Search personal account scripture
Required scopes: translation.search.
Personal-account library operation. Requires the documented personal permission and explicit token scope if scoped. The caller must own account_id. Uses only the personal enabled library, existing typed verse/rights metadata and bounded native reads/search. No organization library inheritance, installation, URL fetch or implicit enablement. Fresh personal credential/user/account checks run after acquiring the account lock. Disabled translation access returns 403; unknown canonical book/chapter/verse retains the existing 404 contract. Search uses the existing additional per-user search admission and returns has_more. Registered delegated OAuth access tokens are accepted within these personal boundaries; /me and account metadata additionally require identity.read.
Authentication
Personal bearer credential issued through existing account settings or browser-approved CLI flow. Must be active, finite, unexpired, unrevoked, within any rotation overlap, and bound to an active personal membership/user/account. Explicit scopes intersect current user permissions; empty existing personal scopes inherit current user authority. Not an OAuth grant or service token. Browser cookies are ignored.
Registered public-client OAuth for personal-account resources only. Exact registered HTTPS or fixed-port literal loopback redirect; S256 required; explicit consent. No organization/presentation authority. identity.read is required for /me and account metadata. Scope intersection with current user authority; no empty-scope inheritance.
Path parameters
Caller’s own immutable personal account UUID; other personal or organization accounts return 404.