Authentication
Authorization: Bearer <HALLIFY_GUEST_PAYMENT_ACCESS_TOKEN>Private guest payment capability bound to its native actor, tenant, source, transport origin and current authority. Explicit consent is required for collection; exact original receipt disclosure does not grant a new monetary command or a Hallify account session.
Parameters
originHeader · RequiredActual HTTP Origin of the caller, which must exactly match the payment access's current transport audience.
stringFull definition
{ "type": "string", "maxLength": 2048, "example": "example" }accessIdPath · RequiredNoncredential UUID returned when native payment access is opened or handed off. Pair it with that access's bearer capability; the UUID alone grants no authority.
string · uuidFull definition
{ "format": "uuid", "type": "string", "example": "9b6163a8-afea-4877-818b-8e2ae28a2845" }
Request body
Required
The original client-generated commandKey supplied as the idempotency-key header when the checkout was first created.
application/json
Full definition
{
"$ref": "#/components/schemas/GuestPaymentRecoverCommandDto"
}Responses
200Original immutable PREPARED checkout acknowledgement recovered by command key after current exact-resource disclosure authorization.
Full definition
{
"$ref": "#/components/schemas/GuestPaymentCommandReceiptDto"
}{
"schema": "hallify.restaurant-payment.command-result",
"version": 1,
"checkoutId": "f5ef2bdc-76ae-45b6-851a-399882860529",
"operationId": "44352441-86e0-4a70-8642-d5863bea459a",
"action": "CREATE_CHECKOUT",
"state": "PREPARED",
"currency": "USD",
"principalAmount": "12.50",
"tipAmount": "0.00",
"totalAmount": "12.50"
}400The bounded request or command key is malformed.
Full definition
{
"$ref": "#/components/schemas/TranslatedErrorDto"
}{
"statusCode": 400,
"error": "errors:http.badRequest",
"code": "HTTP_BAD_REQUEST",
"message": "errors:http.badRequest",
"translationKey": "errors:http.badRequest"
}401Rejects a missing, malformed, expired, revoked, or invalid guestPaymentAccessToken credential at the owning domain boundary.
Full definition
{
"$ref": "#/components/schemas/TranslatedErrorDto"
}{
"statusCode": 401,
"error": "errors:http.unauthorized",
"code": "HTTP_UNAUTHORIZED",
"message": "errors:http.unauthorized",
"translationKey": "errors:http.unauthorized"
}404Current native authority, private payment capability or the exact original checkout is unavailable.
Full definition
{
"$ref": "#/components/schemas/TranslatedErrorDto"
}{
"statusCode": 404,
"error": "errors:http.notFound",
"code": "HTTP_NOT_FOUND",
"message": "errors:http.notFound",
"translationKey": "errors:http.notFound"
}409The native source, reviewed bill, consent revision or concurrent command state changed.
Full definition
{
"$ref": "#/components/schemas/TranslatedErrorDto"
}{
"statusCode": 409,
"error": "errors:http.conflict",
"code": "HTTP_CONFLICT",
"message": "errors:http.conflict",
"translationKey": "errors:http.conflict"
}Schemas
GuestPaymentRecoverCommandDto
Original client command key used to recover the first checkout acknowledgement under current exact-resource native authority.
commandKeyRequiredOriginal client-generated idempotency key used for checkout creation, nonempty and at most 128 characters after trimming. The raw recovery value may contain surrounding whitespace within its stated transport limit. Lookup combines it with the stable native actor and returns only the original acknowledgement after current disclosure authorization.
stringFull definition
{ "type": "string", "minLength": 1, "maxLength": 255, "description": "Original client-generated idempotency key used for checkout creation, nonempty and at most 128 characters after trimming. The raw recovery value may contain surrounding whitespace within its stated transport limit. Lookup combines it with the stable native actor and returns only the original acknowledgement after current disclosure authorization.", "example": "synthetic-example-credential" }
Full definition
{
"type": "object",
"properties": {
"commandKey": {
"type": "string",
"minLength": 1,
"maxLength": 255,
"description": "Original client-generated idempotency key used for checkout creation, nonempty and at most 128 characters after trimming. The raw recovery value may contain surrounding whitespace within its stated transport limit. Lookup combines it with the stable native actor and returns only the original acknowledgement after current disclosure authorization.",
"example": "synthetic-example-credential"
}
},
"description": "Original client command key used to recover the first checkout acknowledgement under current exact-resource native authority.",
"required": [
"commandKey"
],
"example": {
"commandKey": "synthetic-example-credential"
}
}GuestPaymentCommandReceiptDto
Immutable first PREPARED acknowledgement of the permanent guest CREATE_CHECKOUT command, preserved across identical replay and original-command recovery.
schemaRequiredDiscriminator identifying the versioned original payment-command result document.
stringFull definition
{ "type": "string", "enum": [ "hallify.restaurant-payment.command-result" ], "description": "Discriminator identifying the versioned original payment-command result document.", "example": "hallify.restaurant-payment.command-result" }versionRequiredCommand-result schema version retained by this acknowledgement.
integerFull definition
{ "type": "integer", "enum": [ 1 ], "description": "Command-result schema version retained by this acknowledgement.", "example": 1 }checkoutIdRequiredUUID of the original checkout allocated once for this permanent command.
string · uuidFull definition
{ "type": "string", "format": "uuid", "description": "UUID of the original checkout allocated once for this permanent command.", "example": "f5ef2bdc-76ae-45b6-851a-399882860529" }operationIdRequiredUUID of the original CREATE_CHECKOUT provider operation; replay and recovery preserve this operation identity.
string · uuidFull definition
{ "type": "string", "format": "uuid", "description": "UUID of the original CREATE_CHECKOUT provider operation; replay and recovery preserve this operation identity.", "example": "44352441-86e0-4a70-8642-d5863bea459a" }actionRequiredOriginal accepted command action; this guest boundary acknowledges CREATE_CHECKOUT.
stringFull definition
{ "type": "string", "enum": [ "CREATE_CHECKOUT" ], "description": "Original accepted command action; this guest boundary acknowledges CREATE_CHECKOUT.", "example": "CREATE_CHECKOUT" }stateRequiredState at the first retained acknowledgement, always PREPARED. Current operation, funds and native application states are returned by the checkout progress operation.
stringFull definition
{ "type": "string", "enum": [ "PREPARED" ], "description": "State at the first retained acknowledgement, always PREPARED. Current operation, funds and native application states are returned by the checkout progress operation.", "example": "PREPARED" }currencyRequiredCurrency of the original frozen principal, tip and total amounts.
stringFull definition
{ "type": "string", "enum": [ "USD", "GEL" ], "description": "Currency of the original frozen principal, tip and total amounts.", "example": "USD" }principalAmountRequiredOriginal frozen principal before the separately accepted tip, as a two-decimal string in receipt currency.
stringFull definition
{ "type": "string", "example": "12.50", "description": "Original frozen principal before the separately accepted tip, as a two-decimal string in receipt currency." }tipAmountRequiredOriginal frozen tip accepted with the command, as a nonnegative two-decimal string in receipt currency.
stringFull definition
{ "type": "string", "example": "0.00", "description": "Original frozen tip accepted with the command, as a nonnegative two-decimal string in receipt currency." }totalAmountRequiredOriginal sum of frozen principal and accepted tip, as a two-decimal string in receipt currency.
stringFull definition
{ "type": "string", "example": "12.50", "description": "Original sum of frozen principal and accepted tip, as a two-decimal string in receipt currency." }
Full definition
{
"type": "object",
"properties": {
"schema": {
"type": "string",
"enum": [
"hallify.restaurant-payment.command-result"
],
"description": "Discriminator identifying the versioned original payment-command result document.",
"example": "hallify.restaurant-payment.command-result"
},
"version": {
"type": "integer",
"enum": [
1
],
"description": "Command-result schema version retained by this acknowledgement.",
"example": 1
},
"checkoutId": {
"type": "string",
"format": "uuid",
"description": "UUID of the original checkout allocated once for this permanent command.",
"example": "f5ef2bdc-76ae-45b6-851a-399882860529"
},
"operationId": {
"type": "string",
"format": "uuid",
"description": "UUID of the original CREATE_CHECKOUT provider operation; replay and recovery preserve this operation identity.",
"example": "44352441-86e0-4a70-8642-d5863bea459a"
},
"action": {
"type": "string",
"enum": [
"CREATE_CHECKOUT"
],
"description": "Original accepted command action; this guest boundary acknowledges CREATE_CHECKOUT.",
"example": "CREATE_CHECKOUT"
},
"state": {
"type": "string",
"enum": [
"PREPARED"
],
"description": "State at the first retained acknowledgement, always PREPARED. Current operation, funds and native application states are returned by the checkout progress operation.",
"example": "PREPARED"
},
"currency": {
"type": "string",
"enum": [
"USD",
"GEL"
],
"description": "Currency of the original frozen principal, tip and total amounts.",
"example": "USD"
},
"principalAmount": {
"type": "string",
"example": "12.50",
"description": "Original frozen principal before the separately accepted tip, as a two-decimal string in receipt currency."
},
"tipAmount": {
"type": "string",
"example": "0.00",
"description": "Original frozen tip accepted with the command, as a nonnegative two-decimal string in receipt currency."
},
"totalAmount": {
"type": "string",
"example": "12.50",
"description": "Original sum of frozen principal and accepted tip, as a two-decimal string in receipt currency."
}
},
"description": "Immutable first PREPARED acknowledgement of the permanent guest CREATE_CHECKOUT command, preserved across identical replay and original-command recovery.",
"required": [
"schema",
"version",
"checkoutId",
"operationId",
"action",
"state",
"currency",
"principalAmount",
"tipAmount",
"totalAmount"
],
"example": {
"schema": "hallify.restaurant-payment.command-result",
"version": 1,
"checkoutId": "f5ef2bdc-76ae-45b6-851a-399882860529",
"operationId": "44352441-86e0-4a70-8642-d5863bea459a",
"action": "CREATE_CHECKOUT",
"state": "PREPARED",
"currency": "USD",
"principalAmount": "12.50",
"tipAmount": "0.00",
"totalAmount": "12.50"
}
}TranslatedErrorDto
Stable error envelope emitted by the global HTTP exception boundary. Domain-specific machine data, when present, is nested under details.
statusCodeRequiredHTTP status code repeated from the response.
integerFull definition
{ "type": "integer", "description": "HTTP status code repeated from the response.", "example": 400 }errorRequiredTranslation key for the HTTP category, such as errors:http.conflict. The specific cause is identified by code and translationKey.
stringFull definition
{ "type": "string", "description": "Translation key for the HTTP category, such as errors:http.conflict. The specific cause is identified by code and translationKey.", "example": "errors.request.invalid" }codeRequiredStable machine-readable domain code, or an HTTP_* fallback when no domain code is provided. Branch on this field and the HTTP status; localized wording never controls retries or business decisions.
stringFull definition
{ "type": "string", "example": "HTTP_BAD_REQUEST", "description": "Stable machine-readable domain code, or an HTTP_* fallback when no domain code is provided. Branch on this field and the HTTP status; localized wording never controls retries or business decisions." }messageRequiredTranslation key, identical to translationKey. The API does not return localized display text. Resolve the key and translationValues in the consuming application.
stringFull definition
{ "type": "string", "example": "errors:http.badRequest", "description": "Translation key, identical to translationKey. The API does not return localized display text. Resolve the key and translationValues in the consuming application." }translationKeyRequiredCanonical translation key, identical to message. Status-specific errors:http.* keys cover unspecified failures. Public keys and EN/RU explanations are listed in Developers; unknown keys require a localized client fallback.
stringFull definition
{ "type": "string", "example": "errors:http.badRequest", "description": "Canonical translation key, identical to message. Status-specific errors:http.* keys cover unspecified failures. Public keys and EN/RU explanations are listed in Developers; unknown keys require a localized client fallback." }translationValuesOptionalOptional scalar values for placeholders in the translation. Treat values as data, escape them when rendering, and never use them as translation options.
objectFull definition
{ "type": "object", "additionalProperties": { "oneOf": [ { "type": "string", "example": "example" }, { "type": "number", "example": 0 }, { "type": "boolean", "example": true } ], "example": "example" }, "description": "Optional scalar values for placeholders in the translation. Treat values as data, escape them when rendering, and never use them as translation options.", "example": { "exampleKey": "example" } }validationErrorsOptionalField validation failures with translation keys and stable validator codes. Submitted values and raw validator text are not included.
arrayFull definition
{ "description": "Field validation failures with translation keys and stable validator codes. Submitted values and raw validator text are not included.", "type": "array", "items": { "$ref": "#/components/schemas/ValidationErrorDto" }, "example": [ { "field": "email", "translationKey": "validation:isEmail", "code": "isEmail", "message": "validation:isEmail" } ] }detailsOptionalOptional domain-specific blocker or validation details
oneOfFull definition
{ "description": "Optional domain-specific blocker or validation details", "oneOf": [ { "type": "array", "items": { "$ref": "#/components/schemas/JsonValue" }, "example": [ "example" ] }, { "type": "object", "additionalProperties": { "$ref": "#/components/schemas/JsonValue" }, "example": { "exampleKey": "example" } } ], "example": [ "example" ] }
Full definition
{
"type": "object",
"properties": {
"statusCode": {
"type": "integer",
"description": "HTTP status code repeated from the response.",
"example": 400
},
"error": {
"type": "string",
"description": "Translation key for the HTTP category, such as errors:http.conflict. The specific cause is identified by code and translationKey.",
"example": "errors.request.invalid"
},
"code": {
"type": "string",
"example": "HTTP_BAD_REQUEST",
"description": "Stable machine-readable domain code, or an HTTP_* fallback when no domain code is provided. Branch on this field and the HTTP status; localized wording never controls retries or business decisions."
},
"message": {
"type": "string",
"example": "errors:http.badRequest",
"description": "Translation key, identical to translationKey. The API does not return localized display text. Resolve the key and translationValues in the consuming application."
},
"translationKey": {
"type": "string",
"example": "errors:http.badRequest",
"description": "Canonical translation key, identical to message. Status-specific errors:http.* keys cover unspecified failures. Public keys and EN/RU explanations are listed in Developers; unknown keys require a localized client fallback."
},
"translationValues": {
"type": "object",
"additionalProperties": {
"oneOf": [
{
"type": "string",
"example": "example"
},
{
"type": "number",
"example": 0
},
{
"type": "boolean",
"example": true
}
],
"example": "example"
},
"description": "Optional scalar values for placeholders in the translation. Treat values as data, escape them when rendering, and never use them as translation options.",
"example": {
"exampleKey": "example"
}
},
"validationErrors": {
"description": "Field validation failures with translation keys and stable validator codes. Submitted values and raw validator text are not included.",
"type": "array",
"items": {
"$ref": "#/components/schemas/ValidationErrorDto"
},
"example": [
{
"field": "email",
"translationKey": "validation:isEmail",
"code": "isEmail",
"message": "validation:isEmail"
}
]
},
"details": {
"description": "Optional domain-specific blocker or validation details",
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/components/schemas/JsonValue"
},
"example": [
"example"
]
},
{
"type": "object",
"additionalProperties": {
"$ref": "#/components/schemas/JsonValue"
},
"example": {
"exampleKey": "example"
}
}
],
"example": [
"example"
]
}
},
"required": [
"statusCode",
"error",
"code",
"message",
"translationKey"
],
"description": "Stable error envelope emitted by the global HTTP exception boundary. Domain-specific machine data, when present, is nested under details.",
"example": {
"statusCode": 400,
"error": "errors:http.badRequest",
"code": "HTTP_BAD_REQUEST",
"message": "errors:http.badRequest",
"translationKey": "errors:http.badRequest"
}
}ValidationErrorDto
Field validation failure with a field path, stable validator code and a translation key. Human-readable text belongs to the consuming application.
fieldRequiredPublic field path. Nested properties and array indices are separated by dots.
stringFull definition
{ "type": "string", "example": "email", "description": "Public field path. Nested properties and array indices are separated by dots." }translationKeyRequiredTranslation key for this validator, identical to message. Resolve it using a client dictionary; see the public Developers error catalog.
stringFull definition
{ "type": "string", "example": "validation:isEmail", "description": "Translation key for this validator, identical to message. Resolve it using a client dictionary; see the public Developers error catalog." }codeRequiredStable validator identifier for this field failure. Custom validators may define additional identifiers.
stringFull definition
{ "type": "string", "example": "isEmail", "description": "Stable validator identifier for this field failure. Custom validators may define additional identifiers." }messageRequiredTranslation key describing this field validation failure, identical to translationKey. Submitted values and validator prose are not included.
stringFull definition
{ "type": "string", "example": "validation:isEmail", "description": "Translation key describing this field validation failure, identical to translationKey. Submitted values and validator prose are not included." }translationValuesOptionalOptional scalar values for placeholders in the translation. Treat values as data, escape them when rendering, and never use them as translation options.
objectFull definition
{ "type": "object", "additionalProperties": { "oneOf": [ { "type": "string", "example": "example" }, { "type": "number", "example": 0 }, { "type": "boolean", "example": true } ], "example": "example" }, "description": "Optional scalar values for placeholders in the translation. Treat values as data, escape them when rendering, and never use them as translation options.", "example": { "exampleKey": "example" } }
Full definition
{
"type": "object",
"properties": {
"field": {
"type": "string",
"example": "email",
"description": "Public field path. Nested properties and array indices are separated by dots."
},
"translationKey": {
"type": "string",
"example": "validation:isEmail",
"description": "Translation key for this validator, identical to message. Resolve it using a client dictionary; see the public Developers error catalog."
},
"code": {
"type": "string",
"example": "isEmail",
"description": "Stable validator identifier for this field failure. Custom validators may define additional identifiers."
},
"message": {
"type": "string",
"example": "validation:isEmail",
"description": "Translation key describing this field validation failure, identical to translationKey. Submitted values and validator prose are not included."
},
"translationValues": {
"type": "object",
"additionalProperties": {
"oneOf": [
{
"type": "string",
"example": "example"
},
{
"type": "number",
"example": 0
},
{
"type": "boolean",
"example": true
}
],
"example": "example"
},
"description": "Optional scalar values for placeholders in the translation. Treat values as data, escape them when rendering, and never use them as translation options.",
"example": {
"exampleKey": "example"
}
}
},
"required": [
"field",
"translationKey",
"code",
"message"
],
"description": "Field validation failure with a field path, stable validator code and a translation key. Human-readable text belongs to the consuming application.",
"example": {
"field": "email",
"translationKey": "validation:isEmail",
"code": "isEmail",
"message": "validation:isEmail"
}
}JsonValue
Recursively JSON-safe value used only where the owning contract intentionally allows free-form structured data.
Full definition
{
"oneOf": [
{
"type": "string",
"nullable": true,
"example": "example"
},
{
"type": "number",
"example": 0
},
{
"type": "boolean",
"example": true
},
{
"type": "array",
"items": {
"$ref": "#/components/schemas/JsonValue"
},
"example": [
"example"
]
},
{
"type": "object",
"additionalProperties": {
"$ref": "#/components/schemas/JsonValue"
},
"example": {
"exampleKey": "example"
}
}
],
"description": "Recursively JSON-safe value used only where the owning contract intentionally allows free-form structured data.",
"example": "example"
}