{
  "openapi": "3.0.3",
  "info": {
    "title": "Luna CRM API",
    "version": "1.1.0",
    "description": "Tenant-bound API. Server-to-server only. Keys created in own workspace. Read/write/import/robot scope checked per route. 60 requests/min/key. Max500 contacts/workspace. No automatic sending or external synchronization. Delivery scope supports pull tasks with leases and connector-reported receipts. No external sending authority. Export preserves opt-outs."
  },
  "servers": [
    {
      "url": "https://www.lunagroep.nl/abonnementen/api/crm/v1"
    }
  ],
  "security": [
    {
      "bearer": []
    }
  ],
  "paths": {
    "/contacts": {
      "get": {
        "operationId": "get_contacts",
        "summary": "List own contacts and last 100 recorded actions",
        "description": "Required key scope: read",
        "responses": {
          "200": {
            "description": "Success",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Invalid request"
          },
          "401": {
            "description": "Invalid, expired or revoked key"
          },
          "402": {
            "description": "Rental payment not confirmed"
          },
          "403": {
            "description": "Scope, tenant or browser Origin denied"
          },
          "404": {
            "description": "Resource not found"
          },
          "409": {
            "description": "Conflict, inactive account or stale revision"
          },
          "429": {
            "description": "Rate or capacity limit"
          },
          "503": {
            "description": "Worker/payment verification unavailable"
          }
        }
      }
    },
    "/jobs": {
      "get": {
        "operationId": "get_jobs",
        "summary": "List last 100 CRM-linked job results",
        "description": "Required key scope: read",
        "responses": {
          "200": {
            "description": "Success",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Invalid request"
          },
          "401": {
            "description": "Invalid, expired or revoked key"
          },
          "402": {
            "description": "Rental payment not confirmed"
          },
          "403": {
            "description": "Scope, tenant or browser Origin denied"
          },
          "404": {
            "description": "Resource not found"
          },
          "409": {
            "description": "Conflict, inactive account or stale revision"
          },
          "429": {
            "description": "Rate or capacity limit"
          },
          "503": {
            "description": "Worker/payment verification unavailable"
          }
        }
      }
    },
    "/actions": {
      "post": {
        "operationId": "post_actions",
        "summary": "Record a contact action",
        "description": "Required key scope: write",
        "responses": {
          "200": {
            "description": "Success",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Invalid request"
          },
          "401": {
            "description": "Invalid, expired or revoked key"
          },
          "402": {
            "description": "Rental payment not confirmed"
          },
          "403": {
            "description": "Scope, tenant or browser Origin denied"
          },
          "404": {
            "description": "Resource not found"
          },
          "409": {
            "description": "Conflict, inactive account or stale revision"
          },
          "429": {
            "description": "Rate or capacity limit"
          },
          "503": {
            "description": "Worker/payment verification unavailable"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Action"
              }
            }
          }
        }
      }
    },
    "/imports/preview": {
      "post": {
        "operationId": "post_imports_preview",
        "summary": "Validate import without changing contacts",
        "description": "Required key scope: import",
        "responses": {
          "200": {
            "description": "Success",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Invalid request"
          },
          "401": {
            "description": "Invalid, expired or revoked key"
          },
          "402": {
            "description": "Rental payment not confirmed"
          },
          "403": {
            "description": "Scope, tenant or browser Origin denied"
          },
          "404": {
            "description": "Resource not found"
          },
          "409": {
            "description": "Conflict, inactive account or stale revision"
          },
          "429": {
            "description": "Rate or capacity limit"
          },
          "503": {
            "description": "Worker/payment verification unavailable"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/ImportPreview"
              }
            }
          }
        }
      }
    },
    "/imports/commit": {
      "post": {
        "operationId": "post_imports_commit",
        "summary": "Commit exact validated plan",
        "description": "Required key scope: import",
        "responses": {
          "200": {
            "description": "Success",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Invalid request"
          },
          "401": {
            "description": "Invalid, expired or revoked key"
          },
          "402": {
            "description": "Rental payment not confirmed"
          },
          "403": {
            "description": "Scope, tenant or browser Origin denied"
          },
          "404": {
            "description": "Resource not found"
          },
          "409": {
            "description": "Conflict, inactive account or stale revision"
          },
          "429": {
            "description": "Rate or capacity limit"
          },
          "503": {
            "description": "Worker/payment verification unavailable"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/ImportCommit"
              }
            }
          }
        }
      }
    },
    "/robot": {
      "post": {
        "operationId": "post_robot",
        "summary": "Queue contact-based acquisition draft",
        "description": "Required key scope: robot",
        "responses": {
          "200": {
            "description": "Success",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Invalid request"
          },
          "401": {
            "description": "Invalid, expired or revoked key"
          },
          "402": {
            "description": "Rental payment not confirmed"
          },
          "403": {
            "description": "Scope, tenant or browser Origin denied"
          },
          "404": {
            "description": "Resource not found"
          },
          "409": {
            "description": "Conflict, inactive account or stale revision"
          },
          "429": {
            "description": "Rate or capacity limit"
          },
          "503": {
            "description": "Worker/payment verification unavailable"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Robot"
              }
            }
          }
        }
      }
    },
    "/tasks": {
      "get": {
        "summary": "Werkvoorraad lezen",
        "description": "Recht delivery. Taakstatus pending, claimed, needs_check, received, completed of cancelled. payload_hash bindt exacte inhoud. Geen externe acties toegestaan.",
        "responses": {
          "200": {
            "description": "Resultaat"
          },
          "401": {
            "description": "Ongeldige sleutel"
          },
          "403": {
            "description": "Onvoldoende rechten"
          },
          "409": {
            "description": "Contact gewijzigd, taak gereserveerd of controle vereist"
          },
          "429": {
            "description": "API-limiet"
          }
        }
      }
    },
    "/export": {
      "get": {
        "summary": "CSV exporteren",
        "description": "Recht read. JSON met filename, content, count en complete. Formules als tekst; afmeldingen aanwezig.",
        "responses": {
          "200": {
            "description": "Resultaat"
          },
          "401": {
            "description": "Ongeldige sleutel"
          },
          "403": {
            "description": "Onvoldoende rechten"
          },
          "409": {
            "description": "Contact gewijzigd, taak gereserveerd of controle vereist"
          },
          "429": {
            "description": "API-limiet"
          }
        }
      }
    },
    "/tasks/claim": {
      "post": {
        "summary": "Taak reserveren",
        "description": "Recht delivery. Exclusieve reservering voor 300 seconden. Gebruik task_id als unieke ontvangstsleutel. Geen automatische heruitvoering na verlopen lease.",
        "responses": {
          "200": {
            "description": "Resultaat"
          },
          "401": {
            "description": "Ongeldige sleutel"
          },
          "403": {
            "description": "Onvoldoende rechten"
          },
          "409": {
            "description": "Contact gewijzigd, taak gereserveerd of controle vereist"
          },
          "429": {
            "description": "API-limiet"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/DeliveryClaim"
              }
            }
          }
        }
      }
    },
    "/tasks/receipt": {
      "post": {
        "summary": "Ontvangst melden",
        "description": "Recht delivery, dezelfde sleutel als de reservering. Meld alleen werkelijk verwerkte ontvangst. De koppeling is de bron van dit bewijs.",
        "responses": {
          "200": {
            "description": "Resultaat"
          },
          "401": {
            "description": "Ongeldige sleutel"
          },
          "403": {
            "description": "Onvoldoende rechten"
          },
          "409": {
            "description": "Contact gewijzigd, taak gereserveerd of controle vereist"
          },
          "429": {
            "description": "API-limiet"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/DeliveryReceipt"
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "bearer": {
        "type": "http",
        "scheme": "bearer",
        "description": "luna_crm_... key, expires and can be revoked."
      }
    },
    "schemas": {
      "Action": {
        "type": "object",
        "required": [
          "request_key",
          "action"
        ],
        "properties": {
          "request_key": {
            "type": "string",
            "format": "uuid"
          },
          "action": {
            "type": "string",
            "enum": [
              "create",
              "contacted",
              "reply",
              "followup",
              "handoff",
              "stop"
            ]
          },
          "lead_id": {
            "type": "string"
          },
          "revision": {
            "type": "integer",
            "minimum": 1
          },
          "name": {
            "type": "string"
          },
          "company": {
            "type": "string"
          },
          "email": {
            "type": "string",
            "format": "email"
          },
          "source": {
            "type": "string"
          },
          "contact_basis": {
            "type": "string"
          },
          "followup_date": {
            "type": "string",
            "format": "date"
          },
          "next_action": {
            "type": "string"
          },
          "evidence": {
            "type": "string"
          },
          "reply_kind": {
            "type": "string",
            "enum": [
              "positive",
              "neutral",
              "decline",
              "optout"
            ]
          },
          "text": {
            "type": "string"
          },
          "recipient": {
            "type": "string"
          },
          "summary": {
            "type": "string"
          },
          "reason": {
            "type": "string"
          }
        },
        "description": "create: name,company,email,source,contact_basis. Other actions require lead_id+revision. contacted:evidence; reply:reply_kind,text,source; followup:followup_date,next_action; handoff:recipient,summary (qualified only); stop:reason. No external message is sent."
      },
      "ImportPreview": {
        "type": "object",
        "required": [
          "content",
          "source",
          "contact_basis"
        ],
        "properties": {
          "format": {
            "type": "string",
            "enum": [
              "csv",
              "tsv",
              "json"
            ],
            "default": "csv"
          },
          "content": {
            "type": "string",
            "description": "UTF-8 text, max 220000 bytes, max 500 rows."
          },
          "source": {
            "type": "string"
          },
          "contact_basis": {
            "type": "string"
          },
          "delimiter": {
            "type": "string",
            "enum": [
              ",",
              ";",
              "\t"
            ]
          },
          "mapping": {
            "type": "object",
            "additionalProperties": {
              "type": "string"
            },
            "description": "Field -> exact header. Fields: name,first_name,last_name,company,email,source,contact_basis,optout."
          }
        }
      },
      "ImportCommit": {
        "type": "object",
        "required": [
          "import_id",
          "plan_hash",
          "confirm"
        ],
        "properties": {
          "import_id": {
            "type": "string"
          },
          "plan_hash": {
            "type": "string"
          },
          "confirm": {
            "type": "boolean",
            "enum": [
              true
            ]
          }
        }
      },
      "Robot": {
        "type": "object",
        "required": [
          "lead_id",
          "revision",
          "request_key",
          "brief",
          "data_approved"
        ],
        "properties": {
          "lead_id": {
            "type": "string"
          },
          "revision": {
            "type": "integer"
          },
          "request_key": {
            "type": "string",
            "format": "uuid"
          },
          "brief": {
            "type": "string",
            "minLength": 20,
            "maxLength": 4500
          },
          "kind": {
            "type": "string",
            "enum": [
              "analysis",
              "letter"
            ],
            "default": "analysis"
          },
          "data_approved": {
            "type": "boolean",
            "enum": [
              true
            ],
            "description": "Explicit permission from account holder for the existing AI processor."
          }
        }
      },
      "DeliveryClaim": {
        "type": "object",
        "required": [
          "task_id",
          "payload_hash",
          "request_key"
        ],
        "properties": {
          "task_id": {
            "type": "string"
          },
          "payload_hash": {
            "type": "string"
          },
          "request_key": {
            "type": "string",
            "format": "uuid"
          }
        }
      },
      "DeliveryReceipt": {
        "type": "object",
        "required": [
          "task_id",
          "payload_hash",
          "request_key",
          "claim_id",
          "system",
          "reference"
        ],
        "properties": {
          "task_id": {
            "type": "string"
          },
          "payload_hash": {
            "type": "string"
          },
          "request_key": {
            "type": "string",
            "format": "uuid"
          },
          "claim_id": {
            "type": "string"
          },
          "system": {
            "type": "string",
            "maxLength": 100
          },
          "reference": {
            "type": "string",
            "maxLength": 200
          }
        }
      }
    }
  }
}