- `data` field must always be an object - User provided `extensions` field should be merged with ours