openapi: 3.2.0
info:
  title: LDM v3 Agent Card API
  description: 'Multi-tenant B2B outreach automation platform. Auth: JWT Bearer (15-min) or tenant API key (ldm_*) managed in CRM Settings → API Keys. All tenant-scoped endpoints require the X-Tenant-Id header.'
  version: 1.0.0
  contact: {}
servers:
- url: https://api.live-direct-marketing.online
  description: Production
- url: https://api.dev.live-direct-marketing.online
  description: Development
- url: http://127.0.0.1:3000
  description: Local
tags:
- name: Agent Card
paths:
  /api/v1/agent-guide:
    get:
      operationId: AgentGuideController_guide
      parameters:
      - name: X-Tenant-Id
        in: header
        required: false
        schema:
          type: string
          format: uuid
        description: Tenant UUID — required for all tenant-scoped endpoints
      responses:
        '200':
          description: ''
      summary: 'Expert guide: capability map + recommended flows for MCP/A2A agents'
      tags:
      - Agent Card
  /api/v1/agent-guide/context:
    get:
      operationId: AgentGuideController_context
      parameters:
      - name: X-Tenant-Id
        in: header
        required: false
        schema:
          type: string
          format: uuid
        description: Tenant UUID — required for all tenant-scoped endpoints
      responses:
        '200':
          description: ''
      security:
      - bearer: []
      summary: 'Current tenant context core: recent lists, briefs and tasks'
      tags:
      - Agent Card
      x-required-scope:
      - agent:read
  /api/v1/agent-guide/resume:
    get:
      operationId: AgentGuideController_resume
      parameters:
      - name: X-Tenant-Id
        in: header
        required: false
        schema:
          type: string
          format: uuid
        description: Tenant UUID — required for all tenant-scoped endpoints
      responses:
        '200':
          description: ''
      security:
      - bearer: []
      summary: 'Resume snapshot (read-only): tenant context core, own recent notifications and…'
      tags:
      - Agent Card
      x-required-scope:
      - agent:read
  /api/v1/agent-guide/campaign-sender-capability:
    get:
      operationId: AgentGuideController_campaignSenderCapability
      parameters:
      - name: X-Tenant-Id
        in: header
        required: false
        schema:
          type: string
          format: uuid
        description: Tenant UUID — required for all tenant-scoped endpoints
      responses:
        '200':
          description: ''
      security:
      - bearer: []
      summary: 'SDR capability preflight (read-only): structured sender-assignment contract + a…'
      tags:
      - Agent Card
      x-required-scope:
      - agent:read
  /api/v1/health:
    get:
      operationId: AgentCardController_health
      parameters:
      - name: X-Tenant-Id
        in: header
        required: false
        schema:
          type: string
          format: uuid
        description: Tenant UUID — required for all tenant-scoped endpoints
      responses:
        '200':
          description: ''
      summary: Public API health check
      tags:
      - Agent Card
  /api/v1/.well-known/agent-card.json:
    get:
      operationId: AgentCardController_card
      parameters:
      - name: full
        required: false
        in: query
        description: 1/true → full uncurated capability list
        schema:
          type: string
      - name: X-Tenant-Id
        in: header
        required: false
        schema:
          type: string
          format: uuid
        description: Tenant UUID — required for all tenant-scoped endpoints
      responses:
        '200':
          description: ''
      summary: Get the LDM-proprietary agent card.
      tags:
      - Agent Card
  /api/v1/.well-known/agent.json:
    get:
      operationId: AgentCardController_cardA2A
      parameters:
      - name: full
        required: false
        in: query
        description: 1/true → full uncurated skill list
        schema:
          type: string
      - name: X-Tenant-Id
        in: header
        required: false
        schema:
          type: string
          format: uuid
        description: Tenant UUID — required for all tenant-scoped endpoints
      responses:
        '200':
          description: ''
      summary: Get the A2A 0.2.5-compliant agent card.
      tags:
      - Agent Card
  /api/v1/.well-known/oauth-protected-resource:
    get:
      operationId: AgentCardController_oauthProtectedResource
      parameters:
      - name: X-Tenant-Id
        in: header
        required: false
        schema:
          type: string
          format: uuid
        description: Tenant UUID — required for all tenant-scoped endpoints
      responses:
        '200':
          description: ''
      summary: RFC 9728 OAuth 2.0 Protected Resource Metadata (#476).
      tags:
      - Agent Card
components:
  securitySchemes:
    jwt:
      scheme: bearer
      bearerFormat: JWT
      type: http
      description: JWT access token from /auth/login (Bearer <token>)
    tenant-api-key:
      scheme: bearer
      bearerFormat: JWT
      type: http
      description: Tenant API key (Bearer ldm_*) for MCP/A2A clients. Issued via CRM Settings → API Keys.
    rpa-service:
      scheme: bearer
      bearerFormat: JWT
      type: http
      description: Dedicated RPA service key. No tenant API-key or query-key authentication.