generated: '2026-07-18' method: generated source: openapi/deliverart-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 130 by_action_class: acting: 93 connected: 37 by_consequence: write: 68 safety-critical: 3 read: 37 physical: 22 human_in_the_loop_required: 3 operations: - path: /registration/register/customer method: post operationId: registrationRegisterCustomer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /registration/register/courier method: post operationId: registrationRegisterCourier x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /registration/activate method: post operationId: registrationActivate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /password/reset/code/request method: post operationId: passwordResetRequestCode x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /password/reset/code/check method: post operationId: passwordResetCheckValidCode x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /password/reset method: post operationId: passwordResetResetPassword x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /me method: get operationId: meInfo x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /me/update method: post operationId: meUpdate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/update/password method: post operationId: meUpdatePassword x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/update/mobile-phone-number method: post operationId: meUpdateMobilePhoneNumber x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/verification/mobile/request method: post operationId: meVerificationMobilePhoneNumberRequest2faCode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/verification/mobile/validate method: post operationId: meVerificationMobilePhoneNumberValidate2faCode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/update/email method: post operationId: meUpdateEmail x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/verification/email/request method: post operationId: meVerificationEmailRequest2faCode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/verification/email/validate method: post operationId: meVerificationEmailValidate2faCode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/order/list method: get operationId: meOrderList x-agentic-access: action-class: connected consequence: read subject: optional scope: - order_admin - order_list token: max-ttl: 3600 audit: none - path: /me/customer/detail/pos/{id} method: get operationId: meCustomerDetail x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /me/customer/create method: post operationId: meCustomerCreateProfile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/customer/ownership/pos method: post operationId: meCustomerRedeemProfileByPos x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /me/customer/addresses/pos/{id} method: get operationId: meCustomerAddressList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /me/workshift/list method: get operationId: meWorkshiftList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /me/pos/list method: get operationId: mePosList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /company/{id}/detail method: get operationId: companiesDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - company_admin - company_read token: max-ttl: 3600 audit: none - path: /company/{id}/pos/list method: get operationId: companiesPosList x-agentic-access: action-class: connected consequence: read subject: optional scope: - company_admin - company_pos_read - company_read token: max-ttl: 3600 audit: none - path: /pos/{id}/detail method: get operationId: pointsOfSaleDetail x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pos/{id}/customers method: get operationId: pointsOfSaleCustomersList x-agentic-access: action-class: connected consequence: read subject: optional scope: - customer_admin - point_of_sale_admin - read_customer token: max-ttl: 3600 audit: none - path: /pos/{id}/workshifts method: get operationId: pointsOfSaleWorkshiftsList x-agentic-access: action-class: connected consequence: read subject: optional scope: - point_of_sale_admin - workshifts_read token: max-ttl: 3600 audit: none - path: /pos/{id}/delivery/fees method: get operationId: pointsOfSaleDeliveryFeesList x-agentic-access: action-class: connected consequence: read subject: optional scope: - deliveries_fee_read - point_of_sale_admin token: max-ttl: 3600 audit: none - path: /pos/{id}/deliveries method: get operationId: pointsOfSaleDeliveriesList x-agentic-access: action-class: connected consequence: read subject: optional scope: - deliveries_read - point_of_sale_admin token: max-ttl: 3600 audit: none - path: /pos/{id}/customer/find/phone-number/{phoneNumber} method: get operationId: pointsOfSaleCustomersFindByPhoneNumber x-agentic-access: action-class: connected consequence: read subject: optional scope: - customer_admin - point_of_sale_admin - read_customer token: max-ttl: 3600 audit: none - path: /pos/invitation/accept method: post operationId: pointsOfSaleInvitationAccept x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pos/invitation/reject method: post operationId: pointsOfSaleInvitationReject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pos/{id}/settings method: get operationId: pointsOfSaleSettingsDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - point_of_sale_admin - point_of_sale_read token: max-ttl: 3600 audit: none - path: /pos/{id}/settings/update method: post operationId: pointsOfSaleSettingsUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - point_of_sale_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /address/{id}/detail method: get operationId: addressesDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - address_admin - address_read token: max-ttl: 3600 audit: none - path: /address/create/coordinates method: post operationId: addressesCreateFromCoordinates x-agentic-access: action-class: acting consequence: write subject: required scope: - address_admin - address_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /address/create/place-id method: post operationId: addressesCreateFromGooglePlaceId x-agentic-access: action-class: acting consequence: write subject: required scope: - address_admin - address_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/{id}/detail method: get operationId: customersDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - customer_admin - customer_read token: max-ttl: 3600 audit: none - path: /pos/{id}/customer/create method: post operationId: customersCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - create_customer - customer_admin - point_of_sale_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/{id}/update method: post operationId: customersUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_admin - customer_update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/{id}/delete method: post operationId: customersDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/{id}/order/list method: get operationId: customersOrderList x-agentic-access: action-class: connected consequence: read subject: optional scope: - customer_admin - customer_orders_read token: max-ttl: 3600 audit: none - path: /customer/address/{customerId}/detail method: get operationId: customerAddressesDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - customer_address_read - customer_admin - customer_read token: max-ttl: 3600 audit: none - path: /customer/{id}/address/create method: post operationId: customerAddressesCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_address_create - customer_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/address/{id}/update method: post operationId: customerAddressesUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_address_update - customer_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/address/{id}/default method: post operationId: customerAddressesSetAsDefault x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_address_update - customer_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/address/{id}/delete method: post operationId: customerAddressesDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_address_update - customer_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/business-profile/{id}/detail method: get operationId: customerBusinessProfilesDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - customer_admin - customer_business_profile_read - customer_read token: max-ttl: 3600 audit: none - path: /customer/{id}/business-profile/create method: post operationId: customerBusinessProfilesCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_admin - customer_business_profile_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/business-profile/{id}/update method: post operationId: customerBusinessProfilesUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_admin - customer_business_profile_update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/business-profile/{id}/default method: post operationId: customerBusinessProfilesSetAsDefault x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_admin - customer_business_profile_update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customer/business-profile/{id}/delete method: post operationId: customerBusinessProfilesDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - customer_admin - customer_business_profile_update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/{id}/detail method: get operationId: menuDetail x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /menu/create method: post operationId: menuCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/{id}/update method: post operationId: menuUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/categories method: get operationId: menuCategories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /menu/category/{id}/detail method: get operationId: menuCategoriesDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - menu_admin - menu_item_category_admin - menu_read token: max-ttl: 3600 audit: none - path: /menu/category/create method: post operationId: menuCategoriesCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/category/{id}/update method: post operationId: menuCategoriesUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/allergen/{id}/category/meta method: post operationId: menuCategoriesUpdateMetadata x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/category/{id}/delete method: post operationId: menuCategoriesDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/category/{id}/translate method: post operationId: menuCategoriesTranslate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/category/{id}/sort method: post operationId: menuCategoriesSort x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/category/{id}/media/upload method: post operationId: menuCategoriesMediaUpload x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/category/{id}/media/remove method: post operationId: menuCategoriesMediaRemove x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/allergens method: get operationId: menuAllergens x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /menu/allergen/{id}/detail method: get operationId: menuAllergensDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - menu_admin - menu_item_allergen_admin - menu_read token: max-ttl: 3600 audit: none - path: /menu/allergen/create method: post operationId: menuAllergensCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/allergen/{id}/update method: post operationId: menuAllergensUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_allergen_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/allergen/{id}/update/meta method: post operationId: menuAllergensUpdateMetadata x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_allergen_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/allergen/{id}/delete method: post operationId: menuAllergensDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_allergen_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/allergen/{id}/translate method: post operationId: menuAllergensTranslate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_allergen_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/ingredients method: get operationId: menuIngredients x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /menu/ingredient/{id}/detail method: get operationId: menuIngredientsDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - menu_admin - menu_item_ingredient_admin - menu_read token: max-ttl: 3600 audit: none - path: /menu/ingredient/create method: post operationId: menuIngredientsCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/ingredient/{id}/update method: post operationId: menuIngredientsUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_ingredient_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/ingredient/{id}/update/meta method: post operationId: menuIngredientsUpdateMetadata x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_ingredient_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/ingredient/{id}/delete method: post operationId: menuIngredientsDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_ingredient_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/ingredient/{id}/translate method: post operationId: menuIngredientsTranslate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_ingredient_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/item/{id}/detail method: get operationId: menuItemsDetail x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /menu/item/create method: post operationId: menuItemsCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/item/{id}/update method: post operationId: menuItemsUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/item/{id}/update/meta method: post operationId: menuItemsUpdateMetadata x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/item/{id}/delete method: post operationId: menuItemsDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/item/{id}/suspend method: post operationId: menuItemsSuspend x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/item/{id}/resume method: post operationId: menuItemsResume x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /menu/item/{id}/translate method: post operationId: menuItemsTranslate x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_ingredient_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /workshift/{id}/detail method: get operationId: workshiftsDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - workshifts_admin - workshifts_read token: max-ttl: 3600 audit: none - path: /workshift/{workshiftId}/address/{addressId}/delivery/times method: get operationId: workshiftsDeliveryTimes x-agentic-access: action-class: connected consequence: read subject: optional scope: - workshifts_admin - workshifts_read token: max-ttl: 3600 audit: none - path: /workshift/{workshiftId}/take-away/times method: get operationId: workshiftsTakeAwayTimes x-agentic-access: action-class: connected consequence: read subject: optional scope: - take_away_time_read - workshifts_admin token: max-ttl: 3600 audit: none - path: /workshift/invitation/accept method: post operationId: workshiftsInvitationAccept x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /workshift/invitation/reject method: post operationId: workshiftsInvitationReject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /delivery/fee/{id}/detail method: get operationId: deliveryFeeDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - delivery_admin - delivery_fee_admin - delivery_fee_read token: max-ttl: 3600 audit: none - path: /delivery/fee/create method: post operationId: deliveryFeeCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - delivery_admin - delivery_fee_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /delivery/fee/{id}/delete method: post operationId: deliveryFeeDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - menu_admin - menu_item_category_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/detail method: get operationId: ordersDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - order_admin - order_read token: max-ttl: 3600 audit: none - path: /order/{id}/delivery/detail method: get operationId: ordersDetailDelivery x-agentic-access: action-class: connected consequence: read subject: optional scope: - order_admin - order_read token: max-ttl: 3600 audit: none - path: /order/{id}/take-away/detail method: get operationId: ordersDetailTakeAway x-agentic-access: action-class: connected consequence: read subject: optional scope: - order_admin - order_read token: max-ttl: 3600 audit: none - path: /pos/{id}/order/init method: post operationId: ordersInit x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_create audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/abort method: post operationId: ordersAbort x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_abort - order_admin audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/update/note method: post operationId: ordersUpdateNote x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/update/payment method: post operationId: ordersUpdatePayment x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/update/customer method: post operationId: ordersUpdateCustomer x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/update/customer-address method: post operationId: ordersUpdateCustomerAddress x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/update/customer-business-profile method: post operationId: ordersUpdateCustomerBusinessProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/update/menu/items method: post operationId: ordersUpdateItems x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/cost/create method: post operationId: ordersCostCreate x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/cost/{id}/delete method: post operationId: ordersCostDelete x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/unset/customer method: post operationId: ordersUnsetCustomer x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/unset/customer-address method: post operationId: ordersUnsetCustomerAddress x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/unset/customer-business-profile method: post operationId: ordersUnsetCustomerBusinessProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/delete method: post operationId: ordersDelete x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_cancel audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /workshift/{id}/delivery/time/reserve method: post operationId: reservationReserveDeliveryTime x-agentic-access: action-class: acting consequence: write subject: required scope: - order_admin - order_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /workshift/{id}/take-away/time/reserve method: post operationId: reservationReserveTakeAwayTime x-agentic-access: action-class: acting consequence: write subject: required scope: - order_admin - order_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/reserved/delivery/time method: post operationId: reservationDeliveryTimeDetailByOrder x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_create audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /reserved/delivery/time/{id}/detail method: post operationId: reservationDeliveryTimeDetailByIdentifier x-agentic-access: action-class: acting consequence: write subject: required scope: - order_admin - order_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/reserved/delivery/time/remove method: post operationId: reservationDeliveryTimeDeleteByOrder x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_create audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /reserved/delivery/time/{id}/remove method: post operationId: reservationDeliveryTimeDeleteByIdentifier x-agentic-access: action-class: acting consequence: write subject: required scope: - order_admin - order_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/reserved/take-away/time method: post operationId: reservationTakeAwayTimeDetailByOrder x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_create audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /reserved/take-away/time/{id}/detail method: post operationId: reservationTakeAwayTimeDetailByIdentifier x-agentic-access: action-class: acting consequence: write subject: required scope: - order_admin - order_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/{id}/reserved/take-away/time/remove method: post operationId: reservationTakeAwayTimeDeleteByOrder x-agentic-access: action-class: acting consequence: physical subject: required scope: - order_admin - order_create audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /reserved/take-away/time/{id}/remove method: post operationId: reservationTakeAwayTimeDeleteByIdentifier x-agentic-access: action-class: acting consequence: write subject: required scope: - order_admin - order_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /delivery/create method: post operationId: deliveriesCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - order_admin - order_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /delivery/{id}/detail method: get operationId: deliveriesDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - delivery_admin - delivery_read token: max-ttl: 3600 audit: none - path: /delivery/{id}/take method: post operationId: deliveriesTakeCharge x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /delivery/{id}/start method: post operationId: deliveriesStart x-agentic-access: action-class: acting consequence: write subject: required scope: - delivery_admin audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /delivery/order/{id}/delivered method: post operationId: deliveriesOrderDelivered x-agentic-access: action-class: acting consequence: physical subject: required scope: - delivery_admin audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /delivery/{id}/end method: post operationId: deliveriesEnd x-agentic-access: action-class: acting consequence: physical subject: required scope: - delivery_admin audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /take-away/create method: post operationId: takeAwayCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - order_admin - order_create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /take-away/{id}/detail method: get operationId: takeAwayDetail x-agentic-access: action-class: connected consequence: read subject: optional scope: - take_away_admin - take_away_read token: max-ttl: 3600 audit: none