paths:
  /iso/inbound:
    post:
      summary: Submit inbound ISO-20022 message
      description: Submit an inbound ISO-20022 message (from rail adapter)
      operationId: submitInboundMessage
      tags:
        - ISO
      security:
        - mtls: []
        - oauth2:
            - triggers:write
      x-roles:
        - POLICY_OPERATOR
      x-idempotency: true
      parameters:
        - $ref: '../components/parameters.yaml#/components/parameters/IdempotencyKey'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '../components/schemas.yaml#/components/schemas/SubmitInboundMessageRequest'
          application/xml:
            schema:
              type: string
              description: ISO-20022 XML payload
      responses:
        '201':
          description: Message submitted and trigger created
          content:
            application/json:
              schema:
                $ref: '../components/schemas.yaml#/components/schemas/Trigger'
        '400':
          $ref: '../openapi.yaml#/components/responses/BadRequest'
        '409':
          $ref: '../openapi.yaml#/components/responses/Conflict'

  /iso/outbound:
    post:
      summary: Submit outbound ISO-20022 message
      description: Submit an outbound ISO-20022 message (from ops/client)
      operationId: submitOutboundMessage
      tags:
        - ISO
      security:
        - oauth2:
            - triggers:write
      x-idempotency: true
      parameters:
        - $ref: '../components/parameters.yaml#/components/parameters/IdempotencyKey'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '../components/schemas.yaml#/components/schemas/SubmitOutboundMessageRequest'
          application/xml:
            schema:
              type: string
              description: ISO-20022 XML payload
      responses:
        '201':
          description: Message submitted and trigger created
          content:
            application/json:
              schema:
                $ref: '../components/schemas.yaml#/components/schemas/Trigger'
        '400':
          $ref: '../openapi.yaml#/components/responses/BadRequest'
        '409':
          $ref: '../openapi.yaml#/components/responses/Conflict'