Capabilities | Vagary Platform

📄️ Capability reference

Every vagary-core capability, generated from its versioned OpenAPI contract (contracts//v1/openapi.yaml). Each page lists the capability's endpoints, auth, key schemas, and (where it exists) its sellable product face. Public access is via the consolidated API gateway — the edge at api. (api.vagarylabs.com master / api.vagaryvoice.cloud voice / api.vagarylife.com life), NOT internal container URLs. This is the master contract authority — a capability's page can only be changed by changing its shipped contract.

📄️ Ads serving

- Sells as: the ads-serving product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Affiliate

- Sells as: the affiliate product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Analytics

- Sells as: the analytics product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Audit log

- Sells as: the audit-log product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Billing & metering

Usage metering + multi-rail billing as a shared capability — one account buys across products. METERING multi-rail (Dodo/PayPal/crypto/Razorpay; Stripe DORMANT), subscriptions, invoices, dunning. Metering NEVER blocks a product runtime (queue + reconcile). Payment secrets resolved server-side (Infisical), never in body/DB/logs. SELLER OF RECORD differs by rail (ADR-110 D3) we are the seller and our tax is added. stripe is retained but DORMANT — it cannot settle for an India LLP (no PA-CB licence; invite-only) and refuses every charge/refund/capture with 422 regardless of credentials (ADR-110 D4).

📄️ Campaign orchestration

- Sells as: the campaign-orchestration product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ CDN

CDN control-plane. Multi-provider (cloudflare | cloudfront | fastly | direct | stub). Cloudflare purge is capped at 30 URLs/call and requires CLOUDFLAREZONEID + CLOUDFLAREAPITOKEN (env-only); absent creds fall back to 'direct' mode (no upstream purge call, never raising). generatecachekey = sha256 first-32 hex of url + sorted vary headers.

📄️ CMS

- Sells as: the cms product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Compliance

- Sells as: the compliance product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Config flags

- Sells as: the config-flags product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Contact center

- Sells as: the contact-center product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Content ingestion

- Sells as: the content-ingestion product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Content moderation

- Sells as: the content-moderation product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Conversation intelligence

- Sells as: the conversation-intelligence product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Dedup index

- Sells as: the dedup-index product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Dialog engine

This capability is granted by an API key scoped to the ai-suite product (product face). See the product reference below.

📄️ API edge (gateway)

Capability edge. Auth /v1/deliveries -> webhook-egress, /v1/transcribe -> stt. The authenticated organization_id is injected into the forwarded body (anti-spoof).

📄️ Entitlement

- Sells as: the entitlement product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Eval harness

- Sells as: the eval-harness product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Experimentation

- Sells as: the experimentation product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Flow builder

- Sells as: the flow-builder product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ i18n

- Sells as: the i18n product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Identity (OIDC)

The fleet identity provider — one OIDC issuer for all products, so a single account authenticates across the fleet (the cross-product SSO the census found impossible). Signs RS256/JWKS; per-brand realms. Consolidates the 19-service platform auth + voice + bellring (C3). The signing key is resolved server-side and NEVER present in a repo, a consumer, or a facade. Status Phase 1 ETL → G0 gate → Phase 2 repoint-with-fallback → Phase 3 per-consumer deletes (voice last).

📄️ Long-term memory

- Sells as: the memory product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Marketplace

- Sells as: the marketplace product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Media transcode

- Sells as: the media-transcode product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Notifications

- Sells as: the notifications product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Observability

Shared observability instrumentation standard (Track H1). Defines the two unauthenticated, tailnet-scoped exposition endpoints every service serves (GET /metrics Prometheus text; GET /health liveness), the Fix-157 label-cardinality/PII policy that is a MANDATORY SDK default, the structured-log JSON schema, and the OTLP tracing env contract. ZERO new store — emits to the existing substrate one-pane (Prometheus/VictoriaMetrics · Alloy→Loki · Tempo/OTLP · GlitchTip). Full policy: standard.md.

📄️ Product plane (catalog & keys)

The shared product-face commerce plane (F2). Vagary is tenant #0. Every capability is sold through this one plane; per-capability edge modules (a later wave) plug in on top. Product->capability edges only.

📄️ Provider gateway

This capability is granted by an API key scoped to the ai-suite product (product face). See the product reference below.

📄️ Realtime media

- Sells as: the realtime-media product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Retrieval

This capability is granted by an API key scoped to any of the ai-suite, retrieval-api products (product face). See the product reference below.

📄️ Revenue tracking

- Sells as: the revenue-tracking product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Scheduler

- Sells as: the scheduler product (a product-scoped API key). This capability has no separate product-face contract — its public product route reuses the capability contract below; see the Edge route table's Product face row.

📄️ Security

Inbound-security config plane. All /v1/security/* routes are platform-admin gated (Bearer SECURITYADMINTOKEN; fail-CLOSED when unset). The IP-allowlist is a shared Redis Set (I4 shared-contract, NOT a shared DB) with additive-trust, fail-CLOSED semantics. WAF-rule persistence (wafrules) and the SIEM DLQ (siemdlq) are §29.5-protected operator-gated migrations — not created by this service.