One operation per Guesty Open API endpoint, returning dry-monads Results, with OAuth token minting, credential slots, priority lanes, rate limiting and webhook signature checks. Framework-free: the host injects credentials, token storage and the rate limiter.