Append fresh verified QR history consent

{
  "type": "object",
  "properties": {
    "commandId": {
      "type": "string",
      "format": "uuid",
      "description": "Client-generated command UUID retained across exact retries and the resulting immutable consent receipt.",
      "example": "3e4a6887-ce11-4ae4-8708-9bed02386776"
    },
    "expectedRevision": {
      "type": "integer",
      "minimum": 0,
      "maximum": 2147483646,
      "description": "Current association consent revision; zero only for the first native association.",
      "example": 1
    },
    "locale": {
      "type": "string",
      "enum": [
        "en",
        "ka",
        "ru"
      ],
      "description": "Locale of the exact server-owned consent statement shown to the guest.",
      "example": "en"
    },
    "termsVersion": {
      "type": "string",
      "minLength": 1,
      "maxLength": 64,
      "description": "Server-issued statement version from the statement or current consent response.",
      "example": "example"
    },
    "termsDigest": {
      "type": "string",
      "minLength": 64,
      "maxLength": 64,
      "pattern": "^[a-f0-9]{64}$",
      "description": "Server-issued digest of the exact version, purpose, locale and statement text.",
      "example": "deadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef"
    },
    "proofId": {
      "type": "string",
      "format": "uuid",
      "description": "Prepared target proof ID; its source, terms and expected revision must match this complete original acceptance.",
      "example": "6eeca0df-6b25-4279-8845-acecc5a1976c"
    },
    "code": {
      "type": "string",
      "minLength": 6,
      "maxLength": 6,
      "pattern": "^\\d{6}$",
      "description": "BOOKING OTP. Omit only for a verified current-session PORTAL_REENTRY proof. A wrong-code response commits its attempt debit; a different attempt uses a new idempotency key.",
      "example": "000001"
    }
  },
  "required": [
    "commandId",
    "expectedRevision",
    "locale",
    "termsVersion",
    "termsDigest",
    "proofId"
  ],
  "description": "Atomic target proof verification, QR association or reconsent, and immutable ACCEPT decision.",
  "example": {
    "commandId": "3e4a6887-ce11-4ae4-8708-9bed02386776",
    "expectedRevision": 1,
    "locale": "en",
    "termsVersion": "example",
    "termsDigest": "deadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef",
    "proofId": "6eeca0df-6b25-4279-8845-acecc5a1976c"
  }
}

{
  "type": "object",
  "description": "Original atomic association or reconsent receipt and nullable private Portal continuation.",
  "additionalProperties": false,
  "required": [
    "outcome",
    "associationId",
    "decision",
    "continuation"
  ],
  "properties": {
    "outcome": {
      "type": "string",
      "enum": [
        "COMPLETED"
      ],
      "description": "Atomic association or reconsent completed.",
      "example": "COMPLETED"
    },
    "associationId": {
      "type": "string",
      "format": "uuid",
      "description": "Original QR association UUID, also used as the QR_VISIT history ID.",
      "example": "f73e02c0-4bf2-405f-88b4-ed9700c5f631"
    },
    "decision": {
      "type": "object",
      "description": "Immutable original consent command acknowledgement, independent of later decisions.",
      "additionalProperties": false,
      "required": [
        "id",
        "associationId",
        "revision",
        "decision",
        "createdAt"
      ],
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid",
          "description": "Immutable consent command receipt UUID.",
          "example": "594ab909-377f-4fbf-86b2-196e421b2e96"
        },
        "associationId": {
          "type": "string",
          "format": "uuid",
          "description": "Original immutable QR association.",
          "example": "f73e02c0-4bf2-405f-88b4-ed9700c5f631"
        },
        "revision": {
          "type": "integer",
          "minimum": 1,
          "description": "Append-only consent revision.",
          "example": 1
        },
        "decision": {
          "type": "string",
          "enum": [
            "ACCEPT",
            "WITHDRAW"
          ],
          "description": "Decision recorded by this command, which can differ from a later current decision.",
          "example": "ACCEPT"
        },
        "createdAt": {
          "type": "string",
          "format": "date-time",
          "description": "Original decision timestamp.",
          "example": "2026-01-15T10:00:00.000Z"
        }
      },
      "example": {
        "id": "594ab909-377f-4fbf-86b2-196e421b2e96",
        "associationId": "f73e02c0-4bf2-405f-88b4-ed9700c5f631",
        "revision": 1,
        "decision": "ACCEPT",
        "createdAt": "2026-01-15T10:00:00.000Z"
      }
    },
    "continuation": {
      "type": "object",
      "nullable": true,
      "additionalProperties": false,
      "required": [
        "id",
        "token",
        "expiresAt"
      ],
      "description": "Reserved Portal continuation issued only by first real contact verification; null when the caller already has a Portal session.",
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid",
          "description": "Exact session reserved in the prepared target proof.",
          "example": "8700687a-cbc5-4811-8796-c38f6f8a6cc3"
        },
        "token": {
          "type": "string",
          "pattern": "^gpc2_[A-Za-z0-9_-]{43}$",
          "example": "gpc2_demo_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
          "description": "Private Portal continuation bearer; store only in the guest client credential store."
        },
        "expiresAt": {
          "type": "string",
          "format": "date-time",
          "description": "Original continuation deadline.",
          "example": "2026-12-31T18:00:00.000Z"
        }
      },
      "example": {
        "id": "8700687a-cbc5-4811-8796-c38f6f8a6cc3",
        "token": "gpc2_demo_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
        "expiresAt": "2026-12-31T18:00:00.000Z"
      }
    }
  },
  "example": {
    "outcome": "COMPLETED",
    "associationId": "f73e02c0-4bf2-405f-88b4-ed9700c5f631",
    "decision": {
      "id": "594ab909-377f-4fbf-86b2-196e421b2e96",
      "associationId": "f73e02c0-4bf2-405f-88b4-ed9700c5f631",
      "revision": 1,
      "decision": "ACCEPT",
      "createdAt": "2026-01-15T10:00:00.000Z"
    },
    "continuation": null
  }
}

{
  "type": "object",
  "properties": {
    "statusCode": {
      "type": "integer",
      "description": "HTTP status code repeated from the response.",
      "example": 400
    },
    "error": {
      "type": "string",
      "description": "Translation key for the HTTP category, such as errors:http.conflict. The specific cause is identified by code and translationKey.",
      "example": "errors.request.invalid"
    },
    "code": {
      "type": "string",
      "example": "HTTP_BAD_REQUEST",
      "description": "Stable machine-readable domain code, or an HTTP_* fallback when no domain code is provided. Branch on this field and the HTTP status; localized wording never controls retries or business decisions."
    },
    "message": {
      "type": "string",
      "example": "errors:http.badRequest",
      "description": "Translation key, identical to translationKey. The API does not return localized display text. Resolve the key and translationValues in the consuming application."
    },
    "translationKey": {
      "type": "string",
      "example": "errors:http.badRequest",
      "description": "Canonical translation key, identical to message. Status-specific errors:http.* keys cover unspecified failures. Public keys and EN/RU explanations are listed in Developers; unknown keys require a localized client fallback."
    },
    "translationValues": {
      "type": "object",
      "additionalProperties": {
        "oneOf": [
          {
            "type": "string",
            "example": "example"
          },
          {
            "type": "number",
            "example": 0
          },
          {
            "type": "boolean",
            "example": true
          }
        ],
        "example": "example"
      },
      "description": "Optional scalar values for placeholders in the translation. Treat values as data, escape them when rendering, and never use them as translation options.",
      "example": {
        "exampleKey": "example"
      }
    },
    "validationErrors": {
      "description": "Field validation failures with translation keys and stable validator codes. Submitted values and raw validator text are not included.",
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/ValidationErrorDto"
      },
      "example": [
        {
          "field": "email",
          "translationKey": "validation:isEmail",
          "code": "isEmail",
          "message": "validation:isEmail"
        }
      ]
    },
    "details": {
      "description": "Optional domain-specific blocker or validation details",
      "oneOf": [
        {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/JsonValue"
          },
          "example": [
            "example"
          ]
        },
        {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/components/schemas/JsonValue"
          },
          "example": {
            "exampleKey": "example"
          }
        }
      ],
      "example": [
        "example"
      ]
    }
  },
  "required": [
    "statusCode",
    "error",
    "code",
    "message",
    "translationKey"
  ],
  "description": "Stable error envelope emitted by the global HTTP exception boundary. Domain-specific machine data, when present, is nested under details.",
  "example": {
    "statusCode": 400,
    "error": "errors:http.badRequest",
    "code": "HTTP_BAD_REQUEST",
    "message": "errors:http.badRequest",
    "translationKey": "errors:http.badRequest"
  }
}

{
  "type": "object",
  "properties": {
    "field": {
      "type": "string",
      "example": "email",
      "description": "Public field path. Nested properties and array indices are separated by dots."
    },
    "translationKey": {
      "type": "string",
      "example": "validation:isEmail",
      "description": "Translation key for this validator, identical to message. Resolve it using a client dictionary; see the public Developers error catalog."
    },
    "code": {
      "type": "string",
      "example": "isEmail",
      "description": "Stable validator identifier for this field failure. Custom validators may define additional identifiers."
    },
    "message": {
      "type": "string",
      "example": "validation:isEmail",
      "description": "Translation key describing this field validation failure, identical to translationKey. Submitted values and validator prose are not included."
    },
    "translationValues": {
      "type": "object",
      "additionalProperties": {
        "oneOf": [
          {
            "type": "string",
            "example": "example"
          },
          {
            "type": "number",
            "example": 0
          },
          {
            "type": "boolean",
            "example": true
          }
        ],
        "example": "example"
      },
      "description": "Optional scalar values for placeholders in the translation. Treat values as data, escape them when rendering, and never use them as translation options.",
      "example": {
        "exampleKey": "example"
      }
    }
  },
  "required": [
    "field",
    "translationKey",
    "code",
    "message"
  ],
  "description": "Field validation failure with a field path, stable validator code and a translation key. Human-readable text belongs to the consuming application.",
  "example": {
    "field": "email",
    "translationKey": "validation:isEmail",
    "code": "isEmail",
    "message": "validation:isEmail"
  }
}

{
  "oneOf": [
    {
      "type": "string",
      "nullable": true,
      "example": "example"
    },
    {
      "type": "number",
      "example": 0
    },
    {
      "type": "boolean",
      "example": true
    },
    {
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/JsonValue"
      },
      "example": [
        "example"
      ]
    },
    {
      "type": "object",
      "additionalProperties": {
        "$ref": "#/components/schemas/JsonValue"
      },
      "example": {
        "exampleKey": "example"
      }
    }
  ],
  "description": "Recursively JSON-safe value used only where the owning contract intentionally allows free-form structured data.",
  "example": "example"
}

{
  "description": "Changed command body or authorization, in-flight command, or stale append-only consent revision. Exact retries preserve the complete original command and key.",
  "example": {
    "statusCode": 409,
    "error": "errors:http.conflict",
    "code": "TABLE_PUBLIC_REVISION_CONFLICT",
    "message": "errors:http.conflict",
    "translationKey": "errors:http.conflict"
  },
  "allOf": [
    {
      "$ref": "#/components/schemas/TranslatedErrorDto"
    },
    {
      "type": "object",
      "required": [
        "code"
      ],
      "properties": {
        "statusCode": {
          "type": "integer",
          "enum": [
            409
          ],
          "description": "HTTP 409 conflict status.",
          "example": 409
        },
        "code": {
          "type": "string",
          "enum": [
            "IDEMPOTENCY_REQUEST_NOT_READY",
            "IDEMPOTENCY_KEY_PAYLOAD_MISMATCH",
            "IDEMPOTENCY_REQUEST_IN_PROGRESS",
            "IDEMPOTENCY_SCOPE_INCOMPLETE",
            "TABLE_PUBLIC_REVISION_CONFLICT",
            "GUEST_PORTAL_QR_REVISION_CONFLICT"
          ],
          "description": "Stable idempotency or operation-specific domain conflict code.",
          "example": "IDEMPOTENCY_REQUEST_NOT_READY"
        }
      },
      "example": {
        "code": "IDEMPOTENCY_REQUEST_NOT_READY"
      }
    }
  ]
}