Use Number-scoped test phone and event routes

CHANGELOG.md

@@ -2,6 +2,15 @@
 
 ## Unreleased
 
+- Breaking, pending the API route cutover: Test phone methods take a Number ID
+  without a project argument. `testing.triggerEvent(numberId, body)` omits
+  body `session` and accepts `fromNumber`; `listEventFixtures()` has no project
+  argument. History fixtures keep their project argument and use
+  `/messaging/projects/{projectId}/test-history-fixtures`. Real Numbers return
+  `404 resource_not_found`. Scope names remain `sandbox:read` / `sandbox:write`.
+  Coordinated API draft: polymorfa/polymorfa#792. This package is not published
+  or deployed by that change.
+
 - UI Kit: keep a 320px thread beside the Inbox list in narrow two-pane layouts, and include the linked guides in the package.
 
 - Breaking: the browser UI packages are now one package, the UI Kit

contracts/coverage.json

@@ -2770,13 +2770,14 @@
     {
       "family": "messaging",
       "method": "GET",
-      "path": "/messaging/testing/{projectId}/events/fixtures",
+      "path": "/messaging/test-events/fixtures",
       "operationId": "listTestEventFixtures",
-      "fingerprint": "0a1482d5fd5a365c0ba2e241d1f45ed0d5c88615c871ea97af442c8f26f3d22d",
+      "fingerprint": "671863a514ecdb1c2dff2e3b40a0d167e340ef0b41892440d6fca313fef8abc3",
       "typescript": {
         "status": "covered",
         "method": "MessagingClient.testing.listEventFixtures"
       },
+      "sourceCommit": "eda77760b56095a771c55e5d2df18be23e985377",
       "go": {
         "status": "covered",
         "method": "MessagingClient.Testing.ListEventFixtures"
@@ -5174,13 +5175,14 @@
     {
       "family": "messaging",
       "method": "POST",
-      "path": "/messaging/testing/{projectId}/events",
+      "path": "/messaging/{session}/test-events",
       "operationId": "triggerTestEvent",
-      "fingerprint": "c2d5c723923084c9fcca1be246f046b23d6a613eae5b6e25b71c2e6df462ec55",
+      "fingerprint": "6739ea1960b01aed8b8b393f2749427f1e1a8c08bcc6a466f14e5ec6cce487bd",
       "typescript": {
         "status": "covered",
         "method": "MessagingClient.testing.triggerEvent"
       },
+      "sourceCommit": "eda77760b56095a771c55e5d2df18be23e985377",
       "go": {
         "status": "covered",
         "method": "MessagingClient.Testing.TriggerEvent"
@@ -5205,13 +5207,14 @@
     {
       "family": "messaging",
       "method": "POST",
-      "path": "/messaging/testing/{projectId}/history-fixtures",
+      "path": "/messaging/projects/{projectId}/test-history-fixtures",
       "operationId": "createTestingHistoryFixture",
-      "fingerprint": "8941f260e0e4156976fe76ca2ce3545dbf2ff0a0a909bee938687e201cdfac65",
+      "fingerprint": "97956f2867fe294dfd9f97172135498a805e45ae97175d36f885453bbb43db69",
       "typescript": {
         "status": "covered",
         "method": "MessagingClient.testing.createHistoryFixture"
       },
+      "sourceCommit": "eda77760b56095a771c55e5d2df18be23e985377",
       "go": {
         "status": "covered",
         "method": "MessagingClient.Testing.CreateHistoryFixture"
@@ -18393,6 +18396,102 @@
         "reason": "Dashboard-only operational error vitals require a live Console identity; server API keys do not grant this authority.",
         "milestone": "not-server-sdk"
       }
+    },
+    {
+      "family": "messaging",
+      "method": "GET",
+      "path": "/messaging/{session}/phone",
+      "operationId": "getTestingPhone",
+      "fingerprint": "7987f6e6ada35684e331e740553f15bb92a382c6d0d9d3d628bd37f07f14d317",
+      "sourceCommit": "eda77760b56095a771c55e5d2df18be23e985377",
+      "typescript": {
+        "status": "covered",
+        "method": "MessagingClient.testing.getPhone"
+      },
+      "go": {
+        "status": "covered",
+        "method": "MessagingClient.Testing.GetPhone"
+      },
+      "python": {
+        "status": "covered",
+        "method": "AsyncMessagingClient.testing.get_phone"
+      },
+      "php": {
+        "status": "covered",
+        "method": "MessagingClient::testing.getPhone"
+      },
+      "dotnet": {
+        "status": "covered",
+        "method": "MessagingClient.Testing.GetPhoneAsync"
+      },
+      "rust": {
+        "status": "covered",
+        "method": "MessagingClient.testing.get_phone"
+      }
+    },
+    {
+      "family": "messaging",
+      "method": "POST",
+      "path": "/messaging/{session}/phone/devices/{deviceId}/unlink",
+      "operationId": "unlinkTestingPhoneDevice",
+      "fingerprint": "af5ec3b2b83e7d7455018a8410fa2cfa1e0300ded3fc35942081716fea2b7555",
+      "sourceCommit": "eda77760b56095a771c55e5d2df18be23e985377",
+      "typescript": {
+        "status": "covered",
+        "method": "MessagingClient.testing.unlinkPhoneDevice"
+      },
+      "go": {
+        "status": "covered",
+        "method": "MessagingClient.Testing.UnlinkPhoneDevice"
+      },
+      "python": {
+        "status": "covered",
+        "method": "AsyncMessagingClient.testing.unlink_phone_device"
+      },
+      "php": {
+        "status": "covered",
+        "method": "MessagingClient::testing.unlinkPhoneDevice"
+      },
+      "dotnet": {
+        "status": "covered",
+        "method": "MessagingClient.Testing.UnlinkPhoneDeviceAsync"
+      },
+      "rust": {
+        "status": "covered",
+        "method": "MessagingClient.testing.unlink_phone_device"
+      }
+    },
+    {
+      "family": "messaging",
+      "method": "POST",
+      "path": "/messaging/{session}/phone/messages",
+      "operationId": "sendTestingPhoneMessage",
+      "fingerprint": "e6f35140f5817b11464f15c60a9ad841fa0a16d5763d19000e82fefd72cea346",
+      "sourceCommit": "eda77760b56095a771c55e5d2df18be23e985377",
+      "typescript": {
+        "status": "covered",
+        "method": "MessagingClient.testing.sendPhoneMessage"
+      },
+      "go": {
+        "status": "covered",
+        "method": "MessagingClient.Testing.SendPhoneMessage"
+      },
+      "python": {
+        "status": "covered",
+        "method": "AsyncMessagingClient.testing.send_phone_message"
+      },
+      "php": {
+        "status": "covered",
+        "method": "MessagingClient::testing.sendPhoneMessage"
+      },
+      "dotnet": {
+        "status": "covered",
+        "method": "MessagingClient.Testing.SendPhoneMessageAsync"
+      },
+      "rust": {
+        "status": "covered",
+        "method": "MessagingClient.testing.send_phone_message"
+      }
     }
   ],
   "languages": ["typescript", "go", "python", "php", "dotnet", "rust"],

contracts/doc-snippets.json

@@ -1,11 +1,11 @@
 {
   "schemaVersion": 1,
-  "sourceCommit": "ff82061b9f872f1f39bc1fca3584df83209c4c52",
-  "sourceFilesSha256": "4b157347cdf705f6be7fdce859b1313dc2d9523ebaefdbbdebf3030ba8bf0341",
+  "sourceCommit": "16c330d388fdc67a370332d8235db927cf6323cb",
+  "sourceFilesSha256": "5987c9c9903914e6b4fb4e4b05419e0a8ff76bdeecb2cb4b7ec9cef469c1b657",
   "apiVersion": "2026-09-22",
   "apiSourceCommit": "171a9683ff45d11a4b5d3917dc428ad2722b0d99",
   "specs": {
-    "messaging": "7f6ddab25a673e45da7a209292ddfd7354acccf30c27e2fa651113e321b66d3d",
+    "messaging": "ce6ba7a0c61dcbe31028656a5584dd8056142a395181ada7d26a1e1b8b806dd9",
     "platform": "71454ab4bb66d844aeedd325d9a62086cd6b6ba39a135197fd4f5ca29ef089e8"
   },
   "releaseStatus": "source-only",

contracts/doc-snippets.md

@@ -41,7 +41,7 @@ recipe. Its schemas and union branches are validated against the pinned OpenAPI.
 No optional request fields are included in this initial catalog.
 
 There are **31 operations per language**, 186 complete programs. Each language's
-coverage ledger contains 442 covered operations, leaving **411 omitted per
+coverage ledger contains 445 covered operations, leaving **414 omitted per
 language**. The initial recipes cover text sends, message actions, session
 lifecycle, business profiles/catalogs/collections and project event listing.
 The remaining operations have no verified recipe in this catalog and retain