{
  "openapi": "3.1.0",
  "info": {
    "title": "Topaz5 partial native/commerce API draft",
    "version": "0.1.0",
    "description": "NOT comprehensive OpenAPI. Runtime-tested callflow/user subset; other routes source-inspected only. Native authorization, JSON schemas and provider/account allowlists remain authoritative."
  },
  "x-crossbar-revision": "2ac862830f9b626d2170d08daf1991b0ca33dba7",
  "paths": {
    "/api/commerce/v1/agent-intents": {"$ref": "./agent-signup.openapi.json#/paths/~1api~1commerce~1v1~1agent-intents"},
    "/api/commerce/v1/agent-intents/{intent_id}": {"$ref": "./agent-signup.openapi.json#/paths/~1api~1commerce~1v1~1agent-intents~1{intent_id}"},
    "/browser/bind": {"$ref": "./agent-signup.openapi.json#/paths/~1browser~1bind"},
    "/v2/user_auth": {
      "put": {
        "summary": "Native credentials login",
        "x-evidence": "genuine native fixture tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "data"
                ],
                "properties": {
                  "data": {
                    "type": "object",
                    "additionalProperties": true
                  }
                }
              }
            }
          }
        }
      }
    },
    "/v2/accounts/{account}/users": {
      "parameters": [
        {
          "name": "account",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string",
            "pattern": "^[0-9a-f]{32}$"
          },
          "description": "Must equal native authenticated account; no CLI account selection"
        }
      ],
      "get": {
        "summary": "List own users",
        "x-evidence": "genuine native fixture tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ]
      }
    },
    "/v2/accounts/{account}/callflows": {
      "parameters": [
        {
          "name": "account",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string",
            "pattern": "^[0-9a-f]{32}$"
          },
          "description": "Must equal native authenticated account; no CLI account selection"
        }
      ],
      "get": {
        "summary": "List callflows",
        "x-evidence": "native callflow source + native fixture used",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ]
      },
      "put": {
        "summary": "Create labelled native callflow",
        "x-evidence": "native fixture tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "data"
                ],
                "properties": {
                  "data": {
                    "type": "object",
                    "additionalProperties": true
                  }
                }
              }
            }
          }
        }
      }
    },
    "/v2/accounts/{account}/callflows/{id}": {
      "parameters": [
        {
          "name": "account",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string",
            "pattern": "^[0-9a-f]{32}$"
          },
          "description": "Must equal native authenticated account; no CLI account selection"
        },
        {
          "name": "id",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "get": {
        "summary": "Read exact owned callflow",
        "x-evidence": "genuine native fixture tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ]
      },
      "post": {
        "summary": "Update native callflow after GET",
        "x-evidence": "genuine native fixture tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "data"
                ],
                "properties": {
                  "data": {
                    "type": "object",
                    "additionalProperties": true
                  }
                }
              }
            }
          }
        }
      },
      "delete": {
        "summary": "Delete explicitly owned disposable callflow; verify 404",
        "x-evidence": "genuine native fixture tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ]
      }
    },
    "/v2/accounts/{account}/stripe/standing": {
      "parameters": [
        {
          "name": "account",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string",
            "pattern": "^[0-9a-f]{32}$"
          },
          "description": "Must equal native authenticated account; no CLI account selection"
        }
      ],
      "get": {
        "summary": "Native Stripe standing",
        "x-evidence": "source-inspected cb_stripe; CLI execution NOT tested; configured account allowlist only",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ]
      }
    },
    "/v2/accounts/{account}/stripe/setup": {
      "parameters": [
        {
          "name": "account",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string",
            "pattern": "^[0-9a-f]{32}$"
          },
          "description": "Must equal native authenticated account; no CLI account selection"
        }
      ],
      "post": {
        "summary": "Native Stripe setup",
        "x-evidence": "source-inspected cb_stripe; CLI execution NOT tested; configured account allowlist only",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "data"
                ],
                "properties": {
                  "data": {
                    "type": "object",
                    "additionalProperties": true
                  }
                }
              }
            }
          }
        }
      }
    },
    "/v2/accounts/{account}/stripe/topup": {
      "parameters": [
        {
          "name": "account",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string",
            "pattern": "^[0-9a-f]{32}$"
          },
          "description": "Must equal native authenticated account; no CLI account selection"
        }
      ],
      "post": {
        "summary": "Native Stripe topup",
        "x-evidence": "source-inspected cb_stripe; CLI execution NOT tested; configured account allowlist only",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "security": [
          {
            "nativeToken": []
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "data"
                ],
                "properties": {
                  "data": {
                    "type": "object",
                    "additionalProperties": true
                  }
                }
              }
            }
          }
        }
      }
    },
    "/api/commerce/v1/signup-intents": {
      "post": {
        "summary": "Commercial enrollment signup-intents",
        "x-evidence": "commerce/http.py inspected; isolated local sink not delivered; CLI end-to-end NOT tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "additionalProperties": true
              }
            }
          }
        }
      }
    },
    "/api/commerce/v1/email-verifications": {
      "post": {
        "summary": "Commercial enrollment email-verifications",
        "x-evidence": "commerce/http.py inspected; isolated local sink not delivered; CLI end-to-end NOT tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "additionalProperties": true
              }
            }
          }
        }
      }
    },
    "/api/commerce/v1/runs/{run_id}": {
      "get": {
        "summary": "Commercial enrollment runs/{run_id}",
        "x-evidence": "commerce/http.py inspected; isolated local sink not delivered; CLI end-to-end NOT tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "parameters": [
          {
            "name": "run_id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string",
              "format": "uuid"
            }
          }
        ],
        "security": [
          {
            "enrollmentCapability": []
          }
        ]
      }
    },
    "/api/commerce/v1/runs/{run_id}/enroll": {
      "post": {
        "summary": "Commercial enrollment runs/{run_id}/enroll",
        "x-evidence": "commerce/http.py inspected; isolated local sink not delivered; CLI end-to-end NOT tested",
        "responses": {
          "200": {
            "description": "Native successful response; inspect native envelope"
          },
          "400": {
            "description": "Schema/validation error"
          },
          "401": {
            "description": "Re-login; no refresh supported"
          },
          "403": {
            "description": "Native permission denial"
          }
        },
        "parameters": [
          {
            "name": "run_id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string",
              "format": "uuid"
            }
          }
        ],
        "security": [
          {
            "enrollmentCapability": []
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "additionalProperties": true
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "nativeToken": {
        "type": "apiKey",
        "in": "header",
        "name": "X-Auth-Token"
      },
      "enrollmentCapability": {
        "type": "http",
        "scheme": "bearer",
        "description": "private workflow-only capability; never native auth"
      }
    }
  }
}