Busymate DevTools federation API

openapi: 3.1.0
info:
  title: Busymate DevTools federation API
  version: '2026-11-03'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-11-03: 4 operation(s) read from 1 public documentation page(s) (each operation
    names its page in x-source). This is not the provider''s published contract; Busymate DevTools has published no machine-readable contract
    that the pipeline could find. Engine: local.'
  x-evidence-tiers:
    code-example: 14
    documentation: 13
    pages-with-code: 21
    pages-read: 24
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-11-03'
  x-generator: generate-contract-from-docs.py
  x-engine: local
  x-sources:
  - https://docs.busymate.dev/api/federation/onetap
  x-docs-section: federation
servers:
- url: https://api.busymate.net
paths:
  /exchange:
    post:
      operationId: post_exchange
      tags:
      - Exchange
      summary: The confirmed contract — four steps
      description: Exchanges the one‑time code and PKCE verifier for a real Supabase session.
      x-source: https://docs.busymate.dev/api/federation/onetap
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostExchangeRequest'
      responses:
        '201':
          description: Success (status as documented)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PostExchangeResponse'
      x-evidence:
        kind: documentation
  /functions/v1/federation-broker/exchange:
    post:
      operationId: post_functions_v1_federation_broker_exchange
      tags:
      - Functions
      summary: POST /functions/v1/federation-broker/exchange
      x-source: https://docs.busymate.dev/api/federation/onetap
      responses:
        '201':
          description: Success (shape read from the example response on the page)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PostFunctionsV1FederationBrokerExchangeResponse'
      x-evidence:
        kind: code-example
        language: httpie
        snippet: 'http POST https://api.busymate.net/functions/v1/federation-broker/exchange '
  /functions/v1/federation-broker/start:
    post:
      operationId: post_functions_v1_federation_broker_start
      tags:
      - Functions
      summary: POST /functions/v1/federation-broker/start
      x-source: https://docs.busymate.dev/api/federation/onetap
      responses:
        '201':
          description: Success (shape read from the example response on the page)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PostFunctionsV1FederationBrokerStartResponse'
      x-evidence:
        kind: code-example
        language: httpie
        snippet: 'http POST https://api.busymate.net/functions/v1/federation-broker/start '
  /start:
    post:
      operationId: post_start
      tags:
      - Start
      summary: The confirmed contract — four steps
      description: Starts a federation flow by sending a PKCE challenge and a credential; returns a single‑use code link.
      x-source: https://docs.busymate.dev/api/federation/onetap
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostStartRequest'
      responses:
        '201':
          description: Success (status as documented)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PostStartResponse'
      x-evidence:
        kind: documentation
security:
- bearer: []
components:
  schemas:
    PostExchangeRequest:
      type: object
      properties:
        code:
          type: string
        code_verifier:
          type: string
      required:
      - code
      - code_verifier
    PostExchangeResponse:
      type: object
      properties:
        access_token:
          type: string
        refresh_token:
          type: string
        expires_in:
          type: integer
        user_id:
          type: string
        email:
          type: string
        login_source:
          type: string
    PostFunctionsV1FederationBrokerExchangeResponse:
      type: object
      properties:
        access_token:
          type: string
        refresh_token:
          type: string
        expires_in:
          type: integer
        user_id:
          type: string
        email:
          type: string
        login_source:
          type: string
    PostFunctionsV1FederationBrokerStartResponse:
      type: object
      properties:
        link:
          type: string
        expires_in:
          type: integer
        target:
          type: string
    PostStartRequest:
      type: object
      properties:
        client_id:
          type: string
        code_challenge:
          type: string
        code_challenge_method:
          type: string
          description: must be "S256"
        target:
          type: string
          description: e.g., "ios"
        directus_token:
          type: string
          description: user's backend access token
        payload:
          type: object
          description: for hmac mode, contains sub, email, iat, jti
        signature:
          type: string
          description: base64url HMAC-SHA256 over canonical payload
      required:
      - client_id
      - code_challenge
      - code_challenge_method
      - target
    PostStartResponse:
      type: object
      properties:
        link:
          type: string
          description: URL containing the one‑time code
        expires_in:
          type: integer
          description: seconds until the code expires (60)
        target:
          type: string
          description: target platform, e.g., "ios"
  securitySchemes:
    bearer:
      type: http
      scheme: bearer
tags:
- name: Exchange
- name: Functions
- name: Start