ChatView", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningChatView" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "if(method==='GET'&&(path==='/v1/plan-chats'", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [ "limit", "cursor", "planCards" ], "duplicates": "reject all", "fields": { "limit": { "default": "30", "minimum": 1, "maximum": 50 }, "cursor": { "maxLength": 2000, "TTLms": 900000 }, "planCards": { "const": "1" } }, "source": { "file": "service/src/messaging.ts", "line": 279, "selector": "async function readView", "sha256": "5ec5c3074fdeb6b433b0b29810424254f8f4fa4f45047da2459ad9c5642e5665", "excerpt": " async function readView(path: string,params: URLSearchParams,identity: IdentityProjection,options: ReadViewOptions={}) {\n const match=path.match(/^\\/v1\\/conversations\\/([^/]+)\\/view$/);\n if(!match)fail(404,'NOT_FOUND','Conversation unavailable');\n const routeId=id(match[1]),conversationId=options.selector??routeId,\n limit=query(params,['limit','planCards',...(options.allowCursor?['cursor']:[])],30),includePlanCards=params.has('planCards');\n if(includePlanCards&¶ms.get('planCards')!=='1')fail(400,'INVALID_INPUT','Invalid outing card projection');\n const resource=`${options.resource??`history:${routeId}`}${includePlanCards?':plan-cards-v1':''}`;\n // Trusted identity rows include the current actor/session. Cursor scope\n // actor is supplied by the enclosing adapter, never by request parameters.\n const cursorActor=options.actorId;\n const codecBefore=cursorActor?cursorCodec(secret,sha256(JSON.stringify({userId:cursorActor,resource,limit,direction:'older'}))):null;\n const previous=params.has('cursor')?codecBefore?.decode(params.get('cursor')):null;\n if(params.has('cursor')&&!previous)fail(400,'INVALID_CURSOR','Refresh Messages to continue');\n const {row,items}=await authorizedSnapshot(conversationId,identity,{limit,includePlanCards,singleStream:true,gateOverride:options.gate,\n ...(previous?{where:'msg.seq<=? AND msg.seqlimit?codec.encode({...state,last:page.at(-1)!.seq,lastId:''}):null}};\n }\n\n function detailBody(row: MessageSnapshotRow,fresh: MessageSnapshotRow,userId: string): MessageDetail {\n if(!row.readable||!fresh.readable)return {conversation:summary(row),permissions:{send:false,invite:false,rename:false,remove:false,end:false,leave:false}};" } }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/chat": { "get": { "operationId": "planningGetOutingChat", "summary": "GetOutingChat", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful ChatDetail", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningChatDetail" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "}else if(action==='chat'||", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/chat/messages": { "get": { "operationId": "planningGetOutingChatMessages", "summary": "GetOutingChatMessages", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "limit", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "pattern": "^\\d+$", "default": "30", "x-walkpic-coercion": "Number", "x-walkpic-parsed-integer-minimum": 1, "x-walkpic-parsed-integer-maximum": 50 } }, { "name": "cursor", "in": "query", "required": false, "description": "Opaque signed actor/filter/limit-bound cursor; do not construct. Logical expiry15minutes.", "schema": { "type": "string", "maxLength": 2000 } }, { "name": "afterSeq", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "pattern": "^\\d+$", "x-walkpic-coercion": "Number then safeInteger", "x-walkpic-conflicts": [ "cursor" ] } }, { "name": "planCards", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "const": "1" } } ], "responses": { "200": { "description": "Successful ChatHistory", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningChatHistory" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "}else if(action==='chat'||", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [ "limit", "cursor", "afterSeq", "planCards" ], "duplicates": "reject all", "fields": { "limit": { "default": "30", "minimum": 1, "maximum": 50 }, "cursor": { "maxLength": 2000, "TTLms": 900000 }, "afterSeq": { "pattern": "^\\d+$", "safeInteger": true, "mutuallyExclusiveWith": "cursor" }, "planCards": { "const": "1" } }, "source": { "file": "service/src/messaging.ts", "line": 475, "selector": "if (action === 'messages' && method === 'GET')", "sha256": "5ec5c3074fdeb6b433b0b29810424254f8f4fa4f45047da2459ad9c5642e5665", "excerpt": " if (action === 'messages' && method === 'GET') {\n const limit=query(params,['limit','cursor','afterSeq','planCards'],30),includePlanCards=params.has('planCards');\n if(includePlanCards&¶ms.get('planCards')!=='1')fail(400,'INVALID_INPUT','Invalid outing card projection');\n if(params.has('afterSeq')){\n const raw=params.get('afterSeq')!;\n if(params.has('cursor')||!/^\\d+$/.test(raw)||!Number.isSafeInteger(+raw))fail(400,'INVALID_INPUT','Choose updates or older history');\n const {row,items:rows}=await authorizedSnapshot(conversationId,actorProjection(userId),\n {limit,includePlanCards,includeDetail:false,where:'msg.seq>?',args:[+raw]});\n if(!row.readable)fail(404,'NOT_FOUND','Conversation unavailable');\n const items=rows.slice(0,limit);\n return {status:200,body:{items,hasMore:rows.length>limit,nextAfterSeq:items.at(-1)?.seq??+raw}};\n }\n const resource=`history:${conversationId}${includePlanCards?':plan-cards-v1':''}`;\n const codec=cursorCodec(secret,sha256(JSON.stringify({userId,resource,limit,direction:'older'})));\n const previous=params.has('cursor')?codec.decode(params.get('cursor')):null;\n const {row,items:rows}=await authorizedSnapshot(conversationId,actorProjection(userId),{limit,includePlanCards,includeDetail:false,\n ...(previous?{where:'msg.seq<=? AND msg.seqlimit?codec.encode({...state,last:page.at(-1)!.seq,lastId:''}):null}};\n }\n if (action === 'messages' && method === 'POST') {" } }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "description": "Outer planned adapter returns200 even when shared send/report handler produced fresh201. Body remains the delegated checked projection.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } }, "post": { "operationId": "planningSendOutingMessage", "summary": "SendOutingMessage", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful MessageReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningMessageReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "}else if(action==='chat'||", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningChatSendRequest" } } }, "x-walkpic-max-body-bytes": 24000, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "description": "Outer planned adapter returns200 even when shared send/report handler produced fresh201. Body remains the delegated checked projection.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/chat/read": { "put": { "operationId": "planningReadOutingMessages", "summary": "ReadOutingMessages", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful ChatReadReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningChatReadReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "}else if(action==='chat'||", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningChatReadRequest" } } }, "x-walkpic-max-body-bytes": 24000, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/message-reports": { "post": { "operationId": "planningReportOutingMessages", "summary": "ReportOutingMessages", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful ReportReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningReportReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(['message-reports','message-reports/preview']", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningReportRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "description": "Outer planned adapter returns200 even when shared send/report handler produced fresh201. Body remains the delegated checked projection.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/message-reports/preview": { "post": { "operationId": "planningPreviewOutingMessageReport", "summary": "PreviewOutingMessageReport", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful ReportPreview", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningReportPreview" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_api.ts", "selector": "else if(['message-reports','message-reports/preview']", "sha256": "a25a2a43921064d95aeca9a045ee94aeac0ad06670d129890cafd89e77fc07a0" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningReportPreviewRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "description": "Outer planned adapter returns200 even when shared send/report handler produced fresh201. Body remains the delegated checked projection.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/chat/plan-cards": { "post": { "operationId": "planningSendCardToOuting", "summary": "SendCardToOuting", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful CardReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "201": { "description": "Successful CardReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_cards.ts", "selector": "if(action==='plan-cards'", "sha256": "16172ded3193dd1a3cff14e0191ad9c0754043a68800192b2252236bf3b2a070" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardSendRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/chat/plan-cards/{messageId}": { "get": { "operationId": "planningGetOutingCard", "summary": "GetOutingCard", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "messageId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful CardReference", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardReference" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_cards.ts", "selector": "if(match&&method==='GET')", "sha256": "16172ded3193dd1a3cff14e0191ad9c0754043a68800192b2252236bf3b2a070" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/plans/{planId}/chat/plan-cards/{messageId}/preview": { "get": { "operationId": "planningPreviewOutingCard", "summary": "PreviewOutingCard", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "planId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "messageId", "in": "path", "required": true, "description": "Observed path identifier. Live IDs retain supplied case; other domain UUIDs lowercase.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "revisionId", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "review", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "const": "latest" } } ], "responses": { "200": { "description": "Successful CardPreview", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardPreview" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_CURSOR", "INVALID_INPUT", "INVALID_PLAN", "INVALID_REQUEST" ] } } } } } ] } } } }, "401": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_REQUIRED" ] } } } } } ] } } } }, "404": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND", "WALKING_PREPARATION_GONE" ] } } } } } ] } } } }, "409": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CAPACITY_BELOW_OCCUPIED", "CONFIRMATION_REQUIRED", "CONVERSATION_CLOSED", "HOST_MUST_CLOSE_PLAN", "IDEMPOTENCY_CONFLICT", "JOIN_CLOSED", "MEMBERSHIP_CHANGED", "MESSAGE_UNAVAILABLE", "PLAN_CHANGED", "PLAN_CHAT_MANAGED", "PLAN_FULL", "PLAN_LIMIT", "PLAN_SELECTION_CHANGED", "PLAN_SOURCE_CHANGED", "PLAN_START_PASSED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "REQUEST_RECONFIRMATION_REQUIRED", "WALKING_POLICY_CHANGED", "WALKING_PREPARATION_GONE", "WALKING_SELECTION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CURSOR_EXPIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CURSOR_EXPIRED" ] } } } } } ] } } } }, "413": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "422": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "CONTENT_NOT_ALLOWED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTENT_NOT_ALLOWED" ] } } } } } ] } } } }, "429": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "RATE_LIMITED" ] } } } } } ] } } } }, "503": { "description": "Walking/planned static sanitized errors.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] }, "message": { "type": "string", "const": "Refresh this planned walk and try again." } }, "required": [ "code", "message" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE", "PLAN_UNAVAILABLE", "ROUTE_POLICY_UNAVAILABLE", "WALKING_POLICY_CHANGED" ] } } } } } ] } } } } }, "x-walkpic-authorization": "eligible existing messaging rollout cohort + walking runtime/schema policy readiness current active actor, ACL and availability rechecked after slow work; plan detail/cards/inbox SQL snapshot boundaries Public audience or a card reference does not grant chat membership. Host or approved attendance is necessary for outing chat and still requires current active membership, plan audience SQL ACL, session/account and rollout fences. Source-plan reads always recheck current audience grants and blocks.", "x-walkpic-source": { "file": "service/src/planned_walk_cards.ts", "selector": "if(match&&method==='GET')", "sha256": "16172ded3193dd1a3cff14e0191ad9c0754043a68800192b2252236bf3b2a070" }, "x-walkpic-query-policy": { "allowed": [ "revisionId", "review" ], "cardinality": "exactly one query pair, duplicate pairs rejected", "alternatives": [ { "revisionId": "UUID" }, { "review": "latest" } ], "source": { "file": "service/src/planned_walk_cards.ts", "line": 94, "selector": "if(preview){", "sha256": "16172ded3193dd1a3cff14e0191ad9c0754043a68800192b2252236bf3b2a070", "excerpt": " if(preview){\n if([...params].length!==1)fail('INVALID_INPUT',400);\n if(params.has('revisionId'))revisionId=uuid(params.get('revisionId'));\n else if(params.get('review')==='latest')latest=true;\n else fail('INVALID_INPUT',400);\n }else if(params.size)fail('INVALID_INPUT',400);\n await requireAvailable(actorId);\n const t=cardTables[kind],target=kind==='outing'?'destination.plan_id=?':\"destination.id=? AND destination.kind IN ('direct','group')\";\n // Reference, destination visibility, current source ACL and (only for an" } }, "x-walkpic-error-mapping": { "knownCodes": "['AUTH_REQUIRED','NOT_FOUND','INVALID_PLAN','INVALID_INPUT','INVALID_REQUEST','INVALID_CURSOR','CURSOR_EXPIRED','CURSOR_CHANGED','IDEMPOTENCY_CONFLICT','PLAN_START_PASSED','PLAN_SELECTION_CHANGED','PLAN_SOURCE_CHANGED','PLAN_CHANGED','RECIPIENT_CHANGED','CAPACITY_BELOW_OCCUPIED','CONTENT_NOT_ALLOWED','PLAN_LIMIT','PLAN_UNAVAILABLE','PLAN_CARDS_UNAVAILABLE','PLAN_FULL','JOIN_CLOSED','REQUEST_RECONFIRMATION_REQUIRED','CONFIRMATION_REQUIRED','HOST_MUST_CLOSE_PLAN','RATE_LIMITED','PLAN_CHAT_MANAGED','CONVERSATION_CLOSED','MESSAGE_UNAVAILABLE','MEMBERSHIP_CHANGED','REPORT_CHANGED','ROUTE_POLICY_UNAVAILABLE','WALKING_POLICY_CHANGED','WALKING_PREPARATION_GONE','WALKING_SELECTION_CHANGED','LIMIT_EXCEEDED']", "mappingRules": [ "AUTH_REQUIRED always401", "unknown/nonknown error=> PLAN_UNAVAILABLE503", "known ApiError => original ApiError.status", "static public message Refresh this planned walk and try again.", "Retry-After60 iff429" ], "observedStaticStatusFamilies": { "INVALID_PLAN/INVALID_INPUT/INVALID_REQUEST/INVALID_CURSOR": 400, "AUTH_REQUIRED": 401, "CONTENT_NOT_ALLOWED": 422, "NOT_FOUND": 404, "CURSOR_EXPIRED": 410, "IDEMPOTENCY_CONFLICT/PLAN_CHANGED/PLAN_START_PASSED/PLAN_FULL/JOIN_CLOSED/CONFIRMATION_REQUIRED/REQUEST_RECONFIRMATION_REQUIRED/CAPACITY_BELOW_OCCUPIED/HOST_MUST_CLOSE_PLAN/PLAN_CHAT_MANAGED/MEMBERSHIP_CHANGED/REPORT_CHANGED": 409, "RATE_LIMITED": 429, "LIMIT_EXCEEDED": 413, "PLAN_UNAVAILABLE/PLAN_CARDS_UNAVAILABLE": 503 }, "knownMaskingGaps": [ { "innerCode": "INVALID_WALKING_REQUEST", "innerStatus": 422, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "REPORT_PREVIEW_EXPIRED", "innerStatus": 410, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 }, { "innerCode": "CURSOR_UNAVAILABLE", "innerStatus": 503, "outerCode": "PLAN_UNAVAILABLE", "outerStatus": 503 } ], "classification": "status families are source-derived code mappings, not a proof every code is reachable from every route" }, "x-walkpic-errors": "Static planned adapter sanitizes known ApiError codes/status. Unknown codes including INVALID_WALKING_REQUEST,REPORT_PREVIEW_EXPIRED,CURSOR_UNAVAILABLE become503 PLAN_UNAVAILABLE; rate429 Retry-After60. No runtime behavior changed.", "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true } } }, "/v1/conversations/{conversationId}/plan-cards": { "post": { "operationId": "planningSendCardToConversation", "summary": "SendCardToConversation", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "conversationId", "in": "path", "required": true, "description": "conversationId", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful CardReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "201": { "description": "Successful CardReceipt", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardReceipt" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "INVALID_REQUEST", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "PLAN_CHANGED", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "413": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED" ] } } } } } ] } } } }, "415": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_REQUEST" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_REQUEST" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } }, "503": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE" ] } } } } } ] } } } } }, "x-walkpic-authorization": "Current ordinary direct/group conversation membership and visible message boundary AND current plan/source audience ACL; account/rollout/walking/schema gates rechecked. Reference does not grant source access. Existing replay returns only content-free acknowledgement.", "x-walkpic-source": { "file": "service/src/planned_walk_cards.ts", "selector": "async function send(", "sha256": "16172ded3193dd1a3cff14e0191ad9c0754043a68800192b2252236bf3b2a070" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardSendRequest" } } }, "x-walkpic-max-body-bytes": 16384, "x-walkpic-content-type-policy": "String(contentType).startsWith('application/json'); missing/nonmatching415 INVALID_REQUEST, except walking sanitized400 INVALID_REQUEST" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT", "INVALID_REQUEST" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ], "409": [ "CONVERSATION_CLOSED", "IDEMPOTENCY_CONFLICT", "PLAN_CHANGED" ], "413": [ "LIMIT_EXCEEDED" ], "415": [ "INVALID_REQUEST" ], "429": [ "RATE_LIMITED" ], "503": [ "PLAN_CARDS_UNAVAILABLE" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/conversations/{conversationId}/plan-cards/{messageId}": { "get": { "operationId": "planningGetConversationCard", "summary": "GetConversationCard", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "conversationId", "in": "path", "required": true, "description": "conversationId", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "messageId", "in": "path", "required": true, "description": "messageId", "schema": { "$ref": "#/components/schemas/PlanningUUID" } } ], "responses": { "200": { "description": "Successful CardReference", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardReference" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } }, "503": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE" ] } } } } } ] } } } } }, "x-walkpic-authorization": "Current ordinary direct/group conversation membership and visible message boundary AND current plan/source audience ACL; account/rollout/walking/schema gates rechecked. Reference does not grant source access. Existing replay returns only content-free acknowledgement.", "x-walkpic-source": { "file": "service/src/planned_walk_cards.ts", "selector": "async function read(", "sha256": "16172ded3193dd1a3cff14e0191ad9c0754043a68800192b2252236bf3b2a070" }, "x-walkpic-query-policy": { "allowed": [], "unknown": "reject; exact status documented per adapter" }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ], "503": [ "PLAN_CARDS_UNAVAILABLE" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/v1/conversations/{conversationId}/plan-cards/{messageId}/preview": { "get": { "operationId": "planningPreviewConversationCard", "summary": "PreviewConversationCard", "tags": [ "Planning" ], "security": [ { "BearerAuth": [] } ], "parameters": [ { "name": "conversationId", "in": "path", "required": true, "description": "conversationId", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "messageId", "in": "path", "required": true, "description": "messageId", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "revisionId", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "$ref": "#/components/schemas/PlanningUUID" } }, { "name": "review", "in": "query", "required": false, "description": "Current URLSearchParams value.", "schema": { "type": "string", "const": "latest" } } ], "responses": { "200": { "description": "Successful CardPreview", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PlanningCardPreview" } } }, "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } } }, "400": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ] } } } } } ] } } } }, "401": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ] } } } } } ] } } } }, "403": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ] } } } } } ] } } } }, "404": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "NOT_FOUND" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } } }, "409": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ] } } } } } ] } } } }, "410": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ] } } } } } ] } } } }, "429": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } }, "Retry-After": { "required": true, "description": "Authored retry delay in seconds.", "schema": { "type": "string", "const": "60" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ] } } } } } ] } } } }, "500": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "INTERNAL_ERROR" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } }, "503": { "description": "Actual domain errors or finite shared global provider/DB exception classifier.", "x-walkpic-error-codes": [ "PLAN_CARDS_UNAVAILABLE" ], "headers": { "Cache-Control": { "required": true, "description": "Always-present authored Cache-Control on this response path.", "schema": { "type": "string", "const": "private, no-store" } } }, "content": { "application/json": { "schema": { "allOf": [ { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE" ] } }, "required": [ "code" ] } }, "required": [ "error" ] } ] }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "PLAN_CARDS_UNAVAILABLE" ] } } } } } ] } } } } }, "x-walkpic-authorization": "Current ordinary direct/group conversation membership and visible message boundary AND current plan/source audience ACL; account/rollout/walking/schema gates rechecked. Reference does not grant source access. Existing replay returns only content-free acknowledgement.", "x-walkpic-source": { "file": "service/src/planned_walk_cards.ts", "selector": "async function read(", "sha256": "16172ded3193dd1a3cff14e0191ad9c0754043a68800192b2252236bf3b2a070" }, "x-walkpic-query-policy": { "allowed": [ "revisionId", "review" ], "cardinality": "exactly one query pair, duplicate pairs rejected", "alternatives": [ { "revisionId": "UUID" }, { "review": "latest" } ], "source": { "file": "service/src/planned_walk_cards.ts", "line": 94, "selector": "if(preview){", "sha256": "16172ded3193dd1a3cff14e0191ad9c0754043a68800192b2252236bf3b2a070", "excerpt": " if(preview){\n if([...params].length!==1)fail('INVALID_INPUT',400);\n if(params.has('revisionId'))revisionId=uuid(params.get('revisionId'));\n else if(params.get('review')==='latest')latest=true;\n else fail('INVALID_INPUT',400);\n }else if(params.size)fail('INVALID_INPUT',400);\n await requireAvailable(actorId);\n const t=cardTables[kind],target=kind==='outing'?'destination.plan_id=?':\"destination.id=? AND destination.kind IN ('direct','group')\";\n // Reference, destination visibility, current source ACL and (only for an" } }, "x-walkpic-query-properties": { "additionalProperties": false, "uniqueKeys": true }, "x-walkpic-global-exception-classifier": { "file": "service/src/app.ts", "selector": "http.createServer catch, plain error.message code regex -> finite status map", "normalErrors": { "400": [ "INVALID_INPUT" ], "401": [ "AUTH_REQUIRED" ], "404": [ "NOT_FOUND" ], "503": [ "PLAN_CARDS_UNAVAILABLE" ] }, "exceptionalProviderErrors": { "400": [ "INVALID_INPUT", "VERIFIED_EMAIL_REQUIRED" ], "401": [ "AUTH_CHALLENGE_EXPIRED", "AUTH_REQUIRED" ], "403": [ "CONTACT_NOT_ALLOWED", "REQUEST_PENDING" ], "404": [ "NOT_FOUND" ], "409": [ "ALREADY_COMMITTED", "ASSET_UNAVAILABLE", "CONVERSATION_CLOSED", "EMAIL_IN_USE", "GROUP_FULL", "IDEMPOTENCY_CONFLICT", "INVITATION_CHANGED", "OWNER_MUST_END_GROUP", "RECIPIENT_CHANGED", "REPORT_CHANGED", "SELF_LIKE", "UPLOAD_CLOSED", "VERSION_CHANGED" ], "410": [ "ACCOUNT_DELETED", "REVISION_REVOKED" ], "429": [ "LIMIT_EXCEEDED", "RATE_LIMITED" ], "500": [ "INTERNAL_ERROR" ] }, "note": "Some statuses/codes are exceptional provider/DB-message classifier outcomes, not ordinary domain transitions. ApiError source domain errors retain their explicit status/code; unrecognized non-ApiError is500 INTERNAL_ERROR. No arbitrary code/default success/error allowed by contract." } } }, "/healthz": { "get": { "operationId": "transportReadHealth", "summary": "ReadHealth", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TransportHealth" } } } }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": [ { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, { "file": "service/src/app.ts", "selector": "await db.query('SELECT 1')", "line": 260, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } ], "x-walkpic-status-facts": { "200": "One SQL query SELECT 1 resolved", "500": "Provider/internal error becomes CommonError INTERNAL_ERROR unless global mapped ApiError/error-code handling applies" } } }, "/": { "get": { "operationId": "transportReadRootViewer", "summary": "ReadRootViewer", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "text/html; charset=utf-8" } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "text/html": { "schema": { "$ref": "#/components/schemas/TransportHtml" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "index.html", "x-walkpic-byte-transport": true, "x-walkpic-html-publication-privacy": "No publication lookup and no server-side embedded user/publication data; public HTML alone is not proof a walk is readable." }, "head": { "operationId": "transportHeadRootViewer", "summary": "HeadRootViewer", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "text/html; charset=utf-8" } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "index.html", "x-walkpic-byte-transport": true, "x-walkpic-html-publication-privacy": "No publication lookup and no server-side embedded user/publication data; public HTML alone is not proof a walk is readable." } }, "/p/{publicationId}": { "get": { "operationId": "transportReadPublicationViewer", "summary": "ReadPublicationViewer", "security": [], "parameters": [ { "in": "path", "name": "publicationId", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "Legacy 36-character hexadecimal-or-hyphen path selector, not UUID validation. Even an all-hyphen selector returns the same index.html if present." }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "text/html; charset=utf-8" } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "text/html": { "schema": { "$ref": "#/components/schemas/TransportHtml" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "index.html", "x-walkpic-byte-transport": true, "x-walkpic-html-publication-privacy": "No publication lookup and no server-side embedded user/publication data; public HTML alone is not proof a walk is readable." }, "head": { "operationId": "transportHeadPublicationViewer", "summary": "HeadPublicationViewer", "security": [], "parameters": [ { "in": "path", "name": "publicationId", "required": true, "schema": { "type": "string", "pattern": "^[0-9a-fA-F-]{36}$" }, "description": "Legacy 36-character hexadecimal-or-hyphen path selector, not UUID validation. Even an all-hyphen selector returns the same index.html if present." }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "text/html; charset=utf-8" } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "index.html", "x-walkpic-byte-transport": true, "x-walkpic-html-publication-privacy": "No publication lookup and no server-side embedded user/publication data; public HTML alone is not proof a walk is readable." } }, "/main.dart.js": { "get": { "operationId": "transportReadMainDartJs", "summary": "ReadMainDartJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "main.dart.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/main.dart.js", "sha256": "f4b96a4e17ac5a076b3cf988eeb11e49282c2dda73c16fb728f013bee9861c66", "bytes": 2950082 } }, "head": { "operationId": "transportHeadMainDartJs", "summary": "HeadMainDartJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "main.dart.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/main.dart.js", "sha256": "f4b96a4e17ac5a076b3cf988eeb11e49282c2dda73c16fb728f013bee9861c66", "bytes": 2950082 } } }, "/flutter.js": { "get": { "operationId": "transportReadFlutterJs", "summary": "ReadFlutterJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "flutter.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/flutter.js", "sha256": "2beb1ce6b159c71540aa66030af1d7964b6a92377cc78473745e02f97b74effe", "bytes": 12136 } }, "head": { "operationId": "transportHeadFlutterJs", "summary": "HeadFlutterJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "flutter.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/flutter.js", "sha256": "2beb1ce6b159c71540aa66030af1d7964b6a92377cc78473745e02f97b74effe", "bytes": 12136 } } }, "/flutter_bootstrap.js": { "get": { "operationId": "transportReadFlutterBootstrapJs", "summary": "ReadFlutterBootstrapJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "flutter_bootstrap.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/flutter_bootstrap.js", "sha256": "c51950211dc9fd0557e9f3b00b76e884b274fa3d753d8b31902871859389e3f3", "bytes": 13085 } }, "head": { "operationId": "transportHeadFlutterBootstrapJs", "summary": "HeadFlutterBootstrapJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "flutter_bootstrap.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/flutter_bootstrap.js", "sha256": "c51950211dc9fd0557e9f3b00b76e884b274fa3d753d8b31902871859389e3f3", "bytes": 13085 } } }, "/walkpic_map.js": { "get": { "operationId": "transportReadWalkpicMapJs", "summary": "ReadWalkpicMapJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "walkpic_map.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/walkpic_map.js", "sha256": "9876638c5599cf854062391c10d358c9526197e49c6a5d3c589aa1f2c03f9881", "bytes": 11501 } }, "head": { "operationId": "transportHeadWalkpicMapJs", "summary": "HeadWalkpicMapJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "walkpic_map.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/walkpic_map.js", "sha256": "9876638c5599cf854062391c10d358c9526197e49c6a5d3c589aa1f2c03f9881", "bytes": 11501 } } }, "/phototracker_map.js": { "get": { "operationId": "transportReadPhototrackerMapJs", "summary": "ReadPhototrackerMapJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "walkpic_map.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/walkpic_map.js", "sha256": "9876638c5599cf854062391c10d358c9526197e49c6a5d3c589aa1f2c03f9881", "bytes": 11501 } }, "head": { "operationId": "transportHeadPhototrackerMapJs", "summary": "HeadPhototrackerMapJs", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/javascript; charset=utf-8" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "walkpic_map.js", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/walkpic_map.js", "sha256": "9876638c5599cf854062391c10d358c9526197e49c6a5d3c589aa1f2c03f9881", "bytes": 11501 } } }, "/manifest.json": { "get": { "operationId": "transportReadManifestJson", "summary": "ReadManifestJson", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/json" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "manifest.json", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/manifest.json", "sha256": "60fc6baf6a3d7b2ede360481ca1cad576fd8bf038efd7e4adb9a111c3a390086", "bytes": 910 } }, "head": { "operationId": "transportHeadManifestJson", "summary": "HeadManifestJson", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "application/json" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "manifest.json", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/manifest.json", "sha256": "60fc6baf6a3d7b2ede360481ca1cad576fd8bf038efd7e4adb9a111c3a390086", "bytes": 910 } } }, "/favicon.png": { "get": { "operationId": "transportReadFaviconPng", "summary": "ReadFaviconPng", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "image/png" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "image/png": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "favicon.png", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/favicon.png", "sha256": "7ab2525f4b86b65d3e4c70358a17e5a1aaf6f437f99cbcc046dad73d59bb9015", "bytes": 917 } }, "head": { "operationId": "transportHeadFaviconPng", "summary": "HeadFaviconPng", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "image/png" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "favicon.png", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/favicon.png", "sha256": "7ab2525f4b86b65d3e4c70358a17e5a1aaf6f437f99cbcc046dad73d59bb9015", "bytes": 917 } } }, "/favicon.svg": { "get": { "operationId": "transportReadFaviconSvg", "summary": "ReadFaviconSvg", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "image/svg+xml" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "image/svg+xml": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-file-mapping": "favicon.svg", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/favicon.svg", "sha256": "27e4feed941733751a3be2a3e67f46f37c7b745c420a63a1126a482dee149e57", "bytes": 365 } }, "head": { "operationId": "transportHeadFaviconSvg", "summary": "HeadFaviconSvg", "security": [], "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "image/svg+xml" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-file-mapping": "favicon.svg", "x-walkpic-byte-transport": true, "x-walkpic-current-artifact": { "file": "service/static-web/favicon.svg", "sha256": "27e4feed941733751a3be2a3e67f46f37c7b745c420a63a1126a482dee149e57", "bytes": 365 } } }, "/assets/{assetPath}": { "get": { "operationId": "transportReadAssetsAsset", "summary": "ReadAssetsAsset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "text/html": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/json": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/png": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/jpeg": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/wasm": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/ttf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/otf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/svg+xml": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/octet-stream": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, prefix + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream" } }, "head": { "operationId": "transportHeadAssetsAsset", "summary": "HeadAssetsAsset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, prefix + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream" } } }, "/canvaskit/{assetPath}": { "get": { "operationId": "transportReadCanvaskitAsset", "summary": "ReadCanvaskitAsset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "text/html": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/json": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/png": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/jpeg": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/wasm": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/ttf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/otf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/svg+xml": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/octet-stream": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, prefix + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream" } }, "head": { "operationId": "transportHeadCanvaskitAsset", "summary": "HeadCanvaskitAsset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, prefix + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream" } } }, "/icons/{assetPath}": { "get": { "operationId": "transportReadIconsAsset", "summary": "ReadIconsAsset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "text/html": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/json": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/png": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/jpeg": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/wasm": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/ttf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/otf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/svg+xml": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/octet-stream": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, prefix + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream" } }, "head": { "operationId": "transportHeadIconsAsset", "summary": "HeadIconsAsset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, prefix + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream" } } }, "/packages/{assetPath}": { "get": { "operationId": "transportReadPackagesAsset", "summary": "ReadPackagesAsset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "content": { "text/html": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/json": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/png": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/jpeg": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/wasm": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/ttf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/otf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/svg+xml": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/octet-stream": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, prefix + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream" } }, "head": { "operationId": "transportHeadPackagesAsset", "summary": "HeadPackagesAsset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream" ] } }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if((method==='GET'||method==='HEAD')", "line": 347, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, prefix + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream" } } }, "/support": { "get": { "operationId": "transportReadSupportRedirect", "summary": "Redirect public support document", "security": [], "responses": { "308": { "description": "Permanent public-document redirect", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Location": { "schema": { "type": "string", "const": "https://walkpic.com/support" } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(['/support','/privacy','/delete-account'].includes(path)", "line": 278, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-no-response-body": true, "x-walkpic-location-rule": "Fixed public canonical document URL; supplied query is dropped, independent of configured publicOrigin/viewerOrigin.", "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." } ] }, "head": { "operationId": "transportHeadSupportRedirect", "summary": "Redirect public support document", "security": [], "responses": { "308": { "description": "Permanent public-document redirect", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Location": { "schema": { "type": "string", "const": "https://walkpic.com/support" } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(['/support','/privacy','/delete-account'].includes(path)", "line": 278, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-no-response-body": true, "x-walkpic-location-rule": "Fixed public canonical document URL; supplied query is dropped, independent of configured publicOrigin/viewerOrigin.", "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." } ] } }, "/privacy": { "get": { "operationId": "transportReadPrivacyRedirect", "summary": "Redirect public privacy document", "security": [], "responses": { "308": { "description": "Permanent public-document redirect", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Location": { "schema": { "type": "string", "const": "https://walkpic.com/privacy" } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(['/support','/privacy','/delete-account'].includes(path)", "line": 278, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-no-response-body": true, "x-walkpic-location-rule": "Fixed public canonical document URL; supplied query is dropped, independent of configured publicOrigin/viewerOrigin.", "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." } ] }, "head": { "operationId": "transportHeadPrivacyRedirect", "summary": "Redirect public privacy document", "security": [], "responses": { "308": { "description": "Permanent public-document redirect", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Location": { "schema": { "type": "string", "const": "https://walkpic.com/privacy" } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(['/support','/privacy','/delete-account'].includes(path)", "line": 278, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-no-response-body": true, "x-walkpic-location-rule": "Fixed public canonical document URL; supplied query is dropped, independent of configured publicOrigin/viewerOrigin.", "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." } ] } }, "/delete-account": { "get": { "operationId": "transportReadDeleteAccountRedirect", "summary": "Redirect public delete-account document", "security": [], "responses": { "308": { "description": "Permanent public-document redirect", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Location": { "schema": { "type": "string", "const": "https://walkpic.com/delete-account" } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(['/support','/privacy','/delete-account'].includes(path)", "line": 278, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-no-response-body": true, "x-walkpic-location-rule": "Fixed public canonical document URL; supplied query is dropped, independent of configured publicOrigin/viewerOrigin.", "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." } ] }, "head": { "operationId": "transportHeadDeleteAccountRedirect", "summary": "Redirect public delete-account document", "security": [], "responses": { "308": { "description": "Permanent public-document redirect", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Location": { "schema": { "type": "string", "const": "https://walkpic.com/delete-account" } } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(['/support','/privacy','/delete-account'].includes(path)", "line": 278, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-no-response-body": true, "x-walkpic-location-rule": "Fixed public canonical document URL; supplied query is dropped, independent of configured publicOrigin/viewerOrigin.", "parameters": [ { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." } ] } }, "/{path}": { "options": { "operationId": "transportPreflightAnyPath", "summary": "Global HTTP OPTIONS", "security": [], "parameters": [ { "in": "path", "name": "path", "required": true, "schema": { "type": "string" }, "description": "Greedy entire pathname; also matches empty root path. Applies to existing API/static/unknown paths before any route/auth/body/database work." }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "CORS origin handling follows exact configured-origin equality; unmatched origin receives no Access-Control-Allow-Origin." }, { "in": "header", "name": "Access-Control-Request-Method", "required": false, "schema": { "type": "string" }, "description": "Ignored; does not affect global allowed-methods response." }, { "in": "header", "name": "Access-Control-Request-Headers", "required": false, "schema": { "type": "string" }, "description": "Ignored; response is fixed allowed headers list." } ], "responses": { "204": { "description": "No content; preflight returned before authentication or route dispatch", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." } } } }, "x-walkpic-authorization": { "authentication": "None; branch returns before auth(req). Invalid supplied bearer and capability headers are ignored. No consumer grant or domain ACL is asserted.", "source": { "file": "service/src/app.ts", "selector": "if(path==='/healthz'&&method==='GET')", "line": 259, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this branch; do not reject them in legacy v1 validators.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "if(method==='OPTIONS')", "line": 208, "sha256": "f6977d7867034e14dc530f8b9f83d2027cd6449a04fabb79ecc3e80f00b78913" }, "x-walkpic-greedy-path-parameter": "path", "x-walkpic-includes-root": true, "x-walkpic-ignored-request-body": true, "x-walkpic-dispatch-priority": "First return after common response headers; shadows every exact API/static route on OPTIONS including planning sources. Does not check resource existence or offered method.", "x-walkpic-no-response-body": true } }, "/viewer-assets/{assetPath}": { "get": { "operationId": "transportReadViewerAsset", "summary": "Read opt-in TypeScript viewer asset", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" }, "required": true }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" }, "required": true }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" }, "required": true }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" }, "required": true }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" }, "required": true }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" }, "required": true }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" }, "required": true }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" }, "required": true }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" }, "required": true }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" }, "required": true }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream", "text/css; charset=utf-8", "audio/mpeg", "text/plain; charset=utf-8" ] }, "required": true }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored.", "required": true }, "Access-Control-Expose-Headers": { "schema": { "type": "string", "const": "Accept-Ranges, Content-Range, X-WalkPic-Media-Length" }, "description": "Only present in current approved/absent-Origin CORS branch; no credentials or extra origin permission." } }, "content": { "text/html": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/javascript": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/json": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/png": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/jpeg": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/wasm": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/ttf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "font/otf": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "image/svg+xml": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "application/octet-stream": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "text/css": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "audio/mpeg": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } }, "text/plain": { "schema": { "$ref": "#/components/schemas/TransportAssetBytes" } } } }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } }, "Access-Control-Expose-Headers": { "schema": { "type": "string", "const": "Accept-Ranges, Content-Range, X-WalkPic-Media-Length" }, "description": "Only present in current approved/absent-Origin CORS branch; no credentials or extra origin permission." } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "NOT_FOUND" ] } } } } } ] } } }, "x-walkpic-error-codes": [ "NOT_FOUND" ] }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } }, "Access-Control-Expose-Headers": { "schema": { "type": "string", "const": "Accept-Ranges, Content-Range, X-WalkPic-Media-Length" }, "description": "Only present in current approved/absent-Origin CORS branch; no credentials or extra origin permission." } }, "content": { "application/json": { "schema": { "allOf": [ { "$ref": "#/components/schemas/CommonError" }, { "type": "object", "additionalProperties": true, "properties": { "error": { "type": "object", "additionalProperties": true, "properties": { "code": { "type": "string", "enum": [ "INTERNAL_ERROR" ] } } } } } ] } } } } }, "x-walkpic-authorization": { "authentication": "None; trusted server config.viewerRuntime===typescript enables this public static branch before authentication. No user capability or grant enables this runtime selection.", "source": { "file": "service/src/app.ts", "selector": "config.viewerRuntime==='typescript'&&/^\\/viewer-assets\\/", "line": 350, "sha256": "2ecfee3b8f1deeae0aad3627378d8b4b10a40b0b1eb60d8c62f6b8d33d2d2f0c" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this public static branch.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "config.viewerRuntime==='typescript'&&/^\\/viewer-assets\\/", "line": 350, "sha256": "2ecfee3b8f1deeae0aad3627378d8b4b10a40b0b1eb60d8c62f6b8d33d2d2f0c" }, "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, viewer-assets + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream", ".css": "text/css; charset=utf-8", ".mp3": "audio/mpeg", ".txt": "text/plain; charset=utf-8" }, "x-walkpic-trusted-runtime-selection": "Only config.viewerRuntime===typescript admits /viewer-assets prefix; otherwise normal GET/HEAD not-found dispatch applies. There is no public query/credential selector." }, "head": { "operationId": "transportHeadViewerAsset", "summary": "Read opt-in TypeScript viewer asset metadata", "security": [], "parameters": [ { "in": "path", "name": "assetPath", "required": true, "schema": { "type": "string", "pattern": "^[A-Za-z0-9_./-]+$" }, "description": "Greedy path suffix including nested / separators. OpenAPI standard templating does not itself describe greedy matching; routers must preserve the source prefix+suffix matcher. Percent-encoded path separators/characters remain % in URL.pathname and fail this ASCII matcher.", "x-walkpic-client-path-encoding": "segments" }, { "in": "header", "name": "Origin", "required": false, "schema": { "type": "string" }, "description": "Controls optional CORS response header only; unmatched origin does not deny this public route." }, { "in": "header", "name": "Range", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-None-Match", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." }, { "in": "header", "name": "If-Modified-Since", "required": false, "schema": { "type": "string" }, "description": "Ignored by this static file branch; no partial/conditional response." } ], "responses": { "200": { "description": "Successful transport response", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" }, "required": true }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" }, "required": true }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" }, "required": true }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" }, "required": true }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" }, "required": true }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" }, "required": true }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" }, "required": true }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" }, "required": true }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" }, "required": true }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" }, "required": true }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "enum": [ "text/html; charset=utf-8", "application/javascript; charset=utf-8", "application/json", "image/png", "image/jpeg", "application/wasm", "font/ttf", "font/otf", "image/svg+xml", "application/octet-stream", "text/css; charset=utf-8", "audio/mpeg", "text/plain; charset=utf-8" ] }, "required": true }, "Content-Length": { "schema": { "type": "string", "pattern": "^[0-9]+$" }, "description": "Full file byte count, also present on HEAD. Range is ignored.", "required": true }, "Access-Control-Expose-Headers": { "schema": { "type": "string", "const": "Accept-Ranges, Content-Range, X-WalkPic-Media-Length" }, "description": "Only present in current approved/absent-Origin CORS branch; no credentials or extra origin permission." } }, "x-walkpic-no-response-body": true }, "404": { "description": "NOT_FOUND: File not found for resolved path outside webRoot; Web viewer unavailable when readFile fails. Error contains no filesystem path.", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } }, "Access-Control-Expose-Headers": { "schema": { "type": "string", "const": "Accept-Ranges, Content-Range, X-WalkPic-Media-Length" }, "description": "Only present in current approved/absent-Origin CORS branch; no credentials or extra origin permission." } }, "x-walkpic-error-codes": [ "NOT_FOUND" ], "x-walkpic-no-response-body": true }, "500": { "description": "Internal service failure", "headers": { "Cache-Control": { "schema": { "type": "string", "const": "no-store" } }, "Referrer-Policy": { "schema": { "type": "string", "const": "no-referrer" } }, "X-Robots-Tag": { "schema": { "type": "string", "const": "noindex, nofollow, noarchive" } }, "X-Content-Type-Options": { "schema": { "type": "string", "const": "nosniff" } }, "X-Frame-Options": { "schema": { "type": "string", "const": "DENY" } }, "Permissions-Policy": { "schema": { "type": "string", "const": "camera=(), microphone=(), geolocation=()" } }, "Vary": { "schema": { "type": "string", "const": "Origin, Authorization, X-PhotoTracker-Link" } }, "Access-Control-Allow-Methods": { "schema": { "type": "string", "const": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS" } }, "Access-Control-Allow-Headers": { "schema": { "type": "string", "const": "Authorization,Content-Type,Range,Cache-Control,X-PhotoTracker-Link,X-WalkPic-Route-Profiles" } }, "Content-Security-Policy": { "schema": { "type": "string", "const": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' blob: https://cdn.apple-mapkit.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; worker-src 'self' blob:; frame-src https:; media-src 'self' blob: data:" } }, "Access-Control-Allow-Origin": { "schema": { "type": "string" }, "description": "Present only when Origin is absent or matches publicOrigin/viewerOrigin/configured webAppOrigin. Value is request Origin when supplied, otherwise publicOrigin (default *). Unmatched Origin suppresses this header; it does not deny the response." }, "Content-Type": { "schema": { "type": "string", "const": "application/json; charset=utf-8" } }, "Access-Control-Expose-Headers": { "schema": { "type": "string", "const": "Accept-Ranges, Content-Range, X-WalkPic-Media-Length" }, "description": "Only present in current approved/absent-Origin CORS branch; no credentials or extra origin permission." } }, "x-walkpic-no-response-body": true } }, "x-walkpic-authorization": { "authentication": "None; trusted server config.viewerRuntime===typescript enables this public static branch before authentication. No user capability or grant enables this runtime selection.", "source": { "file": "service/src/app.ts", "selector": "config.viewerRuntime==='typescript'&&/^\\/viewer-assets\\/", "line": 350, "sha256": "2ecfee3b8f1deeae0aad3627378d8b4b10a40b0b1eb60d8c62f6b8d33d2d2f0c" } }, "x-walkpic-query-behavior": "All query names, duplicates and values ignored by this public static branch.", "x-walkpic-normalized-path": "WHATWG URL pathname; a single trailing slash removed before dispatch except root. Static filename/tree path matching is case-sensitive; publication route regex is case-insensitive.", "x-walkpic-source": { "file": "service/src/app.ts", "selector": "config.viewerRuntime==='typescript'&&/^\\/viewer-assets\\/", "line": 350, "sha256": "2ecfee3b8f1deeae0aad3627378d8b4b10a40b0b1eb60d8c62f6b8d33d2d2f0c" }, "description": "Same status and headers as GET; Node HTTP suppresses all response bodies for HEAD, including error JSON.", "x-walkpic-greedy-path-parameter": "assetPath", "x-walkpic-byte-transport": true, "x-walkpic-static-file-resolution": "resolve(webRoot, viewer-assets + / + assetPath); resolved file must remain in webRoot. No directory index/listing. Nested suffixes accepted; unknown/missing/directory paths return404. No If-None-Match/If-Modified-Since/Range handling; successful responses always full200 without ETag/Last-Modified/Accept-Ranges.", "x-walkpic-mime-extension-map": { ".html": "text/html; charset=utf-8", ".js": "application/javascript; charset=utf-8", ".json": "application/json", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".wasm": "application/wasm", ".ttf": "font/ttf", ".otf": "font/otf", ".svg": "image/svg+xml", "default": "application/octet-stream", ".css": "text/css; charset=utf-8", ".mp3": "audio/mpeg", ".txt": "text/plain; charset=utf-8" }, "x-walkpic-trusted-runtime-selection": "Only config.viewerRuntime===typescript admits /viewer-assets prefix; otherwise normal GET/HEAD not-found dispatch applies. There is no public query/credential selector." } } }, "components": { "securitySchemes": { "BearerAuth": { "type": "http", "scheme": "bearer", "bearerFormat": "Opaque session token", "description": "WalkPic identity/session credential. Server verifies the current session and domain access. Optional authentication permits omission, but a supplied invalid credential is still rejected. MeshAgent room keys are not consumer credentials." }, "DeletionReceipt": { "type": "apiKey", "in": "header", "name": "Authorization", "description": "Deletion receipt capability using Authorization: Deletion . It permits only its dedicated deletion-status operations, not session or domain access." }, "PublicationLink": { "type": "apiKey", "in": "header", "name": "X-PhotoTracker-Link", "description": "Current publication-link capability, scoped to the matching publication and its current access state. Rotation, revocation, deletion and applicable blocks still deny access." }, "LegacyPublicationLinkQuery": { "type": "apiKey", "in": "query", "name": "token", "description": "Legacy publication capability transport; new consumers use the header. The header takes precedence when supplied." }, "LiveWriter": { "type": "apiKey", "in": "header", "name": "X-WalkPic-Live-Writer", "description": "Writer capability for a specific live session. Each operation still enforces its actual owner, session and writer requirements; this key grants no other resource access." }, "IntegrationBearer": { "type": "http", "scheme": "bearer", "bearerFormat": "wp_int.", "description": "Scoped revocable WalkPic API grant, accepted only on explicitly versioned integration operations. Current token, client, immutable grant version, account, real derived session and all declared scopes are checked in SQL, with a fresh check after slow work. A grant is separate from human sign-in, room credentials and publication capabilities." }, "IntegrationRefresh": { "type": "http", "scheme": "bearer", "bearerFormat": "wp_int_refresh.", "description": "A current opaque refresh capability for the exact personal grant and registered client. Accepted solely on POST /v1/integrations/refresh. Rotation is explicit, bounded and cannot extend the grant lifetime or approved scopes. No room keys, human sessions or access-token fallback." } }, "schemas": { "CommonError": { "type": "object", "additionalProperties": false, "required": [ "error" ], "properties": { "error": { "type": "object", "additionalProperties": false, "required": [ "code", "message" ], "properties": { "code": { "type": "string", "minLength": 1 }, "message": { "type": "string" } } } } }, "ContentRoutePoint": { "type": "object", "additionalProperties": false, "properties": { "lat": { "type": "number", "minimum": -90, "maximum": 90, "x-walkpic-field-rules": { "finite": true } }, "lng": { "type": "number", "minimum": -180, "maximum": 180, "x-walkpic-field-rules": { "finite": true } }, "segment": { "type": "integer", "minimum": 0, "maximum": 999 } }, "required": [ "lat", "lng", "segment" ] }, "ContentPin": { "type": "object", "additionalProperties": false, "properties": { "photoId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "lat": { "type": "number", "minimum": -90, "maximum": 90, "x-walkpic-field-rules": { "finite": true } }, "lng": { "type": "number", "minimum": -180, "maximum": 180, "x-walkpic-field-rules": { "finite": true } }, "mode": { "type": "string", "enum": [ "photo", "pin" ] } }, "required": [ "photoId", "lat", "lng", "mode" ], "x-walkpic-field-rules": { "crossFieldRules": [ "photo mode must reference a photo manifest ID; pin mode must not reference one", "pin photoId values must be unique" ] }, "x-walkpic-cross-field-rules": [ "photo mode must reference a photo manifest ID; pin mode must not reference one", "pin photoId values must be unique" ] }, "ContentPhotoManifest": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "sha256": { "type": "string", "pattern": "^[a-fA-F0-9]{64}$", "x-walkpic-normalization": "lowercase", "x-walkpic-field-rules": { "caseInsensitive": true } }, "bytes": { "type": "integer", "minimum": 1, "maximum": 12000000 }, "mimeType": { "type": "string", "enum": [ "image/jpeg" ] }, "takenAt": { "type": [ "string", "null" ], "maxLength": 40, "x-walkpic-pattern-rule": "^YYYY-MM-DDTHH:mm:ss(?:\\.fraction)?(?:Z|[+-]HH:mm)$", "x-walkpic-normalization": "null/absence omitted; zoned RFC3339-like full timestamp with real Gregorian date, 1–6 fractional digits; converted to ISO UTC milliseconds", "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{1,6})?(?:Z|[+-]\\d{2}:\\d{2})$" } }, "required": [ "id", "sha256", "bytes", "mimeType" ] }, "ContentPrepareRequest": { "type": "object", "additionalProperties": false, "properties": { "idempotencyKey": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "title": { "type": "string", "maxLength": 120, "pattern": "\\S", "x-walkpic-trimmed-min-length": 1, "x-walkpic-normalization": "trim after original-length check", "x-walkpic-field-rules": { "trimmedNonempty": true }, "x-walkpic-max-utf16-code-units": 120 }, "dateLabel": { "type": "string", "maxLength": 64, "pattern": "\\S", "x-walkpic-trimmed-min-length": 1, "x-walkpic-normalization": "trim after original-length check", "x-walkpic-field-rules": { "trimmedNonempty": true }, "x-walkpic-max-utf16-code-units": 64 }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] }, "route": { "type": "array", "items": { "$ref": "#/components/schemas/ContentRoutePoint" }, "maxItems": 5000 }, "pins": { "type": "array", "items": { "$ref": "#/components/schemas/ContentPin" }, "maxItems": 500, "x-walkpic-field-rules": { "uniqueBy": "photoId" } }, "photos": { "type": "array", "items": { "$ref": "#/components/schemas/ContentPhotoManifest" }, "maxItems": 300, "x-walkpic-field-rules": { "uniqueBy": "id", "aggregateBytesMaximum": 300000000 } }, "coverPhotoId": { "type": [ "string", "null" ], "default": null, "pattern": "^[A-Za-z0-9_-]{1,64}$", "x-walkpic-field-rules": { "mustReference": "photoManifest.id" } }, "recipientIds": { "type": "array", "items": { "type": "string", "x-walkpic-pattern-rule": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ (case insensitive)", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "maxItems": 100, "x-walkpic-normalization": "deduplicate and lexical sort; UUID case retained" }, "enableUnlistedLink": { "$ref": "#/components/schemas/ContentJsonValue" }, "durationSeconds": { "type": [ "integer", "null" ], "minimum": 0, "maximum": 31536000, "x-walkpic-normalization": "null/absence omitted from digest" }, "photoQuality": { "type": "string", "enum": [ "dataSaver", "balanced", "high" ], "x-walkpic-normalization": "absent preserves pre-quality digest; effective processing balanced" }, "story": { "$ref": "#/components/schemas/ContentStoryRequest" } }, "required": [ "idempotencyKey", "title", "dateLabel", "route", "pins", "photos", "audience", "recipientIds" ], "x-walkpic-field-rules": { "crossFieldRules": [ "at least one route point, pin, or photo", "specific requires nonempty deduplicated recipientIds; all other audiences require empty recipientIds", "new receipt digest hashes normalized publication excluding idempotencyKey", "same actor/key with changed normalized digest ->409 IDEMPOTENCY_CONFLICT" ] }, "x-walkpic-cross-field-rules": [ "at least one route point, pin, or photo", "specific requires nonempty deduplicated recipientIds; all other audiences require empty recipientIds", "new receipt digest hashes normalized publication excluding idempotencyKey", "same actor/key with changed normalized digest ->409 IDEMPOTENCY_CONFLICT" ], "x-walkpic-source": [ { "file": "service/src/validation.ts", "selector": "export function validatePrepare", "line": 54, "sourceSha256": "0de11ea68901393a90ebe027c428cc2945dcee56c945656481fb74dd68cd62c1" }, { "file": "service/src/validation.ts", "selector": "function captureTime", "line": 39, "sourceSha256": "0de11ea68901393a90ebe027c428cc2945dcee56c945656481fb74dd68cd62c1" } ] }, "ContentSessionStatus": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string" }, "sessionId": { "type": "string", "x-walkpic-field-rules": { "equalTo": "publicationId" } }, "status": { "type": "string", "enum": [ "pending", "active", "restricted", "cancelled" ] }, "linkEnabled": { "type": "boolean" }, "missingPhotoIds": { "type": "array", "items": { "type": "string" }, "x-walkpic-field-rules": { "orderedBy": "photo ID" } } }, "required": [ "publicationId", "sessionId", "status", "linkEnabled", "missingPhotoIds" ] }, "ContentCommitReceipt": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string" }, "status": { "type": "string", "enum": [ "active" ] }, "unlistedToken": { "type": [ "string", "null" ], "x-walkpic-field-rules": { "generatedPattern": "43 base64url chars from 32 random bytes" } } }, "required": [ "publicationId", "status", "unlistedToken" ] }, "ContentCloseReceipt": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string" }, "status": { "type": "string", "enum": [ "restricted", "cancelled" ] } }, "required": [ "publicationId", "status" ] }, "ContentLinkReceipt": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string" }, "status": { "type": "string", "enum": [ "rotated", "revoked" ] }, "unlistedToken": { "type": [ "string", "null" ] } }, "required": [ "publicationId", "status", "unlistedToken" ] }, "ContentUploadReceipt": { "type": "object", "additionalProperties": false, "properties": { "status": { "type": "string", "enum": [ "uploaded" ] }, "photoId": { "type": "string" }, "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$", "x-walkpic-field-rules": { "note": "stored normalized JPEG hash on fresh acknowledgement; omitted on already-uploaded early return" } } }, "required": [ "status", "photoId" ] }, "ContentCheckinRequest": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$", "minLength": 1 }, "placeId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "category": { "type": "string", "enum": [ "restaurant", "cafe", "other" ] }, "placeType": { "type": [ "string", "null" ], "enum": [ "restaurant", "cafe", "hotel", "shop", "museum", "park", "other", null ], "x-walkpic-normalization": "null omitted" }, "visibility": { "type": [ "string", "null" ], "enum": [ "public", "private", null ], "x-walkpic-normalization": "null omitted" }, "name": { "type": "string", "maxLength": 160, "pattern": "^(?=[\\s\\S]*\\S)[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-trimmed-min-length": 1, "x-walkpic-field-rules": { "trimmedNonempty": true }, "x-walkpic-max-utf16-code-units": 160 }, "address": { "type": [ "string", "null" ], "maxLength": 300, "default": "", "x-walkpic-normalization": "trim", "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-max-utf16-code-units": 300 }, "review": { "type": [ "string", "null" ], "maxLength": 1200, "default": "", "x-walkpic-normalization": "trim", "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-max-utf16-code-units": 1200 }, "lat": { "type": "number", "minimum": -90, "maximum": 90, "x-walkpic-field-rules": { "finite": true } }, "lng": { "type": "number", "minimum": -180, "maximum": 180, "x-walkpic-field-rules": { "finite": true } }, "visitedAt": { "type": "string", "maxLength": 40, "x-walkpic-field-rules": { "acceptedBy": "finite Date.parse, no strict timezone/real-calendar normalization" }, "description": "Date.parse must be finite; legacy local dates/impossible calendar normalization can pass. No date-time format hardening.", "x-walkpic-max-utf16-code-units": 40 }, "rating": { "type": [ "integer", "null" ], "minimum": 1, "maximum": 5, "default": null } }, "required": [ "id", "placeId", "category", "name", "lat", "lng", "visitedAt" ], "x-walkpic-field-rules": { "textRule": "reject U+0000–0008,U+000B,C,U+000E–001F,U+007F; CR/LF/tab allowed" }, "x-walkpic-source": [ { "file": "service/src/publication_story.ts", "selector": "export function validateCheckins", "line": 97, "sourceSha256": "0b842775d37f6486e94a8fc0ae02d368c38f560eaf3bf4bbb58198ea6450a53e" } ] }, "ContentStoryUpdateRequest": { "type": "object", "additionalProperties": false, "properties": { "story": { "$ref": "#/components/schemas/ContentStoryRequest" }, "expectedRevision": { "type": "integer", "minimum": 0, "exclusiveMaximum": 9007199254740991, "x-walkpic-field-rules": { "safe": true } } }, "required": [ "story", "expectedRevision" ] }, "ContentStoryUpdateReceipt": { "type": "object", "additionalProperties": false, "properties": { "story": { "$ref": "#/components/schemas/ContentStory" }, "storyRevision": { "type": "integer", "minimum": 1 } }, "required": [ "story", "storyRevision" ] }, "ContentPublicationAccess": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "contentRevision": { "type": "string" }, "mediaRevision": { "type": "string" } }, "required": [ "id", "contentRevision", "mediaRevision" ] }, "ContentSpeechRequest": { "type": "object", "additionalProperties": false, "properties": { "text": { "type": "string", "maxLength": 1200, "pattern": "^(?=[\\s\\S]*\\S)[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f]*$", "x-walkpic-trimmed-min-length": 1, "x-walkpic-normalization": "trim after raw length check; rejects U+0000–0008,U+000B,C,U+000E–001F, but not U+007F", "x-walkpic-field-rules": { "trimmedNonempty": true }, "x-walkpic-max-utf16-code-units": 1200 }, "voice": { "type": "string", "enum": [ "cedar", "marin", "coral", "onyx" ], "default": "cedar" } }, "required": [ "text" ] }, "ContentPhotoNarrationRequest": { "type": "object", "additionalProperties": false, "properties": { "photoBase64": { "type": "string", "maxLength": 1400000, "x-walkpic-pattern-rule": "canonical standard base64 groups with optional ==/= padding", "x-walkpic-field-rules": { "decodedBytesMin": 20, "decodedBytesMax": 1000000, "signature": "JPEG starts FF D8, ends FF D9", "dimensions": "SOF0/1/2 marker; dimensions>=1 and width*height<=4000000" }, "pattern": "^([A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" }, "point": { "type": [ "object", "null" ], "additionalProperties": false, "properties": { "lat": { "type": "number", "minimum": -90, "maximum": 90, "x-walkpic-field-rules": { "finite": true } }, "lng": { "type": "number", "minimum": -180, "maximum": 180, "x-walkpic-field-rules": { "finite": true } } }, "required": [ "lat", "lng" ] }, "caption": { "type": [ "string", "null" ], "maxLength": 1200, "default": "", "x-walkpic-field-rules": { "noControls": "U+0000–0008,U+000B,C,U+000E–001F,U+007F" }, "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-max-utf16-code-units": 1200 }, "purpose": { "type": [ "string", "null" ], "enum": [ "caption", "narration", "label", null ], "default": "narration" } }, "required": [ "photoBase64" ] }, "ContentSavedItem": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string" }, "savedAt": { "type": "string" }, "status": { "type": "string", "enum": [ "available", "unavailable" ] }, "publication": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "coverPhotoId": { "type": [ "string", "null" ] }, "author": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "name": { "type": [ "string", "null" ] }, "handle": { "type": "string" } }, "required": [ "id", "name", "handle" ] } }, "required": [ "id", "title", "dateLabel", "audience", "coverPhotoId", "author" ], "x-walkpic-field-rules": { "onlyWhenStatus": "available" } } }, "required": [ "publicationId", "savedAt", "status" ], "x-walkpic-field-rules": { "note": "Unavailable item has exactly publicationId,savedAt,status, with no protected target fields" }, "oneOf": [ { "type": "object", "additionalProperties": true, "properties": { "status": { "const": "available" }, "publication": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "coverPhotoId": { "type": [ "string", "null" ] }, "author": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "name": { "type": [ "string", "null" ] }, "handle": { "type": "string" } }, "required": [ "id", "name", "handle" ] } }, "required": [ "id", "title", "dateLabel", "audience", "coverPhotoId", "author" ], "x-walkpic-field-rules": { "onlyWhenStatus": "available" } } }, "required": [ "publication" ] }, { "type": "object", "additionalProperties": true, "properties": { "status": { "const": "unavailable" } }, "required": [], "not": { "type": "object", "additionalProperties": true, "properties": { "publication": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "coverPhotoId": { "type": [ "string", "null" ] }, "author": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "name": { "type": [ "string", "null" ] }, "handle": { "type": "string" } }, "required": [ "id", "name", "handle" ] } }, "required": [ "id", "title", "dateLabel", "audience", "coverPhotoId", "author" ], "x-walkpic-field-rules": { "onlyWhenStatus": "available" } } }, "required": [ "publication" ] } } ] }, "ContentSavedRequest": { "type": "object", "additionalProperties": false, "properties": { "saved": { "type": "boolean" }, "requestId": { "type": "string", "x-walkpic-pattern-rule": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ (case insensitive)", "x-walkpic-normalization": "lowercase", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } }, "required": [ "saved", "requestId" ], "minProperties": 2, "maxProperties": 2 }, "ContentLikeRequest": { "type": "object", "additionalProperties": false, "properties": { "liked": { "type": "boolean" } }, "required": [ "liked" ], "minProperties": 1, "maxProperties": 1 }, "ContentLikeReceipt": { "type": "object", "additionalProperties": false, "properties": { "likeCount": { "type": "integer" }, "weekLikeCount": { "type": "integer" }, "likedByMe": { "type": "boolean" }, "canLike": { "type": "boolean" } }, "required": [ "likeCount", "weekLikeCount", "likedByMe", "canLike" ] }, "ContentComment": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "sequence": { "type": "integer" }, "text": { "type": "string" }, "createdAt": { "type": "string" }, "author": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "name": { "type": [ "string", "null" ] }, "handle": { "type": "string" } }, "required": [ "id", "name", "handle" ] }, "mine": { "type": [ "integer", "null" ], "enum": [ 0, 1, null ], "x-walkpic-field-rules": { "note": "SQL json_object encodes integer expression, not JS boolean; anonymous ->null" } } }, "required": [ "id", "sequence", "text", "createdAt", "author", "mine" ] }, "ContentDiscussion": { "type": "object", "additionalProperties": false, "properties": { "comments": { "type": "array", "items": { "$ref": "#/components/schemas/ContentComment" }, "maxItems": 30 }, "nextBefore": { "type": [ "string", "null" ] }, "reactions": { "type": "array", "items": { "type": "object", "additionalProperties": false, "properties": { "reaction": { "type": "string", "enum": [ "love", "wow", "smile" ] }, "count": { "type": "integer" } }, "required": [ "reaction", "count" ] } }, "myReaction": { "type": [ "string", "null" ], "enum": [ "love", "wow", "smile", null ] } }, "required": [ "comments", "nextBefore", "reactions", "myReaction" ] }, "ContentPublicReportReceipt": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "status": { "type": "string", "enum": [ "open" ] }, "receivedAt": { "type": "string" }, "target": { "type": "object", "additionalProperties": false, "properties": { "kind": { "type": "string", "enum": [ "publication", "profile" ] }, "id": { "type": [ "string", "null" ] } }, "required": [ "kind", "id" ] }, "assessment": { "type": "object", "additionalProperties": false, "properties": { "scope": { "type": "string", "enum": [ "bounded_text_only" ] }, "result": { "type": "string", "enum": [ "text_rule_match", "no_text_rule_match", "not_assessed_legacy" ] }, "policyId": { "type": [ "string", "null" ] }, "assessedAt": { "type": [ "string", "null" ], "x-walkpic-field-rules": { "nullWhen": "not_assessed_legacy" } } }, "required": [ "scope", "result", "policyId", "assessedAt" ] }, "concernStatus": { "type": "string", "enum": [ "unresolved" ] }, "action": { "type": "string", "enum": [ "none" ] }, "reasonRetention": { "type": "object", "additionalProperties": false, "properties": { "days": { "type": "integer", "const": 30 }, "purgeAfter": { "type": "string", "x-walkpic-field-rules": { "format": "ISO timestamp" } }, "purged": { "type": "boolean" } }, "required": [ "days", "purgeAfter", "purged" ] }, "supportUrl": { "type": "string", "const": "https://walkpic.com/support" } }, "required": [ "id", "status", "receivedAt", "target", "assessment", "concernStatus", "action", "reasonRetention", "supportUrl" ], "x-walkpic-field-rules": { "note": "No reporter reason or target content snapshot; response is not a moderation verdict/enforcement action" } }, "ContentJsonValue": { "description": "Forwarded trusted usage and ignored JSON bodies can contain any finite JSON value. This is not a generic successful response envelope.", "anyOf": [ { "type": "null" }, { "type": "boolean" }, { "type": "number" }, { "type": "string" }, { "type": "array", "items": { "$ref": "#/components/schemas/ContentJsonValue" } }, { "type": "object", "additionalProperties": { "$ref": "#/components/schemas/ContentJsonValue" } } ] }, "ContentLegacyKeyArray": { "type": "array", "items": { "anyOf": [ { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, { "type": "boolean" }, { "type": "number" }, { "$ref": "#/components/schemas/ContentLegacyKeyArray" } ] }, "minItems": 1, "maxItems": 1, "x-walkpic-coercion-rule": "String(array) must match key pattern; nested singleton arrays accepted. Numbers are dynamically coerced; not all finite numbers pass. Null/object elements do not pass." }, "ContentLegacyKeyRequest": { "type": "object", "additionalProperties": true, "properties": { "idempotencyKey": { "anyOf": [ { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, { "type": "null" }, { "type": "boolean" }, { "type": "number" }, { "$ref": "#/components/schemas/ContentLegacyKeyArray" } ], "description": "Optional legacy value is coerced with String(value); omission becomes \"undefined\", null becomes \"null\".", "x-walkpic-coercion-rule": "String(value) must match /^[A-Za-z0-9_-]{1,64}$/. Numeric branch is an annotation-guided overapproximation: decimals/exponents containing dot or + fail400. Do not tighten to required string.", "x-walkpic-string-coercion": { "expression": "String(value)", "normalizedPattern": "^[A-Za-z0-9_-]{1,64}$" } } }, "required": [] }, "ContentCheckin": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "placeId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "category": { "type": "string", "enum": [ "restaurant", "cafe", "other" ] }, "placeType": { "type": "string", "enum": [ "restaurant", "cafe", "hotel", "shop", "museum", "park", "other" ] }, "visibility": { "type": "string", "enum": [ "public", "private" ] }, "name": { "type": "string", "maxLength": 160, "pattern": "\\S", "x-walkpic-trimmed-min-length": 1, "x-walkpic-field-rules": { "trimmedNonempty": true }, "x-walkpic-max-utf16-code-units": 160 }, "address": { "type": "string", "maxLength": 300, "x-walkpic-max-utf16-code-units": 300 }, "review": { "type": "string", "maxLength": 1200, "x-walkpic-max-utf16-code-units": 1200 }, "lat": { "type": "number", "minimum": -90, "maximum": 90, "x-walkpic-field-rules": { "finite": true } }, "lng": { "type": "number", "minimum": -180, "maximum": 180, "x-walkpic-field-rules": { "finite": true } }, "visitedAt": { "type": "string", "maxLength": 40, "x-walkpic-field-rules": { "acceptedBy": "finite Date.parse, no strict timezone/real-calendar normalization" }, "x-walkpic-max-utf16-code-units": 40 }, "rating": { "type": [ "integer", "null" ], "minimum": 1, "maximum": 5 } }, "required": [ "id", "placeId", "category", "name", "address", "lat", "lng", "visitedAt", "rating", "review" ] }, "ContentStoryTextMap": { "type": "object", "additionalProperties": { "type": "string", "maxLength": 1200, "x-walkpic-max-utf16-code-units": 1200 }, "maxProperties": 500, "propertyNames": { "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "x-walkpic-authorization": "keys must refer to approved photo/pin IDs; empty values dropped after newline normalization/trim" }, "ContentStoryTitleMap": { "type": "object", "additionalProperties": { "type": "string", "maxLength": 120, "x-walkpic-max-utf16-code-units": 120 }, "maxProperties": 500, "propertyNames": { "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "x-walkpic-authorization": "keys must refer to approved photo/pin IDs; empty values dropped after newline normalization/trim" }, "ContentStoryVoiceMap": { "type": "object", "additionalProperties": { "type": "string", "enum": [ "cedar", "marin", "coral", "onyx" ] }, "maxProperties": 500, "propertyNames": { "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "x-walkpic-authorization": "keys must refer to approved photo/pin IDs; empty values dropped after newline normalization/trim" }, "ContentStoryRequest": { "type": "object", "additionalProperties": false, "properties": { "version": { "type": "integer", "const": 1 }, "introduction": { "type": [ "string", "null" ], "default": "", "x-walkpic-normalized-max-length": 1200, "x-walkpic-field-rules": { "maxLengthAfterNormalization": 1200 }, "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-normalization": [ "CRLF/CR-to-LF", "trim" ] }, "ending": { "type": [ "string", "null" ], "default": "", "x-walkpic-normalized-max-length": 1200, "x-walkpic-field-rules": { "maxLengthAfterNormalization": 1200 }, "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-normalization": [ "CRLF/CR-to-LF", "trim" ] }, "photoTitles": { "type": [ "object", "null" ], "additionalProperties": { "type": "string", "x-walkpic-normalized-max-length": 120, "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-normalization": [ "CRLF/CR-to-LF", "trim" ] }, "propertyNames": { "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "maxProperties": 500, "default": {}, "x-walkpic-normalization": "sort keys; CRLF/CR->LF; trim values; drop empty values", "x-walkpic-field-rules": { "keyPattern": "^[A-Za-z0-9_-]{1,64}$", "keyMustReference": "approved photo or pin ID", "values": { "type": "string", "maxLength": 120 } } }, "photoCaptions": { "type": [ "object", "null" ], "additionalProperties": { "type": "string", "x-walkpic-normalized-max-length": 1200, "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-normalization": [ "CRLF/CR-to-LF", "trim" ] }, "propertyNames": { "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "maxProperties": 500, "default": {}, "x-walkpic-normalization": "sort keys; CRLF/CR->LF; trim values; drop empty values", "x-walkpic-field-rules": { "keyPattern": "^[A-Za-z0-9_-]{1,64}$", "keyMustReference": "approved photo or pin ID", "values": { "type": "string", "maxLength": 1200 } } }, "chapterTitles": { "type": [ "object", "null" ], "additionalProperties": { "type": "string", "x-walkpic-normalized-max-length": 120, "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-normalization": [ "CRLF/CR-to-LF", "trim" ] }, "propertyNames": { "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "maxProperties": 500, "default": {}, "x-walkpic-normalization": "sort keys; CRLF/CR->LF; trim values; drop empty values", "x-walkpic-field-rules": { "keyPattern": "^[A-Za-z0-9_-]{1,64}$", "keyMustReference": "approved photo or pin ID", "values": { "type": "string", "maxLength": 120 } } }, "narration": { "type": [ "object", "null" ], "additionalProperties": { "type": "string", "x-walkpic-normalized-max-length": 1200, "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-normalization": [ "CRLF/CR-to-LF", "trim" ] }, "propertyNames": { "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "maxProperties": 500, "default": {}, "x-walkpic-normalization": "sort keys; CRLF/CR->LF; trim values; drop empty values", "x-walkpic-field-rules": { "keyPattern": "^[A-Za-z0-9_-]{1,64}$", "keyMustReference": "approved photo or pin ID", "values": { "type": "string", "maxLength": 1200 } } }, "voices": { "type": [ "object", "null" ], "additionalProperties": { "type": "string", "pattern": "^[^\\x00-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]*$", "x-walkpic-normalized-enum": [ "", "cedar", "marin", "coral", "onyx" ], "x-walkpic-normalized-max-length": 20, "x-walkpic-normalization": [ "CRLF/CR-to-LF", "trim" ] }, "propertyNames": { "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "maxProperties": 500, "default": {}, "x-walkpic-normalization": "sort keys; CRLF/CR->LF; trim values; drop empty values", "x-walkpic-field-rules": { "keyPattern": "^[A-Za-z0-9_-]{1,64}$", "keyMustReference": "approved photo or pin ID", "values": { "type": "string", "enum": [ "cedar", "marin", "coral", "onyx" ] } } }, "checkins": { "type": [ "array", "null" ], "items": { "$ref": "#/components/schemas/ContentCheckinRequest" }, "maxItems": 100 }, "momentOrder": { "type": "array", "items": { "type": "string" }, "maxItems": 900, "uniqueItems": true, "x-walkpic-field-rules": { "mustReference": "approved photo/pin ID or visit:" } } }, "required": [ "version" ], "x-walkpic-normalization": [ "CRLF/CR->LF, trim story text, bound normalized lengths, reject same controls as checkin", "private checkins filtered out; order entries for private visits removed", "photoCaptions/checkins/voices/momentOrder omitted from normalized response if empty; base five text/maps plus version always emitted", "serialized normalized story <=256000 UTF-8 bytes" ], "x-walkpic-source": [ { "file": "service/src/publication_story.ts", "selector": "export const storyLimits", "line": 24, "sourceSha256": "0b842775d37f6486e94a8fc0ae02d368c38f560eaf3bf4bbb58198ea6450a53e" }, { "file": "service/src/publication_story.ts", "selector": "export function validateStory", "line": 27, "sourceSha256": "0b842775d37f6486e94a8fc0ae02d368c38f560eaf3bf4bbb58198ea6450a53e" } ] }, "ContentStory": { "type": "object", "additionalProperties": false, "properties": { "version": { "type": "integer", "const": 1 }, "introduction": { "type": "string", "maxLength": 1200, "x-walkpic-max-utf16-code-units": 1200 }, "ending": { "type": "string", "maxLength": 1200, "x-walkpic-max-utf16-code-units": 1200 }, "photoTitles": { "$ref": "#/components/schemas/ContentStoryTitleMap" }, "chapterTitles": { "$ref": "#/components/schemas/ContentStoryTitleMap" }, "narration": { "$ref": "#/components/schemas/ContentStoryTextMap" }, "photoCaptions": { "$ref": "#/components/schemas/ContentStoryTextMap" }, "voices": { "$ref": "#/components/schemas/ContentStoryVoiceMap" }, "checkins": { "type": "array", "items": { "$ref": "#/components/schemas/ContentCheckin" }, "maxItems": 100 }, "momentOrder": { "type": "array", "items": { "type": "string" }, "maxItems": 900, "uniqueItems": true } }, "required": [ "version", "introduction", "ending", "photoTitles", "chapterTitles", "narration" ], "x-walkpic-normalization": "Request null/default/empty-map behavior normalized; private checkins and associated momentOrder entries omitted. Empty optional collections omitted. Serialized normalized story<=256000bytes." }, "ContentAuthor": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "displayName": { "type": [ "string", "null" ] } }, "required": [ "id", "handle", "displayName" ] }, "ContentBounds": { "type": "object", "additionalProperties": false, "properties": { "west": { "type": "number" }, "south": { "type": [ "number", "null" ] }, "east": { "type": [ "number", "null" ] }, "north": { "type": [ "number", "null" ] } }, "required": [ "west", "south", "east", "north" ], "description": "Approved geometry normally supplies all four finite bounds together; SQL projection tests only west null for absent bounds." }, "ContentMetricBounds": { "anyOf": [ { "$ref": "#/components/schemas/ContentBounds" }, { "type": "null" } ] }, "ContentPublicationPhoto": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "url": { "type": "string" }, "takenAt": { "type": "string" } }, "required": [ "id", "url" ] }, "ContentPublicationDetail": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "route": { "type": "array", "items": { "$ref": "#/components/schemas/ContentRoutePoint" } }, "pins": { "type": "array", "items": { "$ref": "#/components/schemas/ContentPin" } }, "coverPhotoId": { "type": [ "string", "null" ] }, "contentRevision": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "mediaRevision": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "story": { "$ref": "#/components/schemas/ContentStory" }, "storyRevision": { "type": "integer", "minimum": 0 }, "canEditStory": { "type": "boolean" }, "storySpeechAvailable": { "type": "boolean" }, "photos": { "type": "array", "items": { "$ref": "#/components/schemas/ContentPublicationPhoto" } }, "author": { "$ref": "#/components/schemas/ContentAuthor" }, "access": { "type": "string", "enum": [ "owner", "unlisted", "public", "member" ] }, "distanceMeters": { "type": "number", "x-walkpic-field-rules": { "defaultWhenMetricAbsent": 0 } }, "durationSeconds": { "type": "number", "x-walkpic-field-rules": { "omittedWhenMetricNull": true } }, "bounds": { "$ref": "#/components/schemas/ContentMetricBounds" }, "photoCount": { "type": "integer" }, "likeCount": { "type": "integer" }, "weekLikeCount": { "type": "integer" }, "likedByMe": { "type": "boolean" }, "canLike": { "type": "boolean" }, "saveSupported": { "type": "boolean" }, "savedByMe": { "type": "boolean" } }, "required": [ "id", "title", "dateLabel", "route", "pins", "coverPhotoId", "contentRevision", "mediaRevision", "story", "storyRevision", "canEditStory", "storySpeechAvailable", "photos", "author", "access", "distanceMeters", "bounds", "photoCount", "likeCount", "weekLikeCount", "likedByMe", "canLike", "saveSupported", "savedByMe" ], "x-walkpic-field-rules": { "note": "No publicationId/status/committedAt/audience top-level in current detail projection; photos omit internal hashes/bytes/upload flags." }, "x-walkpic-source": [ { "file": "service/src/publication_reads.ts", "selector": "export async function publicationSnapshot", "line": 18, "sourceSha256": "618d274230b50c3cd932009160481603e0576078ce0a223740c244a6fedf46c7" }, { "file": "service/src/explore.ts", "selector": "export function metricsJson", "line": 113, "sourceSha256": "6834f24d650201c75eeba52907674eaaa0a1ed87fc86fd4ed62e44cc235adf20" } ] }, "ContentOwnedItem": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "authorId": { "type": "string" }, "status": { "type": "string", "enum": [ "active" ] }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] }, "coverPhotoId": { "type": [ "string", "null" ] } }, "required": [ "id", "authorId", "status", "title", "dateLabel", "audience", "coverPhotoId" ] }, "ContentReceivedItem": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "coverPhotoId": { "type": [ "string", "null" ] }, "author": { "$ref": "#/components/schemas/ContentAuthor" }, "savedByMe": { "type": "boolean" } }, "required": [ "id", "title", "dateLabel", "audience", "coverPhotoId", "author", "savedByMe" ] }, "ContentExploreAuthor": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "name": { "type": [ "string", "null" ] }, "displayName": { "type": [ "string", "null" ] } }, "required": [ "id", "handle", "name", "displayName" ] }, "ContentExploreItem": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "coverPhotoId": { "type": [ "string", "null" ] }, "authorId": { "type": "string" }, "author": { "$ref": "#/components/schemas/ContentExploreAuthor" }, "committedAt": { "type": "string" }, "audience": { "type": "string", "enum": [ "public" ] }, "route": { "type": "array", "items": { "$ref": "#/components/schemas/ContentRoutePoint" } }, "pins": { "type": "array", "items": { "$ref": "#/components/schemas/ContentPin" } }, "distanceMeters": { "type": "number" }, "durationSeconds": { "type": "number" }, "bounds": { "$ref": "#/components/schemas/ContentMetricBounds" }, "photoCount": { "type": "integer" }, "likeCount": { "type": "integer" }, "weekLikeCount": { "type": "integer" }, "likedByMe": { "type": "boolean" }, "canLike": { "type": "boolean" } }, "required": [ "id", "title", "dateLabel", "coverPhotoId", "authorId", "author", "committedAt", "audience", "route", "pins", "distanceMeters", "bounds", "photoCount", "likeCount", "weekLikeCount", "likedByMe", "canLike" ] }, "ContentLegacySummary": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "coverPhotoId": { "type": [ "string", "null" ] }, "authorId": { "type": "string" }, "author": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "name": { "type": "string" }, "displayName": { "type": "string" } }, "required": [ "id", "handle", "name", "displayName" ] }, "committedAt": { "type": [ "string", "null" ] }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] } }, "required": [ "id", "title", "dateLabel", "coverPhotoId", "authorId", "committedAt", "audience" ] }, "ContentLegacyManagedSummary": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "coverPhotoId": { "type": [ "string", "null" ] }, "authorId": { "type": "string" }, "author": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "name": { "type": "string" }, "displayName": { "type": "string" } }, "required": [ "id", "handle", "name", "displayName" ] }, "committedAt": { "type": [ "string", "null" ] }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] }, "status": { "type": "string", "enum": [ "pending", "active", "restricted", "cancelled" ] } }, "required": [ "id", "title", "dateLabel", "coverPhotoId", "authorId", "committedAt", "audience", "status" ] }, "ContentSpeechUsage": { "type": "object", "additionalProperties": true, "properties": { "model": { "type": "string", "const": "gpt-4o-mini-tts" }, "inputTokensEstimate": { "type": "integer", "minimum": 0 }, "inputTokens": { "type": "null" }, "outputTokens": { "type": "null" }, "costUsd": { "type": "null" }, "estimateOnly": { "type": "boolean", "const": true }, "pricing": { "type": "object", "additionalProperties": false, "properties": { "inputUsdPerMillion": { "type": "number", "const": 0.6 }, "audioOutputUsdPerMillion": { "type": "number", "const": 12 } }, "required": [ "inputUsdPerMillion", "audioOutputUsdPerMillion" ] }, "note": { "type": "string" } }, "required": [ "model", "inputTokensEstimate", "inputTokens", "outputTokens", "costUsd", "estimateOnly", "pricing", "note" ] }, "ContentPhotoNarrationUsage": { "type": "object", "additionalProperties": true, "properties": { "model": { "type": "string", "const": "gpt-6-luna" }, "inputTokens": { "type": [ "integer", "null" ], "minimum": 0 }, "outputTokens": { "type": [ "integer", "null" ], "minimum": 0 }, "cachedInputTokens": { "type": [ "integer", "null" ], "minimum": 0 }, "costUsd": { "type": [ "number", "null" ], "minimum": 0 }, "estimateOnly": { "type": "boolean", "const": true }, "pricing": { "type": "object", "additionalProperties": false, "properties": { "inputUsdPerMillion": { "type": "number", "const": 0.1 }, "cachedInputUsdPerMillion": { "type": "number", "const": 0.01 }, "outputUsdPerMillion": { "type": "number", "const": 0.5 } }, "required": [ "inputUsdPerMillion", "cachedInputUsdPerMillion", "outputUsdPerMillion" ] }, "note": { "type": "string" } }, "required": [ "model", "inputTokens", "outputTokens", "cachedInputTokens", "costUsd", "estimateOnly", "pricing", "note" ] }, "ContentSpeechReceipt": { "type": "object", "additionalProperties": true, "properties": { "audioBase64": { "type": "string", "description": "Base64 MP3; production provider<=2000000decoded bytes. Trusted injected/cache strings are not reparsed by this HTTP handler." }, "mimeType": { "type": "string", "description": "Production room speech provider returns audio/mpeg; trusted injected/cache MIME is forwarded." }, "usage": { "$ref": "#/components/schemas/ContentJsonValue" }, "reused": { "type": "boolean" }, "newAiTokens": { "enum": [ 0, null ] } }, "required": [ "audioBase64", "mimeType", "usage", "reused", "newAiTokens" ], "x-walkpic-production-usage-schema": { "$ref": "#/components/schemas/ContentSpeechUsage" }, "x-walkpic-audio-transport": "JSON containing base64, never a raw MP3/ranged audio response", "x-walkpic-trusted-forwarding": "Cached/synthesizer object spread; typed production port audioBase64/mimeType strings, opaque usage preserved; no extra-field tightening." }, "ContentPhotoNarrationReceipt": { "type": "object", "additionalProperties": true, "properties": { "text": { "type": "string", "minLength": 1, "maxLength": 650, "x-walkpic-max-utf16-code-units": 650 }, "label": { "type": "string", "maxLength": 60, "minLength": 1, "x-walkpic-max-utf16-code-units": 60 }, "usage": { "$ref": "#/components/schemas/ContentJsonValue" }, "reused": { "type": "boolean" }, "newAiTokens": { "enum": [ 0, null ] } }, "required": [ "text", "reused", "newAiTokens" ], "x-walkpic-production-usage-schema": { "$ref": "#/components/schemas/ContentPhotoNarrationUsage" }, "x-walkpic-purpose-rule": "caption/label text<=300, narration<=650; label purpose additionally requires nonempty trimmed label<=60. Unknown trusted/cache extra fields forwarded." }, "ContentPublicReportRequest": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string", "x-walkpic-pattern-rule": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ (case insensitive)", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "profileId": { "type": "string", "x-walkpic-pattern-rule": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ (case insensitive)", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "reason": { "type": "string", "maxLength": 1000, "x-walkpic-trimmed-min-length": 5, "x-walkpic-normalization": "trim", "x-walkpic-field-rules": { "rawMaxLength": 1000, "trimmedMinLength": 5 }, "x-walkpic-max-utf16-code-units": 1000 }, "idempotencyKey": { "type": "string", "default": "server random UUID", "pattern": "^[A-Za-z0-9_-]{1,64}$" } }, "required": [ "reason" ], "x-walkpic-field-rules": { "exactlyOne": [ "publicationId", "profileId" ] }, "oneOf": [ { "type": "object", "additionalProperties": true, "properties": { "publicationId": { "type": "string", "x-walkpic-pattern-rule": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ (case insensitive)", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } }, "required": [ "publicationId" ], "not": { "type": "object", "additionalProperties": true, "properties": { "profileId": { "type": "string", "x-walkpic-pattern-rule": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ (case insensitive)", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } }, "required": [ "profileId" ] } }, { "type": "object", "additionalProperties": true, "properties": { "profileId": { "type": "string", "x-walkpic-pattern-rule": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ (case insensitive)", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } }, "required": [ "profileId" ], "not": { "type": "object", "additionalProperties": true, "properties": { "publicationId": { "type": "string", "x-walkpic-pattern-rule": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ (case insensitive)", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } }, "required": [ "publicationId" ] } } ] }, "ContentOwnedPage": { "type": "object", "additionalProperties": false, "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/ContentOwnedItem" } }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "items", "nextCursor" ] }, "ContentReceivedPage": { "type": "object", "additionalProperties": false, "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/ContentReceivedItem" } }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "items", "nextCursor" ] }, "ContentSavedPage": { "type": "object", "additionalProperties": false, "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/ContentSavedItem" } }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "items", "nextCursor" ] }, "ContentExplorePage": { "type": "object", "additionalProperties": false, "properties": { "publications": { "type": "array", "items": { "$ref": "#/components/schemas/ContentExploreItem" } }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "publications", "nextCursor" ] }, "ContentReceivedAccessRequest": { "type": "object", "additionalProperties": true, "properties": { "ids": { "type": "array", "items": { "type": "string", "pattern": "^[-A-Za-z0-9_]{1,64}$" }, "maxItems": 500, "uniqueItems": true } }, "required": [ "ids" ] }, "ContentReceivedAccessReceipt": { "type": "object", "additionalProperties": false, "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/ContentReceivedItem" } } }, "required": [ "items" ] }, "ContentPeoplePage": { "type": "object", "additionalProperties": false, "properties": { "people": { "type": "array", "items": { "$ref": "#/components/schemas/ContentAuthor" }, "maxItems": 50 }, "more": { "type": "boolean" } }, "required": [ "people", "more" ] }, "ContentOwnedAudience": { "type": "object", "additionalProperties": false, "properties": { "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] }, "linkEnabled": { "type": "boolean" }, "people": { "type": "array", "items": { "$ref": "#/components/schemas/ContentAuthor" }, "maxItems": 200 }, "peopleCount": { "type": "integer", "minimum": 0 } }, "required": [ "audience", "linkEnabled", "people", "peopleCount" ] }, "ContentPhotoExportAccess": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string" }, "photoId": { "type": "string" } }, "required": [ "publicationId", "photoId" ] }, "ContentStatusReceipt": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string" }, "sessionId": { "type": "string", "x-walkpic-field-rules": { "equalTo": "publicationId" } }, "status": { "type": "string", "enum": [ "pending", "active", "restricted", "cancelled" ] }, "linkEnabled": { "type": "boolean" }, "missingPhotoIds": { "type": "array", "items": { "type": "string" }, "x-walkpic-field-rules": { "orderedBy": "photo ID" } }, "unlistedToken": { "type": [ "string", "null" ] } }, "required": [ "publicationId", "sessionId", "status", "linkEnabled", "missingPhotoIds", "unlistedToken" ] }, "ContentSavedReceipt": { "type": "object", "additionalProperties": false, "properties": { "publicationId": { "type": "string" }, "saved": { "type": "boolean" } }, "required": [ "publicationId", "saved" ] }, "ContentLegacyFeed": { "type": "object", "additionalProperties": false, "properties": { "publications": { "type": "array", "items": { "$ref": "#/components/schemas/ContentLegacySummary" }, "maxItems": 50 } }, "required": [ "publications" ] }, "ContentLegacyManagementList": { "type": "object", "additionalProperties": false, "properties": { "publications": { "type": "array", "items": { "$ref": "#/components/schemas/ContentLegacyManagedSummary" }, "maxItems": 100 } }, "required": [ "publications" ] }, "ContentVisitRequest": { "type": "object", "additionalProperties": false, "properties": { "checkin": { "$ref": "#/components/schemas/ContentCheckinRequest" } }, "required": [ "checkin" ] }, "ContentVisitReceipt": { "type": "object", "additionalProperties": false, "properties": { "status": { "type": "string", "enum": [ "public" ] }, "id": { "type": "string" } }, "required": [ "status", "id" ] }, "ContentVisitRemoveReceipt": { "type": "object", "additionalProperties": false, "properties": { "status": { "type": "string", "enum": [ "private" ] } }, "required": [ "status" ] }, "ContentVisitWalk": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "authorId": { "type": "string" }, "authorName": { "type": [ "string", "null" ] }, "mine": { "type": "boolean" }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] }, "standaloneVisit": { "type": "boolean", "const": true } }, "required": [ "id", "title", "dateLabel", "authorId", "authorName", "mine", "audience" ] }, "ContentRatedVisit": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "placeId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$" }, "category": { "type": "string", "enum": [ "restaurant", "cafe", "other" ] }, "placeType": { "type": "string", "enum": [ "restaurant", "cafe", "hotel", "shop", "museum", "park", "other" ] }, "visibility": { "type": "string", "enum": [ "public", "private" ] }, "name": { "type": "string", "maxLength": 160, "pattern": "\\S", "x-walkpic-trimmed-min-length": 1, "x-walkpic-field-rules": { "trimmedNonempty": true }, "x-walkpic-max-utf16-code-units": 160 }, "address": { "type": "string", "maxLength": 300, "x-walkpic-max-utf16-code-units": 300 }, "review": { "type": "string", "maxLength": 1200, "x-walkpic-max-utf16-code-units": 1200 }, "lat": { "type": "number", "minimum": -90, "maximum": 90, "x-walkpic-field-rules": { "finite": true } }, "lng": { "type": "number", "minimum": -180, "maximum": 180, "x-walkpic-field-rules": { "finite": true } }, "visitedAt": { "type": "string", "maxLength": 40, "x-walkpic-field-rules": { "acceptedBy": "finite Date.parse, no strict timezone/real-calendar normalization" }, "x-walkpic-max-utf16-code-units": 40 }, "rating": { "type": [ "integer", "null" ], "minimum": 1, "maximum": 5 }, "walk": { "$ref": "#/components/schemas/ContentVisitWalk" } }, "required": [ "id", "placeId", "category", "name", "address", "lat", "lng", "visitedAt", "rating", "review", "walk" ] }, "ContentPlacesPage": { "type": "object", "additionalProperties": false, "properties": { "visits": { "type": "array", "items": { "$ref": "#/components/schemas/ContentRatedVisit" }, "maxItems": 1000 }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "visits", "nextCursor" ] }, "ContentDiscussionCommentRequest": { "type": "object", "additionalProperties": false, "properties": { "requestId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "text": { "type": "string", "minLength": 1, "maxLength": 1200, "pattern": "\\S", "x-walkpic-trimmed-min-length": 1, "x-walkpic-max-utf16-code-units": 1200 } }, "required": [ "requestId", "text" ] }, "ContentDiscussionReactionRequest": { "type": "object", "additionalProperties": false, "properties": { "requestId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "reaction": { "type": [ "string", "null" ], "enum": [ "love", "wow", "smile", null ] } }, "required": [ "requestId", "reaction" ] }, "ContentDiscussionRemoveRequest": { "type": "object", "additionalProperties": false, "properties": { "requestId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "commentId": { "type": "string", "pattern": "^[a-f0-9]{64}$" } }, "required": [ "requestId", "commentId" ] }, "ContentDiscussionReportRequest": { "type": "object", "additionalProperties": false, "properties": { "requestId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "commentId": { "type": "string", "pattern": "^[a-f0-9]{64}$" } }, "required": [ "requestId", "commentId" ] }, "ContentDiscussionApplied": { "type": "object", "additionalProperties": false, "properties": { "status": { "type": "string", "enum": [ "applied" ] } }, "required": [ "status" ] }, "ContentDiscussionCommentApplied": { "type": "object", "additionalProperties": false, "properties": { "status": { "type": "string", "enum": [ "applied" ] }, "commentId": { "type": "string", "pattern": "^[a-f0-9]{64}$" } }, "required": [ "status", "commentId" ] }, "ContentPublicReportsPage": { "type": "object", "additionalProperties": false, "properties": { "reports": { "type": "array", "items": { "$ref": "#/components/schemas/ContentPublicReportReceipt" }, "maxItems": 50 } }, "required": [ "reports" ] }, "ContentActivityPublication": { "type": "object", "additionalProperties": false, "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "coverPhotoId": { "type": [ "string", "null" ] }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] }, "author": { "$ref": "#/components/schemas/ContentAuthor" } }, "required": [ "id", "title", "dateLabel", "coverPhotoId", "audience", "author" ] }, "ContentActivityItem": { "type": "object", "additionalProperties": false, "properties": { "notificationId": { "type": "string" }, "kind": { "type": "string", "enum": [ "walk_shared", "photo_comment", "photo_reaction" ] }, "photoId": { "type": [ "string", "null" ] }, "activityCount": { "type": [ "integer", "null" ] }, "createdAt": { "type": "string", "format": "date-time" }, "seen": { "type": "boolean" }, "publication": { "$ref": "#/components/schemas/ContentActivityPublication" } }, "required": [ "notificationId", "kind", "photoId", "activityCount", "createdAt", "seen", "publication" ] }, "ContentActivityPage": { "type": "object", "additionalProperties": false, "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/ContentActivityItem" }, "maxItems": 20 }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "items", "nextCursor" ] }, "ContentBinaryJpeg": { "type": "string", "format": "binary", "description": "Raw approved normalized JPEG bytes. OpenAPI binary string, not base64 JSON." }, "IdentityUuid": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$", "description": "Canonical UUID shape; messaging validators normalize to lowercase. Legacy identity handlers generally retain input case for SQL lookup." }, "MessagingUuid": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$", "description": "Canonical UUID shape; messaging validators normalize to lowercase. Legacy identity handlers generally retain input case for SQL lookup." }, "MessagingSafeNonnegativeInteger": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "IdentityJsonValue": { "oneOf": [ { "type": "null" }, { "type": "boolean" }, { "type": "number" }, { "type": "string" }, { "type": "array", "items": { "$ref": "#/components/schemas/IdentityJsonValue" } }, { "type": "object", "properties": {}, "required": [], "additionalProperties": { "$ref": "#/components/schemas/IdentityJsonValue" } } ], "description": "Preserves fields which legacy handlers ignore or inspect without imposing a JSON value type." }, "IdentityCoercibleHandle": { "anyOf": [ { "type": "string", "pattern": "^[A-Za-z0-9_K]{3,30}$" }, { "type": "integer", "minimum": 100, "exclusiveMaximum": 1e+21 }, { "type": "boolean" }, { "type": "array", "items": { "$ref": "#/components/schemas/IdentityCoercibleHandle" }, "maxItems": 1, "minItems": 1 } ], "x-walkpic-string-coercion": { "expression": "String(value ?? empty).toLowerCase()", "normalizedPattern": "^[a-z0-9_]{3,30}$", "arrayConstraint": "Recursively nested singleton arrays must ultimately coerce to a matching string; invalid null/object/empty/comma-containing descendants fail. Standard schema preserves transport JSON types; this source-bound annotation supplies exact coercion validation." }, "description": "Actual validateProfile uses String(value ?? empty).toLowerCase(), without trimming. Valid strings, nonnegative integers whose JavaScript decimal rendering has at least three digits, booleans, and recursively nested singleton arrays of these values are accepted. Null and missing values fail. Numbers at or above 1e21 render with exponent punctuation and fail." }, "IdentityPublicUser": { "type": "object", "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "displayName": { "type": "string" }, "name": { "type": "string" }, "searchable": { "type": "boolean" }, "approvalRequired": { "type": "boolean" } }, "required": [ "id", "handle", "displayName", "name", "searchable", "approvalRequired" ], "additionalProperties": false, "description": "Legacy public projection includes both name and displayName, each defaulting to empty string for a null stored name. No email." }, "IdentityUser": { "type": "object", "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "displayName": { "type": "string" }, "name": { "type": "string" }, "searchable": { "type": "boolean" }, "approvalRequired": { "type": "boolean" }, "email": { "type": "string" } }, "required": [ "id", "handle", "displayName", "name", "searchable", "approvalRequired", "email" ], "additionalProperties": false }, "IdentityTokenBundle": { "type": "object", "properties": { "access_token": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" }, "refresh_token": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" }, "expires_in": { "type": "integer", "const": 900 }, "token_type": { "type": "string", "const": "Bearer" } }, "required": [ "access_token", "refresh_token", "expires_in", "token_type" ], "additionalProperties": false }, "IdentityLoginResponse": { "type": "object", "properties": { "user": { "$ref": "#/components/schemas/IdentityUser" }, "access_token": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" }, "refresh_token": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" }, "expires_in": { "type": "integer", "const": 900 }, "token_type": { "type": "string", "const": "Bearer" } }, "required": [ "user", "access_token", "refresh_token", "expires_in", "token_type" ], "additionalProperties": false }, "IdentityAppleChallenge": { "type": "object", "properties": { "challengeId": { "$ref": "#/components/schemas/IdentityUuid" }, "nonce": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" } }, "required": [ "challengeId", "nonce" ], "additionalProperties": false }, "IdentityAppleRequest": { "type": "object", "properties": { "challengeId": { "type": "string" }, "identityToken": { "type": "string" }, "authorizationCode": { "type": "string" }, "displayName": { "type": "string" }, "clientType": { "type": "string", "enum": [ "web" ] } }, "required": [ "challengeId", "identityToken", "authorizationCode" ], "additionalProperties": true, "description": "Extra keys ignored. challengeId and credential strings have no independent length or UUID constraint here. Optional displayName is later truncated to 80 UTF16 units and disallowed text becomes an empty name; it does not block sign-in. clientType omitted means native; only web is accepted when supplied." }, "IdentityEmailRequest": { "type": "object", "properties": { "email": { "type": "string", "description": "Trimmed and lowercased before validation; no provider-specific dot/plus canonicalization.", "x-walkpic-normalized-constraints": { "normalization": [ "trim", "lowercase" ], "maxLength": 254, "pattern": "^[a-z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?\\.[a-z]{2,63}$", "forbiddenSubstring": ".." } } }, "required": [ "email" ], "additionalProperties": true }, "IdentityEmailChallenge": { "type": "object", "properties": { "challengeId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" }, "expiresIn": { "type": "integer", "const": 600 }, "resendAfter": { "type": "integer", "const": 60 } }, "required": [ "challengeId", "expiresIn", "resendAfter" ], "additionalProperties": false }, "IdentityEmailVerifyRequest": { "type": "object", "properties": { "challengeId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" }, "code": { "type": "string", "maxLength": 16, "x-walkpic-max-utf16-code-units": 16, "description": "Only an exact six decimal digit code succeeds. Other strings up to 16 UTF16 units consume a durable attempt then return EMAIL_CODE_INVALID; strings longer than 16 fail before an attempt." } }, "required": [ "challengeId", "code" ], "additionalProperties": true }, "IdentityReviewRequest": { "type": "object", "properties": { "username": { "type": "string", "maxLength": 64, "x-walkpic-max-utf16-code-units": 64, "description": "Trim/lowercase for credential comparison; blank strings are invalid credentials rather than malformed input." }, "password": { "type": "string", "maxLength": 256, "x-walkpic-max-utf16-code-units": 256 } }, "required": [ "username", "password" ], "additionalProperties": true }, "IdentityRefreshRequest": { "type": "object", "properties": { "refresh_token": { "type": "string" } }, "required": [ "refresh_token" ], "additionalProperties": true, "description": "Any string passes shape validation, including empty; session lookup and the durable transaction decide AUTH_REQUIRED." }, "IdentityLogoutRequest": { "type": "object", "properties": { "notificationDeviceId": { "$ref": "#/components/schemas/IdentityJsonValue" } }, "required": [], "additionalProperties": true, "description": "Object body required. Device ID is acted on only when it is a canonical UUID string; null, wrong types and malformed strings are silently ignored. Valid IDs delete only this user-owned device before exact-session logout." }, "IdentitySignedOut": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "signed_out" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityMe": { "type": "object", "properties": { "user": { "$ref": "#/components/schemas/IdentityPublicUser" } }, "required": [ "user" ], "additionalProperties": false }, "IdentityProfileRequest": { "type": "object", "properties": { "handle": { "$ref": "#/components/schemas/IdentityCoercibleHandle" }, "displayName": { "type": "string", "maxLength": 80, "x-walkpic-max-utf16-code-units": 80, "description": "Raw UTF16 length at most 80, then trim. Empty display name is accepted." }, "searchable": { "$ref": "#/components/schemas/IdentityJsonValue" } }, "required": [ "handle", "displayName" ], "additionalProperties": true, "description": "Legacy PATCH and POST alias. Extra properties ignored. searchable defaults true and is false only when exactly the JSON boolean false; approvalRequired is not updated. Disallowed handle/display name text yields CONTENT_NOT_ALLOWED." }, "IdentityDeletionRequest": { "type": "object", "properties": { "confirm": { "type": "string", "enum": [ "DELETE" ] }, "receiptCapability": { "type": "string", "pattern": "^[A-Za-z0-9_-]{43}$" } }, "required": [ "confirm" ], "additionalProperties": true }, "IdentityDeletionAccepted": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "deletion_pending" ] }, "receiptSupported": { "type": "boolean" } }, "required": [ "status" ], "additionalProperties": false, "description": "receiptSupported is present only when a valid receiptCapability was supplied. Acceptance revokes sessions atomically, but does not establish asynchronous/provider cleanup completion." }, "IdentityDeletionStages": { "type": "object", "properties": { "primaryCleanup": { "type": "string", "enum": [ "complete", "pending", "unconfirmed" ] }, "appleRevocation": { "type": "string", "enum": [ "complete", "pending", "no_stored_token" ] }, "identityCleanup": { "type": "string", "enum": [ "complete", "pending", "unconfirmed" ] }, "uploadReconciliation": { "type": "string", "enum": [ "complete", "pending" ] } }, "required": [ "primaryCleanup", "appleRevocation", "identityCleanup", "uploadReconciliation" ], "additionalProperties": false }, "IdentityDeletionStatus": { "type": "object", "properties": { "version": { "type": "integer", "const": 1 }, "acceptedAt": { "type": "string", "format": "date-time" }, "checkedAt": { "type": "string", "format": "date-time" }, "status": { "type": "string", "enum": [ "service_cleanup_complete", "pending" ] }, "stages": { "$ref": "#/components/schemas/IdentityDeletionStages" }, "retainedRecords": { "type": "array", "prefixItems": [ { "const": "pseudonymous_denial_markers" }, { "const": "content_free_audit_and_receipt_records" }, { "const": "reports_under_separate_retention" } ], "items": false, "minItems": 3, "maxItems": 3 }, "providerCopies": { "type": "string", "enum": [ "unverified" ] }, "receivedCopies": { "type": "string", "enum": [ "cannot_recall" ] } }, "required": [ "version", "acceptedAt", "checkedAt", "status", "stages", "retainedRecords", "providerCopies", "receivedCopies" ], "additionalProperties": false }, "IdentityPublicationAuthor": { "type": "object", "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "name": { "type": "string" }, "displayName": { "type": "string" } }, "required": [ "id", "handle", "name", "displayName" ], "additionalProperties": false }, "IdentityPublicationSummary": { "type": "object", "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "coverPhotoId": { "type": [ "string", "null" ] }, "authorId": { "type": "string" }, "author": { "$ref": "#/components/schemas/IdentityPublicationAuthor" }, "committedAt": { "anyOf": [ { "type": "string", "format": "date-time" }, { "type": "null" } ] }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] } }, "required": [ "id", "title", "dateLabel", "coverPhotoId", "authorId", "committedAt", "audience" ], "additionalProperties": false, "description": "Actual legacy app summary projection. author omitted when joined handle is falsy; name/displayName normalize null to empty. Profile publication reads are current readable/live-caller SQL projections." }, "IdentitySocialPerson": { "type": "object", "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "displayName": { "type": "string" }, "name": { "type": "string" }, "searchable": { "type": "boolean" }, "approvalRequired": { "type": "boolean" }, "relationship": { "type": "string", "enum": [ "none", "pending", "approved" ] } }, "required": [ "id", "handle", "displayName", "name", "searchable", "approvalRequired", "relationship" ], "additionalProperties": false }, "IdentityPeople": { "type": "object", "properties": { "people": { "type": "array", "items": { "$ref": "#/components/schemas/IdentitySocialPerson" }, "maxItems": 25 } }, "required": [ "people" ], "additionalProperties": false }, "IdentityPersonProfile": { "type": "object", "properties": { "user": { "$ref": "#/components/schemas/IdentityPublicUser" }, "relationship": { "type": "string", "enum": [ "none", "pending", "approved" ] }, "publications": { "type": "array", "items": { "$ref": "#/components/schemas/IdentityPublicationSummary" }, "maxItems": 100 } }, "required": [ "user", "relationship", "publications" ], "additionalProperties": false }, "IdentityFollowPerson": { "type": "object", "properties": { "id": { "type": "string" }, "handle": { "type": "string" }, "displayName": { "type": "string" }, "name": { "type": "string" }, "searchable": { "type": "boolean" }, "approvalRequired": { "type": "boolean" }, "followState": { "type": "string", "enum": [ "pending", "approved", "blocked" ] } }, "required": [ "id", "handle", "displayName", "name", "searchable", "approvalRequired", "followState" ], "additionalProperties": false }, "IdentityFollowPeople": { "type": "object", "properties": { "people": { "type": "array", "items": { "$ref": "#/components/schemas/IdentityFollowPerson" }, "maxItems": 500 } }, "required": [ "people" ], "additionalProperties": false }, "IdentityFollowRequestResponse": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "pending", "approved" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityFollowCancelled": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "cancelled" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityFollowerRemoved": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "removed" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityUnfollowed": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "unfollowed" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityBlocked": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "blocked" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityUnblocked": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "unblocked" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityFollowApproved": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "approved" ] }, "followingState": { "anyOf": [ { "type": "string", "enum": [ "pending", "approved" ] }, { "type": "null" } ] } }, "required": [ "status", "followingState" ], "additionalProperties": false }, "IdentityFollowDeclined": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "declined" ] }, "followingState": { "type": "null" } }, "required": [ "status", "followingState" ], "additionalProperties": false }, "IdentityFeatures": { "type": "object", "properties": { "receivedLibrary": { "type": "boolean", "const": true }, "liveWalks": { "type": "boolean", "const": true }, "livePhotos": { "type": "boolean", "const": true }, "livePhotoOutbox": { "type": "boolean", "const": true }, "changeEvents": { "type": "boolean", "const": true }, "publicationAlerts": { "type": "boolean", "const": true }, "publicPlaceVisits": { "type": "boolean", "const": true }, "photoExportAccess": { "type": "boolean", "const": true }, "contentInteractions": { "type": "boolean", "const": true }, "storyMomentOrder": { "type": "boolean", "const": true }, "photoCaptureTimes": { "type": "boolean", "const": true }, "publicationAccess": { "type": "boolean", "const": true }, "messaging": { "type": "boolean" }, "messageReports": { "type": "boolean" }, "storySpeech": { "type": "boolean" }, "storyRecordings": { "type": "boolean" }, "photoNarration": { "type": "boolean" }, "photoLabels": { "type": "boolean" }, "photoCaptions": { "type": "boolean" }, "walkingPreparations": { "type": "boolean" }, "walkingPointSnap": { "type": "boolean" }, "plannedWalks": { "type": "boolean" }, "reusableRoutes": { "type": "boolean" }, "plannedWalkCalendar": { "type": "boolean" }, "plannedWalkMetadataEdit": { "type": "boolean" }, "plannedWalkReschedule": { "type": "boolean" }, "plannedWalkCards": { "type": "boolean" }, "routeRequests": { "type": "boolean" } }, "required": [ "receivedLibrary", "liveWalks", "livePhotos", "livePhotoOutbox", "changeEvents", "publicationAlerts", "publicPlaceVisits", "photoExportAccess", "contentInteractions", "storyMomentOrder", "photoCaptureTimes", "publicationAccess", "messaging", "messageReports", "storySpeech", "storyRecordings", "photoNarration", "photoLabels", "photoCaptions", "walkingPreparations", "walkingPointSnap", "plannedWalks", "reusableRoutes", "plannedWalkCalendar", "plannedWalkMetadataEdit", "plannedWalkReschedule", "plannedWalkCards", "routeRequests" ], "additionalProperties": false }, "IdentityAuthConfiguration": { "type": "object", "properties": { "emailCode": { "type": "boolean" }, "provider": { "type": "string", "enum": [ "apple" ] }, "clientId": { "type": [ "string", "null" ] }, "reviewLogin": { "type": "boolean" } }, "required": [ "emailCode", "provider", "clientId", "reviewLogin" ], "additionalProperties": false }, "IdentityMessagingConfiguration": { "type": "object", "properties": { "messageRequestDetailVersion": { "type": "integer", "enum": [ 0, 1 ] }, "conversationViewVersion": { "type": "integer", "enum": [ 0, 1 ] }, "conversationViewPlanCardsVersion": { "type": "integer", "enum": [ 0, 1 ] }, "planChatInboxVersion": { "type": "integer", "enum": [ 0, 1 ] }, "planChatViewVersion": { "type": "integer", "enum": [ 0, 1 ] }, "planChatOutboxVersion": { "type": "integer", "enum": [ 0, 1 ] } }, "required": [ "messageRequestDetailVersion", "conversationViewVersion", "conversationViewPlanCardsVersion", "planChatInboxVersion", "planChatViewVersion", "planChatOutboxVersion" ], "additionalProperties": false }, "IdentityPublicReportConfiguration": { "type": "object", "properties": { "version": { "type": "integer", "const": 1 }, "reasonRetentionDays": { "type": "integer", "const": 30 }, "assessmentScope": { "type": "string", "enum": [ "bounded_text_only" ] }, "responseOnly": { "type": "boolean", "const": true } }, "required": [ "version", "reasonRetentionDays", "assessmentScope", "responseOnly" ], "additionalProperties": false }, "IdentityConfiguration": { "type": "object", "properties": { "auth": { "$ref": "#/components/schemas/IdentityAuthConfiguration" }, "features": { "$ref": "#/components/schemas/IdentityFeatures" }, "messaging": { "$ref": "#/components/schemas/IdentityMessagingConfiguration" }, "publicReports": { "$ref": "#/components/schemas/IdentityPublicReportConfiguration" }, "supportUrl": { "type": "string" }, "privacyUrl": { "type": "string", "const": "https://walkpic.com/privacy" }, "deletionUrl": { "type": "string", "const": "https://walkpic.com/delete-account" }, "supportEmail": { "type": "string", "const": "walkpic-support@mail.meshagent.com" }, "webBaseUrl": { "type": "string" }, "apiVersion": { "type": "integer", "const": 1 } }, "required": [ "auth", "features", "messaging", "publicReports", "supportUrl", "privacyUrl", "deletionUrl", "supportEmail", "webBaseUrl", "apiVersion" ], "additionalProperties": false }, "IdentityMapToken": { "type": "object", "properties": { "token": { "type": "string" }, "expiresIn": { "type": "integer", "const": 1800 } }, "required": [ "token", "expiresIn" ], "additionalProperties": false, "description": "ES256 MapKit JWT for selected approved Origin, with kid/team issuer and 30-minute expiration. Signing keys do not enter response." }, "MessagingPerson": { "type": "object", "properties": { "id": { "type": [ "string", "null" ] }, "name": { "type": "string" }, "handle": { "type": [ "string", "null" ] } }, "required": [ "id", "name", "handle" ], "additionalProperties": false }, "MessagingEvidencePerson": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": [ "string", "null" ] }, "handle": { "type": "string" } }, "required": [ "id", "name", "handle" ], "additionalProperties": false }, "MessagingPublication": { "type": "object", "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] }, "coverPhotoId": { "type": [ "string", "null" ] }, "author": { "$ref": "#/components/schemas/MessagingPerson" } }, "required": [ "id", "title", "dateLabel", "audience", "coverPhotoId", "author" ], "additionalProperties": false }, "MessagingEvidencePublication": { "type": "object", "properties": { "id": { "type": "string" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "audience": { "type": "string", "enum": [ "followers", "public", "specific", "unlisted" ] }, "coverPhotoId": { "type": [ "string", "null" ] }, "author": { "$ref": "#/components/schemas/MessagingEvidencePerson" } }, "required": [ "id", "title", "dateLabel", "audience", "coverPhotoId", "author" ], "additionalProperties": false }, "MessagingAttachment": { "oneOf": [ { "type": "object", "properties": { "publicationId": { "type": "string" }, "status": { "type": "string", "enum": [ "unavailable" ] } }, "required": [ "publicationId", "status" ], "additionalProperties": false }, { "type": "object", "properties": { "publicationId": { "type": "string" }, "status": { "type": "string", "enum": [ "available" ] }, "publication": { "$ref": "#/components/schemas/MessagingPublication" } }, "required": [ "publicationId", "status", "publication" ], "additionalProperties": false } ] }, "MessagingEvidenceAttachment": { "oneOf": [ { "type": "object", "properties": { "publicationId": { "type": "string" }, "status": { "type": "string", "enum": [ "unavailable" ] } }, "required": [ "publicationId", "status" ], "additionalProperties": false }, { "type": "object", "properties": { "publicationId": { "type": "string" }, "status": { "type": "string", "enum": [ "available" ] }, "publication": { "$ref": "#/components/schemas/MessagingEvidencePublication" } }, "required": [ "publicationId", "status", "publication" ], "additionalProperties": false } ] }, "MessagingPlanAttachment": { "type": "object", "properties": { "planId": { "type": "string" }, "planRevisionId": { "type": "string" }, "status": { "type": "string", "enum": [ "available", "changed", "unavailable" ] } }, "required": [ "planId", "planRevisionId", "status" ], "additionalProperties": false, "description": "Plan-card history descriptor only; full card endpoint schemas are supplied by the planning fragment." }, "MessagingMessage": { "oneOf": [ { "type": "object", "properties": { "id": { "type": "string" }, "seq": { "type": "integer", "minimum": 0 }, "conversationId": { "type": "string" }, "kind": { "type": "string", "enum": [ "tombstone" ] }, "sentAt": { "type": "string", "format": "date-time" } }, "required": [ "id", "seq", "conversationId", "kind", "sentAt" ], "additionalProperties": false }, { "type": "object", "properties": { "id": { "type": "string" }, "seq": { "type": "integer", "minimum": 0 }, "conversationId": { "type": "string" }, "kind": { "type": "string", "enum": [ "text", "walk", "system" ] }, "sentAt": { "type": "string", "format": "date-time" }, "sender": { "$ref": "#/components/schemas/MessagingPerson" }, "text": { "type": "string" }, "systemCode": { "type": "string" }, "clientRef": { "type": "string" }, "attachment": { "$ref": "#/components/schemas/MessagingAttachment" }, "planAttachment": { "$ref": "#/components/schemas/MessagingPlanAttachment" } }, "required": [ "id", "seq", "conversationId", "kind", "sentAt" ], "additionalProperties": false } ], "description": "Tombstones carry only id/seq/conversationId/kind/sentAt. Other optional fields follow the exact current SQL projection. clientRef is only returned to its sender. text/systemCode absent rather than null. sender may be omitted after actor removal. Walk attachment current-access loss yields unavailable status without protected publication." }, "MessagingLastMessage": { "type": "object", "properties": { "id": { "type": "string" }, "seq": { "type": "integer", "minimum": 0 }, "kind": { "type": "string", "enum": [ "text", "walk", "system" ] }, "text": { "type": "string" }, "systemCode": { "type": "string" }, "sentAt": { "type": "string", "format": "date-time" } }, "required": [ "id", "seq", "kind", "sentAt" ], "additionalProperties": false }, "MessagingConversationSummary": { "type": "object", "properties": { "id": { "type": "string" }, "kind": { "type": "string", "enum": [ "direct", "group" ] }, "state": { "type": "string", "enum": [ "active", "closed", "request_sent" ] }, "version": { "type": "integer", "minimum": 0 }, "title": { "type": [ "string", "null" ] }, "peer": { "$ref": "#/components/schemas/MessagingPerson" }, "memberCount": { "type": "integer", "minimum": 0 }, "unreadCount": { "type": "integer", "minimum": 0 }, "canSend": { "type": "boolean" }, "lastMessage": { "$ref": "#/components/schemas/MessagingLastMessage" } }, "required": [ "id", "kind", "state", "version", "title", "memberCount", "unreadCount", "canSend" ], "additionalProperties": false, "description": "Direct title is null and peer is present. Group title is string|null. Outgoing requests have state request_sent, version/memberCount zero, canSend false and no lastMessage. Conditional omission is preserved.", "allOf": [ { "if": { "type": "object", "additionalProperties": true, "properties": { "kind": { "const": "direct" } }, "required": [ "kind" ] }, "then": { "type": "object", "additionalProperties": true, "required": [ "peer" ], "properties": { "peer": { "$ref": "#/components/schemas/MessagingPerson" }, "title": { "type": "null" } } } } ] }, "MessagingPermissions": { "type": "object", "properties": { "send": { "type": "boolean" }, "invite": { "type": "boolean" }, "rename": { "type": "boolean" }, "remove": { "type": "boolean" }, "end": { "type": "boolean" }, "leave": { "type": "boolean" } }, "required": [ "send", "invite", "rename", "remove", "end", "leave" ], "additionalProperties": false }, "MessagingMembership": { "type": "object", "properties": { "role": { "type": "string", "enum": [ "owner", "member" ] }, "state": { "type": "string", "enum": [ "active" ] }, "visibleAfterSeq": { "type": "integer", "minimum": 0 }, "readThroughSeq": { "type": "integer", "minimum": 0 } }, "required": [ "role", "state", "visibleAfterSeq", "readThroughSeq" ], "additionalProperties": false }, "MessagingMember": { "type": "object", "properties": { "id": { "type": [ "string", "null" ] }, "name": { "type": "string" }, "handle": { "type": [ "string", "null" ] }, "role": { "type": "string", "enum": [ "owner", "member" ] } }, "required": [ "id", "name", "handle", "role" ], "additionalProperties": false }, "MessagingPendingInvite": { "type": "object", "properties": { "person": { "$ref": "#/components/schemas/MessagingPerson" }, "invitationVersion": { "type": "integer", "minimum": 0 }, "expiresAt": { "type": "string", "format": "date-time" } }, "required": [ "person", "invitationVersion", "expiresAt" ], "additionalProperties": false }, "MessagingConversationDetail": { "type": "object", "properties": { "conversation": { "$ref": "#/components/schemas/MessagingConversationSummary" }, "permissions": { "$ref": "#/components/schemas/MessagingPermissions" }, "myMembership": { "$ref": "#/components/schemas/MessagingMembership" }, "members": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingMember" } }, "pendingInvites": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingPendingInvite" } } }, "required": [ "conversation", "permissions" ], "additionalProperties": false, "description": "Readable current snapshot adds membership and active roster. Pending invites are owner-only. Outgoing unreadable request omits membership/rosters and all permissions are false." }, "MessagingConversationView": { "type": "object", "properties": { "conversation": { "$ref": "#/components/schemas/MessagingConversationSummary" }, "permissions": { "$ref": "#/components/schemas/MessagingPermissions" }, "myMembership": { "$ref": "#/components/schemas/MessagingMembership" }, "members": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingMember" } }, "pendingInvites": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingPendingInvite" } }, "items": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingMessage" }, "maxItems": 50 }, "nextCursor": { "type": [ "string", "null" ] }, "snapshotSeq": { "type": "integer", "minimum": 0 } }, "required": [ "conversation", "permissions", "items", "nextCursor", "snapshotSeq" ], "additionalProperties": false }, "MessagingConversationPage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingConversationSummary" }, "maxItems": 50 }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "items", "nextCursor" ], "additionalProperties": false }, "MessagingHistoryPage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingMessage" }, "maxItems": 50 }, "snapshotSeq": { "type": "integer", "minimum": 0 }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "items", "snapshotSeq", "nextCursor" ], "additionalProperties": false }, "MessagingUpdatesPage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingMessage" }, "maxItems": 50 }, "hasMore": { "type": "boolean" }, "nextAfterSeq": { "type": "integer", "minimum": 0 } }, "required": [ "items", "hasMore", "nextAfterSeq" ], "additionalProperties": false }, "MessagingMessagePage": { "oneOf": [ { "$ref": "#/components/schemas/MessagingHistoryPage" }, { "$ref": "#/components/schemas/MessagingUpdatesPage" } ] }, "MessagingIntroduction": { "type": "object", "properties": { "id": { "type": "string" }, "seq": { "type": "integer", "minimum": 0 }, "conversationId": { "type": "string" }, "kind": { "type": "string", "enum": [ "text", "walk", "system", "tombstone" ] }, "sentAt": { "type": "string", "format": "date-time" }, "sender": { "$ref": "#/components/schemas/MessagingPerson" }, "text": { "type": "string" }, "attachment": { "$ref": "#/components/schemas/MessagingAttachment" } }, "required": [ "id", "seq", "conversationId", "kind", "sentAt" ], "additionalProperties": false, "description": "Visible direct request introduction only. Tombstone omits sender, but unlike ordinary history the request projection can still include a non-null intro text/attachment according to its selected SQL row. Current publication availability controls attachment detail." }, "MessagingInvitation": { "oneOf": [ { "type": "object", "properties": { "conversationId": { "type": "string" }, "kind": { "type": "string", "enum": [ "direct" ] }, "invitationVersion": { "type": "integer", "minimum": 0 }, "inviter": { "$ref": "#/components/schemas/MessagingPerson" }, "createdAt": { "type": "string", "format": "date-time" }, "expiresAt": { "type": "string", "format": "date-time" }, "introduction": { "$ref": "#/components/schemas/MessagingIntroduction" } }, "required": [ "conversationId", "kind", "invitationVersion", "inviter", "createdAt", "introduction" ], "additionalProperties": false }, { "type": "object", "properties": { "conversationId": { "type": "string" }, "kind": { "type": "string", "enum": [ "group" ] }, "invitationVersion": { "type": "integer", "minimum": 0 }, "inviter": { "$ref": "#/components/schemas/MessagingPerson" }, "createdAt": { "type": "string", "format": "date-time" }, "expiresAt": { "type": "string", "format": "date-time" }, "title": { "type": [ "string", "null" ] }, "memberCount": { "type": "integer", "minimum": 0 } }, "required": [ "conversationId", "kind", "invitationVersion", "inviter", "createdAt", "title", "memberCount" ], "additionalProperties": false } ] }, "MessagingInvitationPage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingInvitation" }, "maxItems": 50 }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "items", "nextCursor" ], "additionalProperties": false }, "MessagingCounts": { "type": "object", "properties": { "unreadMessages": { "type": "integer", "minimum": 0 }, "unreadConversations": { "type": "integer", "minimum": 0 }, "pendingRequests": { "type": "integer", "minimum": 0 }, "planUnreadMessages": { "type": "integer", "minimum": 0 }, "planUnreadConversations": { "type": "integer", "minimum": 0 } }, "required": [ "unreadMessages", "unreadConversations", "pendingRequests" ], "additionalProperties": false, "description": "Plan counts appear only when the current trusted planner projection is available. Counts reflect current authorized membership and visibility." }, "MessagingDiscoveryPerson": { "type": "object", "properties": { "id": { "type": [ "string", "null" ] }, "name": { "type": "string" }, "handle": { "type": [ "string", "null" ] }, "displayName": { "type": "string" }, "searchable": { "type": "boolean" }, "approvalRequired": { "type": "boolean" }, "relationship": { "type": "string", "enum": [ "none", "pending", "approved" ] } }, "required": [ "id", "name", "handle", "displayName", "searchable", "approvalRequired", "relationship" ], "additionalProperties": false }, "MessagingPeoplePage": { "type": "object", "properties": { "people": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingDiscoveryPerson" }, "maxItems": 50 }, "nextCursor": { "type": [ "string", "null" ] } }, "required": [ "people", "nextCursor" ], "additionalProperties": false }, "MessagingPersonProfile": { "type": "object", "properties": { "person": { "$ref": "#/components/schemas/MessagingPerson" }, "conversationId": { "type": [ "string", "null" ] }, "action": { "type": "string", "enum": [ "open", "send", "request" ] } }, "required": [ "person", "conversationId", "action" ], "additionalProperties": false }, "MessagingMessageInput": { "oneOf": [ { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "text" ] }, "text": { "type": "string", "description": "Server replaces CRLF with LF, trims, then requires nonempty normalized text with the stated code-point and UTF8 byte bounds; control characters and lone UTF16 surrogates are rejected after normalization. Raw padding is accepted within the enclosing body byte limit.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 2000, "maxUtf8Bytes": 8192, "forbiddenPattern": "[\\u0000-\\u0008\\u000B-\\u001F\\u007F-\\u009F\\uD800-\\uDFFF]" } } }, "required": [ "kind", "text" ], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "walk" ] }, "publicationId": { "$ref": "#/components/schemas/MessagingUuid" }, "text": { "type": "string", "description": "Server replaces CRLF with LF, trims, then requires nonempty normalized text with the stated code-point and UTF8 byte bounds; control characters and lone UTF16 surrogates are rejected after normalization. Raw padding is accepted within the enclosing body byte limit.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 2000, "maxUtf8Bytes": 8192, "forbiddenPattern": "[\\u0000-\\u0008\\u000B-\\u001F\\u007F-\\u009F\\uD800-\\uDFFF]" } } }, "required": [ "kind", "publicationId" ], "additionalProperties": false } ] }, "MessagingMemberIds": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingUuid" }, "uniqueItems": true, "description": "IDs lowercased and sorted before checking uniqueness; two different-case spellings of one UUID are duplicates.", "x-walkpic-unique-after-normalization": "lowercase", "maxItems": 19, "minItems": 1 }, "MessagingDirectRequest": { "type": "object", "properties": { "peerId": { "$ref": "#/components/schemas/MessagingUuid" }, "message": { "$ref": "#/components/schemas/MessagingMessageInput" }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "peerId", "message", "requestId" ], "additionalProperties": false }, "MessagingGroupRequest": { "type": "object", "properties": { "title": { "type": "string", "description": "Server replaces CRLF with LF, trims, then requires nonempty normalized text with the stated code-point and UTF8 byte bounds; control characters and lone UTF16 surrogates are rejected after normalization. Raw padding is accepted within the enclosing body byte limit.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 80, "maxUtf8Bytes": 320, "forbiddenPattern": "[\\u0000-\\u0008\\u000B-\\u001F\\u007F-\\u009F\\uD800-\\uDFFF]" } }, "memberIds": { "$ref": "#/components/schemas/MessagingMemberIds" }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "title", "memberIds", "requestId" ], "additionalProperties": false }, "MessagingSendRequest": { "type": "object", "properties": { "message": { "$ref": "#/components/schemas/MessagingMessageInput" }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "message", "requestId" ], "additionalProperties": false, "description": "Ordinary chat namespace rejects membership. Outing namespaces define that extension in the planning fragment." }, "MessagingSendReceipt": { "type": "object", "properties": { "messageId": { "type": "string" }, "seq": { "type": "integer", "minimum": 0 }, "clientRef": { "type": "string" }, "sentAt": { "type": "string", "format": "date-time" } }, "required": [ "messageId", "seq", "clientRef", "sentAt" ], "additionalProperties": false }, "MessagingDirectReceipt": { "type": "object", "properties": { "conversationId": { "type": "string" }, "messageId": { "type": "string" }, "seq": { "type": "integer", "minimum": 0 }, "clientRef": { "type": "string" }, "sentAt": { "type": "string", "format": "date-time" }, "created": { "type": "boolean" }, "state": { "type": "string", "enum": [ "active", "request_sent" ] } }, "required": [ "conversationId", "messageId", "seq", "clientRef", "sentAt", "created", "state" ], "additionalProperties": false }, "MessagingGroupReceipt": { "type": "object", "properties": { "conversationId": { "type": "string" }, "version": { "type": "integer", "minimum": 0 }, "invitedCount": { "type": "integer", "minimum": 1, "maximum": 19 } }, "required": [ "conversationId", "version", "invitedCount" ], "additionalProperties": false }, "MessagingRespondRequest": { "type": "object", "properties": { "decision": { "type": "string", "enum": [ "accept", "decline" ] }, "invitationVersion": { "$ref": "#/components/schemas/MessagingSafeNonnegativeInteger" }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "decision", "invitationVersion", "requestId" ], "additionalProperties": false }, "MessagingRespondReceipt": { "type": "object", "properties": { "conversationId": { "type": "string" }, "state": { "type": "string", "enum": [ "active", "declined" ] } }, "required": [ "conversationId", "state" ], "additionalProperties": false }, "MessagingReadRequest": { "type": "object", "properties": { "throughSeq": { "$ref": "#/components/schemas/MessagingSafeNonnegativeInteger" }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "throughSeq", "requestId" ], "additionalProperties": false }, "MessagingReadReceipt": { "type": "object", "properties": { "readThroughSeq": { "type": "integer", "minimum": 0 }, "unreadCount": { "type": "integer", "minimum": 0 } }, "required": [ "readThroughSeq", "unreadCount" ], "additionalProperties": false }, "MessagingRenameRequest": { "type": "object", "properties": { "title": { "type": "string", "description": "Server replaces CRLF with LF, trims, then requires nonempty normalized text with the stated code-point and UTF8 byte bounds; control characters and lone UTF16 surrogates are rejected after normalization. Raw padding is accepted within the enclosing body byte limit.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 80, "maxUtf8Bytes": 320, "forbiddenPattern": "[\\u0000-\\u0008\\u000B-\\u001F\\u007F-\\u009F\\uD800-\\uDFFF]" } }, "expectedVersion": { "$ref": "#/components/schemas/MessagingSafeNonnegativeInteger" }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "title", "expectedVersion", "requestId" ], "additionalProperties": false }, "MessagingRenameReceipt": { "type": "object", "properties": { "version": { "type": "integer", "minimum": 0 }, "title": { "type": [ "string", "null" ] } }, "required": [ "version", "title" ], "additionalProperties": false }, "MessagingInviteRequest": { "type": "object", "properties": { "memberIds": { "$ref": "#/components/schemas/MessagingMemberIds" }, "expectedVersion": { "$ref": "#/components/schemas/MessagingSafeNonnegativeInteger" }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "memberIds", "expectedVersion", "requestId" ], "additionalProperties": false }, "MessagingInviteReceipt": { "type": "object", "properties": { "version": { "type": "integer", "minimum": 0 }, "invitedCount": { "type": "integer", "minimum": 1, "maximum": 19 } }, "required": [ "version", "invitedCount" ], "additionalProperties": false }, "MessagingVersionRequest": { "type": "object", "properties": { "expectedVersion": { "$ref": "#/components/schemas/MessagingSafeNonnegativeInteger" }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "expectedVersion", "requestId" ], "additionalProperties": false }, "MessagingRemovalReceipt": { "type": "object", "properties": { "version": { "type": "integer", "minimum": 0 }, "removed": { "type": "boolean", "const": true } }, "required": [ "version", "removed" ], "additionalProperties": false }, "MessagingLeaveRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/MessagingUuid" } }, "required": [ "requestId" ], "additionalProperties": false }, "MessagingLeaveReceipt": { "type": "object", "properties": { "left": { "type": "boolean", "const": true } }, "required": [ "left" ], "additionalProperties": false }, "MessagingCloseReceipt": { "type": "object", "properties": { "version": { "type": "integer", "minimum": 0 }, "state": { "type": "string", "enum": [ "closed" ] } }, "required": [ "version", "state" ], "additionalProperties": false }, "MessagingReportMessagesTarget": { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "messages" ] }, "conversationId": { "$ref": "#/components/schemas/MessagingUuid" }, "messageIds": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingUuid" }, "uniqueItems": true, "x-walkpic-unique-after-normalization": "lowercase", "maxItems": 10, "minItems": 1 } }, "required": [ "kind", "conversationId", "messageIds" ], "additionalProperties": false }, "MessagingReportInvitationTarget": { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "invitation" ] }, "conversationId": { "$ref": "#/components/schemas/MessagingUuid" }, "invitationVersion": { "$ref": "#/components/schemas/MessagingSafeNonnegativeInteger" } }, "required": [ "kind", "conversationId", "invitationVersion" ], "additionalProperties": false }, "MessagingReportTarget": { "oneOf": [ { "$ref": "#/components/schemas/MessagingReportMessagesTarget" }, { "$ref": "#/components/schemas/MessagingReportInvitationTarget" } ] }, "MessagingReportRequest": { "oneOf": [ { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "messages" ] }, "conversationId": { "$ref": "#/components/schemas/MessagingUuid" }, "messageIds": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingUuid" }, "uniqueItems": true, "x-walkpic-unique-after-normalization": "lowercase", "maxItems": 10, "minItems": 1 }, "reason": { "type": "string", "description": "Server replaces CRLF with LF, trims, then requires nonempty normalized text with the stated code-point and UTF8 byte bounds; control characters and lone UTF16 surrogates are rejected after normalization. Raw padding is accepted within the enclosing body byte limit.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 1000, "maxUtf8Bytes": 4096, "forbiddenPattern": "[\\u0000-\\u0008\\u000B-\\u001F\\u007F-\\u009F\\uD800-\\uDFFF]" } }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" }, "previewToken": { "type": "string", "maxLength": 2000, "pattern": "^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$", "description": "Signed, actor/target/snapshot-bound preview token; validity and expiry are checked by server." } }, "required": [ "kind", "conversationId", "messageIds", "reason", "requestId", "previewToken" ], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "invitation" ] }, "conversationId": { "$ref": "#/components/schemas/MessagingUuid" }, "invitationVersion": { "$ref": "#/components/schemas/MessagingSafeNonnegativeInteger" }, "reason": { "type": "string", "description": "Server replaces CRLF with LF, trims, then requires nonempty normalized text with the stated code-point and UTF8 byte bounds; control characters and lone UTF16 surrogates are rejected after normalization. Raw padding is accepted within the enclosing body byte limit.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 1000, "maxUtf8Bytes": 4096, "forbiddenPattern": "[\\u0000-\\u0008\\u000B-\\u001F\\u007F-\\u009F\\uD800-\\uDFFF]" } }, "requestId": { "$ref": "#/components/schemas/MessagingUuid" }, "previewToken": { "type": "string", "maxLength": 2000, "pattern": "^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$", "description": "Signed, actor/target/snapshot-bound preview token; validity and expiry are checked by server." } }, "required": [ "kind", "conversationId", "invitationVersion", "reason", "requestId", "previewToken" ], "additionalProperties": false } ] }, "MessagingEvidenceMessage": { "type": "object", "properties": { "id": { "type": "string" }, "seq": { "type": "integer", "minimum": 0 }, "kind": { "type": "string", "enum": [ "text", "walk", "system" ] }, "sentAt": { "type": "string", "format": "date-time" }, "sender": { "$ref": "#/components/schemas/MessagingEvidencePerson" }, "text": { "type": "string" }, "systemCode": { "type": "string" }, "attachment": { "$ref": "#/components/schemas/MessagingEvidenceAttachment" } }, "required": [ "id", "seq", "kind", "sentAt", "sender" ], "additionalProperties": false }, "MessagingReportEvidence": { "oneOf": [ { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "messages" ] }, "conversationId": { "type": "string" }, "messages": { "type": "array", "items": { "$ref": "#/components/schemas/MessagingEvidenceMessage" }, "maxItems": 10, "minItems": 1 } }, "required": [ "kind", "conversationId", "messages" ], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "invitation" ] }, "conversationId": { "type": "string" }, "invitationVersion": { "type": "integer", "minimum": 0 }, "title": { "type": [ "string", "null" ] }, "createdAt": { "type": "string", "format": "date-time" }, "expiresAt": { "anyOf": [ { "type": "string", "format": "date-time" }, { "type": "null" } ] }, "memberCount": { "type": "integer", "minimum": 0 }, "inviter": { "$ref": "#/components/schemas/MessagingEvidencePerson" } }, "required": [ "kind", "conversationId", "invitationVersion", "title", "createdAt", "expiresAt", "memberCount", "inviter" ], "additionalProperties": false } ] }, "MessagingReportAutomation": { "type": "object", "properties": { "version": { "type": "integer", "const": 1 }, "scope": { "type": "string", "enum": [ "selected_message_text" ] }, "policyVersion": { "type": "string", "const": "walkpic-text-2026-09-28-v1" } }, "required": [ "version", "scope", "policyVersion" ], "additionalProperties": false }, "MessagingReportPreview": { "type": "object", "properties": { "evidence": { "$ref": "#/components/schemas/MessagingReportEvidence" }, "automation": { "$ref": "#/components/schemas/MessagingReportAutomation" }, "previewToken": { "type": "string" }, "expiresAt": { "type": "string", "format": "date-time" } }, "required": [ "evidence", "automation", "previewToken", "expiresAt" ], "additionalProperties": false }, "MessagingReportAssessment": { "type": "object", "properties": { "version": { "type": "integer", "const": 1 }, "scope": { "type": "string", "enum": [ "selected_message_text" ] }, "policyVersion": { "type": "string", "const": "walkpic-text-2026-09-28-v1" }, "action": { "type": "string", "enum": [ "selected_messages_removed", "no_automatic_removal" ] }, "removedCount": { "type": "integer", "minimum": 0, "maximum": 10 }, "concernResolved": { "type": "boolean", "const": false } }, "required": [ "version", "scope", "policyVersion", "action", "removedCount", "concernResolved" ], "additionalProperties": false }, "MessagingReportReceipt": { "type": "object", "properties": { "reportId": { "type": "string" }, "state": { "type": "string", "enum": [ "received" ] }, "assessment": { "$ref": "#/components/schemas/MessagingReportAssessment" } }, "required": [ "reportId", "state", "assessment" ], "additionalProperties": false, "description": "Immutable, content-free original acknowledgment. Readback does not expose evidence/reason or claim the concern is resolved. Account deletion/unlinking/purge revokes owner readback; group leave alone does not." }, "IdentityNotificationDelivery": { "type": "object", "properties": { "email": { "type": "boolean" }, "push": { "type": "boolean" }, "pushEnvironments": { "type": "array", "items": { "type": "string" }, "description": "Configured sender environments, or default production/sandbox. Device registration separately accepts only sandbox/production and checks advertised environment." } }, "required": [ "email", "push", "pushEnvironments" ], "additionalProperties": false }, "IdentityNotificationPerson": { "type": "object", "properties": { "id": { "type": "string" }, "displayName": { "type": "string" }, "handle": { "type": "string" }, "notificationId": { "type": [ "string", "null" ] } }, "required": [ "id", "displayName", "handle", "notificationId" ], "additionalProperties": false }, "IdentityFollowNotifications": { "type": "object", "properties": { "pendingRequests": { "type": "integer", "minimum": 0 }, "people": { "type": "array", "items": { "$ref": "#/components/schemas/IdentityNotificationPerson" }, "maxItems": 50 }, "delivery": { "$ref": "#/components/schemas/IdentityNotificationDelivery" } }, "required": [ "pendingRequests", "people", "delivery" ], "additionalProperties": false }, "IdentityNotificationSeenRequest": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string", "pattern": "^([a-fA-F0-9]{32}|[wW][aA][lL][kK]_[a-fA-F0-9-]{36}_[a-fA-F0-9-]{36}|[cC][hH][aA][tT]_([rR][eE][gG][uU][lL][aA][rR]|[pP][lL][aA][nN])_[a-fA-F0-9-]{36}_[a-fA-F0-9-]{36})$" }, "maxItems": 50, "minItems": 0 } }, "required": [ "ids" ], "additionalProperties": true, "description": "Extra properties accepted; empty and duplicate ID arrays accepted. Seen update is scoped to the current recipient. Regex is case-insensitive in source including prefixes." }, "IdentityNotificationSeen": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "seen" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityNotificationSettings": { "type": "object", "properties": { "emailEnabled": { "type": "boolean" }, "pushEnabled": { "type": "boolean" }, "delivery": { "$ref": "#/components/schemas/IdentityNotificationDelivery" } }, "required": [ "emailEnabled", "pushEnabled", "delivery" ], "additionalProperties": false }, "IdentityNotificationSettingsRequest": { "type": "object", "properties": { "emailEnabled": { "type": "boolean" }, "pushEnabled": { "type": "boolean" } }, "required": [ "emailEnabled", "pushEnabled" ], "additionalProperties": false }, "IdentityNotificationSettingsUpdated": { "type": "object", "properties": { "emailEnabled": { "type": "boolean" }, "pushEnabled": { "type": "boolean" } }, "required": [ "emailEnabled", "pushEnabled" ], "additionalProperties": false }, "IdentityNotificationDeviceRequest": { "type": "object", "properties": { "token": { "type": "string", "pattern": "^[a-fA-F0-9]{64,256}$" }, "environment": { "type": "string", "enum": [ "sandbox", "production" ] }, "deviceId": { "type": "string", "pattern": "^[a-fA-F0-9-]{36}$" } }, "required": [ "token", "environment", "deviceId" ], "additionalProperties": true, "description": "Source uses a weak 36-character hexadecimal/hyphen shape for deviceId, not the canonical UUID validator. Token normalized lowercase. Additional keys ignored." }, "IdentityNotificationDeviceRegistered": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "registered" ] } }, "required": [ "status" ], "additionalProperties": false }, "IdentityNotificationDeviceRemoved": { "type": "object", "properties": { "status": { "type": "string", "enum": [ "removed" ] } }, "required": [ "status" ], "additionalProperties": false }, "PersonalIntegrationClient": { "type": "object", "additionalProperties": false, "required": [ "id", "displayName", "kind", "provenance", "audience", "allowedScopes", "available" ], "properties": { "id": { "type": "string", "enum": [ "8f85e638-2a46-481f-9295-ced7c1cbbdda", "85ea11b3-e21d-4419-a59c-9307c61c3ee6" ] }, "displayName": { "type": "string", "enum": [ "WalkPic CLI", "WalkPic MCP (local stdio)" ] }, "kind": { "type": "string", "enum": [ "local-cli", "local-mcp" ] }, "provenance": { "const": "walkpic-maintained" }, "audience": { "const": "walkpic-api" }, "allowedScopes": { "type": "array", "items": { "type": "string", "enum": [ "publications:read", "library:owned:read", "library:received:read", "saved:read", "explore:read", "places:read" ] }, "minItems": 0, "maxItems": 6, "uniqueItems": true }, "available": { "type": "boolean" } } }, "PersonalIntegrationScope": { "type": "object", "additionalProperties": false, "required": [ "scope", "description" ], "properties": { "scope": { "type": "string", "enum": [ "publications:read", "library:owned:read", "library:received:read", "saved:read", "explore:read", "places:read" ] }, "description": { "type": "string", "minLength": 1, "maxLength": 2048 } } }, "PersonalIntegrationClients": { "type": "object", "additionalProperties": false, "required": [ "clients", "supportedScopes", "supportedOperationIds", "catalogRevision", "policyRevision", "limits" ], "properties": { "clients": { "type": "array", "items": { "$ref": "#/components/schemas/PersonalIntegrationClient" }, "minItems": 2, "maxItems": 2, "uniqueItems": true }, "supportedScopes": { "type": "array", "items": { "$ref": "#/components/schemas/PersonalIntegrationScope" }, "minItems": 6, "maxItems": 6, "uniqueItems": true }, "supportedOperationIds": { "type": "array", "items": { "type": "string", "enum": [ "integrationReadPublication", "integrationReadPublicationAccess", "integrationListOwnedPublications", "integrationListReceivedPublications", "integrationListReceivedAuthors", "integrationListSavedPublications", "integrationExplorePublications", "integrationListRatedPlaceVisits" ] }, "minItems": 8, "maxItems": 8, "uniqueItems": true }, "catalogRevision": { "const": 1 }, "policyRevision": { "const": 1 }, "limits": { "type": "object", "additionalProperties": false, "required": [ "activeGrants", "issuesPerDay", "refreshMinimumSeconds" ], "properties": { "activeGrants": { "const": 20 }, "issuesPerDay": { "const": 40 }, "refreshMinimumSeconds": { "const": 60 } } } } }, "PersonalGrantSummary": { "type": "object", "additionalProperties": false, "required": [ "id", "version", "clientId", "clientDisplayName", "clientKind", "clientProvenance", "scopes", "createdAt", "expiresAt", "state" ], "properties": { "id": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "version": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "clientId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "clientDisplayName": { "type": "string", "enum": [ "WalkPic CLI", "WalkPic MCP (local stdio)", "Unrecognized client" ] }, "clientKind": { "type": "string", "enum": [ "local-cli", "local-mcp", "unrecognized" ] }, "clientProvenance": { "type": "string", "enum": [ "walkpic-maintained", "unrecognized" ] }, "scopes": { "type": "array", "items": { "type": "string", "enum": [ "publications:read", "library:owned:read", "library:received:read", "saved:read", "explore:read", "places:read" ] }, "minItems": 0, "maxItems": 6, "uniqueItems": true }, "createdAt": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "expiresAt": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "state": { "type": "string", "enum": [ "active", "revoked", "expired", "unavailable" ] } } }, "PersonalGrantList": { "type": "object", "additionalProperties": false, "required": [ "grants", "nextCursor" ], "properties": { "grants": { "type": "array", "items": { "$ref": "#/components/schemas/PersonalGrantSummary" }, "minItems": 0, "maxItems": 50 }, "nextCursor": { "type": [ "string", "null" ], "minLength": 1, "maxLength": 512, "pattern": "^[A-Za-z0-9_-]+$" } } }, "IntegrationCredentialPair": { "type": "object", "additionalProperties": false, "required": [ "grantId", "clientId", "tokenType", "accessToken", "refreshToken", "accessExpiresAt", "refreshExpiresAt", "grantExpiresAt" ], "properties": { "grantId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "clientId": { "type": "string", "enum": [ "8f85e638-2a46-481f-9295-ced7c1cbbdda", "85ea11b3-e21d-4419-a59c-9307c61c3ee6" ] }, "tokenType": { "const": "Bearer" }, "accessToken": { "type": "string", "pattern": "^wp_int\\.[A-Za-z0-9_-]{43}$" }, "refreshToken": { "type": "string", "pattern": "^wp_int_refresh\\.[A-Za-z0-9_-]{43}$" }, "accessExpiresAt": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "refreshExpiresAt": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "grantExpiresAt": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } } }, "PersonalGrantIssued": { "type": "object", "additionalProperties": false, "required": [ "status", "grant", "credential" ], "properties": { "status": { "const": "issued" }, "grant": { "$ref": "#/components/schemas/PersonalGrantSummary" }, "credential": { "$ref": "#/components/schemas/IntegrationCredentialPair" } } }, "PersonalGrantAlreadyIssued": { "type": "object", "additionalProperties": false, "required": [ "status", "grant", "credentialAvailable" ], "properties": { "status": { "const": "already-issued" }, "grant": { "$ref": "#/components/schemas/PersonalGrantSummary" }, "credentialAvailable": { "const": false } } }, "PersonalGrantRotated": { "type": "object", "additionalProperties": false, "required": [ "status", "credential" ], "properties": { "status": { "const": "rotated" }, "credential": { "$ref": "#/components/schemas/IntegrationCredentialPair" } } }, "PersonalGrantRevoked": { "type": "object", "additionalProperties": false, "required": [ "status", "grantId" ], "properties": { "status": { "const": "revoked" }, "grantId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } } }, "PersonalGrantsRevoked": { "type": "object", "additionalProperties": false, "required": [ "status" ], "properties": { "status": { "const": "revoked" } } }, "PersonalGrantIssueRequest": { "type": "object", "additionalProperties": false, "required": [ "requestId", "clientId", "scopes", "grantSeconds" ], "properties": { "requestId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "clientId": { "type": "string", "enum": [ "8f85e638-2a46-481f-9295-ced7c1cbbdda", "85ea11b3-e21d-4419-a59c-9307c61c3ee6" ] }, "scopes": { "type": "array", "items": { "type": "string", "enum": [ "publications:read", "library:owned:read", "library:received:read", "saved:read", "explore:read", "places:read" ] }, "minItems": 1, "maxItems": 6, "uniqueItems": true }, "grantSeconds": { "type": "integer", "enum": [ 86400, 604800, 2592000 ] } } }, "PersonalGrantRevokeRequest": { "type": "object", "additionalProperties": false, "required": [ "requestId", "expectedVersion" ], "properties": { "requestId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "expectedVersion": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } } }, "PersonalGrantRevokeAllRequest": { "type": "object", "additionalProperties": false, "required": [ "requestId" ], "properties": { "requestId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } } }, "PersonalGrantRefreshRequest": { "type": "object", "additionalProperties": false, "required": [ "requestId", "clientId", "grantId" ], "properties": { "requestId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }, "clientId": { "type": "string", "enum": [ "8f85e638-2a46-481f-9295-ced7c1cbbdda", "85ea11b3-e21d-4419-a59c-9307c61c3ee6" ] }, "grantId": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" } } }, "PlanningUUID": { "type": "string", "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningSHA256": { "type": "string", "pattern": "^[a-f0-9]{64}$", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningStopId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningVersion": { "type": "integer", "minimum": 1, "maximum": 9007199254740991, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningUtcInstant": { "type": "string", "pattern": "^\\d{4}-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\.\\d{3}Z$", "format": "date-time", "x-walkpic-canonical": "Date.parse finite and new Date(value).toISOString()===value", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningSqlTimestamp": { "type": "string", "description": "SQLite UTC timestamp emitted by the authored projection; some legacy tables use YYYY-MM-DD HH:mm:ss, others canonical ISO UTC.", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPoint": { "type": "object", "properties": { "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 } }, "required": [ "latitude", "longitude" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningStop": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningStopId" }, "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 } }, "required": [ "id", "latitude", "longitude" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanStop": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningStopId" }, "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 }, "label": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] } }, "required": [ "id", "latitude", "longitude", "label" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRouteStop": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningStopId" }, "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 }, "label": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f-\\u009f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "note": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f-\\u009f]*$", "maxLength": 600, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] } }, "required": [ "id", "latitude", "longitude", "label" ], "additionalProperties": false, "x-walkpic-normalization": "missing/null note becomes empty string", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningWalkingRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "transport": { "type": "string", "const": "walking" }, "shape": { "type": "string", "enum": [ "loop", "pointToPoint" ] }, "budgetSeconds": { "type": "integer", "minimum": 900, "maximum": 28800 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "stops": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningStop" }, "minItems": 2, "maxItems": 22 } }, "required": [ "requestId", "transport", "shape", "budgetSeconds", "photoSeconds", "stops" ], "additionalProperties": false, "allOf": [ { "if": { "type": "object", "properties": { "shape": { "type": "string", "const": "loop" } }, "required": [ "shape" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "stops": { "type": "array", "maxItems": 21 } }, "required": [], "additionalProperties": true } } ], "x-walkpic-constraints": [ "photoSeconds < budgetSeconds", "unique stop IDs and normalized coordinate pairs", "negative zero coordinates normalize to0", "requestId lowercases" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCapture": { "type": "object", "properties": { "stopId": { "$ref": "#/components/schemas/PlanningStopId" }, "kind": { "type": "string", "enum": [ "map", "entered", "device", "reviewed" ] } }, "required": [ "stopId", "kind" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningIntakeRequest": { "type": "object", "properties": { "request": { "$ref": "#/components/schemas/PlanningWalkingRequest" }, "captureContractVersion": { "type": "string", "const": "walkpic-authored-points-v1" }, "accessRevision": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "intentGeneration": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "captures": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningCapture" }, "minItems": 2, "maxItems": 22 } }, "required": [ "request", "captureContractVersion", "accessRevision", "intentGeneration", "captures" ], "additionalProperties": false, "x-walkpic-constraints": [ "captures length equals request.stops length", "capture.stopId order matches request.stops[i].id" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningIntake": { "type": "object", "properties": { "ownerId": { "$ref": "#/components/schemas/PlanningUUID" }, "accessRevision": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "requestDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "stopsDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "intentGeneration": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "captureContractVersion": { "type": "string", "const": "walkpic-authored-points-v1" }, "policyVersion": { "type": "string", "minLength": 1, "maxLength": 120 }, "sourceDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "expiresAt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991, "description": "Unix epoch milliseconds; owner/policy-bound logical retention" } }, "required": [ "ownerId", "accessRevision", "requestId", "requestDigest", "stopsDigest", "intentGeneration", "captureContractVersion", "policyVersion", "sourceDigest", "expiresAt" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCancelRequest": { "type": "object", "properties": { "calculationRequestId": { "$ref": "#/components/schemas/PlanningUUID" }, "requestId": { "$ref": "#/components/schemas/PlanningUUID" } }, "required": [ "calculationRequestId", "requestId" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCancelled": { "type": "object", "properties": { "state": { "type": "string", "const": "cancelled" } }, "required": [ "state" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningSnapStop": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningStopId" }, "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 }, "offsetMeters": { "type": "integer", "minimum": 0, "maximum": 750 } }, "required": [ "id", "latitude", "longitude", "offsetMeters" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningSnaps": { "type": "object", "properties": { "sourceDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "stops": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningSnapStop" }, "minItems": 2, "maxItems": 22 } }, "required": [ "sourceDigest", "stops" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningSource": { "type": "object", "properties": { "provider": { "type": "string", "const": "valhalla" }, "dataSource": { "type": "string", "const": "openstreetmap" }, "snapshotDate": { "type": "string", "pattern": "^\\d{4}-\\d\\d-\\d\\d$", "maxLength": 120 }, "snapshotSha256": { "$ref": "#/components/schemas/PlanningSHA256" }, "graphSha256": { "$ref": "#/components/schemas/PlanningSHA256" }, "engineVersion": { "type": "string", "minLength": 1, "maxLength": 120 }, "engineSha256": { "$ref": "#/components/schemas/PlanningSHA256" }, "configSha256": { "$ref": "#/components/schemas/PlanningSHA256" }, "rightsPolicyVersion": { "type": "string", "minLength": 1, "maxLength": 120 }, "coverageId": { "type": "string", "minLength": 1, "maxLength": 120 }, "coverageSha256": { "$ref": "#/components/schemas/PlanningSHA256" } }, "required": [ "provider", "dataSource", "snapshotDate", "snapshotSha256", "graphSha256", "engineVersion", "engineSha256", "configSha256", "rightsPolicyVersion", "coverageId", "coverageSha256" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningTotals": { "type": "object", "properties": { "distanceMeters": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "walkingSeconds": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "contingencySeconds": { "type": "integer", "minimum": 300, "maximum": 9007199254740991 }, "totalSeconds": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "fitsBudget": { "type": "boolean" } }, "required": [ "distanceMeters", "walkingSeconds", "photoSeconds", "contingencySeconds", "totalSeconds", "fitsBudget" ], "additionalProperties": false, "x-walkpic-constraints": [ "distanceMeters=round(sum leg distances)", "walkingSeconds=ceil(sum leg walkingSeconds)", "contingencySeconds=max(300,ceil(walkingSeconds/10))", "totalSeconds=sum walking+photo+contingency", "fitsBudget=totalSeconds<=request.budgetSeconds" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLeg": { "type": "object", "properties": { "fromStopId": { "$ref": "#/components/schemas/PlanningStopId" }, "toStopId": { "$ref": "#/components/schemas/PlanningStopId" }, "state": { "type": "string", "const": "valid" }, "geometry": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPoint" }, "minItems": 2, "maxItems": 10000 }, "distanceMeters": { "type": "number", "exclusiveMinimum": 0 }, "walkingSeconds": { "type": "number", "exclusiveMinimum": 0 }, "snappedStart": { "$ref": "#/components/schemas/PlanningPoint" }, "snappedFinish": { "$ref": "#/components/schemas/PlanningPoint" }, "startOffsetMeters": { "type": "number", "minimum": 0, "maximum": 25 }, "finishOffsetMeters": { "type": "number", "minimum": 0, "maximum": 25 } }, "required": [ "fromStopId", "toStopId", "state", "geometry", "distanceMeters", "walkingSeconds", "snappedStart", "snappedFinish", "startOffsetMeters", "finishOffsetMeters" ], "additionalProperties": false, "x-walkpic-constraints": [ "geometry endpoints equal snapped endpoints", "adjacent legs connect exactly; loop ends meet", "legs correspond to ordered authored stops; no straight-line substitute" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningHighlight": { "type": "object", "properties": { "id": { "type": "string", "pattern": "^osm:(node|way|relation):[1-9][0-9]{0,19}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "kind": { "type": "string", "enum": [ "park", "waterfront", "viewpoint", "garden", "landmark", "art", "historic" ] }, "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 }, "sourceUrl": { "type": "string", "pattern": "^https://www\\.openstreetmap\\.org/(node|way|relation)/[1-9][0-9]{0,19}$" } }, "required": [ "id", "name", "kind", "latitude", "longitude", "sourceUrl" ], "additionalProperties": false, "x-walkpic-constraints": [ "sourceUrl and kind exactly match source feature" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningProfileReason": { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "fastest_checked", "scenic_proximity", "named_places" ] }, "label": { "type": "string", "minLength": 1, "maxLength": 160 }, "featureIds": { "type": "array", "items": { "type": "string", "pattern": "^osm:(node|way|relation):[1-9][0-9]{0,19}$" }, "minItems": 1, "maxItems": 6, "uniqueItems": true } }, "required": [ "kind", "label" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningProfile": { "type": "object", "properties": { "kind": { "type": "string", "enum": [ "fastest", "scenic", "discover" ] }, "title": { "type": "string", "enum": [ "Fastest", "Scenic", "Discover" ] }, "reasons": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningProfileReason" }, "minItems": 1, "maxItems": 3 }, "extraWalkingSeconds": { "type": "integer", "minimum": 0, "maximum": 900 }, "highlights": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningHighlight" }, "minItems": 0, "maxItems": 6 } }, "required": [ "kind", "title", "reasons", "extraWalkingSeconds", "highlights" ], "additionalProperties": false, "x-walkpic-constraints": [ "kind/title/reason enum correspond", "fastest extraWalkingSeconds0/highlights[]", "nonfastest highlights>=1 and referenced reason featureIds", "extraWalkingSeconds=option walkingSeconds-fastest walkingSeconds<=min(900,floor(fastest*.35))", "profiled options all-or-none with one fastest, distinct kind, nonfastest fitsBudget" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningStoredOption": { "type": "object", "properties": { "routeOptionId": { "$ref": "#/components/schemas/PlanningSHA256" }, "routeDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "legs": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningLeg" }, "minItems": 1, "maxItems": 21 }, "totals": { "$ref": "#/components/schemas/PlanningTotals" }, "profile": { "$ref": "#/components/schemas/PlanningProfile" } }, "required": [ "routeOptionId", "routeDigest", "legs", "totals" ], "additionalProperties": false, "x-walkpic-constraints": [ "routeOptionId===routeDigest" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPreparedOption": { "type": "object", "properties": { "routeOptionId": { "$ref": "#/components/schemas/PlanningSHA256" }, "routeDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "legs": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningLeg" }, "minItems": 1, "maxItems": 21 }, "totals": { "$ref": "#/components/schemas/PlanningTotals" }, "profile": { "$ref": "#/components/schemas/PlanningProfile" }, "optionId": { "$ref": "#/components/schemas/PlanningUUID" }, "reviewedAccessPointsDigest": { "$ref": "#/components/schemas/PlanningSHA256" } }, "required": [ "routeOptionId", "routeDigest", "legs", "totals", "optionId", "reviewedAccessPointsDigest" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningUnresolvedLeg": { "type": "object", "properties": { "fromStopId": { "$ref": "#/components/schemas/PlanningStopId" }, "toStopId": { "$ref": "#/components/schemas/PlanningStopId" }, "reasonCode": { "type": "string", "enum": [ "ROUTE_ENDPOINT_MISMATCH", "ROUTE_OUTSIDE_COVERAGE", "ROUTE_EVIDENCE_INVALID", "ROUTE_UNAVAILABLE", "ROUTE_UNRESOLVED" ] } }, "required": [ "fromStopId", "toStopId", "reasonCode" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPreparation": { "oneOf": [ { "type": "object", "properties": { "preparationId": { "$ref": "#/components/schemas/PlanningUUID" }, "requestDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "source": { "$ref": "#/components/schemas/PlanningSource" }, "sourceVersion": { "type": "string" }, "transport": { "type": "string", "const": "walking" }, "calculatedAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "expiresAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "options": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPreparedOption" }, "minItems": 1, "maxItems": 3 }, "unresolvedLegs": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUnresolvedLeg" }, "minItems": 0, "maxItems": 0 }, "publicationReady": { "type": "boolean", "const": false } }, "required": [ "preparationId", "requestDigest", "source", "sourceVersion", "transport", "calculatedAt", "expiresAt", "options", "unresolvedLegs", "publicationReady" ], "additionalProperties": false }, { "type": "object", "properties": { "preparationId": { "type": "null" }, "requestDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "source": { "$ref": "#/components/schemas/PlanningSource" }, "sourceVersion": { "type": "string" }, "transport": { "type": "string", "const": "walking" }, "calculatedAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "expiresAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "options": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPreparedOption" }, "minItems": 0, "maxItems": 0 }, "unresolvedLegs": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUnresolvedLeg" }, "minItems": 1, "maxItems": 21 }, "publicationReady": { "type": "boolean", "const": false } }, "required": [ "preparationId", "requestDigest", "source", "sourceVersion", "transport", "calculatedAt", "expiresAt", "options", "unresolvedLegs", "publicationReady" ], "additionalProperties": false } ], "x-walkpic-constraints": [ "sourceVersion===source.snapshotDate", "ready lifetime<=900s; intake may shorten", "profile omitted unless X-WalkPic-Route-Profiles:1; unresolved is success200", "response/request/source digests and leg topology are checked at authored preparation boundary" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCreatePlanRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "stops": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPlanStop" }, "minItems": 2, "maxItems": 22 }, "shape": { "type": "string", "enum": [ "loop", "pointToPoint" ] }, "budgetSeconds": { "type": "integer", "minimum": 900, "maximum": 28800 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "startsAtUtc": { "type": "string", "pattern": "^20\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\.\\d{3}Z$", "format": "date-time", "x-walkpic-constraints": [ "canonical ISO UTC strictly before2037-01-01T00:00:00.000Z", "future at route/create/reschedule commit" ] }, "timeZone": { "type": "string", "maxLength": 80, "pattern": "^(UTC|.*/.*)$", "x-walkpic-constraint": "Intl.DateTimeFormat recognizes IANA time zone", "x-walkpic-max-utf16-units": 80 }, "capacity": { "type": "integer", "minimum": 2, "maximum": 20 }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "recipientIds": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUUID" }, "minItems": 0, "maxItems": 50, "uniqueItems": true }, "calculationRequestId": { "$ref": "#/components/schemas/PlanningUUID" }, "preparationId": { "$ref": "#/components/schemas/PlanningUUID" }, "optionId": { "$ref": "#/components/schemas/PlanningUUID" }, "reviewedAccessPointsDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "theme": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] }, "meetingInstructions": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 1000, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] } }, "required": [ "requestId", "title", "stops", "shape", "budgetSeconds", "photoSeconds", "startsAtUtc", "timeZone", "capacity", "audience", "recipientIds", "calculationRequestId", "preparationId", "optionId", "reviewedAccessPointsDigest" ], "additionalProperties": false, "allOf": [ { "if": { "type": "object", "properties": { "shape": { "type": "string", "const": "loop" } }, "required": [ "shape" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "stops": { "type": "array", "maxItems": 21 } }, "required": [], "additionalProperties": true } }, { "if": { "type": "object", "properties": { "audience": { "type": "string", "const": "specific" } }, "required": [ "audience" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "recipientIds": { "type": "array", "minItems": 1 } }, "required": [], "additionalProperties": true }, "else": { "type": "object", "properties": { "recipientIds": { "type": "array", "maxItems": 0 } }, "required": [], "additionalProperties": true } } ], "x-walkpic-constraints": [ "photoSeconds < budgetSeconds", "unique stop IDs and coordinates", "trim text; missing/null theme and meetingInstructions become empty strings", "disallowed shared text422 CONTENT_NOT_ALLOWED", "recipient IDs lowercased/sorted and checked live following/unblocked at commit", "fresh sealed preparation/source/current option matches calculation; selected fitsBudget true", "logistics change requires all fresh proof fields" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPatchPlanRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "stops": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPlanStop" }, "minItems": 2, "maxItems": 22 }, "shape": { "type": "string", "enum": [ "loop", "pointToPoint" ] }, "budgetSeconds": { "type": "integer", "minimum": 900, "maximum": 28800 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "startsAtUtc": { "type": "string", "pattern": "^20\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\.\\d{3}Z$", "format": "date-time", "x-walkpic-constraints": [ "canonical ISO UTC strictly before2037-01-01T00:00:00.000Z", "future at route/create/reschedule commit" ] }, "timeZone": { "type": "string", "maxLength": 80, "pattern": "^(UTC|.*/.*)$", "x-walkpic-constraint": "Intl.DateTimeFormat recognizes IANA time zone", "x-walkpic-max-utf16-units": 80 }, "capacity": { "type": "integer", "minimum": 2, "maximum": 20 }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "recipientIds": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUUID" }, "minItems": 0, "maxItems": 50, "uniqueItems": true }, "calculationRequestId": { "$ref": "#/components/schemas/PlanningUUID" }, "preparationId": { "$ref": "#/components/schemas/PlanningUUID" }, "optionId": { "$ref": "#/components/schemas/PlanningUUID" }, "reviewedAccessPointsDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "theme": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] }, "meetingInstructions": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 1000, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] }, "expectedVersion": { "$ref": "#/components/schemas/PlanningVersion" } }, "required": [ "requestId", "title", "stops", "shape", "budgetSeconds", "photoSeconds", "startsAtUtc", "timeZone", "capacity", "audience", "recipientIds", "expectedVersion" ], "additionalProperties": false, "allOf": [ { "if": { "type": "object", "properties": { "shape": { "type": "string", "const": "loop" } }, "required": [ "shape" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "stops": { "type": "array", "maxItems": 21 } }, "required": [], "additionalProperties": true } }, { "if": { "type": "object", "properties": { "audience": { "type": "string", "const": "specific" } }, "required": [ "audience" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "recipientIds": { "type": "array", "minItems": 1 } }, "required": [], "additionalProperties": true }, "else": { "type": "object", "properties": { "recipientIds": { "type": "array", "maxItems": 0 } }, "required": [], "additionalProperties": true } } ], "x-walkpic-constraints": [ "photoSeconds < budgetSeconds", "unique stop IDs and coordinates", "trim text; missing/null theme and meetingInstructions become empty strings", "disallowed shared text422 CONTENT_NOT_ALLOWED", "recipient IDs lowercased/sorted and checked live following/unblocked at commit", "fresh sealed preparation/source/current option matches calculation; selected fitsBudget true", "logistics change requires all fresh proof fields" ], "dependentRequired": { "calculationRequestId": [ "preparationId", "optionId", "reviewedAccessPointsDigest" ], "preparationId": [ "calculationRequestId", "optionId", "reviewedAccessPointsDigest" ], "optionId": [ "calculationRequestId", "preparationId", "reviewedAccessPointsDigest" ], "reviewedAccessPointsDigest": [ "calculationRequestId", "preparationId", "optionId" ] }, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanMetadataRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "expectedVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "capacity": { "type": "integer", "minimum": 2, "maximum": 20 }, "meetingInstructions": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 1000, "x-walkpic-normalization": "String.trim()" } }, "required": [ "requestId", "expectedVersion", "title", "capacity", "meetingInstructions" ], "additionalProperties": false, "x-walkpic-constraints": [ "capacity >= current host+approved reservations", "route/logistics/grants preserved from current storage; client extras rejected" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReschedulePlanRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "stops": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPlanStop" }, "minItems": 2, "maxItems": 22 }, "shape": { "type": "string", "enum": [ "loop", "pointToPoint" ] }, "budgetSeconds": { "type": "integer", "minimum": 900, "maximum": 28800 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "startsAtUtc": { "type": "string", "pattern": "^20\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\.\\d{3}Z$", "format": "date-time", "x-walkpic-constraints": [ "canonical ISO UTC strictly before2037-01-01T00:00:00.000Z", "future at route/create/reschedule commit" ] }, "timeZone": { "type": "string", "maxLength": 80, "pattern": "^(UTC|.*/.*)$", "x-walkpic-constraint": "Intl.DateTimeFormat recognizes IANA time zone", "x-walkpic-max-utf16-units": 80 }, "calculationRequestId": { "$ref": "#/components/schemas/PlanningUUID" }, "preparationId": { "$ref": "#/components/schemas/PlanningUUID" }, "optionId": { "$ref": "#/components/schemas/PlanningUUID" }, "reviewedAccessPointsDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "expectedVersion": { "$ref": "#/components/schemas/PlanningVersion" } }, "required": [ "requestId", "stops", "shape", "budgetSeconds", "photoSeconds", "startsAtUtc", "timeZone", "calculationRequestId", "preparationId", "optionId", "reviewedAccessPointsDigest", "expectedVersion" ], "additionalProperties": false, "allOf": [ { "if": { "type": "object", "properties": { "shape": { "type": "string", "const": "loop" } }, "required": [ "shape" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "stops": { "type": "array", "maxItems": 21 } }, "required": [], "additionalProperties": true } } ], "x-walkpic-constraints": [ "all fresh review proof required", "current scheduled host version only", "preserves current metadata/audience/recipient grants", "increments logisticsVersion; reservations require reconfirmation" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningClosePlanRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "expectedVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "action": { "type": "string", "enum": [ "cancel", "end" ] } }, "required": [ "requestId", "expectedVersion", "action" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningJoinPlanRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "expectedRevisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "note": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b-\\u001f\\u007f-\\u009f\\ud800-\\udfff]*$", "maxLength": 280, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] } }, "required": [ "requestId", "expectedRevisionId" ], "additionalProperties": false, "x-walkpic-normalization": "missing/null note becomes empty string", "x-walkpic-constraints": [ "trim and message policy check", "request before start/current revision/capacity; request does not reserve slot" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRespondJoinRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "expectedVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "decision": { "type": "string", "enum": [ "approve", "decline" ] } }, "required": [ "requestId", "expectedVersion", "decision" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningAttendanceRequest": { "oneOf": [ { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "action": { "type": "string", "enum": [ "withdraw", "leave" ] } }, "required": [ "requestId", "action" ], "additionalProperties": false }, { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "action": { "type": "string", "const": "confirm" }, "expectedLogisticsVersion": { "$ref": "#/components/schemas/PlanningVersion" } }, "required": [ "requestId", "action", "expectedLogisticsVersion" ], "additionalProperties": false } ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRemoveAttendeeRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "expectedVersion": { "$ref": "#/components/schemas/PlanningVersion" } }, "required": [ "requestId", "expectedVersion" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanRevisionReceipt": { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "revisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "logisticsVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "acknowledgedState": { "type": "string", "const": "scheduled" } }, "required": [ "planId", "revisionId", "version", "logisticsVersion", "acknowledgedState" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanCloseReceipt": { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "acknowledgedState": { "type": "string", "enum": [ "cancelled", "ended" ] } }, "required": [ "planId", "version", "acknowledgedState" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningAttendanceReceipt": { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "logisticsVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "acknowledgedState": { "type": "string", "enum": [ "requested", "approved", "declined", "withdrawn", "removed" ] } }, "required": [ "planId", "version", "logisticsVersion", "acknowledgedState" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningSourceOffer": { "type": "object", "properties": { "license": { "type": "string", "const": "ODbL-1.0" }, "attribution": { "type": "string", "const": "Walking route: © OpenStreetMap contributors" }, "attributionUrl": { "type": "string", "const": "https://www.openstreetmap.org/copyright" }, "licenseUrl": { "type": "string", "const": "https://opendatacommons.org/licenses/odbl/1-0/" }, "sourceOfferUrl": { "type": "string" }, "sourceOfferSha256": { "type": "string", "const": "d7b8ca5bbc914d50417595e4872b86351e584f192e6788c317d782a11ee73e95" } }, "required": [ "license", "attribution", "attributionUrl", "licenseUrl", "sourceOfferUrl", "sourceOfferSha256" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningHost": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "handle": { "type": "string" }, "name": { "type": "string" } }, "required": [ "id", "handle", "name" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningBounds": { "type": "object", "properties": { "west": { "type": "number", "minimum": -180, "maximum": 180 }, "south": { "type": "number", "minimum": -90, "maximum": 90 }, "east": { "type": "number", "minimum": -180, "maximum": 180 }, "north": { "type": "number", "minimum": -90, "maximum": 90 } }, "required": [ "west", "south", "east", "north" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningMyAttendance": { "oneOf": [ { "type": "object", "properties": { "state": { "type": "string", "const": "host" } }, "required": [ "state" ], "additionalProperties": false }, { "type": "object", "properties": { "state": { "type": "string", "enum": [ "requested", "approved", "declined", "withdrawn", "removed" ] }, "requestedLogisticsVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "confirmedLogisticsVersion": { "anyOf": [ { "$ref": "#/components/schemas/PlanningVersion" }, { "type": "null" } ] }, "reviewRequired": { "type": "boolean" }, "reconfirmationRequired": { "type": "boolean" }, "note": { "anyOf": [ { "type": "string", "maxLength": 280 }, { "type": "null" } ] } }, "required": [ "state", "requestedLogisticsVersion", "confirmedLogisticsVersion", "reviewRequired", "reconfirmationRequired" ], "additionalProperties": false } ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanCounts": { "type": "object", "properties": { "capacity": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "confirmed": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "reconfirmation": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "reserved": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "available": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "historicalApproved": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": [ "capacity", "confirmed", "reconfirmation", "reserved", "available", "historicalApproved" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanSummary": { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "revisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "state": { "type": "string", "enum": [ "scheduled", "cancelled", "ended" ] }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "logisticsVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "hostId": { "$ref": "#/components/schemas/PlanningUUID" }, "host": { "$ref": "#/components/schemas/PlanningHost" }, "bounds": { "$ref": "#/components/schemas/PlanningBounds" }, "myAttendance": { "anyOf": [ { "$ref": "#/components/schemas/PlanningMyAttendance" }, { "type": "null" } ] }, "counts": { "$ref": "#/components/schemas/PlanningPlanCounts" }, "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "startsAtUtc": { "type": "string", "pattern": "^20\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\.\\d{3}Z$", "format": "date-time", "x-walkpic-constraints": [ "canonical ISO UTC strictly before2037-01-01T00:00:00.000Z", "future at route/create/reschedule commit" ] }, "timeZone": { "type": "string", "maxLength": 80, "pattern": "^(UTC|.*/.*)$", "x-walkpic-constraint": "Intl.DateTimeFormat recognizes IANA time zone", "x-walkpic-max-utf16-units": 80 }, "shape": { "type": "string", "enum": [ "loop", "pointToPoint" ] }, "budgetSeconds": { "type": "integer", "minimum": 900, "maximum": 28800 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "theme": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()" }, "totals": { "$ref": "#/components/schemas/PlanningTotals" }, "attribution": { "$ref": "#/components/schemas/PlanningSourceOffer" } }, "required": [ "planId", "revisionId", "state", "version", "logisticsVersion", "hostId", "host", "bounds", "myAttendance", "counts", "title", "startsAtUtc", "timeZone", "shape", "budgetSeconds", "photoSeconds", "audience", "theme", "totals", "attribution" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanPage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPlanSummary" }, "minItems": 0, "maxItems": 50 }, "nextCursor": { "anyOf": [ { "type": "string", "maxLength": 2000 }, { "type": "null" } ] } }, "required": [ "items", "nextCursor" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanPreview": { "type": "object", "properties": { "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "stops": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPlanStop" }, "minItems": 2, "maxItems": 22 }, "shape": { "type": "string", "enum": [ "loop", "pointToPoint" ] }, "budgetSeconds": { "type": "integer", "minimum": 900, "maximum": 28800 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "startsAtUtc": { "type": "string", "pattern": "^20\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\.\\d{3}Z$", "format": "date-time", "x-walkpic-constraints": [ "canonical ISO UTC strictly before2037-01-01T00:00:00.000Z", "future at route/create/reschedule commit" ] }, "timeZone": { "type": "string", "maxLength": 80, "pattern": "^(UTC|.*/.*)$", "x-walkpic-constraint": "Intl.DateTimeFormat recognizes IANA time zone", "x-walkpic-max-utf16-units": 80 }, "capacity": { "type": "integer", "minimum": 2, "maximum": 20 }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "theme": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()" }, "recipientIds": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUUID" }, "minItems": 0, "maxItems": 50, "uniqueItems": true }, "route": { "$ref": "#/components/schemas/PlanningStoredOption" }, "source": { "$ref": "#/components/schemas/PlanningSource" }, "attribution": { "$ref": "#/components/schemas/PlanningSourceOffer" }, "routeDigest": { "$ref": "#/components/schemas/PlanningSHA256" } }, "required": [ "title", "stops", "shape", "budgetSeconds", "photoSeconds", "startsAtUtc", "timeZone", "capacity", "audience", "theme", "route", "source", "attribution", "routeDigest" ], "additionalProperties": false, "x-walkpic-authorization": "recipientIds only returned to current host; meeting instructions omitted from preview", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningAttendee": { "type": "object", "properties": { "userId": { "$ref": "#/components/schemas/PlanningUUID" }, "handle": { "type": "string" }, "name": { "type": "string" }, "role": { "type": "string", "enum": [ "host", "attendee" ] }, "confirmedLogisticsVersion": { "anyOf": [ { "$ref": "#/components/schemas/PlanningVersion" }, { "type": "null" } ] } }, "required": [ "userId", "handle", "name", "role", "confirmedLogisticsVersion" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPlanDetail": { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "revisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "state": { "type": "string", "enum": [ "scheduled", "cancelled", "ended" ] }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "logisticsVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "hostId": { "$ref": "#/components/schemas/PlanningUUID" }, "host": { "$ref": "#/components/schemas/PlanningHost" }, "bounds": { "$ref": "#/components/schemas/PlanningBounds" }, "myAttendance": { "anyOf": [ { "$ref": "#/components/schemas/PlanningMyAttendance" }, { "type": "null" } ] }, "counts": { "$ref": "#/components/schemas/PlanningPlanCounts" }, "preview": { "$ref": "#/components/schemas/PlanningPlanPreview" }, "chatAvailable": { "type": "boolean" }, "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "permissions": { "type": "object", "properties": { "edit": { "type": "boolean" }, "close": { "type": "boolean" }, "viewAttendees": { "type": "boolean" }, "viewMeetingInstructions": { "type": "boolean" } }, "required": [ "edit", "close", "viewAttendees", "viewMeetingInstructions" ], "additionalProperties": false }, "meetingInstructions": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 1000, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] }, "attendees": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningAttendee" }, "minItems": 0, "maxItems": 20 } }, "required": [ "planId", "revisionId", "state", "version", "logisticsVersion", "hostId", "host", "bounds", "myAttendance", "counts", "preview", "chatAvailable", "permissions" ], "additionalProperties": false, "allOf": [ { "if": { "type": "object", "properties": { "chatAvailable": { "type": "boolean", "const": true } }, "required": [ "chatAvailable" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "conversationId": {} }, "required": [ "conversationId" ], "additionalProperties": true }, "else": { "type": "object", "properties": {}, "required": [], "additionalProperties": true, "not": { "type": "object", "properties": { "conversationId": {} }, "required": [ "conversationId" ], "additionalProperties": true } } } ], "x-walkpic-authorization": "meetingInstructions and attendees iff host or approved attendee in same SQL snapshot; private attendee names filtered by current blocks/access; own note only; recipient IDs host-only", "x-walkpic-constraints": [ "permissions flags determine exact conditional field presence", "current matching revisionId only; not arbitrary historical revisions" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningJoinRequestItem": { "type": "object", "properties": { "userId": { "$ref": "#/components/schemas/PlanningUUID" }, "handle": { "type": "string" }, "name": { "type": "string" }, "note": { "type": "string", "maxLength": 280 }, "requestedLogisticsVersion": { "$ref": "#/components/schemas/PlanningVersion" }, "reviewRequired": { "type": "boolean" } }, "required": [ "userId", "handle", "name", "note", "requestedLogisticsVersion", "reviewRequired" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningJoinRequestPage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningJoinRequestItem" }, "minItems": 0, "maxItems": 50 }, "nextCursor": { "anyOf": [ { "type": "string", "maxLength": 2000 }, { "type": "null" } ] } }, "required": [ "items", "nextCursor" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCreateRoutePlanRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "calculationRequestId": { "$ref": "#/components/schemas/PlanningUUID" }, "preparationId": { "$ref": "#/components/schemas/PlanningUUID" }, "optionId": { "$ref": "#/components/schemas/PlanningUUID" }, "reviewedAccessPointsDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f-\\u009f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "stops": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningRouteStop" }, "minItems": 2, "maxItems": 22 }, "shape": { "type": "string", "enum": [ "loop", "pointToPoint" ] }, "budgetSeconds": { "type": "integer", "minimum": 900, "maximum": 28800 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "audience": { "type": "string", "enum": [ "public", "followers", "specific" ] }, "recipientIds": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUUID" }, "minItems": 0, "maxItems": 50, "uniqueItems": true }, "description": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f-\\u009f]*$", "maxLength": 1000, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] } }, "required": [ "requestId", "calculationRequestId", "preparationId", "optionId", "reviewedAccessPointsDigest", "title", "stops", "shape", "budgetSeconds", "photoSeconds", "audience", "recipientIds" ], "additionalProperties": false, "allOf": [ { "if": { "type": "object", "properties": { "shape": { "type": "string", "const": "loop" } }, "required": [ "shape" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "stops": { "type": "array", "maxItems": 21 } }, "required": [], "additionalProperties": true } }, { "if": { "type": "object", "properties": { "audience": { "type": "string", "const": "specific" } }, "required": [ "audience" ], "additionalProperties": true }, "then": { "type": "object", "properties": { "recipientIds": { "type": "array", "minItems": 1 } }, "required": [], "additionalProperties": true }, "else": { "type": "object", "properties": { "recipientIds": { "type": "array", "maxItems": 0 } }, "required": [], "additionalProperties": true } } ], "x-walkpic-constraints": [ "photoSeconds < budgetSeconds", "unique stop IDs and coordinates", "trim text; missing/null theme and meetingInstructions become empty strings", "disallowed shared text422 CONTENT_NOT_ALLOWED", "recipient IDs lowercased/sorted and checked live following/unblocked at commit", "fresh sealed preparation/source/current option matches calculation; selected fitsBudget true", "logistics change requires all fresh proof fields" ], "x-walkpic-normalization": "missing/null description and stop notes become empty strings", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRestrictRoutePlanRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "expectedVersion": { "$ref": "#/components/schemas/PlanningVersion" } }, "required": [ "requestId", "expectedVersion" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRoutePlanReceipt": { "type": "object", "properties": { "routePlanId": { "$ref": "#/components/schemas/PlanningUUID" }, "kind": { "type": "string", "const": "plannedRoute" }, "version": { "$ref": "#/components/schemas/PlanningVersion" } }, "required": [ "routePlanId", "kind", "version" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRoutePlanAccess": { "type": "object", "properties": { "routePlanId": { "$ref": "#/components/schemas/PlanningUUID" }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "audience": { "type": "string", "enum": [ "public", "followers", "specific", "private" ] } }, "required": [ "routePlanId", "version", "audience" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRoutePlanSummary": { "type": "object", "properties": { "routePlanId": { "$ref": "#/components/schemas/PlanningUUID" }, "kind": { "type": "string", "const": "plannedRoute" }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "ownerId": { "$ref": "#/components/schemas/PlanningUUID" }, "owner": { "$ref": "#/components/schemas/PlanningHost" }, "audience": { "type": "string", "enum": [ "public", "followers", "specific", "private" ] }, "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "description": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 1000, "x-walkpic-normalization": "String.trim()" }, "createdAt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991, "description": "Unix epoch seconds from SQLite INTEGER; maintained internal row annotation string does not change response value." }, "permissions": { "type": "object", "properties": { "restrict": { "type": "boolean" } }, "required": [ "restrict" ], "additionalProperties": false }, "stopCount": { "type": "integer", "minimum": 2, "maximum": 22 }, "totals": { "$ref": "#/components/schemas/PlanningTotals" } }, "required": [ "routePlanId", "kind", "version", "ownerId", "owner", "audience", "title", "description", "createdAt", "permissions", "stopCount", "totals" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRoutePlanPage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningRoutePlanSummary" }, "minItems": 0, "maxItems": 50 }, "cursor": { "anyOf": [ { "type": "string" }, { "type": "null" } ] } }, "required": [ "items", "cursor" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRoutePlanPreview": { "type": "object", "properties": { "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "description": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 1000, "x-walkpic-normalization": "String.trim()" }, "stops": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningStoredRouteStop" }, "minItems": 2, "maxItems": 22 }, "shape": { "type": "string", "enum": [ "loop", "pointToPoint" ] }, "budgetSeconds": { "type": "integer", "minimum": 900, "maximum": 28800 }, "photoSeconds": { "type": "integer", "minimum": 0, "maximum": 14400 }, "route": { "$ref": "#/components/schemas/PlanningStoredOption" }, "source": { "$ref": "#/components/schemas/PlanningSource" }, "attribution": { "$ref": "#/components/schemas/PlanningSourceOffer" } }, "required": [ "title", "description", "stops", "shape", "budgetSeconds", "photoSeconds", "route", "source", "attribution" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRoutePlanDetail": { "type": "object", "properties": { "routePlanId": { "$ref": "#/components/schemas/PlanningUUID" }, "kind": { "type": "string", "const": "plannedRoute" }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "ownerId": { "$ref": "#/components/schemas/PlanningUUID" }, "owner": { "$ref": "#/components/schemas/PlanningHost" }, "audience": { "type": "string", "enum": [ "public", "followers", "specific", "private" ] }, "title": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "description": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f]*$", "maxLength": 1000, "x-walkpic-normalization": "String.trim()" }, "createdAt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991, "description": "Unix epoch seconds from SQLite INTEGER; maintained internal row annotation string does not change response value." }, "permissions": { "type": "object", "properties": { "restrict": { "type": "boolean" } }, "required": [ "restrict" ], "additionalProperties": false }, "preview": { "$ref": "#/components/schemas/PlanningRoutePlanPreview" } }, "required": [ "routePlanId", "kind", "version", "ownerId", "owner", "audience", "title", "description", "createdAt", "permissions", "preview" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCardSendRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "planRevisionId": { "$ref": "#/components/schemas/PlanningUUID" } }, "required": [ "requestId", "planId", "planRevisionId" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCardReceipt": { "type": "object", "properties": { "targetKind": { "type": "string", "enum": [ "conversation", "outing" ] }, "targetId": { "$ref": "#/components/schemas/PlanningUUID" }, "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "planRevisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "messageId": { "$ref": "#/components/schemas/PlanningUUID" }, "seq": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "clientRef": { "$ref": "#/components/schemas/PlanningSHA256" }, "sentAt": { "$ref": "#/components/schemas/PlanningSqlTimestamp" } }, "required": [ "targetKind", "targetId", "planId", "planRevisionId", "conversationId", "messageId", "seq", "clientRef", "sentAt" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCardReference": { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "planRevisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "status": { "type": "string", "enum": [ "available", "changed", "unavailable" ] } }, "required": [ "planId", "planRevisionId", "status" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCardPreview": { "oneOf": [ { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "planRevisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "status": { "type": "string", "enum": [ "changed", "unavailable" ] } }, "required": [ "planId", "planRevisionId", "status" ], "additionalProperties": false }, { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "planRevisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "status": { "type": "string", "const": "available" }, "reviewedRevisionId": { "$ref": "#/components/schemas/PlanningUUID" }, "plan": { "$ref": "#/components/schemas/PlanningPlanDetail" } }, "required": [ "planId", "planRevisionId", "status", "reviewedRevisionId", "plan" ], "additionalProperties": false } ], "x-walkpic-authorization": "card destination visibility and current source plan ACL both checked in one snapshot; reference is not a grant", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPerson": { "type": "object", "properties": { "id": { "anyOf": [ { "$ref": "#/components/schemas/PlanningUUID" }, { "type": "null" } ] }, "name": { "type": "string" }, "handle": { "anyOf": [ { "type": "string" }, { "type": "null" } ] } }, "required": [ "id", "name", "handle" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningMember": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "name": { "type": "string" }, "handle": { "anyOf": [ { "type": "string" }, { "type": "null" } ] }, "role": { "type": "string", "enum": [ "owner", "member" ] } }, "required": [ "id", "name", "handle", "role" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPublicationAttachmentSummary": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "title": { "type": "string" }, "dateLabel": { "type": "string" }, "audience": { "type": "string", "enum": [ "public", "followers", "specific", "unlisted" ] }, "coverPhotoId": { "anyOf": [ { "type": "string" }, { "type": "null" } ] }, "author": { "$ref": "#/components/schemas/PlanningPerson" } }, "required": [ "id", "title", "dateLabel", "audience", "coverPhotoId", "author" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningPublicationAttachment": { "oneOf": [ { "type": "object", "properties": { "publicationId": { "$ref": "#/components/schemas/PlanningUUID" }, "status": { "type": "string", "const": "unavailable" } }, "required": [ "publicationId", "status" ], "additionalProperties": false }, { "type": "object", "properties": { "publicationId": { "$ref": "#/components/schemas/PlanningUUID" }, "status": { "type": "string", "const": "available" }, "publication": { "$ref": "#/components/schemas/PlanningPublicationAttachmentSummary" } }, "required": [ "publicationId", "status", "publication" ], "additionalProperties": false } ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningMessage": { "oneOf": [ { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "seq": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "kind": { "type": "string", "const": "tombstone" }, "sentAt": { "$ref": "#/components/schemas/PlanningSqlTimestamp" } }, "required": [ "id", "seq", "conversationId", "kind", "sentAt" ], "additionalProperties": false }, { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "seq": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "kind": { "type": "string", "enum": [ "text", "walk", "system" ] }, "sentAt": { "$ref": "#/components/schemas/PlanningSqlTimestamp" }, "sender": { "$ref": "#/components/schemas/PlanningPerson" }, "text": { "type": "string" }, "systemCode": { "type": "string" }, "clientRef": { "$ref": "#/components/schemas/PlanningSHA256" }, "planAttachment": { "$ref": "#/components/schemas/PlanningCardReference" }, "attachment": { "$ref": "#/components/schemas/PlanningPublicationAttachment" } }, "required": [ "id", "seq", "conversationId", "kind", "sentAt" ], "additionalProperties": false } ], "x-walkpic-authorization": "tombstones suppress sender/text/attachments/clientRef; clientRef only own messages; planAttachment only negotiated planCards=1; attachment detail only current saved publication ACL", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLastMessage": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "seq": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "kind": { "type": "string", "enum": [ "text", "walk", "system" ] }, "text": { "type": "string" }, "systemCode": { "type": "string" }, "sentAt": { "$ref": "#/components/schemas/PlanningSqlTimestamp" } }, "required": [ "id", "seq", "kind", "sentAt" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningConversation": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "kind": { "type": "string", "const": "plan" }, "state": { "type": "string", "enum": [ "active", "closed" ] }, "version": { "$ref": "#/components/schemas/PlanningVersion" }, "title": { "anyOf": [ { "type": "string" }, { "type": "null" } ] }, "memberCount": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "unreadCount": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "canSend": { "type": "boolean" }, "lastMessage": { "$ref": "#/components/schemas/PlanningLastMessage" }, "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "planRevisionId": { "$ref": "#/components/schemas/PlanningUUID" } }, "required": [ "id", "kind", "state", "version", "title", "memberCount", "unreadCount", "canSend", "planId", "planRevisionId" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningChatDetail": { "type": "object", "properties": { "conversation": { "$ref": "#/components/schemas/PlanningConversation" }, "myMembership": { "type": "object", "properties": { "role": { "type": "string", "enum": [ "owner", "member" ] }, "state": { "type": "string", "enum": [ "active", "invited", "declined", "left", "removed" ] }, "visibleAfterSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "readThroughSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": [ "role", "state", "visibleAfterSeq", "readThroughSeq" ], "additionalProperties": false }, "members": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningMember" }, "minItems": 0, "maxItems": 20 }, "permissions": { "type": "object", "properties": { "send": { "type": "boolean" }, "invite": { "type": "boolean", "const": false }, "rename": { "type": "boolean", "const": false }, "remove": { "type": "boolean", "const": false }, "end": { "type": "boolean", "const": false }, "leave": { "type": "boolean", "const": false }, "manageParticipants": { "type": "string", "const": "plan" } }, "required": [ "send", "invite", "rename", "remove", "end", "leave", "manageParticipants" ], "additionalProperties": false } }, "required": [ "conversation", "permissions" ], "additionalProperties": false, "x-walkpic-authorization": "active current outing membership AND current plan read ACL; membership/roster omitted only on unreadable summary form; send additionally requires scheduled plan", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningChatOlderHistory": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningMessage" }, "minItems": 0, "maxItems": 50 }, "snapshotSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "nextCursor": { "anyOf": [ { "type": "string", "maxLength": 2000 }, { "type": "null" } ] } }, "required": [ "items", "snapshotSeq", "nextCursor" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningChatIncrementalHistory": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningMessage" }, "minItems": 0, "maxItems": 50 }, "hasMore": { "type": "boolean" }, "nextAfterSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": [ "items", "hasMore", "nextAfterSeq" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningChatHistory": { "oneOf": [ { "$ref": "#/components/schemas/PlanningChatOlderHistory" }, { "$ref": "#/components/schemas/PlanningChatIncrementalHistory" } ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningChatView": { "type": "object", "properties": { "conversation": { "$ref": "#/components/schemas/PlanningConversation" }, "myMembership": { "type": "object", "properties": { "role": { "type": "string", "enum": [ "owner", "member" ] }, "state": { "type": "string", "enum": [ "active", "invited", "declined", "left", "removed" ] }, "visibleAfterSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "readThroughSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": [ "role", "state", "visibleAfterSeq", "readThroughSeq" ], "additionalProperties": false }, "members": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningMember" }, "minItems": 0, "maxItems": 20 }, "permissions": { "type": "object", "properties": { "send": { "type": "boolean" }, "invite": { "type": "boolean", "const": false }, "rename": { "type": "boolean", "const": false }, "remove": { "type": "boolean", "const": false }, "end": { "type": "boolean", "const": false }, "leave": { "type": "boolean", "const": false }, "manageParticipants": { "type": "string", "const": "plan" } }, "required": [ "send", "invite", "rename", "remove", "end", "leave", "manageParticipants" ], "additionalProperties": false }, "items": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningMessage" }, "minItems": 0, "maxItems": 50 }, "snapshotSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "nextCursor": { "anyOf": [ { "type": "string", "maxLength": 2000 }, { "type": "null" } ] } }, "required": [ "conversation", "permissions", "items", "snapshotSeq", "nextCursor" ], "additionalProperties": false, "x-walkpic-authorization": "same-snapshot session/account/outing membership/content/schema/policy proof; current plan overlays conversation and management permissions", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningMessageInput": { "oneOf": [ { "type": "object", "properties": { "kind": { "type": "string", "const": "text" }, "text": { "type": "string", "description": "Normalize CRLF to LF and trim before code-point/UTF8/control checks; raw padding and valid CRLF remain accepted within body bound.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 2000, "maxUtf8Bytes": 8192, "forbiddenPattern": "[\\u0000-\\u0008\\u000b-\\u001f\\u007f-\\u009f\\ud800-\\udfff]" } } }, "required": [ "kind", "text" ], "additionalProperties": false, "x-walkpic-normalization": "CRLF to LF, trim", "x-walkpic-max-utf8-bytes": 8192 }, { "type": "object", "properties": { "kind": { "type": "string", "const": "walk" }, "publicationId": { "$ref": "#/components/schemas/PlanningUUID" }, "text": { "type": "string", "description": "Normalize CRLF to LF and trim before code-point/UTF8/control checks; raw padding and valid CRLF remain accepted within body bound.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 2000, "maxUtf8Bytes": 8192, "forbiddenPattern": "[\\u0000-\\u0008\\u000b-\\u001f\\u007f-\\u009f\\ud800-\\udfff]" } } }, "required": [ "kind", "publicationId" ], "additionalProperties": false, "x-walkpic-normalization": "CRLF to LF, trim", "x-walkpic-max-utf8-bytes": 8192 } ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningMessageMembership": { "type": "object", "properties": { "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "visibleAfterSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "role": { "type": "string", "enum": [ "owner", "member" ] } }, "required": [ "conversationId", "visibleAfterSeq", "role" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningChatSendRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "message": { "$ref": "#/components/schemas/PlanningMessageInput" }, "membership": { "$ref": "#/components/schemas/PlanningMessageMembership" } }, "required": [ "requestId", "message" ], "additionalProperties": false, "x-walkpic-authorization": "optional membership binds conversation, role/history boundary and trusted planId; cannot grant membership", "x-walkpic-constraints": [ "message text current content policy; fixed immutable requestId on recovery" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningChatReadRequest": { "type": "object", "properties": { "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "throughSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": [ "requestId", "throughSeq" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningMessageReceipt": { "type": "object", "properties": { "messageId": { "$ref": "#/components/schemas/PlanningUUID" }, "seq": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "clientRef": { "$ref": "#/components/schemas/PlanningSHA256" }, "sentAt": { "$ref": "#/components/schemas/PlanningSqlTimestamp" } }, "required": [ "messageId", "seq", "clientRef", "sentAt" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningChatReadReceipt": { "type": "object", "properties": { "readThroughSeq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "unreadCount": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": [ "readThroughSeq", "unreadCount" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningInboxLastMessage": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "seq": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "kind": { "type": "string", "enum": [ "text", "walk", "system" ] }, "text": { "type": "string", "maxLength": 240 }, "systemCode": { "type": "string" }, "sentAt": { "$ref": "#/components/schemas/PlanningSqlTimestamp" } }, "required": [ "id", "seq", "kind", "sentAt" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningInboxItem": { "type": "object", "properties": { "planId": { "$ref": "#/components/schemas/PlanningUUID" }, "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "title": { "type": "string" }, "state": { "type": "string", "enum": [ "active", "closed" ] }, "unreadCount": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "lastMessage": { "$ref": "#/components/schemas/PlanningInboxLastMessage" } }, "required": [ "planId", "conversationId", "title", "state", "unreadCount" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningInboxCounts": { "type": "object", "properties": { "unreadConversations": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "unreadMessages": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": [ "unreadConversations", "unreadMessages" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningInboxPage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningInboxItem" }, "minItems": 0, "maxItems": 50 }, "counts": { "$ref": "#/components/schemas/PlanningInboxCounts" }, "nextCursor": { "anyOf": [ { "type": "string", "maxLength": 2000 }, { "type": "null" } ] } }, "required": [ "items", "counts", "nextCursor" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReportPreviewRequest": { "type": "object", "properties": { "kind": { "type": "string", "const": "messages" }, "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "messageIds": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUUID" }, "minItems": 1, "maxItems": 10, "uniqueItems": true } }, "required": [ "kind", "conversationId", "messageIds" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReportRequest": { "type": "object", "properties": { "kind": { "type": "string", "const": "messages" }, "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "messageIds": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningUUID" }, "minItems": 1, "maxItems": 10, "uniqueItems": true }, "requestId": { "$ref": "#/components/schemas/PlanningUUID" }, "previewToken": { "type": "string", "maxLength": 2000 }, "reason": { "type": "string", "description": "Normalize CRLF to LF and trim before code-point/UTF8/control checks; raw padding and valid CRLF remain accepted within body bound.", "x-walkpic-normalized-constraints": { "normalization": [ "CRLF-to-LF", "trim" ], "minCodePoints": 1, "maxCodePoints": 1000, "maxUtf8Bytes": 4096, "forbiddenPattern": "[\\u0000-\\u0008\\u000b-\\u001f\\u007f-\\u009f\\ud800-\\udfff]" } } }, "required": [ "kind", "conversationId", "messageIds", "requestId", "previewToken", "reason" ], "additionalProperties": false, "x-walkpic-max-reason-utf8-bytes": 4096, "x-walkpic-normalization": "CRLF to LF, trim; UUID IDs lowercase/sort", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReportEvidenceMessage": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "seq": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "kind": { "type": "string", "enum": [ "text", "walk", "system" ] }, "sentAt": { "$ref": "#/components/schemas/PlanningSqlTimestamp" }, "sender": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "name": { "anyOf": [ { "type": "string" }, { "type": "null" } ] }, "handle": { "type": "string" } }, "required": [ "id", "name", "handle" ], "additionalProperties": false }, "text": { "type": "string" }, "systemCode": { "type": "string" }, "attachment": { "$ref": "#/components/schemas/PlanningPublicationAttachment" } }, "required": [ "id", "seq", "kind", "sentAt", "sender" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReportEvidence": { "type": "object", "properties": { "kind": { "type": "string", "const": "messages" }, "conversationId": { "$ref": "#/components/schemas/PlanningUUID" }, "messages": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningReportEvidenceMessage" }, "minItems": 1, "maxItems": 10 } }, "required": [ "kind", "conversationId", "messages" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReportAutomation": { "type": "object", "properties": { "version": { "type": "integer", "const": 1 }, "scope": { "type": "string", "const": "selected_message_text" }, "policyVersion": { "type": "string", "const": "walkpic-text-2026-09-28-v1" } }, "required": [ "version", "scope", "policyVersion" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReportPreview": { "type": "object", "properties": { "evidence": { "$ref": "#/components/schemas/PlanningReportEvidence" }, "automation": { "$ref": "#/components/schemas/PlanningReportAutomation" }, "previewToken": { "type": "string", "maxLength": 2000 }, "expiresAt": { "$ref": "#/components/schemas/PlanningUtcInstant" } }, "required": [ "evidence", "automation", "previewToken", "expiresAt" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReportAssessment": { "type": "object", "properties": { "version": { "type": "integer", "const": 1 }, "scope": { "type": "string", "const": "selected_message_text" }, "policyVersion": { "type": "string", "const": "walkpic-text-2026-09-28-v1" }, "action": { "type": "string", "enum": [ "selected_messages_removed", "no_automatic_removal" ] }, "removedCount": { "type": "integer", "minimum": 0, "maximum": 10 }, "concernResolved": { "type": "boolean", "const": false } }, "required": [ "version", "scope", "policyVersion", "action", "removedCount", "concernResolved" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningReportReceipt": { "type": "object", "properties": { "reportId": { "$ref": "#/components/schemas/PlanningUUID" }, "state": { "type": "string", "const": "received" }, "assessment": { "$ref": "#/components/schemas/PlanningReportAssessment" } }, "required": [ "reportId", "state", "assessment" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLiveStartRequest": { "type": "object", "properties": { "requestId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{16,64}$" }, "walkId": { "$ref": "#/components/schemas/PlanningUUID" }, "title": { "type": "string", "maxLength": 160, "pattern": "\\S", "x-walkpic-max-utf16-units": 160, "x-walkpic-normalization": "stored untrimmed; nonempty tested with trim" }, "audience": { "type": "string", "enum": [ "followers", "public" ] } }, "required": [ "requestId", "walkId", "title", "audience" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLivePoint": { "type": "object", "properties": { "lat": { "type": "number", "minimum": -90, "maximum": 90 }, "lng": { "type": "number", "minimum": -180, "maximum": 180 }, "timestamp": { "type": "string", "x-walkpic-date-parse": true, "x-walkpic-relative-milliseconds": { "minimum": -14400000, "maximum": 5000 } }, "accuracy": { "type": "number", "minimum": 0, "maximum": 100 }, "segment": { "type": "integer", "minimum": 0, "maximum": 100000 } }, "required": [ "lat", "lng", "timestamp", "accuracy", "segment" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLivePointsRequest": { "type": "object", "properties": { "requestId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{16,64}$" }, "after": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "points": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningLivePoint" }, "minItems": 0, "maxItems": 100 } }, "required": [ "requestId", "after", "points" ], "additionalProperties": false, "x-walkpic-constraints": [ "ordered timestamps strictly increase within batch and beyond last accepted", "after===current lastSequence", "lifetime lastSequence<=10000", "empty batch allowed heartbeat" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLiveEndRequest": { "type": "object", "properties": { "requestId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{16,64}$" }, "revoke": { "type": "boolean" } }, "required": [ "requestId", "revoke" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLiveStartReceipt": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "state": { "type": "string", "const": "active" }, "lastSequence": { "type": "integer", "const": 0 }, "writerToken": { "$ref": "#/components/schemas/PlanningSHA256" } }, "required": [ "id", "state", "lastSequence", "writerToken" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLivePointsReceipt": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "lastSequence": { "type": "integer", "minimum": 0, "maximum": 10000 } }, "required": [ "id", "lastSequence" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLiveEndReceipt": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "state": { "type": "string", "enum": [ "ended", "revoked" ] } }, "required": [ "id", "state" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLivePhotoReceipt": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "photoId": { "$ref": "#/components/schemas/PlanningStopId" }, "status": { "type": "string", "const": "shared" } }, "required": [ "id", "photoId", "status" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLivePhotoBytes": { "type": "string", "contentEncoding": "binary", "x-walkpic-maximum-bytes": 4000000, "description": "Raw image bytes normalized by existing dataSaver JPEG adapter; MIME header is not explicitly checked by this live route.", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLivePhoto": { "type": "object", "properties": { "photoId": { "$ref": "#/components/schemas/PlanningStopId" }, "mimeType": { "type": "string", "const": "image/jpeg" }, "imageBase64": { "type": "string", "contentEncoding": "base64", "contentMediaType": "image/jpeg", "x-walkpic-max-decoded-bytes": 1000000 } }, "required": [ "photoId", "mimeType", "imageBase64" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLiveSummary": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "title": { "type": "string", "maxLength": 160 }, "audience": { "type": "string", "enum": [ "followers", "public" ] }, "state": { "type": "string", "enum": [ "active", "ended", "revoked" ] }, "startedAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "updatedAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "expiresAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "author": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "displayName": { "anyOf": [ { "type": "string" }, { "type": "null" } ] }, "handle": { "type": "string" } }, "required": [ "id", "displayName", "handle" ], "additionalProperties": false } }, "required": [ "id", "title", "audience", "state", "startedAt", "updatedAt", "expiresAt", "author" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLivePage": { "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningLiveSummary" }, "minItems": 0, "maxItems": 50 } }, "required": [ "items" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLivePhotoMetadata": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningStopId" }, "takenAt": { "anyOf": [ { "type": "string" }, { "type": "null" } ] }, "lat": { "anyOf": [ { "type": "number", "minimum": -90, "maximum": 90 }, { "type": "null" } ] }, "lng": { "anyOf": [ { "type": "number", "minimum": -180, "maximum": 180 }, { "type": "null" } ] } }, "required": [ "id", "takenAt", "lat", "lng" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningLiveDetail": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "title": { "type": "string", "maxLength": 160 }, "audience": { "type": "string", "enum": [ "followers", "public" ] }, "state": { "type": "string", "enum": [ "active", "ended", "revoked" ] }, "startedAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "updatedAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "expiresAt": { "$ref": "#/components/schemas/PlanningUtcInstant" }, "author": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningUUID" }, "displayName": { "anyOf": [ { "type": "string" }, { "type": "null" } ] }, "handle": { "type": "string" } }, "required": [ "id", "displayName", "handle" ], "additionalProperties": false }, "lastSequence": { "type": "integer", "minimum": 0, "maximum": 10000 }, "route": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningLiveStoredPoint" }, "minItems": 0, "maxItems": 1002 }, "photos": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningLivePhotoMetadata" }, "minItems": 0, "maxItems": 24 } }, "required": [ "id", "title", "audience", "state", "startedAt", "updatedAt", "expiresAt", "author", "lastSequence", "route", "photos" ], "additionalProperties": false, "x-walkpic-constraints": [ "route first/last/sequence % ceil(last_sequence/1000) sample ordered by sequence", "timestamps represent previous captures; request recency limits do not restrict stored response" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningRouteRequest": { "type": "object", "properties": { "request": { "type": "string", "pattern": "^[^\\u0000-\\u001f\\u007f-\\u009f]*$", "x-walkpic-max-trimmed-utf16-units": 1200, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "start": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u001f\\u007f-\\u009f]*$", "x-walkpic-max-trimmed-utf16-units": 120, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] }, "finish": { "anyOf": [ { "type": "string", "pattern": "^[^\\u0000-\\u001f\\u007f-\\u009f]*$", "x-walkpic-max-trimmed-utf16-units": 120, "x-walkpic-normalization": "String.trim()" }, { "type": "null" } ] } }, "required": [ "request" ], "additionalProperties": false, "x-walkpic-normalization": "trim request/start/finish; absent/null start/finish =>null; request nonempty after trim", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningInterpretation": { "type": "object", "properties": { "title": { "type": "string", "maxLength": 120, "minLength": 1 }, "startQuery": { "anyOf": [ { "type": "string", "maxLength": 160 }, { "type": "null" } ] }, "finishQuery": { "anyOf": [ { "type": "string", "maxLength": 160 }, { "type": "null" } ] }, "returnToStart": { "type": "boolean" }, "namedStops": { "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 160 }, "minItems": 0, "maxItems": 5 }, "placeQueries": { "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 160 }, "minItems": 0, "maxItems": 2 }, "profile": { "type": "string", "enum": [ "fastest", "scenic", "discovery" ] }, "clarification": { "anyOf": [ { "type": "string", "maxLength": 240 }, { "type": "null" } ] } }, "required": [ "title", "startQuery", "finishQuery", "returnToStart", "namedStops", "placeQueries", "profile", "clarification" ], "additionalProperties": false, "x-walkpic-semantics": "named search queries only; no coordinates/recommendations/actual graph directions; discovery differs from option profile discover", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCatalogAnchor": { "type": "object", "properties": { "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 }, "distanceMeters": { "type": "number", "minimum": 0, "maximum": 150 }, "highway": { "type": "string" }, "method": { "type": "string" }, "nodeId": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "wayId": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": [ "latitude", "longitude", "distanceMeters", "highway", "method", "nodeId", "wayId" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningCatalogFeature": { "type": "object", "properties": { "id": { "type": "string", "pattern": "^osm:(node|way|relation):[1-9][0-9]{0,19}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "category": { "type": "string", "enum": [ "scenic", "discover" ] }, "kind": { "type": "string", "enum": [ "park", "waterfront", "viewpoint", "garden", "landmark", "art", "historic" ] }, "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 }, "anchor": { "$ref": "#/components/schemas/PlanningCatalogAnchor" }, "geometryType": { "type": "string", "enum": [ "point", "line", "polygon" ] }, "geometry": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningPoint" }, "minItems": 1, "maxItems": 512 }, "osmVersion": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "sourceUrl": { "type": "string" }, "tags": { "type": "object", "properties": {}, "required": [], "additionalProperties": { "type": "string" } } }, "required": [ "id", "name", "category", "kind", "latitude", "longitude", "anchor", "geometryType", "geometry", "osmVersion", "sourceUrl", "tags" ], "additionalProperties": false, "x-walkpic-constraints": [ "point geometry1;line>=2;polygon>=4 closed", "catalog-derived OSM tags/anchors retained; no beauty/accessibility/live claims" ], "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningFeatureCatalog": { "type": "object", "properties": { "attribution": { "type": "string" }, "attributionUrl": { "type": "string" }, "counts": { "type": "object", "properties": { "complex_relation_omitted": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "density_or_total_limit_omitted": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "named_tagged_candidates": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "no_pedestrian_anchor_within_75m": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "pedestrian_anchor_nodes": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "unsupported_or_outside_geometry": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "waterfront_bridge_anchor_omitted": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": [ "complex_relation_omitted", "density_or_total_limit_omitted", "named_tagged_candidates", "no_pedestrian_anchor_within_75m", "pedestrian_anchor_nodes", "unsupported_or_outside_geometry", "waterfront_bridge_anchor_omitted" ], "additionalProperties": false }, "coverageBbox": { "type": "array", "items": { "type": "number" }, "minItems": 4, "maxItems": 4 }, "extractionPolicy": { "type": "string" }, "features": { "type": "array", "items": { "$ref": "#/components/schemas/PlanningCatalogFeature" }, "minItems": 0, "maxItems": 2000 }, "geometryMeaning": { "type": "string" }, "inputSha256": { "$ref": "#/components/schemas/PlanningSHA256" }, "license": { "type": "string", "const": "ODbL-1.0" }, "licenseUrl": { "type": "string" }, "limitations": { "type": "array", "items": { "type": "string" }, "minItems": 0 }, "snapshotDate": { "type": "string" }, "snapshotSha256": { "$ref": "#/components/schemas/PlanningSHA256" }, "sourceDigest": { "$ref": "#/components/schemas/PlanningSHA256" }, "sourceUrl": { "type": "string" }, "version": { "type": "integer", "const": 1 } }, "required": [ "attribution", "attributionUrl", "counts", "coverageBbox", "extractionPolicy", "features", "geometryMeaning", "inputSha256", "license", "licenseUrl", "limitations", "snapshotDate", "snapshotSha256", "sourceDigest", "sourceUrl", "version" ], "additionalProperties": false, "x-walkpic-source": "full frozen derivative catalog, includes omissions/provenance; content-addressed exact bytes; not just scored highlight subset", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningEventStream": { "type": "string", "description": "Server-Sent Events. Each frame is event: \\ndata: {}\\n\\n. Event data carries no protected content.", "x-walkpic-events": [ "changed", "chat-changed", "social-changed", "content-changed", "access-changed", "live-changed", "live-list-changed", "authorized" ], "x-walkpic-event-data-schema": { "type": "object", "properties": {}, "required": [], "additionalProperties": false }, "x-walkpic-lifecycle": "initial changed; authorized heartbeat; revoked session ends; post-header errors/backpressure destroy", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json", "pattern": "^(?:event: (?:changed|chat-changed|social-changed|content-changed|access-changed|live-changed|live-list-changed|authorized)\\ndata: \\{\\}\\n\\n)*$", "x-walkpic-incremental-parsing": "Schema describes zero or more complete authored SSE frames. HTTP chunks may split frames; SDK transport decoder buffers partial text and validates complete frames, never treats a partial chunk as a complete body." }, "PlanningLiveStoredPoint": { "type": "object", "properties": { "lat": { "type": "number", "minimum": -90, "maximum": 90 }, "lng": { "type": "number", "minimum": -180, "maximum": 180 }, "timestamp": { "type": "string", "x-walkpic-date-parse": true }, "accuracy": { "type": "number", "minimum": 0, "maximum": 100 }, "segment": { "type": "integer", "minimum": 0, "maximum": 100000 } }, "required": [ "lat", "lng", "timestamp", "accuracy", "segment" ], "additionalProperties": false, "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "PlanningStoredRouteStop": { "type": "object", "properties": { "id": { "$ref": "#/components/schemas/PlanningStopId" }, "latitude": { "type": "number", "minimum": -90, "maximum": 90 }, "longitude": { "type": "number", "minimum": -180, "maximum": 180 }, "label": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f-\\u009f]*$", "maxLength": 120, "x-walkpic-normalization": "String.trim()", "allOf": [ { "pattern": "\\S" } ] }, "note": { "type": "string", "pattern": "^[^\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f-\\u009f]*$", "maxLength": 600, "x-walkpic-normalization": "String.trim()" } }, "required": [ "id", "latitude", "longitude", "label", "note" ], "additionalProperties": false, "x-walkpic-normalization": "missing/null note becomes empty string", "x-walkpic-audit": "docs/evidence/typescript-api-20261004/parallel-contract-planning-facts.json" }, "TransportHealth": { "type": "object", "additionalProperties": false, "required": [ "ok", "service", "version" ], "properties": { "ok": { "type": "boolean", "const": true }, "service": { "type": "string", "const": "phototracker" }, "version": { "type": "integer", "const": 1 } }, "description": "Database SELECT 1 succeeded. Does not attest room peers, native UX, walking availability, image/AI providers or production acceptance." }, "TransportHtml": { "type": "string", "description": "Raw Flutter public viewer bootstrap HTML. Publication data authorization occurs in the API, not this HTML dispatch." }, "TransportAssetBytes": { "type": "string", "format": "binary", "description": "Raw file bytes; extension determines MIME. JSON files are served verbatim and are not parsed/validated by this dispatch. MP3, symbol and unrecognized extensions use application/octet-stream, not inferred audio MIME." } } } }