{
  "components": {
    "schemas": {
      "A2a_TaskResult": {
        "properties": {
          "answer": {
            "type": "string"
          },
          "context_tokens": {
            "format": "int64",
            "type": "integer"
          },
          "iterations": {
            "format": "int32",
            "type": "integer"
          },
          "stopped_reason": {
            "type": "string"
          },
          "tokens": {
            "format": "int64",
            "type": "integer"
          },
          "transcript": {
            "items": {
              "$ref": "#/components/schemas/A2a_TaskStep"
            },
            "type": "array"
          }
        },
        "required": [
          "answer",
          "iterations",
          "tokens"
        ],
        "type": "object"
      },
      "A2a_TaskStep": {
        "properties": {
          "command": {
            "type": "string"
          },
          "content": {
            "type": "string"
          },
          "exit_code": {
            "format": "int32",
            "type": "integer"
          },
          "role": {
            "type": "string"
          },
          "stderr": {
            "type": "string"
          },
          "stdout": {
            "type": "string"
          },
          "tool_call_id": {
            "type": "string"
          }
        },
        "required": [
          "role"
        ],
        "type": "object"
      },
      "Activity_Event": {
        "properties": {
          "actor": {
            "type": "string"
          },
          "message": {
            "type": "string"
          },
          "time": {
            "format": "date-time",
            "type": "string"
          },
          "type": {
            "type": "string"
          }
        },
        "required": [
          "time",
          "type",
          "actor",
          "message"
        ],
        "type": "object"
      },
      "Activity_Response": {
        "properties": {
          "events": {
            "items": {
              "$ref": "#/components/schemas/Activity_Event"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Addresspool_ClaimedPrefix": {
        "properties": {
          "claimed_at": {
            "format": "date-time",
            "type": "string"
          },
          "owner_ref": {
            "type": "string"
          },
          "prefix": {
            "type": "string"
          }
        },
        "required": [
          "prefix",
          "claimed_at"
        ],
        "type": "object"
      },
      "Addresspool_ClaimedPrefixPage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Addresspool_ClaimedPrefix"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Addresspool_CreatePoolRequest": {
        "properties": {
          "CIDR": {
            "type": "string"
          },
          "Family": {
            "type": "string"
          },
          "Name": {
            "type": "string"
          },
          "Tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "alloc_prefix_len": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "Family",
          "CIDR",
          "Name",
          "alloc_prefix_len"
        ],
        "type": "object"
      },
      "Addresspool_Pool": {
        "properties": {
          "alloc_prefix_len": {
            "format": "int32",
            "type": "integer"
          },
          "cidr": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "family": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "family",
          "cidr",
          "name",
          "alloc_prefix_len",
          "created_at"
        ],
        "type": "object"
      },
      "Addresspool_PoolPage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Addresspool_Pool"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Addresspool_UpdatePoolRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Agentcfg_AgentConfig": {
        "properties": {
          "mcp_servers": {
            "items": {
              "$ref": "#/components/schemas/Agentcfg_MCPServer"
            },
            "type": "array"
          },
          "model": {
            "type": "string"
          },
          "skills": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "system_prompt": {
            "type": "string"
          },
          "tools": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Agentcfg_MCPServer": {
        "properties": {
          "name": {
            "type": "string"
          },
          "transport": {
            "type": "string"
          },
          "url": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "url"
        ],
        "type": "object"
      },
      "Agentcfg_RoleConfig": {
        "properties": {
          "max_iterations": {
            "format": "int32",
            "type": "integer"
          },
          "max_wall_clock_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "model": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "skills": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "system_prompt": {
            "type": "string"
          },
          "tools": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Agentrole_CreateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "display_name": {
            "type": "string"
          },
          "max_iterations": {
            "format": "int32",
            "type": "integer"
          },
          "max_wall_clock_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "model": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "skills": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "system_prompt": {
            "type": "string"
          },
          "tools": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "name",
          "system_prompt"
        ],
        "type": "object"
      },
      "Agentrole_Response": {
        "properties": {
          "builtin": {
            "type": "boolean"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "display_name": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "max_iterations": {
            "format": "int32",
            "type": "integer"
          },
          "max_wall_clock_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "model": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "skills": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "system_prompt": {
            "type": "string"
          },
          "tools": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "name",
          "builtin"
        ],
        "type": "object"
      },
      "Agentrole_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Agentrole_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Agentrole_UpdateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "display_name": {
            "type": "string"
          },
          "max_iterations": {
            "format": "int32",
            "type": "integer"
          },
          "max_wall_clock_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "model": {
            "type": "string"
          },
          "skills": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "system_prompt": {
            "type": "string"
          },
          "tools": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Agents_AgentResponse": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_id": {
            "format": "uuid",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "last_seen_at": {
            "format": "date-time",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "namespace": {
            "type": "string"
          },
          "online": {
            "type": "boolean"
          },
          "role": {
            "type": "string"
          },
          "skills": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "instance_id",
          "kind",
          "name",
          "version",
          "online",
          "last_seen_at"
        ],
        "type": "object"
      },
      "Agents_CreateMessageRequest": {
        "properties": {
          "command": {
            "type": "string"
          },
          "timeout_seconds": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "command"
        ],
        "type": "object"
      },
      "Agents_CreateMessageResponse": {
        "properties": {
          "exit_code": {
            "format": "int32",
            "type": "integer"
          },
          "stderr": {
            "type": "string"
          },
          "stdout": {
            "type": "string"
          },
          "timed_out": {
            "type": "boolean"
          },
          "truncated": {
            "type": "boolean"
          }
        },
        "required": [
          "stdout",
          "stderr",
          "exit_code",
          "timed_out",
          "truncated"
        ],
        "type": "object"
      },
      "Agents_CreateTaskRequest": {
        "properties": {
          "max_iterations": {
            "format": "int32",
            "type": "integer"
          },
          "model": {
            "type": "string"
          },
          "prompt": {
            "type": "string"
          },
          "timeout_seconds": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "prompt"
        ],
        "type": "object"
      },
      "Agentsession_AddRepoRequest": {
        "properties": {
          "full_name": {
            "type": "string"
          }
        },
        "required": [
          "full_name"
        ],
        "type": "object"
      },
      "Agentsession_AddedRepo": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "default_branch": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "full_name": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "private": {
            "type": "boolean"
          },
          "provider": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "provider",
          "full_name",
          "name",
          "default_branch",
          "private",
          "created_at"
        ],
        "type": "object"
      },
      "Agentsession_AddedReposResponse": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_AddedRepo"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Agentsession_AuthCodeRequest": {
        "properties": {
          "code": {
            "type": "string"
          }
        },
        "required": [
          "code"
        ],
        "type": "object"
      },
      "Agentsession_BranchOption": {
        "properties": {
          "default": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "protected": {
            "type": "boolean"
          }
        },
        "required": [
          "name",
          "protected",
          "default"
        ],
        "type": "object"
      },
      "Agentsession_BranchesResponse": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_BranchOption"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Agentsession_ChatAttachment": {
        "properties": {
          "data_b64": {
            "type": "string"
          },
          "mime_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "mime_type",
          "data_b64"
        ],
        "type": "object"
      },
      "Agentsession_CreateRequest": {
        "properties": {
          "branch": {
            "type": "string"
          },
          "harness": {
            "type": "string"
          },
          "idle_minutes": {
            "format": "int32",
            "type": "integer"
          },
          "instance_size": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "reasoning_effort": {
            "type": "string"
          },
          "repo_full_name": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          },
          "sandbox_target": {
            "type": "string"
          },
          "title": {
            "type": "string"
          }
        },
        "required": [
          "harness"
        ],
        "type": "object"
      },
      "Agentsession_CreateResponse": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "state"
        ],
        "type": "object"
      },
      "Agentsession_LogMessage": {
        "properties": {
          "content": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "payload": {
            "type": "string"
          },
          "seq": {
            "type": "string"
          },
          "turn_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "seq",
          "kind",
          "content",
          "created_at"
        ],
        "type": "object"
      },
      "Agentsession_MemoryFileResponse": {
        "properties": {
          "content": {
            "type": "string"
          },
          "filename": {
            "type": "string"
          },
          "source_session_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "updated_by": {
            "type": "string"
          },
          "version": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "filename",
          "content",
          "version",
          "updated_by",
          "updated_at"
        ],
        "type": "object"
      },
      "Agentsession_MemoryRecapResponse": {
        "properties": {
          "content": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "harness": {
            "type": "string"
          },
          "seq": {
            "type": "string"
          },
          "session_id": {
            "format": "uuid",
            "type": "string"
          },
          "session_title": {
            "type": "string"
          }
        },
        "required": [
          "seq",
          "session_id",
          "session_title",
          "harness",
          "content",
          "created_at"
        ],
        "type": "object"
      },
      "Agentsession_MemoryRepoResponse": {
        "properties": {
          "files": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_MemoryFileResponse"
            },
            "type": "array"
          },
          "recaps": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_MemoryRecapResponse"
            },
            "type": "array"
          },
          "repo_key": {
            "type": "string"
          }
        },
        "required": [
          "repo_key"
        ],
        "type": "object"
      },
      "Agentsession_MessageRequest": {
        "properties": {
          "attachments": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_ChatAttachment"
            },
            "type": "array"
          },
          "content": {
            "type": "string"
          },
          "repos": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "content"
        ],
        "type": "object"
      },
      "Agentsession_MessageResponse": {
        "properties": {
          "queued": {
            "type": "boolean"
          },
          "state": {
            "type": "string"
          },
          "turn_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "turn_id",
          "queued",
          "state"
        ],
        "type": "object"
      },
      "Agentsession_MessagesResponse": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_LogMessage"
            },
            "type": "array"
          },
          "next": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Agentsession_PutMemoryRequest": {
        "properties": {
          "content": {
            "type": "string"
          }
        },
        "required": [
          "content"
        ],
        "type": "object"
      },
      "Agentsession_RepoOption": {
        "properties": {
          "default_branch": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "full_name": {
            "type": "string"
          },
          "private": {
            "type": "boolean"
          },
          "pushed_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "full_name",
          "default_branch",
          "private",
          "pushed_at"
        ],
        "type": "object"
      },
      "Agentsession_ReposResponse": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_RepoOption"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Agentsession_Response": {
        "properties": {
          "auth_url": {
            "type": "string"
          },
          "branch": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "harness": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "idle_minutes": {
            "format": "int32",
            "type": "integer"
          },
          "instance_id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_size": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "last_activity": {
            "format": "date-time",
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "online": {
            "type": "boolean"
          },
          "queued_messages": {
            "format": "int32",
            "type": "integer"
          },
          "reasoning_effort": {
            "type": "string"
          },
          "remote_control_name": {
            "type": "string"
          },
          "repo_full_name": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          },
          "run_id": {
            "format": "uuid",
            "type": "string"
          },
          "run_phase": {
            "type": "string"
          },
          "run_status": {
            "type": "string"
          },
          "sandbox_target": {
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "title": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "title",
          "harness",
          "state",
          "online",
          "queued_messages",
          "idle_minutes",
          "last_activity",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Agentsession_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Agentsession_UpdateRequest": {
        "properties": {
          "idle_minutes": {
            "format": "int32",
            "type": "integer"
          },
          "model": {
            "type": "string"
          },
          "reasoning_effort": {
            "type": "string"
          },
          "title": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Agentsession_UsageLimit": {
        "properties": {
          "active": {
            "type": "boolean"
          },
          "label": {
            "type": "string"
          },
          "percent": {
            "format": "int32",
            "type": "integer"
          },
          "resets_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "label",
          "percent"
        ],
        "type": "object"
      },
      "Agentsession_UsageResponse": {
        "properties": {
          "context_used_tokens": {
            "format": "int64",
            "type": "integer"
          },
          "context_window_tokens": {
            "format": "int64",
            "type": "integer"
          },
          "credits_balance": {
            "type": "string"
          },
          "credits_limit": {
            "type": "string"
          },
          "credits_used": {
            "type": "string"
          },
          "limits": {
            "items": {
              "$ref": "#/components/schemas/Agentsession_UsageLimit"
            },
            "type": "array"
          },
          "plan": {
            "type": "string"
          }
        },
        "required": [
          "context_used_tokens",
          "context_window_tokens"
        ],
        "type": "object"
      },
      "Agentteam_ApprovePlanRequest": {
        "properties": {
          "members": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_MemberSpec"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Agentteam_ChatAttachment": {
        "properties": {
          "data_b64": {
            "type": "string"
          },
          "mime_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "mime_type",
          "data_b64"
        ],
        "type": "object"
      },
      "Agentteam_ChatRequest": {
        "properties": {
          "attachments": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_ChatAttachment"
            },
            "type": "array"
          },
          "content": {
            "type": "string"
          }
        },
        "required": [
          "content"
        ],
        "type": "object"
      },
      "Agentteam_ChatResponse": {
        "properties": {
          "queued": {
            "type": "boolean"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "queued",
          "state"
        ],
        "type": "object"
      },
      "Agentteam_CreateRequest": {
        "properties": {
          "attachments": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_ChatAttachment"
            },
            "type": "array"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "environment_id": {
            "format": "uuid",
            "type": "string"
          },
          "harness": {
            "type": "string"
          },
          "idle_timeout_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "instance_size": {
            "type": "string"
          },
          "max_messages": {
            "format": "int32",
            "type": "integer"
          },
          "members": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_MemberSpec"
            },
            "type": "array"
          },
          "model": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "prompt": {
            "type": "string"
          },
          "reasoning_effort": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "prompt"
        ],
        "type": "object"
      },
      "Agentteam_CreateResponse": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "state"
        ],
        "type": "object"
      },
      "Agentteam_MemberResponse": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_id": {
            "format": "uuid",
            "type": "string"
          },
          "lead": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "online": {
            "type": "boolean"
          },
          "role": {
            "type": "string"
          },
          "run_id": {
            "format": "uuid",
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "role",
          "name",
          "lead",
          "state",
          "online"
        ],
        "type": "object"
      },
      "Agentteam_MemberSpec": {
        "properties": {
          "lead": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "system_prompt": {
            "type": "string"
          }
        },
        "required": [
          "role"
        ],
        "type": "object"
      },
      "Agentteam_MessageResponse": {
        "properties": {
          "content": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "from_member": {
            "format": "uuid",
            "type": "string"
          },
          "from_role": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "payload": {
            "type": "string"
          },
          "seq": {
            "type": "string"
          },
          "to_member": {
            "format": "uuid",
            "type": "string"
          },
          "to_role": {
            "type": "string"
          }
        },
        "required": [
          "seq",
          "kind",
          "content",
          "created_at"
        ],
        "type": "object"
      },
      "Agentteam_MessagesResponse": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_MessageResponse"
            },
            "type": "array"
          },
          "next": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Agentteam_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "environment_id": {
            "format": "uuid",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "idle_timeout_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "instance_size": {
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "max_messages": {
            "format": "int32",
            "type": "integer"
          },
          "members": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_MemberResponse"
            },
            "type": "array"
          },
          "messages_used": {
            "format": "int32",
            "type": "integer"
          },
          "model": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "namespace": {
            "type": "string"
          },
          "plan": {
            "$ref": "#/components/schemas/Agentteam_TeamPlan"
          },
          "prompt": {
            "type": "string"
          },
          "stage_state": {
            "$ref": "#/components/schemas/Agentteam_StageState"
          },
          "stages": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_Stage"
            },
            "type": "array"
          },
          "state": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "namespace",
          "state",
          "prompt",
          "max_messages",
          "messages_used",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Agentteam_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Agentteam_Stage": {
        "properties": {
          "gates": {
            "type": "string"
          },
          "id": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "parallel": {
            "type": "boolean"
          },
          "tasks": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_StageTask"
            },
            "type": "array"
          }
        },
        "required": [
          "id",
          "kind"
        ],
        "type": "object"
      },
      "Agentteam_StageState": {
        "properties": {
          "artifacts": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "attempt": {
            "format": "int32",
            "type": "integer"
          },
          "findings": {
            "type": "string"
          },
          "index": {
            "format": "int32",
            "type": "integer"
          },
          "stage_id": {
            "type": "string"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "index",
          "status",
          "attempt"
        ],
        "type": "object"
      },
      "Agentteam_StageTask": {
        "properties": {
          "name": {
            "type": "string"
          },
          "prompt": {
            "type": "string"
          },
          "role": {
            "type": "string"
          }
        },
        "required": [
          "role",
          "prompt"
        ],
        "type": "object"
      },
      "Agentteam_TeamPlan": {
        "properties": {
          "brief": {
            "type": "string"
          },
          "members": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_MemberSpec"
            },
            "type": "array"
          },
          "stages": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_Stage"
            },
            "type": "array"
          },
          "summary": {
            "type": "string"
          },
          "ui_spec": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          }
        },
        "required": [
          "summary",
          "brief"
        ],
        "type": "object"
      },
      "Agentteam_UpdateRequest": {
        "properties": {
          "idle_timeout_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "max_messages": {
            "format": "int32",
            "type": "integer"
          },
          "model": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Apiclient_CreateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "expires_in_days": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "scopes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "name",
          "scopes"
        ],
        "type": "object"
      },
      "Apiclient_CreatedResponse": {
        "properties": {
          "client_id": {
            "type": "string"
          },
          "client_secret": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "created_by": {
            "format": "uuid",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "expired": {
            "type": "boolean"
          },
          "expires_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "last_used_at": {
            "format": "date-time",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "scopes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "secret_hint": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "token_endpoint": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "client_id",
          "name",
          "secret_hint",
          "created_by",
          "created_at",
          "updated_at",
          "expired",
          "token_endpoint",
          "client_secret"
        ],
        "type": "object"
      },
      "Apiclient_Response": {
        "properties": {
          "client_id": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "created_by": {
            "format": "uuid",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "expired": {
            "type": "boolean"
          },
          "expires_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "last_used_at": {
            "format": "date-time",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "scopes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "secret_hint": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "token_endpoint": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "client_id",
          "name",
          "secret_hint",
          "created_by",
          "created_at",
          "updated_at",
          "expired",
          "token_endpoint"
        ],
        "type": "object"
      },
      "Apiclient_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Apiclient_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Apiclient_ScopeCatalog": {
        "properties": {
          "groups": {
            "items": {
              "$ref": "#/components/schemas/Apiclient_ScopeGroup"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Apiclient_ScopeGroup": {
        "properties": {
          "name": {
            "type": "string"
          },
          "subgroups": {
            "items": {
              "$ref": "#/components/schemas/Apiclient_ScopeSubgroup"
            },
            "type": "array"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Apiclient_ScopeSubgroup": {
        "properties": {
          "name": {
            "type": "string"
          },
          "permissions": {
            "items": {
              "$ref": "#/components/schemas/Rbac_Permission"
            },
            "type": "array"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Apiclient_SecretResponse": {
        "properties": {
          "client_id": {
            "type": "string"
          },
          "client_secret": {
            "type": "string"
          },
          "rotated_at": {
            "format": "date-time",
            "type": "string"
          },
          "secret_hint": {
            "type": "string"
          }
        },
        "required": [
          "client_id",
          "client_secret",
          "secret_hint",
          "rotated_at"
        ],
        "type": "object"
      },
      "Apiclient_UpdateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "scopes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Apps_Advice": {
        "properties": {
          "build_command": {
            "type": "string"
          },
          "databases": {
            "items": {
              "$ref": "#/components/schemas/Apps_AdviceDatabase"
            },
            "type": "array"
          },
          "notes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          },
          "reason": {
            "type": "string"
          },
          "runtime": {
            "type": "string"
          },
          "shape": {
            "$ref": "#/components/schemas/Apps_Shape"
          },
          "start_command": {
            "type": "string"
          }
        },
        "required": [
          "shape"
        ],
        "type": "object"
      },
      "Apps_AdviceDatabase": {
        "properties": {
          "attach_as": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          }
        },
        "required": [
          "engine"
        ],
        "type": "object"
      },
      "Apps_ApprovalStage": {
        "properties": {
          "timeout": {
            "type": "string"
          },
          "who": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Apps_BuildSpec": {
        "properties": {
          "command": {
            "type": "string"
          },
          "context": {
            "type": "string"
          },
          "dockerfile": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "runtime": {
            "type": "string"
          }
        },
        "required": [
          "kind"
        ],
        "type": "object"
      },
      "Apps_BuilderOverride": {
        "properties": {
          "disk_gib": {
            "format": "int32",
            "type": "integer"
          },
          "instance_type": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Apps_ChatRef": {
        "properties": {
          "agent_gone": {
            "type": "boolean"
          },
          "base": {
            "type": "string"
          },
          "branch": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "decided_by": {
            "type": "string"
          },
          "environment": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "pr_number": {
            "format": "int32",
            "type": "integer"
          },
          "pr_url": {
            "type": "string"
          },
          "reason": {
            "type": "string"
          },
          "ref_id": {
            "format": "uuid",
            "type": "string"
          },
          "run_id": {
            "format": "uuid",
            "type": "string"
          },
          "ship_mode": {
            "type": "string"
          },
          "source": {
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "title": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "kind",
          "ref_id",
          "title",
          "source",
          "branch",
          "base",
          "state",
          "ship_mode",
          "agent_gone",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Apps_ChatRefPage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Apps_ChatRef"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Apps_CreateChatRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "environment_id": {
            "format": "uuid",
            "type": "string"
          },
          "harness": {
            "type": "string"
          },
          "instance_size": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "prompt": {
            "type": "string"
          },
          "reasoning_effort": {
            "type": "string"
          },
          "ship_mode": {
            "type": "string"
          },
          "target_environment": {
            "type": "string"
          },
          "title": {
            "type": "string"
          }
        },
        "required": [
          "prompt"
        ],
        "type": "object"
      },
      "Apps_CreateRequest": {
        "properties": {
          "branch": {
            "type": "string"
          },
          "build_command": {
            "type": "string"
          },
          "build_kind": {
            "type": "string"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "environments": {
            "items": {
              "$ref": "#/components/schemas/Apps_EnvironmentSpec"
            },
            "type": "array"
          },
          "instance_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "pipeline": {
            "$ref": "#/components/schemas/Apps_PipelineSpec"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          },
          "private": {
            "type": "boolean"
          },
          "repo_url": {
            "type": "string"
          },
          "runtime": {
            "type": "string"
          },
          "services": {
            "items": {
              "$ref": "#/components/schemas/Apps_ServiceSpec"
            },
            "type": "array"
          },
          "ship_mode": {
            "type": "string"
          },
          "sources": {
            "items": {
              "$ref": "#/components/schemas/Apps_SourceRequest"
            },
            "type": "array"
          },
          "start_command": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Apps_DatabaseSpec": {
        "properties": {
          "attach_as": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "storage_gib": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "engine"
        ],
        "type": "object"
      },
      "Apps_DeployStage": {
        "properties": {
          "environment": {
            "type": "string"
          },
          "strategy": {
            "type": "string"
          }
        },
        "required": [
          "environment"
        ],
        "type": "object"
      },
      "Apps_DomainRecord": {
        "properties": {
          "name": {
            "type": "string"
          },
          "type": {
            "type": "string"
          },
          "value": {
            "type": "string"
          }
        },
        "required": [
          "type",
          "name",
          "value"
        ],
        "type": "object"
      },
      "Apps_EnvironmentResponse": {
        "properties": {
          "approval_required": {
            "type": "boolean"
          },
          "auto_deploy": {
            "type": "boolean"
          },
          "certificate_id": {
            "format": "uuid",
            "type": "string"
          },
          "databases": {
            "items": {
              "$ref": "#/components/schemas/Apps_DatabaseSpec"
            },
            "type": "array"
          },
          "domain": {
            "type": "string"
          },
          "domain_records": {
            "items": {
              "$ref": "#/components/schemas/Apps_DomainRecord"
            },
            "type": "array"
          },
          "domain_tls": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "position": {
            "format": "int32",
            "type": "integer"
          },
          "provisions": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "service_overrides": {
            "additionalProperties": {
              "$ref": "#/components/schemas/Apps_ServiceOverride"
            },
            "type": "object"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tls_pending": {
            "type": "boolean"
          },
          "tracks": {
            "$ref": "#/components/schemas/Apps_TrackSpec"
          },
          "url": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "tracks",
          "auto_deploy",
          "approval_required",
          "position"
        ],
        "type": "object"
      },
      "Apps_EnvironmentSpec": {
        "properties": {
          "approval_required": {
            "type": "boolean"
          },
          "auto_deploy": {
            "type": "boolean"
          },
          "certificate_id": {
            "format": "uuid",
            "type": "string"
          },
          "databases": {
            "items": {
              "$ref": "#/components/schemas/Apps_DatabaseSpec"
            },
            "type": "array"
          },
          "domain": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "service_overrides": {
            "additionalProperties": {
              "$ref": "#/components/schemas/Apps_ServiceOverride"
            },
            "type": "object"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tracks": {
            "$ref": "#/components/schemas/Apps_TrackSpec"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "tracks",
          "auto_deploy",
          "approval_required"
        ],
        "type": "object"
      },
      "Apps_HealthSpec": {
        "properties": {
          "interval_sec": {
            "format": "int32",
            "type": "integer"
          },
          "path": {
            "type": "string"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          },
          "timeout_sec": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "path",
          "port"
        ],
        "type": "object"
      },
      "Apps_Job": {
        "properties": {
          "build": {
            "type": "string"
          },
          "image": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "needs": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "run": {
            "type": "string"
          },
          "source": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Apps_JobCheckout": {
        "properties": {
          "dir": {
            "type": "string"
          },
          "ref": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          },
          "sha": {
            "type": "string"
          },
          "source": {
            "type": "string"
          },
          "token": {
            "type": "string"
          }
        },
        "required": [
          "source",
          "repo_url",
          "ref",
          "dir"
        ],
        "type": "object"
      },
      "Apps_JobLogBatch": {
        "properties": {
          "chunks": {
            "items": {
              "$ref": "#/components/schemas/Apps_JobLogChunk"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Apps_JobLogChunk": {
        "properties": {
          "data": {
            "type": "string"
          },
          "seq": {
            "format": "int32",
            "type": "integer"
          },
          "stream": {
            "type": "string"
          }
        },
        "required": [
          "seq",
          "stream",
          "data"
        ],
        "type": "object"
      },
      "Apps_JobResponse": {
        "properties": {
          "builder_id": {
            "format": "uuid",
            "type": "string"
          },
          "error": {
            "type": "string"
          },
          "finished_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "outputs": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "stage": {
            "type": "string"
          },
          "stage_index": {
            "format": "int32",
            "type": "integer"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "stage",
          "stage_index",
          "name",
          "kind",
          "state"
        ],
        "type": "object"
      },
      "Apps_JobResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Apps_JobResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Apps_JobSpec": {
        "properties": {
          "build_args": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "build_command": {
            "type": "string"
          },
          "build_kind": {
            "type": "string"
          },
          "checkouts": {
            "items": {
              "$ref": "#/components/schemas/Apps_JobCheckout"
            },
            "type": "array"
          },
          "context": {
            "type": "string"
          },
          "dockerfile": {
            "type": "string"
          },
          "env": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "image": {
            "type": "string"
          },
          "image_name": {
            "type": "string"
          },
          "job_id": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "path": {
            "type": "string"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          },
          "run_id": {
            "type": "string"
          },
          "runtime": {
            "type": "string"
          },
          "script": {
            "type": "string"
          },
          "service": {
            "type": "string"
          },
          "start_command": {
            "type": "string"
          },
          "timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "upload": {
            "$ref": "#/components/schemas/Apps_JobUpload"
          }
        },
        "required": [
          "job_id",
          "run_id",
          "kind",
          "name",
          "timeout_sec"
        ],
        "type": "object"
      },
      "Apps_JobStatus": {
        "properties": {
          "error": {
            "type": "string"
          },
          "outputs": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "state"
        ],
        "type": "object"
      },
      "Apps_JobUpload": {
        "properties": {
          "image_ref": {
            "type": "string"
          },
          "put_url": {
            "type": "string"
          }
        },
        "required": [
          "put_url",
          "image_ref"
        ],
        "type": "object"
      },
      "Apps_PipelineSpec": {
        "properties": {
          "generated": {
            "type": "boolean"
          },
          "stages": {
            "items": {
              "$ref": "#/components/schemas/Apps_Stage"
            },
            "type": "array"
          },
          "triggers": {
            "items": {
              "$ref": "#/components/schemas/Apps_Trigger"
            },
            "type": "array"
          },
          "version": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "version",
          "generated"
        ],
        "type": "object"
      },
      "Apps_Proposal": {
        "properties": {
          "build_command": {
            "type": "string"
          },
          "build_kind": {
            "type": "string"
          },
          "confidence": {
            "type": "string"
          },
          "dockerfile": {
            "type": "string"
          },
          "framework": {
            "type": "string"
          },
          "notes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          },
          "runtime": {
            "type": "string"
          },
          "start_command": {
            "type": "string"
          }
        },
        "required": [
          "build_kind",
          "confidence"
        ],
        "type": "object"
      },
      "Apps_ReleaseResponse": {
        "properties": {
          "commits": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "images": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "number": {
            "format": "int32",
            "type": "integer"
          },
          "run_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "number",
          "run_id",
          "created_at"
        ],
        "type": "object"
      },
      "Apps_ReleaseResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Apps_ReleaseResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Apps_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "environments": {
            "items": {
              "$ref": "#/components/schemas/Apps_EnvironmentResponse"
            },
            "type": "array"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "pipeline": {
            "$ref": "#/components/schemas/Apps_PipelineSpec"
          },
          "pipeline_version": {
            "format": "int32",
            "type": "integer"
          },
          "services": {
            "items": {
              "$ref": "#/components/schemas/Apps_ServiceSpec"
            },
            "type": "array"
          },
          "ship_mode": {
            "type": "string"
          },
          "sources": {
            "items": {
              "$ref": "#/components/schemas/Apps_SourceResponse"
            },
            "type": "array"
          },
          "status": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vars": {
            "items": {
              "$ref": "#/components/schemas/Apps_VarResponse"
            },
            "type": "array"
          }
        },
        "required": [
          "id",
          "name",
          "status",
          "pipeline",
          "pipeline_version",
          "ship_mode",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Apps_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Apps_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Apps_RunResponse": {
        "properties": {
          "commits": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "created_by": {
            "type": "string"
          },
          "environments": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "error": {
            "type": "string"
          },
          "finished_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "number": {
            "format": "int32",
            "type": "integer"
          },
          "ref": {
            "type": "string"
          },
          "release_id": {
            "format": "uuid",
            "type": "string"
          },
          "stage_index": {
            "format": "int32",
            "type": "integer"
          },
          "stages": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "trigger": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "number",
          "trigger",
          "ref",
          "state",
          "stage_index",
          "created_by",
          "created_at"
        ],
        "type": "object"
      },
      "Apps_RunResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Apps_RunResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Apps_RunSpec": {
        "properties": {
          "command": {
            "type": "string"
          },
          "health": {
            "$ref": "#/components/schemas/Apps_HealthSpec"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          }
        },
        "type": "object"
      },
      "Apps_ScaleSpec": {
        "properties": {
          "max": {
            "format": "int32",
            "type": "integer"
          },
          "min": {
            "format": "int32",
            "type": "integer"
          },
          "target_cpu_percent": {
            "type": "number"
          }
        },
        "required": [
          "min",
          "max"
        ],
        "type": "object"
      },
      "Apps_ServiceOverride": {
        "properties": {
          "command": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "scale": {
            "$ref": "#/components/schemas/Apps_ScaleSpec"
          }
        },
        "type": "object"
      },
      "Apps_ServiceSpec": {
        "properties": {
          "base_image_id": {
            "format": "uuid",
            "type": "string"
          },
          "boot_disk_gib": {
            "format": "int32",
            "type": "integer"
          },
          "build": {
            "$ref": "#/components/schemas/Apps_BuildSpec"
          },
          "expose": {
            "type": "string"
          },
          "image": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "path": {
            "type": "string"
          },
          "run": {
            "$ref": "#/components/schemas/Apps_RunSpec"
          },
          "scale": {
            "$ref": "#/components/schemas/Apps_ScaleSpec"
          },
          "source": {
            "type": "string"
          },
          "targets": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          },
          "vars": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "name",
          "run",
          "expose",
          "instance_type",
          "scale"
        ],
        "type": "object"
      },
      "Apps_Shape": {
        "properties": {
          "expose": {
            "type": "string"
          },
          "max_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "min_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "stateful": {
            "type": "boolean"
          },
          "target_cpu_percent": {
            "type": "number"
          }
        },
        "required": [
          "min_replicas",
          "max_replicas",
          "expose"
        ],
        "type": "object"
      },
      "Apps_SourceRequest": {
        "properties": {
          "branch": {
            "type": "string"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "private": {
            "type": "boolean"
          },
          "repo_url": {
            "type": "string"
          }
        },
        "required": [
          "repo_url"
        ],
        "type": "object"
      },
      "Apps_SourceResponse": {
        "properties": {
          "branch": {
            "type": "string"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "last_seen_sha": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "private": {
            "type": "boolean"
          },
          "repo_full_name": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          },
          "webhook_active": {
            "type": "boolean"
          }
        },
        "required": [
          "name",
          "repo_url",
          "branch",
          "private",
          "webhook_active"
        ],
        "type": "object"
      },
      "Apps_Stage": {
        "properties": {
          "approval": {
            "$ref": "#/components/schemas/Apps_ApprovalStage"
          },
          "deploy": {
            "$ref": "#/components/schemas/Apps_DeployStage"
          },
          "jobs": {
            "items": {
              "$ref": "#/components/schemas/Apps_Job"
            },
            "type": "array"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Apps_StartRunRequest": {
        "properties": {
          "builder": {
            "$ref": "#/components/schemas/Apps_BuilderOverride"
          },
          "environments": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "ref": {
            "type": "string"
          },
          "release_id": {
            "format": "uuid",
            "type": "string"
          },
          "trigger": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Apps_TrackSpec": {
        "properties": {
          "branch": {
            "type": "string"
          },
          "tag_pattern": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Apps_Trigger": {
        "properties": {
          "branch": {
            "type": "string"
          },
          "on": {
            "type": "string"
          },
          "pattern": {
            "type": "string"
          }
        },
        "required": [
          "on"
        ],
        "type": "object"
      },
      "Apps_UpdateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "ship_mode": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Apps_VarResponse": {
        "properties": {
          "build_time": {
            "type": "boolean"
          },
          "key": {
            "type": "string"
          },
          "scope": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "scope",
          "key",
          "build_time",
          "updated_at"
        ],
        "type": "object"
      },
      "Apps_VarsRequest": {
        "properties": {
          "build_time": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "scope": {
            "type": "string"
          },
          "vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "scope"
        ],
        "type": "object"
      },
      "Artifact_Artifact": {
        "properties": {
          "component": {
            "type": "string"
          },
          "holder_addr": {
            "type": "string"
          },
          "local": {
            "type": "boolean"
          },
          "sha256": {
            "type": "string"
          },
          "size_bytes": {
            "format": "int64",
            "type": "integer"
          },
          "source": {
            "type": "string"
          },
          "uploaded_at": {
            "format": "date-time",
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "component",
          "version",
          "sha256",
          "size_bytes",
          "source",
          "uploaded_at",
          "local"
        ],
        "type": "object"
      },
      "Artifact_Release": {
        "properties": {
          "breaking": {
            "type": "boolean"
          },
          "cached": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "components": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "prerelease": {
            "type": "boolean"
          },
          "published_at": {
            "format": "date-time",
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "version",
          "published_at",
          "prerelease"
        ],
        "type": "object"
      },
      "Auth_ChangePasswordRequest": {
        "properties": {
          "current_password": {
            "type": "string"
          },
          "new_password": {
            "type": "string"
          }
        },
        "required": [
          "current_password",
          "new_password"
        ],
        "type": "object"
      },
      "Auth_ForgotPasswordRequest": {
        "properties": {
          "email": {
            "type": "string"
          }
        },
        "required": [
          "email"
        ],
        "type": "object"
      },
      "Auth_LoginRequest": {
        "properties": {
          "email": {
            "type": "string"
          },
          "password": {
            "type": "string"
          }
        },
        "required": [
          "email",
          "password"
        ],
        "type": "object"
      },
      "Auth_LoginResponse": {
        "properties": {
          "access_token": {
            "type": "string"
          },
          "expires_in": {
            "format": "int64",
            "type": "integer"
          },
          "id_token": {
            "type": "string"
          },
          "refresh_token": {
            "type": "string"
          },
          "scope": {
            "type": "string"
          },
          "token_type": {
            "type": "string"
          }
        },
        "required": [
          "access_token",
          "token_type",
          "expires_in",
          "refresh_token",
          "id_token",
          "scope"
        ],
        "type": "object"
      },
      "Auth_LogoutRequest": {
        "properties": {
          "refresh_token": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Auth_PasswordConfirmRequest": {
        "properties": {
          "password": {
            "type": "string"
          }
        },
        "required": [
          "password"
        ],
        "type": "object"
      },
      "Auth_RecoveryCodesResponse": {
        "properties": {
          "recovery_codes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Auth_RefreshRequest": {
        "properties": {
          "refresh_token": {
            "type": "string"
          }
        },
        "required": [
          "refresh_token"
        ],
        "type": "object"
      },
      "Auth_RegisterRequest": {
        "properties": {
          "email": {
            "type": "string"
          },
          "locale": {
            "type": "string"
          },
          "password": {
            "type": "string"
          },
          "tenant_name": {
            "type": "string"
          },
          "tenant_slug": {
            "type": "string"
          }
        },
        "required": [
          "email",
          "password"
        ],
        "type": "object"
      },
      "Auth_RegisterResponse": {
        "properties": {
          "email": {
            "type": "string"
          },
          "message": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "user_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "user_id",
          "tenant_id",
          "email",
          "message"
        ],
        "type": "object"
      },
      "Auth_ResendMFARequest": {
        "properties": {
          "challenge": {
            "type": "string"
          }
        },
        "required": [
          "challenge"
        ],
        "type": "object"
      },
      "Auth_ResetPasswordRequest": {
        "properties": {
          "new_password": {
            "type": "string"
          },
          "token": {
            "type": "string"
          }
        },
        "required": [
          "token",
          "new_password"
        ],
        "type": "object"
      },
      "Auth_SecurityResponse": {
        "properties": {
          "email_verified": {
            "type": "boolean"
          },
          "recovery_codes_remaining": {
            "format": "int32",
            "type": "integer"
          },
          "totp_enabled": {
            "type": "boolean"
          },
          "trusted_devices": {
            "items": {
              "$ref": "#/components/schemas/Auth_TrustedDeviceResponse"
            },
            "type": "array"
          }
        },
        "required": [
          "email_verified",
          "totp_enabled",
          "recovery_codes_remaining"
        ],
        "type": "object"
      },
      "Auth_SetLocaleRequest": {
        "properties": {
          "locale": {
            "type": "string"
          }
        },
        "required": [
          "locale"
        ],
        "type": "object"
      },
      "Auth_SetLocaleResponse": {
        "properties": {
          "locale": {
            "type": "string"
          }
        },
        "required": [
          "locale"
        ],
        "type": "object"
      },
      "Auth_TOTPConfirmRequest": {
        "properties": {
          "code": {
            "type": "string"
          }
        },
        "required": [
          "code"
        ],
        "type": "object"
      },
      "Auth_TOTPSetupResponse": {
        "properties": {
          "otpauth_url": {
            "type": "string"
          },
          "secret": {
            "type": "string"
          }
        },
        "required": [
          "secret",
          "otpauth_url"
        ],
        "type": "object"
      },
      "Auth_TrustedDeviceResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "current": {
            "type": "boolean"
          },
          "expires_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "ip": {
            "type": "string"
          },
          "label": {
            "type": "string"
          },
          "last_seen_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "label",
          "ip",
          "created_at",
          "last_seen_at",
          "expires_at",
          "current"
        ],
        "type": "object"
      },
      "Auth_UserinfoResponse": {
        "properties": {
          "email": {
            "type": "string"
          },
          "email_verified": {
            "type": "boolean"
          },
          "enabled_zones": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "is_platform_admin": {
            "type": "boolean"
          },
          "locale": {
            "type": "string"
          },
          "permissions": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "role": {
            "type": "string"
          },
          "role_name": {
            "type": "string"
          },
          "role_slug": {
            "type": "string"
          },
          "sub": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "tenant_name": {
            "type": "string"
          },
          "updated_at": {
            "format": "int64",
            "type": "integer"
          },
          "zone": {
            "type": "string"
          }
        },
        "required": [
          "sub",
          "email",
          "email_verified",
          "tenant_id",
          "role",
          "role_slug",
          "role_name",
          "is_platform_admin",
          "updated_at"
        ],
        "type": "object"
      },
      "Auth_VerifyEmailRequest": {
        "properties": {
          "token": {
            "type": "string"
          }
        },
        "required": [
          "token"
        ],
        "type": "object"
      },
      "Auth_VerifyMFARequest": {
        "properties": {
          "challenge": {
            "type": "string"
          },
          "code": {
            "type": "string"
          },
          "remember_device": {
            "type": "boolean"
          }
        },
        "required": [
          "challenge",
          "code",
          "remember_device"
        ],
        "type": "object"
      },
      "Autoscalegroup_AutoScaleGroupResponse": {
        "properties": {
          "active_members": {
            "format": "int32",
            "type": "integer"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "current_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "desired_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "evaluation_interval_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "evaluation_window_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "last_scale_down_at": {
            "format": "date-time",
            "type": "string"
          },
          "last_scale_up_at": {
            "format": "date-time",
            "type": "string"
          },
          "max_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "metric_type": {
            "type": "string"
          },
          "min_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "scale_down_cooldown_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "scale_up_cooldown_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target_cpu_percent": {
            "type": "number"
          },
          "target_memory_percent": {
            "type": "number"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "resource_type",
          "status",
          "min_replicas",
          "max_replicas",
          "desired_replicas",
          "current_replicas",
          "active_members",
          "metric_type",
          "evaluation_window_seconds",
          "evaluation_interval_seconds",
          "scale_up_cooldown_seconds",
          "scale_down_cooldown_seconds",
          "tenant_id",
          "vpc_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Autoscalegroup_AutoScaleGroupResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Autoscalegroup_AutoScaleGroupResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Autoscalegroup_CreateAutoScaleGroupRequest": {
        "properties": {
          "evaluation_interval_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "evaluation_window_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "max_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "metric_type": {
            "type": "string"
          },
          "min_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "scale_down_cooldown_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "scale_up_cooldown_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target_cpu_percent": {
            "type": "number"
          },
          "target_memory_percent": {
            "type": "number"
          },
          "template": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "resource_type",
          "vpc_id",
          "template",
          "min_replicas",
          "max_replicas",
          "metric_type"
        ],
        "type": "object"
      },
      "Autoscalegroup_UpdateAutoScaleGroupRequest": {
        "properties": {
          "evaluation_interval_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "evaluation_window_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "max_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "metric_type": {
            "type": "string"
          },
          "min_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "scale_down_cooldown_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "scale_up_cooldown_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target_cpu_percent": {
            "type": "number"
          },
          "target_memory_percent": {
            "type": "number"
          },
          "template": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Backuprepo_BackupRepoInfo": {
        "properties": {
          "access_key_id": {
            "type": "string"
          },
          "as_default": {
            "type": "boolean"
          },
          "bucket": {
            "type": "string"
          },
          "cr_applied": {
            "type": "boolean"
          },
          "enabled": {
            "type": "boolean"
          },
          "endpoint": {
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "phase": {
            "type": "string"
          },
          "region": {
            "type": "string"
          },
          "secret_configured": {
            "type": "boolean"
          },
          "storage_provider": {
            "type": "string"
          }
        },
        "required": [
          "enabled",
          "secret_configured",
          "as_default"
        ],
        "type": "object"
      },
      "Bgppeering_FleetSettings": {
        "properties": {
          "anycast_addresses": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "local_as": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "local_as"
        ],
        "type": "object"
      },
      "Bgppeering_StaticRouteRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "host_id": {
            "type": "string"
          },
          "next_hop": {
            "type": "string"
          },
          "prefix": {
            "type": "string"
          }
        },
        "required": [
          "prefix",
          "next_hop"
        ],
        "type": "object"
      },
      "Bgppeering_StaticRouteResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "host_id": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "next_hop": {
            "type": "string"
          },
          "prefix": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "prefix",
          "next_hop",
          "created_at"
        ],
        "type": "object"
      },
      "Bgppeering_TunnelRequest": {
        "properties": {
          "enabled": {
            "type": "boolean"
          },
          "inner_cidrs": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "inner_reserved": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "inner_subnet": {
            "type": "string"
          },
          "inner6_cidrs": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "inner6_reserved": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "inner6_subnet": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "mtu": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "remote": {
            "type": "string"
          },
          "remote_overrides": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "vni": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "name",
          "kind",
          "remote"
        ],
        "type": "object"
      },
      "Bgppeering_TunnelResponse": {
        "properties": {
          "auto_cidrs": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "auto6_cidrs": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "device": {
            "type": "string"
          },
          "enabled": {
            "type": "boolean"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "inner_cidrs": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "inner_reserved": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "inner_subnet": {
            "type": "string"
          },
          "inner6_cidrs": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "inner6_reserved": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "inner6_subnet": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "mtu": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "remote": {
            "type": "string"
          },
          "remote_overrides": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vni": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "id",
          "name",
          "enabled",
          "kind",
          "remote",
          "device",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Bgppeering_UpstreamRequest": {
        "properties": {
          "accept_routes": {
            "type": "string"
          },
          "bfd_enabled": {
            "type": "boolean"
          },
          "bfd_mult": {
            "format": "int32",
            "type": "integer"
          },
          "bfd_rx_ms": {
            "format": "int32",
            "type": "integer"
          },
          "bfd_tx_ms": {
            "format": "int32",
            "type": "integer"
          },
          "enabled": {
            "type": "boolean"
          },
          "export_prefixes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "host_addresses": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "local_as": {
            "format": "int64",
            "type": "integer"
          },
          "max_prefixes": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "peer_address": {
            "type": "string"
          },
          "peer_as": {
            "format": "int64",
            "type": "integer"
          },
          "rtbh_community": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "peer_address",
          "peer_as"
        ],
        "type": "object"
      },
      "Bgppeering_UpstreamResponse": {
        "properties": {
          "accept_routes": {
            "type": "string"
          },
          "bfd_enabled": {
            "type": "boolean"
          },
          "bfd_mult": {
            "format": "int32",
            "type": "integer"
          },
          "bfd_rx_ms": {
            "format": "int32",
            "type": "integer"
          },
          "bfd_tx_ms": {
            "format": "int32",
            "type": "integer"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "enabled": {
            "type": "boolean"
          },
          "export_prefixes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "host_addresses": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "local_as": {
            "format": "int64",
            "type": "integer"
          },
          "max_prefixes": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "peer_address": {
            "type": "string"
          },
          "peer_as": {
            "format": "int64",
            "type": "integer"
          },
          "rtbh_community": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "enabled",
          "peer_address",
          "peer_as",
          "bfd_enabled",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Billing_AIFeeResponse": {
        "properties": {
          "default_percent": {
            "type": "number"
          },
          "fee_percent": {
            "type": "number"
          },
          "source": {
            "type": "string"
          }
        },
        "required": [
          "fee_percent",
          "source",
          "default_percent"
        ],
        "type": "object"
      },
      "Billing_AccountResponse": {
        "properties": {
          "balance_cents": {
            "format": "int64",
            "type": "integer"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "status": {
            "type": "string"
          },
          "stripe_customer_id": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "status",
          "balance_cents",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Billing_AccountResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Billing_AccountResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Billing_BillingRunResult": {
        "properties": {
          "failures": {
            "format": "int32",
            "type": "integer"
          },
          "finished_at": {
            "format": "date-time",
            "type": "string"
          },
          "job": {
            "type": "string"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "tenants": {
            "format": "int32",
            "type": "integer"
          },
          "year_month": {
            "type": "string"
          }
        },
        "required": [
          "job",
          "tenants",
          "failures",
          "started_at",
          "finished_at"
        ],
        "type": "object"
      },
      "Billing_CreateBillingAccountRequest": {
        "properties": {
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "status": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Billing_CreateDisputeRequest": {
        "properties": {
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "invoice_id": {
            "format": "uuid",
            "type": "string"
          },
          "reason": {
            "type": "string"
          }
        },
        "required": [
          "reason"
        ],
        "type": "object"
      },
      "Billing_CreatePaymentMethodRequest": {
        "properties": {
          "account_id": {
            "format": "uuid",
            "type": "string"
          },
          "brand": {
            "type": "string"
          },
          "is_default": {
            "type": "boolean"
          },
          "kind": {
            "type": "string"
          },
          "label": {
            "type": "string"
          },
          "last4": {
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "stripe_payment_method_id": {
            "type": "string"
          }
        },
        "required": [
          "account_id",
          "kind"
        ],
        "type": "object"
      },
      "Billing_CreditResponse": {
        "properties": {
          "account_id": {
            "format": "uuid",
            "type": "string"
          },
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "currency": {
            "type": "string"
          },
          "expires_at": {
            "format": "date-time",
            "type": "string"
          },
          "granted_by": {
            "format": "uuid",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "reason": {
            "type": "string"
          },
          "source": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "account_id",
          "amount_cents",
          "currency",
          "reason",
          "granted_by",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Billing_CreditResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Billing_CreditResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Billing_DepositInfoResponse": {
        "properties": {
          "account_name": {
            "type": "string"
          },
          "account_number": {
            "type": "string"
          },
          "bank_name": {
            "type": "string"
          },
          "country": {
            "type": "string"
          },
          "iban": {
            "type": "string"
          },
          "reference_prefix": {
            "type": "string"
          },
          "routing_number": {
            "type": "string"
          },
          "swift_code": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Billing_DisputeMessageRequest": {
        "properties": {
          "body": {
            "type": "string"
          }
        },
        "required": [
          "body"
        ],
        "type": "object"
      },
      "Billing_DisputeResponse": {
        "properties": {
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "closed_at": {
            "format": "date-time",
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "invoice_id": {
            "format": "uuid",
            "type": "string"
          },
          "opened_by": {
            "format": "uuid",
            "type": "string"
          },
          "reason": {
            "type": "string"
          },
          "resolution": {
            "type": "string"
          },
          "resolved_at": {
            "format": "date-time",
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "status",
          "reason",
          "amount_cents",
          "opened_by",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Billing_DisputeResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Billing_DisputeResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Billing_EgressInstanceRow": {
        "properties": {
          "bytes": {
            "format": "int64",
            "type": "integer"
          },
          "instance_id": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "nics": {
            "items": {
              "$ref": "#/components/schemas/Billing_EgressNICRow"
            },
            "type": "array"
          },
          "type": {
            "type": "string"
          }
        },
        "required": [
          "instance_id",
          "name",
          "type",
          "bytes"
        ],
        "type": "object"
      },
      "Billing_EgressNICRow": {
        "properties": {
          "bytes": {
            "format": "int64",
            "type": "integer"
          },
          "ip": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "nic_id": {
            "type": "string"
          }
        },
        "required": [
          "nic_id",
          "name",
          "ip",
          "bytes"
        ],
        "type": "object"
      },
      "Billing_EgressOverviewResponse": {
        "properties": {
          "month": {
            "type": "string"
          },
          "tenants": {
            "items": {
              "$ref": "#/components/schemas/Billing_EgressTenantRow"
            },
            "type": "array"
          }
        },
        "required": [
          "month"
        ],
        "type": "object"
      },
      "Billing_EgressTenantRow": {
        "properties": {
          "containers": {
            "format": "int32",
            "type": "integer"
          },
          "egress_bytes": {
            "format": "int64",
            "type": "integer"
          },
          "microvms": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "slug": {
            "type": "string"
          },
          "suspended": {
            "type": "boolean"
          },
          "tenant_id": {
            "type": "string"
          },
          "vms": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "tenant_id",
          "name",
          "slug",
          "suspended",
          "vms",
          "containers",
          "microvms",
          "egress_bytes"
        ],
        "type": "object"
      },
      "Billing_InvoiceResponse": {
        "properties": {
          "account_id": {
            "format": "uuid",
            "type": "string"
          },
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "client_secret": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "currency": {
            "type": "string"
          },
          "due_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "issued_at": {
            "format": "date-time",
            "type": "string"
          },
          "line_items": {
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "paid_at": {
            "format": "date-time",
            "type": "string"
          },
          "period_end": {
            "format": "date-time",
            "type": "string"
          },
          "period_start": {
            "format": "date-time",
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "voided_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "account_id",
          "status",
          "amount_cents",
          "currency",
          "period_start",
          "period_end",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Billing_InvoiceResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Billing_InvoiceResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Billing_MessageResponse": {
        "properties": {
          "author_id": {
            "format": "uuid",
            "type": "string"
          },
          "body": {
            "type": "string"
          },
          "dispute_id": {
            "format": "uuid",
            "type": "string"
          },
          "is_admin": {
            "type": "boolean"
          },
          "ts": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "dispute_id",
          "ts",
          "author_id",
          "is_admin",
          "body"
        ],
        "type": "object"
      },
      "Billing_PaymentMethodResponse": {
        "properties": {
          "account_id": {
            "format": "uuid",
            "type": "string"
          },
          "brand": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "is_default": {
            "type": "boolean"
          },
          "kind": {
            "type": "string"
          },
          "label": {
            "type": "string"
          },
          "last4": {
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "stripe_payment_method_id": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "account_id",
          "kind",
          "is_default",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Billing_PaymentMethodResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Billing_PaymentMethodResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Billing_PurchaseCreditsRequest": {
        "properties": {
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "currency": {
            "type": "string"
          },
          "payment_method_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "amount_cents"
        ],
        "type": "object"
      },
      "Billing_RefundRequest": {
        "properties": {
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "reason": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Billing_SetAIFeeRequest": {
        "properties": {
          "fee_percent": {
            "type": "number"
          }
        },
        "required": [
          "fee_percent"
        ],
        "type": "object"
      },
      "Billing_StatementResponse": {
        "properties": {
          "client_secret": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "currency": {
            "type": "string"
          },
          "digest": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "members": {
            "items": {
              "$ref": "#/components/schemas/Billingsig_Member"
            },
            "type": "array"
          },
          "paid_at": {
            "format": "date-time",
            "type": "string"
          },
          "paying_zone": {
            "type": "string"
          },
          "period_end": {
            "format": "date-time",
            "type": "string"
          },
          "period_key": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "total_cents": {
            "format": "int64",
            "type": "integer"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "period_key",
          "period_end",
          "status",
          "currency",
          "total_cents",
          "digest",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Billing_TenantEgressResponse": {
        "properties": {
          "detached": {
            "items": {
              "$ref": "#/components/schemas/Billing_EgressNICRow"
            },
            "type": "array"
          },
          "instances": {
            "items": {
              "$ref": "#/components/schemas/Billing_EgressInstanceRow"
            },
            "type": "array"
          },
          "month": {
            "type": "string"
          },
          "tenant_id": {
            "type": "string"
          },
          "total_bytes": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "month",
          "tenant_id",
          "total_bytes"
        ],
        "type": "object"
      },
      "Billing_UpdateBillingAccountRequest": {
        "properties": {
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "status": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Billing_UpdatePaymentMethodRequest": {
        "properties": {
          "brand": {
            "type": "string"
          },
          "is_default": {
            "type": "boolean"
          },
          "kind": {
            "type": "string"
          },
          "label": {
            "type": "string"
          },
          "last4": {
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Billing_UsageResponse": {
        "properties": {
          "credit_balance_cents": {
            "format": "int64",
            "type": "integer"
          },
          "currency": {
            "type": "string"
          },
          "debt_cents": {
            "format": "int64",
            "type": "integer"
          },
          "invoice_count": {
            "format": "int32",
            "type": "integer"
          },
          "outstanding_cents": {
            "format": "int64",
            "type": "integer"
          },
          "overdue_cents": {
            "format": "int64",
            "type": "integer"
          },
          "overdue_count": {
            "format": "int32",
            "type": "integer"
          },
          "spend_cents": {
            "format": "int64",
            "type": "integer"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "tenant_id",
          "invoice_count",
          "spend_cents",
          "outstanding_cents",
          "credit_balance_cents",
          "overdue_cents",
          "overdue_count"
        ],
        "type": "object"
      },
      "Billingsig_Member": {
        "properties": {
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "currency": {
            "type": "string"
          },
          "invoice_id": {
            "type": "string"
          },
          "signature": {
            "type": "string"
          },
          "zone": {
            "type": "string"
          }
        },
        "required": [
          "invoice_id",
          "zone",
          "amount_cents",
          "currency",
          "signature"
        ],
        "type": "object"
      },
      "Bucket_CreateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Bucket_ListObjectsResponse": {
        "properties": {
          "objects": {
            "items": {
              "$ref": "#/components/schemas/Bucket_ObjectEntry"
            },
            "type": "array"
          },
          "prefix": {
            "type": "string"
          }
        },
        "required": [
          "prefix"
        ],
        "type": "object"
      },
      "Bucket_ObjectEntry": {
        "properties": {
          "etag": {
            "type": "string"
          },
          "is_prefix": {
            "type": "boolean"
          },
          "key": {
            "type": "string"
          },
          "last_modified": {
            "format": "date-time",
            "type": "string"
          },
          "size": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "key",
          "size",
          "is_prefix"
        ],
        "type": "object"
      },
      "Bucket_Response": {
        "properties": {
          "access_key": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "display_name": {
            "type": "string"
          },
          "endpoint": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "physical_name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "name",
          "physical_name",
          "access_key",
          "status",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Bucket_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Bucket_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Bucket_SecretResponse": {
        "properties": {
          "access_key": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "display_name": {
            "type": "string"
          },
          "endpoint": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "physical_name": {
            "type": "string"
          },
          "secret_key": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "name",
          "physical_name",
          "access_key",
          "status",
          "created_at",
          "updated_at",
          "secret_key"
        ],
        "type": "object"
      },
      "Bucket_UpdateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Certificate_CertificateResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "not_after": {
            "format": "date-time",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "name",
          "not_after",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Certificate_CertificateResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Certificate_CertificateResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Certificate_CreateCertificateRequest": {
        "properties": {
          "cert_pem": {
            "type": "string"
          },
          "chain_pem": {
            "type": "string"
          },
          "key_pem": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name",
          "cert_pem",
          "key_pem"
        ],
        "type": "object"
      },
      "Certificate_UpdateCertificateRequest": {
        "properties": {
          "cert_pem": {
            "type": "string"
          },
          "chain_pem": {
            "type": "string"
          },
          "key_pem": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "not_after": {
            "format": "date-time",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Cluster_ClusterCapacity": {
        "properties": {
          "total_cpu": {
            "format": "int32",
            "type": "integer"
          },
          "total_hdd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "total_memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "total_ssd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "used_cpu": {
            "format": "int32",
            "type": "integer"
          },
          "used_hdd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "used_image_gib": {
            "format": "int32",
            "type": "integer"
          },
          "used_memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "used_ssd_gib": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total_cpu",
          "used_cpu",
          "total_memory_mib",
          "used_memory_mib",
          "total_ssd_gib",
          "used_ssd_gib",
          "total_hdd_gib",
          "used_hdd_gib",
          "used_image_gib"
        ],
        "type": "object"
      },
      "Cluster_HostCounts": {
        "properties": {
          "draining": {
            "format": "int32",
            "type": "integer"
          },
          "maintenance": {
            "format": "int32",
            "type": "integer"
          },
          "offline": {
            "format": "int32",
            "type": "integer"
          },
          "online": {
            "format": "int32",
            "type": "integer"
          },
          "preflight_failed": {
            "format": "int32",
            "type": "integer"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total",
          "online",
          "offline",
          "maintenance",
          "draining",
          "preflight_failed"
        ],
        "type": "object"
      },
      "Cluster_HostSummaryEntry": {
        "properties": {
          "address": {
            "type": "string"
          },
          "container_count": {
            "format": "int32",
            "type": "integer"
          },
          "cpu_overcommit_ratio": {
            "type": "number"
          },
          "drain_started_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "last_health_check": {
            "format": "date-time",
            "type": "string"
          },
          "memory_overcommit_ratio": {
            "type": "number"
          },
          "microvm_count": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "total_cpu": {
            "format": "int32",
            "type": "integer"
          },
          "total_hdd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "total_memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "total_ssd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "used_cpu": {
            "format": "int32",
            "type": "integer"
          },
          "used_hdd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "used_image_gib": {
            "format": "int32",
            "type": "integer"
          },
          "used_memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "used_ssd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "vm_count": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "id",
          "name",
          "address",
          "status",
          "total_cpu",
          "used_cpu",
          "cpu_overcommit_ratio",
          "total_memory_mib",
          "used_memory_mib",
          "memory_overcommit_ratio",
          "total_ssd_gib",
          "used_ssd_gib",
          "used_image_gib",
          "total_hdd_gib",
          "used_hdd_gib",
          "vm_count",
          "container_count",
          "microvm_count"
        ],
        "type": "object"
      },
      "Cluster_ResourceTotals": {
        "properties": {
          "disks": {
            "format": "int32",
            "type": "integer"
          },
          "nics": {
            "format": "int32",
            "type": "integer"
          },
          "public_ips": {
            "format": "int32",
            "type": "integer"
          },
          "vpcs": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "disks",
          "nics",
          "vpcs",
          "public_ips"
        ],
        "type": "object"
      },
      "Cluster_SummaryResponse": {
        "properties": {
          "capacity": {
            "$ref": "#/components/schemas/Cluster_ClusterCapacity"
          },
          "containers": {
            "$ref": "#/components/schemas/Cluster_WorkloadCounts"
          },
          "hosts": {
            "$ref": "#/components/schemas/Cluster_HostCounts"
          },
          "microvms": {
            "$ref": "#/components/schemas/Cluster_WorkloadCounts"
          },
          "reconciler_errors_24h": {
            "format": "int32",
            "type": "integer"
          },
          "resources": {
            "$ref": "#/components/schemas/Cluster_ResourceTotals"
          },
          "vms": {
            "$ref": "#/components/schemas/Cluster_WorkloadCounts"
          }
        },
        "required": [
          "hosts",
          "vms",
          "containers",
          "microvms",
          "resources",
          "capacity",
          "reconciler_errors_24h"
        ],
        "type": "object"
      },
      "Cluster_WorkloadCounts": {
        "properties": {
          "error": {
            "format": "int32",
            "type": "integer"
          },
          "provisioning": {
            "format": "int32",
            "type": "integer"
          },
          "running": {
            "format": "int32",
            "type": "integer"
          },
          "stopped": {
            "format": "int32",
            "type": "integer"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total",
          "running",
          "stopped",
          "provisioning",
          "error"
        ],
        "type": "object"
      },
      "Connector_DevicePollRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "poll_id": {
            "type": "string"
          },
          "provider": {
            "type": "string"
          }
        },
        "required": [
          "provider",
          "poll_id"
        ],
        "type": "object"
      },
      "Connector_DevicePollResponse": {
        "properties": {
          "connector": {
            "$ref": "#/components/schemas/Connector_Response"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "status"
        ],
        "type": "object"
      },
      "Connector_DeviceStartRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "provider": {
            "type": "string"
          }
        },
        "required": [
          "provider"
        ],
        "type": "object"
      },
      "Connector_DeviceStartResponse": {
        "properties": {
          "interval": {
            "format": "int32",
            "type": "integer"
          },
          "poll_id": {
            "type": "string"
          },
          "user_code": {
            "type": "string"
          },
          "verification_url": {
            "type": "string"
          }
        },
        "required": [
          "user_code",
          "verification_url",
          "poll_id",
          "interval"
        ],
        "type": "object"
      },
      "Connector_ImportRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "key": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "provider": {
            "type": "string"
          }
        },
        "required": [
          "provider",
          "key"
        ],
        "type": "object"
      },
      "Connector_OAuthCompleteRequest": {
        "properties": {
          "code": {
            "type": "string"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "provider": {
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "provider",
          "code"
        ],
        "type": "object"
      },
      "Connector_OAuthStartRequest": {
        "properties": {
          "provider": {
            "type": "string"
          }
        },
        "required": [
          "provider"
        ],
        "type": "object"
      },
      "Connector_OAuthStartResponse": {
        "properties": {
          "auth_url": {
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "auth_url",
          "state"
        ],
        "type": "object"
      },
      "Connector_RenameRequest": {
        "properties": {
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Connector_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "is_default": {
            "type": "boolean"
          },
          "last_checked": {
            "format": "date-time",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "provider": {
            "type": "string"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "provider",
          "name",
          "is_default",
          "status",
          "created_at"
        ],
        "type": "object"
      },
      "Connector_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Connector_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Container_AttachDiskRequest": {
        "properties": {
          "disk_id": {
            "format": "uuid",
            "type": "string"
          },
          "mount_path": {
            "type": "string"
          }
        },
        "required": [
          "disk_id",
          "mount_path"
        ],
        "type": "object"
      },
      "Container_AttachNICRequest": {
        "properties": {
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "slot": {
            "type": "string"
          }
        },
        "required": [
          "nic_id"
        ],
        "type": "object"
      },
      "Container_AttachedDisk": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "mount_path": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "storage_type": {
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "Container_AttachedNIC": {
        "properties": {
          "gateway_ip": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "ipv4_address": {
            "type": "string"
          },
          "ipv6_address": {
            "type": "string"
          },
          "mac_address": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "prefix_len": {
            "format": "int32",
            "type": "integer"
          },
          "public_ip": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "Container_ConfigFile": {
        "properties": {
          "content": {
            "type": "string"
          },
          "path": {
            "type": "string"
          }
        },
        "required": [
          "path",
          "content"
        ],
        "type": "object"
      },
      "Container_CreateRequest": {
        "properties": {
          "cap_add": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "command": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "config_files": {
            "items": {
              "$ref": "#/components/schemas/Container_ConfigFile"
            },
            "type": "array"
          },
          "cpu": {
            "type": "number"
          },
          "device_paths": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "devices": {
            "items": {
              "additionalProperties": {
                "additionalProperties": true,
                "type": "object"
              },
              "type": "object"
            },
            "type": "array"
          },
          "env": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "image": {
            "type": "string"
          },
          "inject_agent": {
            "type": "boolean"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "ssh_key_id": {
            "format": "uuid",
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "sysctls": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "user_data": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "image",
          "instance_type",
          "vpc_id",
          "subnet_id",
          "user_data",
          "instance_role"
        ],
        "type": "object"
      },
      "Container_Response": {
        "properties": {
          "cpu": {
            "type": "number"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "disks": {
            "items": {
              "$ref": "#/components/schemas/Container_AttachedDisk"
            },
            "type": "array"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "host_local_id": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "image": {
            "type": "string"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "live_cpu": {
            "type": "number"
          },
          "live_mem_mib": {
            "format": "int32",
            "type": "integer"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "nics": {
            "items": {
              "$ref": "#/components/schemas/Container_AttachedNIC"
            },
            "type": "array"
          },
          "pending_resize": {
            "type": "boolean"
          },
          "power_state": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "image",
          "cpu",
          "memory_mib",
          "power_state",
          "status",
          "tenant_id",
          "vpc_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Container_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Container_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Container_UpdateRequest": {
        "properties": {
          "cpu": {
            "type": "number"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Cryptopool_Address": {
        "properties": {
          "address": {
            "type": "string"
          },
          "assigned_at": {
            "format": "date-time",
            "type": "string"
          },
          "assigned_to": {
            "format": "uuid",
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "currency": {
            "type": "string"
          },
          "derivation": {
            "type": "string"
          },
          "expected_amount": {
            "type": "string"
          },
          "expected_amount_units": {
            "type": "string"
          },
          "expires_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "intended_credit_cents": {
            "format": "int64",
            "type": "integer"
          },
          "network": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "currency",
          "network",
          "address",
          "derivation",
          "status",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Cryptopool_CurrencyCounts": {
        "properties": {
          "assigned": {
            "format": "int32",
            "type": "integer"
          },
          "available": {
            "format": "int32",
            "type": "integer"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total",
          "available",
          "assigned"
        ],
        "type": "object"
      },
      "Dbattach_AttachResult": {
        "properties": {
          "applied_live": {
            "type": "boolean"
          },
          "env_var": {
            "type": "string"
          }
        },
        "required": [
          "env_var",
          "applied_live"
        ],
        "type": "object"
      },
      "Dbattach_AttachedDatabase": {
        "properties": {
          "database_id": {
            "format": "uuid",
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "env_var": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "database_id",
          "name",
          "engine",
          "env_var"
        ],
        "type": "object"
      },
      "Deployassist_CreateRequest": {
        "properties": {
          "branch": {
            "type": "string"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "preferences": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          },
          "runtime": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Deployassist_CreateResponse": {
        "properties": {
          "id": {
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "state"
        ],
        "type": "object"
      },
      "Deployassist_Proposal": {
        "properties": {
          "databases": {
            "items": {
              "$ref": "#/components/schemas/Deployassist_ProposedDB"
            },
            "type": "array"
          },
          "notes": {
            "type": "string"
          },
          "packages": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "services": {
            "items": {
              "$ref": "#/components/schemas/Deployassist_ProposedService"
            },
            "type": "array"
          },
          "vars": {
            "items": {
              "$ref": "#/components/schemas/Deployassist_ProposedVar"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Deployassist_ProposedDB": {
        "properties": {
          "attach_as": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          }
        },
        "required": [
          "engine",
          "attach_as"
        ],
        "type": "object"
      },
      "Deployassist_ProposedService": {
        "properties": {
          "build": {
            "$ref": "#/components/schemas/Apps_BuildSpec"
          },
          "expose": {
            "type": "string"
          },
          "image": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "path": {
            "type": "string"
          },
          "run": {
            "$ref": "#/components/schemas/Apps_RunSpec"
          },
          "source": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "run",
          "expose"
        ],
        "type": "object"
      },
      "Deployassist_ProposedVar": {
        "properties": {
          "hint": {
            "type": "string"
          },
          "key": {
            "type": "string"
          },
          "required": {
            "type": "boolean"
          },
          "value": {
            "type": "string"
          }
        },
        "required": [
          "key",
          "required"
        ],
        "type": "object"
      },
      "Deployassist_Response": {
        "properties": {
          "build_command": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "error": {
            "type": "string"
          },
          "id": {
            "type": "string"
          },
          "notes": {
            "type": "string"
          },
          "packages": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "proposal": {
            "$ref": "#/components/schemas/Deployassist_Proposal"
          },
          "start_command": {
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "transcript": {
            "items": {
              "$ref": "#/components/schemas/Deployassist_TranscriptStep"
            },
            "type": "array"
          }
        },
        "required": [
          "id",
          "engine",
          "state"
        ],
        "type": "object"
      },
      "Deployassist_TranscriptStep": {
        "properties": {
          "command": {
            "type": "string"
          },
          "content": {
            "type": "string"
          },
          "exit_code": {
            "format": "int32",
            "type": "integer"
          },
          "role": {
            "type": "string"
          },
          "stderr": {
            "type": "string"
          },
          "stdout": {
            "type": "string"
          }
        },
        "required": [
          "role"
        ],
        "type": "object"
      },
      "Deployserver_AppLogsResponse": {
        "properties": {
          "logs": {
            "type": "string"
          }
        },
        "required": [
          "logs"
        ],
        "type": "object"
      },
      "Deployserver_AppResponse": {
        "properties": {
          "image": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tag": {
            "type": "string"
          },
          "url": {
            "type": "string"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "name",
          "status"
        ],
        "type": "object"
      },
      "Deployserver_AppResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Deployserver_AppResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Deployserver_ArtifactRequest": {
        "properties": {
          "content_b64": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "team_object": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Deployserver_ArtifactStatus": {
        "properties": {
          "bytes": {
            "format": "int64",
            "type": "integer"
          },
          "error": {
            "type": "string"
          },
          "id": {
            "type": "string"
          },
          "path": {
            "type": "string"
          },
          "sha256": {
            "type": "string"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "status"
        ],
        "type": "object"
      },
      "Deployserver_BackupResponse": {
        "properties": {
          "dump_all": {
            "type": "boolean"
          },
          "enabled": {
            "type": "boolean"
          },
          "frequency": {
            "type": "string"
          },
          "save_s3": {
            "type": "boolean"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "frequency",
          "enabled"
        ],
        "type": "object"
      },
      "Deployserver_CreateApplicationRequest": {
        "properties": {
          "build_pack": {
            "type": "string"
          },
          "dockerfile": {
            "type": "string"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "git_branch": {
            "type": "string"
          },
          "git_repository": {
            "type": "string"
          },
          "image": {
            "type": "string"
          },
          "instant_deploy": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          },
          "source": {
            "type": "string"
          },
          "tag": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Deployserver_CreateBackupRequest": {
        "properties": {
          "dump_all": {
            "type": "boolean"
          },
          "enabled": {
            "type": "boolean"
          },
          "frequency": {
            "type": "string"
          },
          "save_s3": {
            "type": "boolean"
          }
        },
        "required": [
          "frequency"
        ],
        "type": "object"
      },
      "Deployserver_CreateDatabaseRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "image": {
            "type": "string"
          },
          "instant_deploy": {
            "type": "boolean"
          },
          "is_public": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "public_port": {
            "format": "int32",
            "type": "integer"
          },
          "type": {
            "type": "string"
          }
        },
        "required": [
          "type",
          "name"
        ],
        "type": "object"
      },
      "Deployserver_CreateRequest": {
        "properties": {
          "app_instance_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "root_email": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          },
          "worker_count": {
            "format": "int32",
            "type": "integer"
          },
          "worker_disk_gib": {
            "format": "int32",
            "type": "integer"
          },
          "worker_instance_type": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Deployserver_CreateServiceRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "docker_compose": {
            "type": "string"
          },
          "instant_deploy": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "type": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Deployserver_CreateStorageRequest": {
        "properties": {
          "host_path": {
            "type": "string"
          },
          "mount_path": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "mount_path"
        ],
        "type": "object"
      },
      "Deployserver_CreateTaskRequest": {
        "properties": {
          "command": {
            "type": "string"
          },
          "container": {
            "type": "string"
          },
          "frequency": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "command",
          "frequency"
        ],
        "type": "object"
      },
      "Deployserver_Credentials": {
        "properties": {
          "api_base_url": {
            "type": "string"
          },
          "api_token": {
            "type": "string"
          },
          "dashboard_url": {
            "type": "string"
          },
          "registry_host": {
            "type": "string"
          },
          "root_email": {
            "type": "string"
          },
          "root_password": {
            "type": "string"
          },
          "wildcard_domain": {
            "type": "string"
          },
          "worker_microvm_id": {
            "type": "string"
          }
        },
        "required": [
          "dashboard_url",
          "api_base_url",
          "root_email",
          "root_password",
          "api_token",
          "registry_host"
        ],
        "type": "object"
      },
      "Deployserver_DBResponse": {
        "properties": {
          "external_db_url": {
            "type": "string"
          },
          "internal_db_url": {
            "type": "string"
          },
          "is_public": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "public_port": {
            "format": "int32",
            "type": "integer"
          },
          "status": {
            "type": "string"
          },
          "type": {
            "type": "string"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "name",
          "status"
        ],
        "type": "object"
      },
      "Deployserver_DeployRequest": {
        "properties": {
          "tag": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Deployserver_DeployResponse": {
        "properties": {
          "deployment_uuid": {
            "type": "string"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "status"
        ],
        "type": "object"
      },
      "Deployserver_DeploymentResponse": {
        "properties": {
          "logs": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "status"
        ],
        "type": "object"
      },
      "Deployserver_EnvVarsRequest": {
        "properties": {
          "env": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "env"
        ],
        "type": "object"
      },
      "Deployserver_Response": {
        "properties": {
          "app_instance_type": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "dashboard_url": {
            "type": "string"
          },
          "id": {
            "type": "string"
          },
          "init_step": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "reason": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "type": "string"
          },
          "wildcard_domain": {
            "type": "string"
          },
          "worker_count": {
            "format": "int32",
            "type": "integer"
          },
          "worker_disk_gib": {
            "format": "int32",
            "type": "integer"
          },
          "worker_instance_type": {
            "type": "string"
          },
          "worker_microvm_id": {
            "type": "string"
          },
          "workers": {
            "items": {
              "$ref": "#/components/schemas/Deployserver_WorkerInfo"
            },
            "type": "array"
          }
        },
        "required": [
          "id",
          "name",
          "tenant_id",
          "status",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Deployserver_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Deployserver_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Deployserver_ServiceResponse": {
        "properties": {
          "name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "type": {
            "type": "string"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "name",
          "status"
        ],
        "type": "object"
      },
      "Deployserver_StorageResponse": {
        "properties": {
          "host_path": {
            "type": "string"
          },
          "mount_path": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "name",
          "mount_path"
        ],
        "type": "object"
      },
      "Deployserver_TaskResponse": {
        "properties": {
          "command": {
            "type": "string"
          },
          "container": {
            "type": "string"
          },
          "enabled": {
            "type": "boolean"
          },
          "frequency": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "name",
          "command",
          "frequency",
          "enabled"
        ],
        "type": "object"
      },
      "Deployserver_UpdateApplicationRequest": {
        "properties": {
          "domains": {
            "type": "string"
          },
          "image": {
            "type": "string"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          },
          "tag": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Deployserver_UpdateRequest": {
        "properties": {
          "app_instance_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "worker_count": {
            "format": "int32",
            "type": "integer"
          },
          "worker_disk_gib": {
            "format": "int32",
            "type": "integer"
          },
          "worker_instance_type": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Deployserver_WorkerInfo": {
        "properties": {
          "coolify_server_uuid": {
            "type": "string"
          },
          "index": {
            "format": "int32",
            "type": "integer"
          },
          "microvm_id": {
            "type": "string"
          },
          "primary": {
            "type": "boolean"
          },
          "private_ip": {
            "type": "string"
          },
          "public_ip": {
            "type": "string"
          },
          "registered": {
            "type": "boolean"
          }
        },
        "required": [
          "index",
          "primary",
          "registered"
        ],
        "type": "object"
      },
      "Dhcpconfig_AttachmentResponse": {
        "properties": {
          "attached_at": {
            "format": "date-time",
            "type": "string"
          },
          "config_id": {
            "format": "uuid",
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "subnet_id",
          "config_id",
          "attached_at"
        ],
        "type": "object"
      },
      "Dhcpconfig_CreateDHCPConfigRequest": {
        "properties": {
          "dns": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "domain_name": {
            "type": "string"
          },
          "ipv6_dns": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "lease_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "ntp_servers": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "options": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Dhcpconfig_DHCPConfigResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "dns": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "domain_name": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "ipv6_dns": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "lease_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "ntp_servers": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "options": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "name",
          "domain_name",
          "lease_seconds",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Dhcpconfig_DHCPConfigResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Dhcpconfig_DHCPConfigResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Dhcpconfig_UpdateDHCPConfigRequest": {
        "properties": {
          "dns": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "domain_name": {
            "type": "string"
          },
          "ipv6_dns": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "lease_seconds": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "ntp_servers": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "options": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Disk_AttachToVMRequest": {
        "properties": {
          "vm_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "vm_id"
        ],
        "type": "object"
      },
      "Disk_CreateRequest": {
        "properties": {
          "additional_iops": {
            "format": "int32",
            "type": "integer"
          },
          "affinity_instance_id": {
            "format": "uuid",
            "type": "string"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "image_ref": {
            "type": "string"
          },
          "iops": {
            "format": "int32",
            "type": "integer"
          },
          "is_boot": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "storage_type": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "size_gib",
          "storage_type"
        ],
        "type": "object"
      },
      "Disk_DetachFromVMRequest": {
        "properties": {
          "vm_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "vm_id"
        ],
        "type": "object"
      },
      "Disk_HostAccessRequest": {
        "properties": {
          "host_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "host_id"
        ],
        "type": "object"
      },
      "Disk_MigrateRequest": {
        "properties": {
          "target_host_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "target_host_id"
        ],
        "type": "object"
      },
      "Disk_Response": {
        "properties": {
          "attached_to": {
            "format": "uuid",
            "type": "string"
          },
          "baseline_iops": {
            "format": "int32",
            "type": "integer"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "device_path": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "in_use": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "provisioned_iops": {
            "format": "int32",
            "type": "integer"
          },
          "serial": {
            "type": "string"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "storage_type": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "used_by": {
            "type": "string"
          },
          "used_by_id": {
            "format": "uuid",
            "type": "string"
          },
          "used_by_kind": {
            "type": "string"
          },
          "used_by_name": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "size_gib",
          "storage_type",
          "baseline_iops",
          "device_path",
          "status",
          "in_use",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Disk_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Disk_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Disk_UpdateRequest": {
        "properties": {
          "additional_iops": {
            "format": "int32",
            "type": "integer"
          },
          "iops": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Dnsrecord_CreateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "priority": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "ttl": {
            "format": "int32",
            "type": "integer"
          },
          "type": {
            "type": "string"
          },
          "value": {
            "type": "string"
          },
          "vpc_id": {
            "type": "string"
          }
        },
        "required": [
          "vpc_id",
          "name",
          "type",
          "value"
        ],
        "type": "object"
      },
      "Dnsrecord_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "priority": {
            "format": "int32",
            "type": "integer"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "ttl": {
            "format": "int32",
            "type": "integer"
          },
          "type": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "value": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          },
          "vpc_name": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "vpc_id",
          "vpc_name",
          "name",
          "type",
          "value",
          "ttl",
          "priority",
          "status",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Dnsrecord_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Dnsrecord_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Dnsrecord_UpdateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "priority": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "ttl": {
            "format": "int32",
            "type": "integer"
          },
          "type": {
            "type": "string"
          },
          "value": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Environment_CreateRequest": {
        "properties": {
          "agent": {
            "$ref": "#/components/schemas/Agentcfg_AgentConfig"
          },
          "base_image_id": {
            "format": "uuid",
            "type": "string"
          },
          "boot_disk_size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "run_instance_type": {
            "type": "string"
          },
          "source_environment_id": {
            "format": "uuid",
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target": {
            "type": "string"
          },
          "type": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "vpc_id",
          "subnet_id"
        ],
        "type": "object"
      },
      "Environment_Response": {
        "properties": {
          "agent": {
            "$ref": "#/components/schemas/Agentcfg_AgentConfig"
          },
          "base_image": {
            "type": "string"
          },
          "base_image_id": {
            "format": "uuid",
            "type": "string"
          },
          "boot_disk_size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "phase": {
            "type": "string"
          },
          "run_instance_type": {
            "type": "string"
          },
          "seal": {
            "$ref": "#/components/schemas/Environment_SealInfo"
          },
          "sealed_image_id": {
            "format": "uuid",
            "type": "string"
          },
          "sealed_image_ref": {
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "type": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "version": {
            "format": "int32",
            "type": "integer"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "status",
          "phase",
          "state",
          "version",
          "target",
          "instance_type",
          "type",
          "engine",
          "agent",
          "vpc_id",
          "subnet_id",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Environment_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Environment_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Environment_SealInfo": {
        "properties": {
          "image_id": {
            "type": "string"
          },
          "image_ref": {
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "stage": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "version": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "stage",
          "updated_at"
        ],
        "type": "object"
      },
      "Environment_SealRequest": {
        "properties": {
          "arch": {
            "type": "string"
          },
          "force": {
            "type": "boolean"
          },
          "image_name": {
            "type": "string"
          },
          "os": {
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Environment_UpdateRequest": {
        "properties": {
          "agent": {
            "$ref": "#/components/schemas/Agentcfg_AgentConfig"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "run_instance_type": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Gateway_CreateGatewayRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "public_ip_id": {
            "format": "uuid",
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "vpc_id"
        ],
        "type": "object"
      },
      "Gateway_GatewayResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "egress_ips": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "public_ip": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "status",
          "vpc_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Gateway_GatewayResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Gateway_GatewayResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Gateway_UpdateGatewayRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Gitdeploy_DeployResponse": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "kind"
        ],
        "type": "object"
      },
      "Gitdeploy_Request": {
        "properties": {
          "agent_enabled": {
            "type": "boolean"
          },
          "boot_disk_size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "branch": {
            "type": "string"
          },
          "build_command": {
            "type": "string"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "install_claude": {
            "type": "boolean"
          },
          "install_codex": {
            "type": "boolean"
          },
          "instance_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          },
          "runtime": {
            "type": "string"
          },
          "start_command": {
            "type": "string"
          },
          "target": {
            "type": "string"
          }
        },
        "required": [
          "repo_url",
          "start_command"
        ],
        "type": "object"
      },
      "Handler_AdviseRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "proposal": {
            "$ref": "#/components/schemas/Apps_Proposal"
          },
          "ref": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_AppAssistRequest": {
        "properties": {
          "branch": {
            "type": "string"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "preferences": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          },
          "runtime": {
            "type": "string"
          },
          "source": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_BakeBuilderImageRequest": {
        "properties": {
          "instance_type": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_BillingRunRequest": {
        "properties": {
          "year_month": {
            "type": "string"
          }
        },
        "required": [
          "year_month"
        ],
        "type": "object"
      },
      "Handler_BriefResponse": {
        "properties": {
          "brief": {
            "type": "string"
          }
        },
        "required": [
          "brief"
        ],
        "type": "object"
      },
      "Handler_ChatCIRequest": {
        "properties": {
          "disk_gib": {
            "format": "int32",
            "type": "integer"
          },
          "instance_type": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_CredentialStorageResponse": {
        "properties": {
          "enabled": {
            "type": "boolean"
          }
        },
        "required": [
          "enabled"
        ],
        "type": "object"
      },
      "Handler_DeployEnvironmentRequest": {
        "properties": {
          "release_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_DetectRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "ref": {
            "type": "string"
          },
          "repo_url": {
            "type": "string"
          }
        },
        "required": [
          "repo_url"
        ],
        "type": "object"
      },
      "Handler_EnableCICDRequest": {
        "properties": {
          "deploy_server_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_FinishChatRequest": {
        "properties": {
          "body": {
            "type": "string"
          },
          "title": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_JobLogResponse": {
        "properties": {
          "chunks": {
            "items": {
              "$ref": "#/components/schemas/Apps_JobLogChunk"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Handler_PromoteEnvironmentRequest": {
        "properties": {
          "from": {
            "type": "string"
          }
        },
        "required": [
          "from"
        ],
        "type": "object"
      },
      "Handler_ProposeChatRequest": {
        "properties": {
          "body": {
            "type": "string"
          },
          "title": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_PublicAccessRequest": {
        "properties": {
          "enabled": {
            "type": "boolean"
          }
        },
        "required": [
          "enabled"
        ],
        "type": "object"
      },
      "Handler_RejectChatRequest": {
        "properties": {
          "reason": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_SetBackupRepoRequest": {
        "properties": {
          "access_key_id": {
            "type": "string"
          },
          "as_default": {
            "type": "boolean"
          },
          "bucket": {
            "type": "string"
          },
          "enabled": {
            "type": "boolean"
          },
          "endpoint": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "region": {
            "type": "string"
          },
          "secret_access_key": {
            "type": "string"
          },
          "storage_provider": {
            "type": "string"
          }
        },
        "required": [
          "enabled",
          "name",
          "storage_provider",
          "access_key_id",
          "secret_access_key",
          "bucket",
          "region",
          "endpoint",
          "as_default"
        ],
        "type": "object"
      },
      "Handler_StopBackgroundTaskRequest": {
        "properties": {
          "command": {
            "type": "string"
          },
          "task_id": {
            "type": "string"
          }
        },
        "required": [
          "task_id",
          "command"
        ],
        "type": "object"
      },
      "Handler_StopBackgroundTaskResponse": {
        "properties": {
          "killed": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "killed"
        ],
        "type": "object"
      },
      "Handler_addPermissionRequestSpec": {
        "properties": {
          "permission": {
            "type": "string"
          }
        },
        "required": [
          "permission"
        ],
        "type": "object"
      },
      "Handler_adoptDiskRequest": {
        "properties": {
          "disk_id": {
            "type": "string"
          },
          "host_id": {
            "type": "string"
          },
          "linstor_name": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "storage_type": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "linstor_name",
          "size_gib",
          "host_id"
        ],
        "type": "object"
      },
      "Handler_attachRefResponse": {
        "properties": {
          "disk_id": {
            "type": "string"
          },
          "relationship_id": {
            "type": "string"
          },
          "vm_id": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_configVarsPutRequest": {
        "properties": {
          "vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Handler_configVarsResponse": {
        "properties": {
          "applied_live": {
            "type": "boolean"
          },
          "vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Handler_createSnapshotRequestSpec": {
        "properties": {
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Handler_cryptoAssignRequest": {
        "properties": {
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "billing_account_id": {
            "type": "string"
          },
          "currency": {
            "type": "string"
          }
        },
        "required": [
          "currency",
          "amount_cents",
          "billing_account_id"
        ],
        "type": "object"
      },
      "Handler_dbAttachListResponse": {
        "properties": {
          "databases": {
            "items": {
              "$ref": "#/components/schemas/Dbattach_AttachedDatabase"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Handler_dbAttachRequest": {
        "properties": {
          "database_id": {
            "format": "uuid",
            "type": "string"
          },
          "env_var": {
            "type": "string"
          }
        },
        "required": [
          "database_id",
          "env_var"
        ],
        "type": "object"
      },
      "Handler_disputeMessageRequestSpec": {
        "properties": {
          "body": {
            "type": "string"
          }
        },
        "required": [
          "body"
        ],
        "type": "object"
      },
      "Handler_flushQueueResponse": {
        "properties": {
          "deleted": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "deleted"
        ],
        "type": "object"
      },
      "Handler_genericResponse": {
        "properties": {
          "message": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Handler_idResponse": {
        "properties": {
          "id": {
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "Handler_mountISORequestSpec": {
        "properties": {
          "bucket_id": {
            "type": "string"
          },
          "object_key": {
            "type": "string"
          }
        },
        "required": [
          "bucket_id",
          "object_key"
        ],
        "type": "object"
      },
      "Handler_observationsRequest": {
        "properties": {
          "observed": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "ref": {
            "properties": {
              "id": {
                "type": "string"
              },
              "tenant": {
                "type": "string"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "tenant",
              "type",
              "id"
            ],
            "type": "object"
          },
          "source": {
            "type": "string"
          }
        },
        "required": [
          "source",
          "ref"
        ],
        "type": "object"
      },
      "Handler_snapshotsResponse": {
        "properties": {
          "snapshots": {
            "items": {
              "$ref": "#/components/schemas/Imperative_SnapshotInfo"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Handler_statementListResponse": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Billing_StatementResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Handler_stripeWebhookResponse": {
        "properties": {
          "received": {
            "type": "boolean"
          }
        },
        "required": [
          "received"
        ],
        "type": "object"
      },
      "Host_CreateHostRequest": {
        "properties": {
          "address": {
            "type": "string"
          },
          "cpu_overcommit_ratio": {
            "type": "number"
          },
          "host_ip": {
            "type": "string"
          },
          "k3s_role": {
            "type": "string"
          },
          "memory_overcommit_ratio": {
            "type": "number"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "address",
          "host_ip",
          "k3s_role"
        ],
        "type": "object"
      },
      "Host_Response": {
        "properties": {
          "address": {
            "type": "string"
          },
          "cpu_overcommit_ratio": {
            "type": "number"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "drain_started_at": {
            "format": "date-time",
            "type": "string"
          },
          "host_ip": {
            "type": "string"
          },
          "hypervisor_status": {
            "type": "string"
          },
          "hypervisor_version": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "k3s_role": {
            "type": "string"
          },
          "k3s_status": {
            "type": "string"
          },
          "k3s_version": {
            "type": "string"
          },
          "last_health_check": {
            "format": "date-time",
            "type": "string"
          },
          "lb_vips_max": {
            "format": "int32",
            "type": "integer"
          },
          "lb_vips_used": {
            "format": "int32",
            "type": "integer"
          },
          "memory_overcommit_ratio": {
            "type": "number"
          },
          "name": {
            "type": "string"
          },
          "release_skew": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "total_cpu": {
            "format": "int32",
            "type": "integer"
          },
          "total_hdd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "total_memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "total_ssd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "used_cpu": {
            "format": "int32",
            "type": "integer"
          },
          "used_hdd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "used_memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "used_ssd_gib": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "id",
          "name",
          "address",
          "host_ip",
          "status",
          "total_cpu",
          "used_cpu",
          "cpu_overcommit_ratio",
          "total_memory_mib",
          "used_memory_mib",
          "memory_overcommit_ratio",
          "total_ssd_gib",
          "used_ssd_gib",
          "total_hdd_gib",
          "used_hdd_gib",
          "k3s_role",
          "k3s_version",
          "k3s_status",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Host_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Host_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Host_UpdateHostRequest": {
        "properties": {
          "cpu_overcommit_ratio": {
            "type": "number"
          },
          "memory_overcommit_ratio": {
            "type": "number"
          },
          "name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "total_cpu": {
            "format": "int32",
            "type": "integer"
          },
          "total_hdd_gib": {
            "format": "int32",
            "type": "integer"
          },
          "total_memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "total_ssd_gib": {
            "format": "int32",
            "type": "integer"
          }
        },
        "type": "object"
      },
      "Hostretire_Plan": {
        "properties": {
          "data_loss_risk": {
            "type": "string"
          },
          "force_risks": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "graceful_blockers": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "graceful_steps": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "host_id": {
            "type": "string"
          },
          "host_ip": {
            "type": "string"
          },
          "host_name": {
            "type": "string"
          },
          "orchestrator_installed": {
            "type": "boolean"
          },
          "orchestrator_last_instance": {
            "type": "boolean"
          },
          "retire_error": {
            "type": "string"
          },
          "retire_step": {
            "type": "string"
          },
          "scylla_blocker": {
            "type": "string"
          },
          "scylla_decommission_safe": {
            "type": "boolean"
          },
          "scylla_member": {
            "type": "boolean"
          },
          "scylla_up": {
            "type": "boolean"
          },
          "status": {
            "type": "string"
          },
          "workloads": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "host_id",
          "host_name",
          "host_ip",
          "status",
          "workloads",
          "scylla_member",
          "scylla_up",
          "scylla_decommission_safe",
          "orchestrator_installed",
          "orchestrator_last_instance",
          "data_loss_risk"
        ],
        "type": "object"
      },
      "Hostretire_RemoveRequest": {
        "properties": {
          "acknowledge_data_loss": {
            "type": "boolean"
          },
          "mode": {
            "type": "string"
          }
        },
        "required": [
          "mode"
        ],
        "type": "object"
      },
      "Hostupgrade_Run": {
        "properties": {
          "component": {
            "type": "string"
          },
          "current_target": {
            "type": "string"
          },
          "detail": {
            "type": "string"
          },
          "run_id": {
            "type": "string"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "target_version": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "component",
          "run_id",
          "target_version",
          "state",
          "started_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Hostupgrade_UpgradeRequest": {
        "properties": {
          "acknowledge_breaking": {
            "type": "boolean"
          },
          "cordon": {
            "type": "boolean"
          },
          "force": {
            "type": "boolean"
          },
          "host_ids": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "mode": {
            "type": "string"
          },
          "uncordon": {
            "type": "boolean"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "version"
        ],
        "type": "object"
      },
      "Image_CaptureImageRequest": {
        "properties": {
          "arch": {
            "type": "string"
          },
          "builder_vm_id": {
            "format": "uuid",
            "type": "string"
          },
          "delete_builder": {
            "type": "boolean"
          },
          "disk_id": {
            "format": "uuid",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "logo_url": {
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "name": {
            "type": "string"
          },
          "os": {
            "type": "string"
          },
          "version": {
            "type": "string"
          },
          "visibility": {
            "type": "string"
          }
        },
        "required": [
          "disk_id",
          "name",
          "os",
          "version",
          "arch"
        ],
        "type": "object"
      },
      "Image_CreateFromSnapshotRequest": {
        "properties": {
          "arch": {
            "type": "string"
          },
          "disk_id": {
            "format": "uuid",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "os": {
            "type": "string"
          },
          "snapshot": {
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "disk_id",
          "snapshot",
          "name",
          "os",
          "version",
          "arch"
        ],
        "type": "object"
      },
      "Image_ImageResponse": {
        "properties": {
          "arch": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "image_ref": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "logo_url": {
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "name": {
            "type": "string"
          },
          "os": {
            "type": "string"
          },
          "provisionable": {
            "type": "boolean"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "os",
          "version",
          "arch",
          "image_ref",
          "created_at"
        ],
        "type": "object"
      },
      "Image_ImageResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Image_ImageResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Image_RegisterImageRequest": {
        "properties": {
          "arch": {
            "type": "string"
          },
          "image_ref": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "logo_url": {
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "name": {
            "type": "string"
          },
          "os": {
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "os",
          "version",
          "arch",
          "image_ref"
        ],
        "type": "object"
      },
      "Image_UpdateImageRequest": {
        "properties": {
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "name": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Imperative_RestoreResponse": {
        "properties": {
          "disk_id": {
            "format": "uuid",
            "type": "string"
          },
          "new_disk_id": {
            "type": "string"
          },
          "new_disk_uuid": {
            "type": "string"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "disk_id",
          "status"
        ],
        "type": "object"
      },
      "Imperative_SnapshotInfo": {
        "properties": {
          "created_at": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "size_bytes": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Imperative_SnapshotResponse": {
        "properties": {
          "disk_id": {
            "format": "uuid",
            "type": "string"
          },
          "snapshot": {
            "$ref": "#/components/schemas/Imperative_SnapshotInfo"
          }
        },
        "required": [
          "disk_id",
          "snapshot"
        ],
        "type": "object"
      },
      "Instancetype_CreateInstanceTypeRequest": {
        "properties": {
          "bandwidth_limit_mbps": {
            "format": "int32",
            "type": "integer"
          },
          "cpu_units": {
            "format": "int32",
            "type": "integer"
          },
          "currency": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "family": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "storage_gib": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name",
          "cpu_units",
          "memory_mib",
          "storage_gib",
          "family",
          "description",
          "price_per_unit",
          "currency",
          "bandwidth_limit_mbps"
        ],
        "type": "object"
      },
      "Instancetype_InstanceTypeResponse": {
        "properties": {
          "bandwidth_limit_mbps": {
            "format": "int32",
            "type": "integer"
          },
          "billed_price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "category": {
            "type": "string"
          },
          "cpu_units": {
            "format": "int32",
            "type": "integer"
          },
          "currency": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "family": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "price_per_hour": {
            "type": "number"
          },
          "price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "price_row_missing": {
            "type": "boolean"
          },
          "storage_gib": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name",
          "cpu_units",
          "memory_mib",
          "storage_gib",
          "price_per_unit",
          "price_per_hour"
        ],
        "type": "object"
      },
      "Instancetype_InstanceTypeResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Instancetype_InstanceTypeResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Instancetype_UpdateInstanceTypeRequest": {
        "properties": {
          "bandwidth_limit_mbps": {
            "format": "int32",
            "type": "integer"
          },
          "cpu_units": {
            "format": "int32",
            "type": "integer"
          },
          "currency": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "family": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "storage_gib": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "K3s_AssignRoleRequest": {
        "properties": {
          "force": {
            "type": "boolean"
          },
          "role": {
            "type": "string"
          }
        },
        "required": [
          "role"
        ],
        "type": "object"
      },
      "K3s_ClusterResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "name": {
            "type": "string"
          },
          "server_endpoint": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "status",
          "version",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "K3s_HostAssignmentResponse": {
        "properties": {
          "cluster_id": {
            "format": "uuid",
            "type": "string"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "joined_at": {
            "format": "date-time",
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "host_id",
          "cluster_id",
          "role",
          "status",
          "joined_at",
          "updated_at"
        ],
        "type": "object"
      },
      "K3s_InitializeClusterRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "version"
        ],
        "type": "object"
      },
      "K3s_RetryRoleRequest": {
        "properties": {
          "force": {
            "type": "boolean"
          }
        },
        "type": "object"
      },
      "K3s_SetClusterStatusRequest": {
        "properties": {
          "status": {
            "type": "string"
          }
        },
        "required": [
          "status"
        ],
        "type": "object"
      },
      "K3s_SetHostStatusRequest": {
        "properties": {
          "status": {
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "status"
        ],
        "type": "object"
      },
      "K3s_UpgradeClusterRequest": {
        "properties": {
          "version": {
            "type": "string"
          }
        },
        "required": [
          "version"
        ],
        "type": "object"
      },
      "K8scluster_CreateRequest": {
        "properties": {
          "boot_disk_size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "control_plane_count": {
            "format": "int32",
            "type": "integer"
          },
          "control_plane_instance_type": {
            "type": "string"
          },
          "k3s_version": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "new_pod_subnet": {
            "$ref": "#/components/schemas/K8scluster_NewPodSubnet"
          },
          "node_subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "pod_subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          },
          "worker_count": {
            "format": "int32",
            "type": "integer"
          },
          "worker_instance_type": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "k3s_version",
          "vpc_id",
          "node_subnet_id",
          "control_plane_count",
          "control_plane_instance_type",
          "worker_instance_type",
          "worker_count"
        ],
        "type": "object"
      },
      "K8scluster_KubeconfigResponse": {
        "properties": {
          "kubeconfig": {
            "type": "string"
          }
        },
        "required": [
          "kubeconfig"
        ],
        "type": "object"
      },
      "K8scluster_NewPodSubnet": {
        "properties": {
          "cidr": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "cidr"
        ],
        "type": "object"
      },
      "K8scluster_NodeResponse": {
        "properties": {
          "agent_online": {
            "type": "boolean"
          },
          "ip": {
            "type": "string"
          },
          "k3s_version": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "ready": {
            "type": "boolean"
          },
          "role": {
            "type": "string"
          },
          "vm_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "vm_id",
          "name",
          "role",
          "ready",
          "agent_online"
        ],
        "type": "object"
      },
      "K8scluster_Response": {
        "properties": {
          "control_plane_count": {
            "format": "int32",
            "type": "integer"
          },
          "control_plane_instance_type": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "current_version": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "k3s_version": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "node_subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "phase": {
            "type": "string"
          },
          "pod_subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "ready_nodes": {
            "format": "int32",
            "type": "integer"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "upgrade": {
            "$ref": "#/components/schemas/K8scluster_UpgradeInfo"
          },
          "vip": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          },
          "worker_count": {
            "format": "int32",
            "type": "integer"
          },
          "worker_instance_type": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "status",
          "phase",
          "k3s_version",
          "control_plane_count",
          "control_plane_instance_type",
          "worker_instance_type",
          "worker_count",
          "ready_nodes",
          "vpc_id",
          "node_subnet_id",
          "pod_subnet_id",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "K8scluster_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/K8scluster_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "K8scluster_UpdateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "worker_count": {
            "format": "int32",
            "type": "integer"
          }
        },
        "type": "object"
      },
      "K8scluster_UpgradeInfo": {
        "properties": {
          "last_error": {
            "type": "string"
          },
          "node_in_progress": {
            "type": "string"
          },
          "stage": {
            "type": "string"
          },
          "target_version": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "target_version",
          "stage",
          "updated_at"
        ],
        "type": "object"
      },
      "K8scluster_UpgradeRequest": {
        "properties": {
          "version": {
            "type": "string"
          }
        },
        "required": [
          "version"
        ],
        "type": "object"
      },
      "Lbroute_CreateRequest": {
        "properties": {
          "backend_ca_trust_id": {
            "format": "uuid",
            "type": "string"
          },
          "backend_port": {
            "format": "int32",
            "type": "integer"
          },
          "backend_sni": {
            "type": "string"
          },
          "backend_tls": {
            "type": "boolean"
          },
          "host_match": {
            "type": "string"
          },
          "idle_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "method": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "path_match": {
            "type": "string"
          },
          "path_match_type": {
            "type": "string"
          },
          "prefix_rewrite": {
            "type": "string"
          },
          "priority": {
            "format": "int32",
            "type": "integer"
          },
          "redirect_status": {
            "format": "int32",
            "type": "integer"
          },
          "redirect_url": {
            "type": "string"
          },
          "request_headers_add": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "request_headers_remove": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "request_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "response_headers_add": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "response_headers_remove": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target_nic_ids": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Lbroute_Response": {
        "properties": {
          "backend_ca_trust_id": {
            "format": "uuid",
            "type": "string"
          },
          "backend_port": {
            "format": "int32",
            "type": "integer"
          },
          "backend_sni": {
            "type": "string"
          },
          "backend_tls": {
            "type": "boolean"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "host_match": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "idle_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "lb_id": {
            "format": "uuid",
            "type": "string"
          },
          "method": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "path_match": {
            "type": "string"
          },
          "path_match_type": {
            "type": "string"
          },
          "prefix_rewrite": {
            "type": "string"
          },
          "priority": {
            "format": "int32",
            "type": "integer"
          },
          "redirect_status": {
            "format": "int32",
            "type": "integer"
          },
          "redirect_url": {
            "type": "string"
          },
          "request_headers_add": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "request_headers_remove": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "request_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "response_headers_add": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "response_headers_remove": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "targets": {
            "items": {
              "$ref": "#/components/schemas/Lbroute_TargetEntry"
            },
            "type": "array"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "priority",
          "path_match_type",
          "path_match",
          "backend_tls",
          "request_timeout_sec",
          "idle_timeout_sec",
          "backend_port",
          "status",
          "lb_id",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Lbroute_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Lbroute_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Lbroute_TargetEntry": {
        "properties": {
          "address": {
            "type": "string"
          },
          "health_state": {
            "type": "string"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "weight": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "nic_id",
          "address",
          "weight",
          "health_state"
        ],
        "type": "object"
      },
      "Lbroute_UpdateRequest": {
        "properties": {
          "backend_ca_trust_id": {
            "format": "uuid",
            "type": "string"
          },
          "backend_port": {
            "format": "int32",
            "type": "integer"
          },
          "backend_sni": {
            "type": "string"
          },
          "backend_tls": {
            "type": "boolean"
          },
          "host_match": {
            "type": "string"
          },
          "idle_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "method": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "path_match": {
            "type": "string"
          },
          "path_match_type": {
            "type": "string"
          },
          "prefix_rewrite": {
            "type": "string"
          },
          "priority": {
            "format": "int32",
            "type": "integer"
          },
          "redirect_status": {
            "format": "int32",
            "type": "integer"
          },
          "redirect_url": {
            "type": "string"
          },
          "request_headers_add": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "request_headers_remove": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "request_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "response_headers_add": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "response_headers_remove": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target_addresses": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "target_nic_ids": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Limits_SetTenantLimitsRequest": {
        "properties": {
          "max_cpu_cores": {
            "format": "int32",
            "type": "integer"
          },
          "max_llm_tokens_month": {
            "format": "int64",
            "type": "integer"
          },
          "max_ram_gib": {
            "format": "int32",
            "type": "integer"
          },
          "max_storage_gib": {
            "format": "int32",
            "type": "integer"
          },
          "max_vms_per_vpc": {
            "format": "int32",
            "type": "integer"
          },
          "max_vpcs": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "max_cpu_cores",
          "max_ram_gib",
          "max_storage_gib",
          "max_vpcs",
          "max_vms_per_vpc",
          "max_llm_tokens_month"
        ],
        "type": "object"
      },
      "Limits_TenantLimitsResponse": {
        "properties": {
          "max_cpu_cores": {
            "format": "int32",
            "type": "integer"
          },
          "max_llm_tokens_month": {
            "format": "int64",
            "type": "integer"
          },
          "max_ram_gib": {
            "format": "int32",
            "type": "integer"
          },
          "max_storage_gib": {
            "format": "int32",
            "type": "integer"
          },
          "max_vms_per_vpc": {
            "format": "int32",
            "type": "integer"
          },
          "max_vpcs": {
            "format": "int32",
            "type": "integer"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "tenant_id",
          "max_cpu_cores",
          "max_ram_gib",
          "max_storage_gib",
          "max_vpcs",
          "max_vms_per_vpc",
          "max_llm_tokens_month",
          "updated_at"
        ],
        "type": "object"
      },
      "Limits_TenantLimitsResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Limits_TenantLimitsResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Loadbalancer_AddTargetRequest": {
        "properties": {
          "address": {
            "type": "string"
          },
          "health_check_config": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "weight": {
            "format": "int64",
            "type": "integer"
          }
        },
        "type": "object"
      },
      "Loadbalancer_CreateRequest": {
        "properties": {
          "auto_public_ip_v4": {
            "type": "boolean"
          },
          "auto_public_ip_v6": {
            "type": "boolean"
          },
          "health_check": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "idle_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "listener_port": {
            "format": "int32",
            "type": "integer"
          },
          "listener_protocol": {
            "type": "string"
          },
          "max_hosts": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "protocol": {
            "type": "string"
          },
          "public_ip_id": {
            "format": "uuid",
            "type": "string"
          },
          "src_ip_sticky": {
            "type": "boolean"
          },
          "subnet_ids": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target_addresses": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "target_nic_ids": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          },
          "tls_cert_id": {
            "format": "uuid",
            "type": "string"
          },
          "vip": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "vpc_id",
          "subnet_ids"
        ],
        "type": "object"
      },
      "Loadbalancer_RemoveTargetRequest": {
        "properties": {
          "address": {
            "type": "string"
          },
          "nic_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "type": "object"
      },
      "Loadbalancer_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "effective_health_check": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "health_check": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "idle_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "internal_vip": {
            "type": "string"
          },
          "internal_vip_v4": {
            "type": "string"
          },
          "internal_vip_v6": {
            "type": "string"
          },
          "listener_port": {
            "format": "int32",
            "type": "integer"
          },
          "max_hosts": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "new_flows_table_length": {
            "format": "int64",
            "type": "integer"
          },
          "protocol": {
            "type": "string"
          },
          "public_ip": {
            "type": "string"
          },
          "public_ip_v4": {
            "type": "string"
          },
          "public_ip_v6": {
            "type": "string"
          },
          "src_ip_sticky": {
            "type": "boolean"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "subnet_ids": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target_addresses": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "targets": {
            "items": {
              "$ref": "#/components/schemas/Loadbalancer_Target"
            },
            "type": "array"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "tls_cert_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "protocol",
          "listener_port",
          "idle_timeout_sec",
          "src_ip_sticky",
          "status",
          "tenant_id",
          "vpc_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Loadbalancer_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Loadbalancer_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Loadbalancer_SetTargetWeightRequest": {
        "properties": {
          "address": {
            "type": "string"
          },
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "weight": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "weight"
        ],
        "type": "object"
      },
      "Loadbalancer_Target": {
        "properties": {
          "address": {
            "type": "string"
          },
          "health_state": {
            "type": "string"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "weight": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "nic_id",
          "address",
          "weight",
          "health_state"
        ],
        "type": "object"
      },
      "Loadbalancer_UpdateRequest": {
        "properties": {
          "auto_public_ip_v4": {
            "type": "boolean"
          },
          "auto_public_ip_v6": {
            "type": "boolean"
          },
          "health_check": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "idle_timeout_sec": {
            "format": "int32",
            "type": "integer"
          },
          "listener_port": {
            "format": "int32",
            "type": "integer"
          },
          "max_hosts": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "new_flows_table_length": {
            "format": "int64",
            "type": "integer"
          },
          "src_ip_sticky": {
            "type": "boolean"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target_addresses": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "target_nic_ids": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          },
          "tls_cert_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "type": "object"
      },
      "Mailpreview_DeliveryInfo": {
        "properties": {
          "delivers": {
            "type": "boolean"
          },
          "detail": {
            "type": "string"
          },
          "from": {
            "type": "string"
          },
          "provider": {
            "type": "string"
          },
          "reply_to": {
            "type": "string"
          }
        },
        "required": [
          "provider",
          "delivers",
          "from",
          "reply_to",
          "detail"
        ],
        "type": "object"
      },
      "Mailpreview_ListResponse": {
        "properties": {
          "delivery": {
            "$ref": "#/components/schemas/Mailpreview_DeliveryInfo"
          },
          "items": {
            "items": {
              "$ref": "#/components/schemas/Mailpreview_TemplateSummary"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total",
          "delivery"
        ],
        "type": "object"
      },
      "Mailpreview_LocalePreview": {
        "properties": {
          "dir": {
            "type": "string"
          },
          "html": {
            "type": "string"
          },
          "locale": {
            "type": "string"
          },
          "subject": {
            "type": "string"
          },
          "text": {
            "type": "string"
          }
        },
        "required": [
          "locale",
          "subject",
          "dir",
          "html",
          "text"
        ],
        "type": "object"
      },
      "Mailpreview_PreviewResponse": {
        "properties": {
          "group": {
            "type": "string"
          },
          "locales": {
            "items": {
              "$ref": "#/components/schemas/Mailpreview_LocalePreview"
            },
            "type": "array"
          },
          "name": {
            "type": "string"
          },
          "preview": {
            "$ref": "#/components/schemas/Mailpreview_LocalePreview"
          },
          "title": {
            "type": "string"
          },
          "trigger": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "title",
          "trigger",
          "group",
          "preview"
        ],
        "type": "object"
      },
      "Mailpreview_TemplateSummary": {
        "properties": {
          "group": {
            "type": "string"
          },
          "locales": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "name": {
            "type": "string"
          },
          "subjects": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "title": {
            "type": "string"
          },
          "trigger": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "title",
          "trigger",
          "group"
        ],
        "type": "object"
      },
      "Mailpreview_TestSendRequest": {
        "properties": {
          "locale": {
            "type": "string"
          },
          "to": {
            "type": "string"
          }
        },
        "required": [
          "to"
        ],
        "type": "object"
      },
      "Mailpreview_TestSendResponse": {
        "properties": {
          "delivered": {
            "type": "boolean"
          },
          "locale": {
            "type": "string"
          },
          "provider": {
            "type": "string"
          },
          "sent": {
            "type": "boolean"
          },
          "subject": {
            "type": "string"
          },
          "to": {
            "type": "string"
          }
        },
        "required": [
          "sent",
          "to",
          "locale",
          "subject",
          "provider",
          "delivered"
        ],
        "type": "object"
      },
      "Managedservice_BackupInfo": {
        "properties": {
          "completed_at": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "database_id": {
            "type": "string"
          },
          "database_name": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "error": {
            "type": "string"
          },
          "method": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "phase": {
            "type": "string"
          },
          "repo_name": {
            "type": "string"
          },
          "size": {
            "type": "string"
          },
          "started_at": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Managedservice_CreateRequest": {
        "properties": {
          "config": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "instance_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "service_type": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "service_type",
          "instance_type"
        ],
        "type": "object"
      },
      "Managedservice_Credentials": {
        "properties": {
          "endpoint": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "password": {
            "type": "string"
          },
          "secret_name": {
            "type": "string"
          },
          "secret_namespace": {
            "type": "string"
          },
          "username": {
            "type": "string"
          }
        },
        "required": [
          "username",
          "password",
          "endpoint",
          "engine",
          "secret_name",
          "secret_namespace"
        ],
        "type": "object"
      },
      "Managedservice_Response": {
        "properties": {
          "backup_enabled": {
            "type": "boolean"
          },
          "backup_pitr_enabled": {
            "type": "boolean"
          },
          "backup_repo_name": {
            "type": "string"
          },
          "backup_retention": {
            "type": "string"
          },
          "backup_schedule": {
            "type": "string"
          },
          "config": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "endpoint": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "engine_version": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "max_replicas": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "public_access": {
            "type": "boolean"
          },
          "public_ip_v4": {
            "type": "string"
          },
          "public_ip_v6": {
            "type": "string"
          },
          "replicas": {
            "format": "int32",
            "type": "integer"
          },
          "service_type": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "storage_gib": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "service_type",
          "backup_enabled",
          "backup_pitr_enabled",
          "status",
          "tenant_id",
          "public_access",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Managedservice_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Managedservice_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Managedservice_RestoreBackupRequest": {
        "properties": {
          "name": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Managedservice_RotateResult": {
        "properties": {
          "endpoint": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "password": {
            "type": "string"
          },
          "refreshed_attachments": {
            "format": "int32",
            "type": "integer"
          },
          "secret_name": {
            "type": "string"
          },
          "secret_namespace": {
            "type": "string"
          },
          "username": {
            "type": "string"
          }
        },
        "required": [
          "username",
          "password",
          "endpoint",
          "engine",
          "secret_name",
          "secret_namespace",
          "refreshed_attachments"
        ],
        "type": "object"
      },
      "Managedservice_UpdateBackupRequest": {
        "properties": {
          "enabled": {
            "type": "boolean"
          },
          "pitr_enabled": {
            "type": "boolean"
          },
          "repo_name": {
            "type": "string"
          },
          "retention": {
            "type": "string"
          },
          "schedule": {
            "type": "string"
          }
        },
        "required": [
          "enabled"
        ],
        "type": "object"
      },
      "Managedservice_UpdateRequest": {
        "properties": {
          "config": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "instance_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Meta_MetricSample": {
        "properties": {
          "DayBucket": {
            "format": "date-time",
            "type": "string"
          },
          "Labels": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "Metric": {
            "type": "string"
          },
          "Resource": {
            "type": "string"
          },
          "TS": {
            "format": "byte",
            "type": "string"
          },
          "TenantID": {
            "format": "uuid",
            "type": "string"
          },
          "Value": {
            "type": "number"
          }
        },
        "required": [
          "DayBucket",
          "TS",
          "TenantID",
          "Resource",
          "Metric",
          "Value"
        ],
        "type": "object"
      },
      "Metadata_CredentialsResponse": {
        "properties": {
          "access_token": {
            "type": "string"
          },
          "api_url": {
            "type": "string"
          },
          "expires_at": {
            "format": "date-time",
            "type": "string"
          },
          "expires_in": {
            "format": "int64",
            "type": "integer"
          },
          "instance_id": {
            "format": "uuid",
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "token": {
            "type": "string"
          },
          "token_type": {
            "type": "string"
          }
        },
        "required": [
          "token",
          "token_type",
          "expires_in",
          "access_token",
          "api_url",
          "expires_at",
          "instance_id"
        ],
        "type": "object"
      },
      "Metadata_InstanceMetadata": {
        "properties": {
          "hostname": {
            "type": "string"
          },
          "instance_id": {
            "format": "uuid",
            "type": "string"
          },
          "namespace": {
            "type": "string"
          },
          "public_api_url": {
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "user_data": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "instance_id",
          "hostname",
          "tenant_id",
          "vpc_id",
          "subnet_id"
        ],
        "type": "object"
      },
      "Metadata_InstanceRoleEntry": {
        "properties": {
          "kind": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "vm_id": {
            "format": "uuid",
            "type": "string"
          },
          "vm_name": {
            "type": "string"
          }
        },
        "required": [
          "vm_id",
          "vm_name",
          "kind",
          "status"
        ],
        "type": "object"
      },
      "Microvm_AttachDiskRequest": {
        "properties": {
          "disk_id": {
            "format": "uuid",
            "type": "string"
          },
          "slot": {
            "type": "string"
          }
        },
        "required": [
          "disk_id"
        ],
        "type": "object"
      },
      "Microvm_AttachNICRequest": {
        "properties": {
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "slot": {
            "type": "string"
          }
        },
        "required": [
          "nic_id"
        ],
        "type": "object"
      },
      "Microvm_AttachedDisk": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "serial": {
            "type": "string"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "storage_type": {
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "Microvm_AttachedNIC": {
        "properties": {
          "gateway_ip": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "ipv4_address": {
            "type": "string"
          },
          "ipv6_address": {
            "type": "string"
          },
          "mac_address": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "prefix_len": {
            "format": "int32",
            "type": "integer"
          },
          "public_ip": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "Microvm_CreateRequest": {
        "properties": {
          "device_spec": {
            "items": {
              "additionalProperties": {
                "additionalProperties": true,
                "type": "object"
              },
              "type": "object"
            },
            "type": "array"
          },
          "disks": {
            "items": {
              "$ref": "#/components/schemas/Microvm_MicroVMDiskSpec"
            },
            "type": "array"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "extra_boot_args": {
            "type": "string"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "image_id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "nic_stable_ip_owner": {
            "type": "string"
          },
          "password": {
            "type": "string"
          },
          "power_state": {
            "type": "string"
          },
          "processor_units": {
            "format": "int32",
            "type": "integer"
          },
          "resource_type": {
            "type": "string"
          },
          "ssh_key_id": {
            "format": "uuid",
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "user_data": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "instance_type",
          "vpc_id"
        ],
        "type": "object"
      },
      "Microvm_MicroVMDiskSpec": {
        "properties": {
          "iops": {
            "format": "int32",
            "type": "integer"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "storage_type": {
            "type": "string"
          }
        },
        "required": [
          "size_gib"
        ],
        "type": "object"
      },
      "Microvm_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "disks": {
            "items": {
              "$ref": "#/components/schemas/Microvm_AttachedDisk"
            },
            "type": "array"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "nics": {
            "items": {
              "$ref": "#/components/schemas/Microvm_AttachedNIC"
            },
            "type": "array"
          },
          "power_state": {
            "type": "string"
          },
          "processor_units": {
            "format": "int32",
            "type": "integer"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "processor_units",
          "memory_mib",
          "power_state",
          "status",
          "tenant_id",
          "vpc_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Microvm_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Microvm_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Microvm_UpdateRequest": {
        "properties": {
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "processor_units": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "user_data": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Nic_AttachRequest": {
        "properties": {
          "workload_id": {
            "format": "uuid",
            "type": "string"
          },
          "workload_type": {
            "type": "string"
          }
        },
        "required": [
          "workload_type",
          "workload_id"
        ],
        "type": "object"
      },
      "Nic_CreateRequest": {
        "properties": {
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "ipv4_address": {
            "type": "string"
          },
          "mac": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "netns_path": {
            "type": "string"
          },
          "nic_type": {
            "type": "string"
          },
          "parent_nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "pod_name": {
            "type": "string"
          },
          "pod_namespace": {
            "type": "string"
          },
          "pod_uid": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "security_policy_tags": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "slot": {
            "type": "string"
          },
          "stable_ip_owner": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "subnet_id"
        ],
        "type": "object"
      },
      "Nic_HeartbeatRequest": {
        "properties": {
          "alive_pod_uids": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Nic_HeartbeatResponse": {
        "properties": {
          "reaped": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Nic_Response": {
        "properties": {
          "attached_to": {
            "format": "uuid",
            "type": "string"
          },
          "attached_to_type": {
            "type": "string"
          },
          "bridge_id": {
            "format": "int32",
            "type": "integer"
          },
          "bvi_sw_if_index": {
            "format": "int32",
            "type": "integer"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "gateway_ip": {
            "type": "string"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "inherited_security_policy_tags": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "ipv4_address": {
            "type": "string"
          },
          "ipv6_address": {
            "type": "string"
          },
          "mac_address": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "nic_type": {
            "type": "string"
          },
          "parent_nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "prefix_len": {
            "format": "int32",
            "type": "integer"
          },
          "public_ip": {
            "type": "string"
          },
          "secondary_ipv4_addresses": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "security_policy_tags": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "socket_path": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vlan_id": {
            "format": "int32",
            "type": "integer"
          },
          "vpc_id": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "id",
          "name",
          "nic_type",
          "mac_address",
          "ipv4_address",
          "ipv6_address",
          "prefix_len",
          "socket_path",
          "status",
          "subnet_id",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Nic_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Nic_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Nic_UpdateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "security_policy_tags": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Orchdeploy_ClusterView": {
        "properties": {
          "cluster_enabled": {
            "type": "boolean"
          },
          "hosts": {
            "items": {
              "$ref": "#/components/schemas/Orchdeploy_HostOrchestrator"
            },
            "type": "array"
          },
          "instances": {
            "items": {
              "$ref": "#/components/schemas/Orchdeploy_Instance"
            },
            "type": "array"
          },
          "self_instance_id": {
            "type": "string"
          },
          "warnings": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "cluster_enabled"
        ],
        "type": "object"
      },
      "Orchdeploy_DesiredRelease": {
        "properties": {
          "hypervisor_version": {
            "type": "string"
          },
          "note": {
            "type": "string"
          },
          "orchestrator_version": {
            "type": "string"
          },
          "previous_hypervisor": {
            "type": "string"
          },
          "previous_orchestrator": {
            "type": "string"
          },
          "set_at": {
            "format": "date-time",
            "type": "string"
          },
          "set_by": {
            "type": "string"
          }
        },
        "required": [
          "orchestrator_version",
          "hypervisor_version",
          "set_at"
        ],
        "type": "object"
      },
      "Orchdeploy_HostOrchestrator": {
        "properties": {
          "api_ready": {
            "type": "boolean"
          },
          "error": {
            "type": "string"
          },
          "host_id": {
            "type": "string"
          },
          "host_ip": {
            "type": "string"
          },
          "host_name": {
            "type": "string"
          },
          "install_error": {
            "type": "string"
          },
          "installed": {
            "type": "boolean"
          },
          "installing": {
            "type": "boolean"
          },
          "running": {
            "type": "boolean"
          },
          "status": {
            "type": "string"
          },
          "unreachable": {
            "type": "boolean"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "host_id",
          "host_name",
          "host_ip",
          "installed",
          "running",
          "api_ready",
          "installing"
        ],
        "type": "object"
      },
      "Orchdeploy_InstallParams": {
        "properties": {
          "force": {
            "type": "boolean"
          },
          "port": {
            "format": "int32",
            "type": "integer"
          }
        },
        "type": "object"
      },
      "Orchdeploy_Instance": {
        "properties": {
          "addr": {
            "type": "string"
          },
          "hostname": {
            "type": "string"
          },
          "instance_id": {
            "type": "string"
          },
          "last_heartbeat": {
            "format": "date-time",
            "type": "string"
          },
          "self": {
            "type": "boolean"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "instance_id",
          "started_at",
          "last_heartbeat",
          "self"
        ],
        "type": "object"
      },
      "Orchdeploy_ReleaseMember": {
        "properties": {
          "id": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "self": {
            "type": "boolean"
          },
          "skew": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name"
        ],
        "type": "object"
      },
      "Orchdeploy_ReleaseView": {
        "properties": {
          "desired": {
            "$ref": "#/components/schemas/Orchdeploy_DesiredRelease"
          },
          "hosts": {
            "items": {
              "$ref": "#/components/schemas/Orchdeploy_ReleaseMember"
            },
            "type": "array"
          },
          "instances": {
            "items": {
              "$ref": "#/components/schemas/Orchdeploy_ReleaseMember"
            },
            "type": "array"
          },
          "running": {
            "type": "string"
          },
          "runs": {
            "additionalProperties": {
              "$ref": "#/components/schemas/Orchdeploy_UpgradeRun"
            },
            "type": "object"
          },
          "uniform": {
            "type": "boolean"
          }
        },
        "required": [
          "running",
          "uniform"
        ],
        "type": "object"
      },
      "Orchdeploy_SetClusterVersionRequest": {
        "properties": {
          "acknowledge_breaking": {
            "type": "boolean"
          },
          "note": {
            "type": "string"
          },
          "start_roll": {
            "type": "boolean"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "version"
        ],
        "type": "object"
      },
      "Orchdeploy_UninstallParams": {
        "properties": {
          "force": {
            "type": "boolean"
          },
          "purge": {
            "type": "boolean"
          }
        },
        "type": "object"
      },
      "Orchdeploy_UpgradeRequest": {
        "properties": {
          "acknowledge_breaking": {
            "type": "boolean"
          },
          "force": {
            "type": "boolean"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "version"
        ],
        "type": "object"
      },
      "Orchdeploy_UpgradeRun": {
        "properties": {
          "component": {
            "type": "string"
          },
          "current_target": {
            "type": "string"
          },
          "detail": {
            "type": "string"
          },
          "run_id": {
            "type": "string"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "target_version": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "component",
          "run_id",
          "target_version",
          "state",
          "started_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Platformdb_AutopilotConfig": {
        "properties": {
          "default_memory_gib": {
            "format": "int32",
            "type": "integer"
          },
          "default_smp": {
            "format": "int32",
            "type": "integer"
          },
          "failure_tolerance": {
            "format": "int32",
            "type": "integer"
          },
          "mode": {
            "type": "string"
          }
        },
        "required": [
          "mode",
          "failure_tolerance",
          "default_smp",
          "default_memory_gib"
        ],
        "type": "object"
      },
      "Platformdb_AutopilotReport": {
        "properties": {
          "blockers": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "current_orchestrators": {
            "format": "int32",
            "type": "integer"
          },
          "current_replication_factor": {
            "format": "int32",
            "type": "integer"
          },
          "current_ring_size": {
            "format": "int32",
            "type": "integer"
          },
          "failure_tolerance": {
            "format": "int32",
            "type": "integer"
          },
          "last_action": {
            "type": "string"
          },
          "last_action_at": {
            "format": "date-time",
            "type": "string"
          },
          "last_run_at": {
            "format": "date-time",
            "type": "string"
          },
          "mode": {
            "type": "string"
          },
          "notes": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "satisfied": {
            "type": "boolean"
          },
          "target_orchestrators": {
            "format": "int32",
            "type": "integer"
          },
          "target_replication_factor": {
            "format": "int32",
            "type": "integer"
          },
          "target_ring_size": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "mode",
          "failure_tolerance",
          "target_replication_factor",
          "target_ring_size",
          "target_orchestrators",
          "current_ring_size",
          "current_replication_factor",
          "current_orchestrators",
          "satisfied"
        ],
        "type": "object"
      },
      "Platformdb_ClusterStatus": {
        "properties": {
          "cluster_name": {
            "type": "string"
          },
          "hosts": {
            "items": {
              "$ref": "#/components/schemas/Platformdb_HostScylla"
            },
            "type": "array"
          },
          "keyspaces": {
            "items": {
              "$ref": "#/components/schemas/Platformdb_KeyspaceReplication"
            },
            "type": "array"
          },
          "nodes": {
            "items": {
              "$ref": "#/components/schemas/Platformdb_Node"
            },
            "type": "array"
          },
          "redundancy": {
            "$ref": "#/components/schemas/Platformdb_Redundancy"
          }
        },
        "required": [
          "cluster_name",
          "redundancy"
        ],
        "type": "object"
      },
      "Platformdb_HostPlatformConfig": {
        "properties": {
          "host_id": {
            "type": "string"
          },
          "orchestrator_enabled": {
            "type": "boolean"
          },
          "orchestrator_port": {
            "format": "int32",
            "type": "integer"
          },
          "scylla_enabled": {
            "type": "boolean"
          },
          "scylla_memory_gib": {
            "format": "int32",
            "type": "integer"
          },
          "scylla_smp": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "host_id"
        ],
        "type": "object"
      },
      "Platformdb_HostScylla": {
        "properties": {
          "cql_ready": {
            "type": "boolean"
          },
          "error": {
            "type": "string"
          },
          "host_id": {
            "type": "string"
          },
          "host_ip": {
            "type": "string"
          },
          "host_name": {
            "type": "string"
          },
          "in_ring": {
            "type": "boolean"
          },
          "installed": {
            "type": "boolean"
          },
          "join_error": {
            "type": "string"
          },
          "joining": {
            "type": "boolean"
          },
          "memory_gib": {
            "format": "int32",
            "type": "integer"
          },
          "repair_error": {
            "type": "string"
          },
          "repair_state": {
            "type": "string"
          },
          "running": {
            "type": "boolean"
          },
          "smp": {
            "format": "int32",
            "type": "integer"
          },
          "status": {
            "type": "string"
          },
          "unreachable": {
            "type": "boolean"
          },
          "upgrade_error": {
            "type": "string"
          },
          "upgrade_state": {
            "type": "string"
          },
          "version": {
            "type": "string"
          }
        },
        "required": [
          "host_id",
          "host_name",
          "host_ip",
          "in_ring",
          "installed",
          "running",
          "cql_ready",
          "joining"
        ],
        "type": "object"
      },
      "Platformdb_JoinParams": {
        "properties": {
          "force": {
            "type": "boolean"
          },
          "memory_gib": {
            "format": "int32",
            "type": "integer"
          },
          "smp": {
            "format": "int32",
            "type": "integer"
          },
          "wipe_data": {
            "type": "boolean"
          }
        },
        "type": "object"
      },
      "Platformdb_KeyspaceReplication": {
        "properties": {
          "keyspace": {
            "type": "string"
          },
          "replication_factor": {
            "format": "int32",
            "type": "integer"
          },
          "strategy": {
            "type": "string"
          }
        },
        "required": [
          "keyspace",
          "strategy",
          "replication_factor"
        ],
        "type": "object"
      },
      "Platformdb_Node": {
        "properties": {
          "address": {
            "type": "string"
          },
          "datacenter": {
            "type": "string"
          },
          "host_id": {
            "type": "string"
          },
          "host_name": {
            "type": "string"
          },
          "local": {
            "type": "boolean"
          },
          "node_status": {
            "type": "string"
          },
          "owns_pct": {
            "format": "int32",
            "type": "integer"
          },
          "scylla_host_id": {
            "type": "string"
          },
          "up": {
            "type": "boolean"
          }
        },
        "required": [
          "address",
          "up",
          "local"
        ],
        "type": "object"
      },
      "Platformdb_Redundancy": {
        "properties": {
          "data_loss_on_any_node_failure": {
            "type": "boolean"
          },
          "nodes_total": {
            "format": "int32",
            "type": "integer"
          },
          "nodes_up": {
            "format": "int32",
            "type": "integer"
          },
          "replication_factor": {
            "format": "int32",
            "type": "integer"
          },
          "tolerable_node_failures": {
            "format": "int32",
            "type": "integer"
          },
          "warnings": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "write_quorum": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "nodes_total",
          "nodes_up",
          "replication_factor",
          "write_quorum",
          "tolerable_node_failures",
          "data_loss_on_any_node_failure"
        ],
        "type": "object"
      },
      "Platformdb_RemoveNodeRequest": {
        "properties": {
          "acknowledge_data_loss": {
            "type": "boolean"
          },
          "force": {
            "type": "boolean"
          }
        },
        "type": "object"
      },
      "Platformdb_ScyllaUpgradeRequest": {
        "properties": {
          "force": {
            "type": "boolean"
          },
          "repair_after": {
            "type": "boolean"
          },
          "snapshot": {
            "type": "boolean"
          },
          "target_version": {
            "type": "string"
          }
        },
        "required": [
          "target_version"
        ],
        "type": "object"
      },
      "Platformdb_ScyllaUpgradeRun": {
        "properties": {
          "component": {
            "type": "string"
          },
          "current_target": {
            "type": "string"
          },
          "detail": {
            "type": "string"
          },
          "run_id": {
            "type": "string"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "target_version": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "component",
          "run_id",
          "target_version",
          "state",
          "started_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Platformdb_SetReplicationRequest": {
        "properties": {
          "replication_factor": {
            "format": "int32",
            "type": "integer"
          },
          "skip_repair": {
            "type": "boolean"
          }
        },
        "required": [
          "replication_factor"
        ],
        "type": "object"
      },
      "Publicip_AttachRequest": {
        "properties": {
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "public_ip": {
            "type": "string"
          }
        },
        "required": [
          "public_ip",
          "nic_id"
        ],
        "type": "object"
      },
      "Publicip_CreateRequest": {
        "properties": {
          "is_ipv6": {
            "type": "boolean"
          },
          "public_ip": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "public_ip",
          "is_ipv6"
        ],
        "type": "object"
      },
      "Publicip_DetachRequest": {
        "properties": {
          "public_ip": {
            "type": "string"
          }
        },
        "required": [
          "public_ip"
        ],
        "type": "object"
      },
      "Publicip_Response": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "is_ipv6": {
            "type": "boolean"
          },
          "local_ip": {
            "type": "string"
          },
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "public_ip": {
            "type": "string"
          },
          "reconcile_status": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "public_ip",
          "local_ip",
          "is_ipv6",
          "status",
          "tenant_id"
        ],
        "type": "object"
      },
      "Publicip_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Publicip_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Publicip_UpdateRequest": {
        "properties": {
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Quicklaunch_CreateRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "prompt": {
            "type": "string"
          }
        },
        "required": [
          "kind"
        ],
        "type": "object"
      },
      "Quicklaunch_CreateResponse": {
        "properties": {
          "id": {
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "state"
        ],
        "type": "object"
      },
      "Quicklaunch_PreflightResponse": {
        "properties": {
          "connector_ok": {
            "type": "boolean"
          },
          "environment_sealed": {
            "type": "boolean"
          }
        },
        "required": [
          "connector_ok",
          "environment_sealed"
        ],
        "type": "object"
      },
      "Quicklaunch_Response": {
        "properties": {
          "error": {
            "type": "string"
          },
          "id": {
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "remote_control_name": {
            "type": "string"
          },
          "run_id": {
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "kind",
          "state"
        ],
        "type": "object"
      },
      "Rag_DocumentResponse": {
        "properties": {
          "chunks": {
            "format": "int32",
            "type": "integer"
          },
          "error": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "size_bytes": {
            "format": "int64",
            "type": "integer"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "size_bytes",
          "chunks",
          "status"
        ],
        "type": "object"
      },
      "Rag_EnableRequest": {
        "properties": {
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "vpc_id",
          "subnet_id"
        ],
        "type": "object"
      },
      "Rag_StatusResponse": {
        "properties": {
          "embed_model": {
            "type": "string"
          },
          "enabled": {
            "type": "boolean"
          },
          "status": {
            "type": "string"
          },
          "vpc_endpoint": {
            "type": "string"
          }
        },
        "required": [
          "enabled",
          "status"
        ],
        "type": "object"
      },
      "Rag_UploadRequest": {
        "properties": {
          "collection": {
            "type": "string"
          },
          "content_base64": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "text": {
            "type": "string"
          }
        },
        "required": [
          "collection",
          "name"
        ],
        "type": "object"
      },
      "Rbac_Permission": {
        "properties": {
          "description": {
            "type": "string"
          },
          "group": {
            "type": "string"
          },
          "key": {
            "type": "string"
          },
          "subgroup": {
            "type": "string"
          }
        },
        "required": [
          "key",
          "group",
          "subgroup",
          "description"
        ],
        "type": "object"
      },
      "Reconcileradmin_KindSummary": {
        "properties": {
          "kind": {
            "type": "string"
          },
          "queue_length": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "kind",
          "queue_length"
        ],
        "type": "object"
      },
      "Reconcileradmin_ResourceRow": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "duration_ms": {
            "format": "int64",
            "type": "integer"
          },
          "error_message": {
            "type": "string"
          },
          "host_id": {
            "type": "string"
          },
          "id": {
            "type": "string"
          },
          "in_queue": {
            "type": "boolean"
          },
          "last_reconciled_at": {
            "format": "date-time",
            "type": "string"
          },
          "resource_id": {
            "type": "string"
          },
          "resource_kind": {
            "type": "string"
          },
          "retry_count": {
            "format": "int64",
            "type": "integer"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "resource_kind",
          "resource_id",
          "host_id",
          "status",
          "error_message",
          "retry_count",
          "in_queue"
        ],
        "type": "object"
      },
      "Role_CreateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "permissions": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name",
          "description"
        ],
        "type": "object"
      },
      "Role_Response": {
        "properties": {
          "builtin": {
            "type": "boolean"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "permissions": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "name",
          "builtin",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Role_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Role_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Role_UpdateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "permissions": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Run_CreateRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "environment_id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_size": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "namespace": {
            "type": "string"
          },
          "prompt": {
            "type": "string"
          },
          "reasoning_effort": {
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "role_config": {
            "$ref": "#/components/schemas/Agentcfg_RoleConfig"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name",
          "environment_id"
        ],
        "type": "object"
      },
      "Run_PromoteRequest": {
        "properties": {
          "name": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Run_PromoteResponse": {
        "properties": {
          "environment_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "environment_id"
        ],
        "type": "object"
      },
      "Run_Response": {
        "properties": {
          "agent": {
            "$ref": "#/components/schemas/Agentcfg_AgentConfig"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "desired_state": {
            "type": "string"
          },
          "engine": {
            "type": "string"
          },
          "environment_id": {
            "format": "uuid",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_size": {
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "phase": {
            "type": "string"
          },
          "prompt": {
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "target": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "type": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "status",
          "phase",
          "state",
          "desired_state",
          "environment_id",
          "target",
          "instance_size",
          "type",
          "engine",
          "agent",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Run_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Run_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Run_UpdateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Scheduler_QueueItem": {
        "properties": {
          "attempt": {
            "format": "int32",
            "type": "integer"
          },
          "claimed_at": {
            "format": "date-time",
            "type": "string"
          },
          "claimed_by": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "payload": {
            "type": "string"
          },
          "run_after": {
            "format": "date-time",
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "kind",
          "payload",
          "attempt",
          "run_after",
          "status",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Securitypolicy_ApplyToNICRequest": {
        "properties": {
          "nic_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "nic_id"
        ],
        "type": "object"
      },
      "Securitypolicy_ApplyToSubnetRequest": {
        "properties": {
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "subnet_id"
        ],
        "type": "object"
      },
      "Securitypolicy_ApplyToVPCRequest": {
        "properties": {
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "vpc_id"
        ],
        "type": "object"
      },
      "Securitypolicy_AttachedNICInfo": {
        "properties": {
          "attached_to": {
            "format": "uuid",
            "type": "string"
          },
          "attached_to_type": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "ipv4_address": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "ipv4_address"
        ],
        "type": "object"
      },
      "Securitypolicy_AttachedSubnetInfo": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "vpc_id"
        ],
        "type": "object"
      },
      "Securitypolicy_AttachedVPCInfo": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name"
        ],
        "type": "object"
      },
      "Securitypolicy_CreateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "egress_rules": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_RuleSpec"
            },
            "type": "array"
          },
          "ingress_rules": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_RuleSpec"
            },
            "type": "array"
          },
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name",
          "description"
        ],
        "type": "object"
      },
      "Securitypolicy_PolicyResponse": {
        "properties": {
          "attached_nics": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_AttachedNICInfo"
            },
            "type": "array"
          },
          "attached_subnets": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_AttachedSubnetInfo"
            },
            "type": "array"
          },
          "attached_vpcs": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_AttachedVPCInfo"
            },
            "type": "array"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "egress_rules": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_RuleResponse"
            },
            "type": "array"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "ingress_rules": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_RuleResponse"
            },
            "type": "array"
          },
          "name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "description",
          "status",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Securitypolicy_PolicyResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_PolicyResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Securitypolicy_RuleResponse": {
        "properties": {
          "destination_address": {
            "type": "string"
          },
          "end_port": {
            "format": "int32",
            "type": "integer"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "priority": {
            "format": "int32",
            "type": "integer"
          },
          "protocol": {
            "format": "int32",
            "type": "integer"
          },
          "source_address": {
            "type": "string"
          },
          "start_port": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "id",
          "source_address",
          "destination_address",
          "priority"
        ],
        "type": "object"
      },
      "Securitypolicy_RuleSpec": {
        "properties": {
          "destination_address": {
            "type": "string"
          },
          "end_port": {
            "format": "int32",
            "type": "integer"
          },
          "protocol": {
            "format": "int32",
            "type": "integer"
          },
          "source_address": {
            "type": "string"
          },
          "start_port": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "source_address",
          "destination_address"
        ],
        "type": "object"
      },
      "Securitypolicy_UpdateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "egress_rules": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_RuleSpec"
            },
            "type": "array"
          },
          "ingress_rules": {
            "items": {
              "$ref": "#/components/schemas/Securitypolicy_RuleSpec"
            },
            "type": "array"
          },
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Servicepricing_CreatePricingRequest": {
        "properties": {
          "currency": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "is_free": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "sku": {
            "type": "string"
          },
          "unit": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "sku",
          "unit",
          "price_per_unit",
          "currency"
        ],
        "type": "object"
      },
      "Servicepricing_GapReport": {
        "properties": {
          "orphan_price_rows": {
            "items": {
              "$ref": "#/components/schemas/Servicepricing_OrphanPriceRow"
            },
            "type": "array"
          },
          "price_mismatches": {
            "items": {
              "$ref": "#/components/schemas/Servicepricing_PriceMismatch"
            },
            "type": "array"
          },
          "summary": {
            "$ref": "#/components/schemas/Servicepricing_GapSummary"
          },
          "unpriced_instance_types": {
            "items": {
              "$ref": "#/components/schemas/Servicepricing_UnpricedInstanceType"
            },
            "type": "array"
          }
        },
        "required": [
          "summary"
        ],
        "type": "object"
      },
      "Servicepricing_GapSummary": {
        "properties": {
          "instance_types": {
            "format": "int32",
            "type": "integer"
          },
          "mismatches": {
            "format": "int32",
            "type": "integer"
          },
          "orphans": {
            "format": "int32",
            "type": "integer"
          },
          "price_rows": {
            "format": "int32",
            "type": "integer"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          },
          "unpriced": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "instance_types",
          "price_rows",
          "unpriced",
          "orphans",
          "mismatches",
          "total"
        ],
        "type": "object"
      },
      "Servicepricing_OrphanPriceRow": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "price_per_hour": {
            "type": "number"
          },
          "price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "sku": {
            "type": "string"
          },
          "unit": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "sku",
          "price_per_unit",
          "price_per_hour"
        ],
        "type": "object"
      },
      "Servicepricing_PriceMismatch": {
        "properties": {
          "billed_price_per_hour": {
            "type": "number"
          },
          "billed_price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "display_price_per_hour": {
            "type": "number"
          },
          "display_price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "instance_type": {
            "type": "string"
          },
          "pricing_id": {
            "format": "uuid",
            "type": "string"
          },
          "sku": {
            "type": "string"
          }
        },
        "required": [
          "instance_type",
          "pricing_id",
          "sku",
          "display_price_per_unit",
          "billed_price_per_unit",
          "display_price_per_hour",
          "billed_price_per_hour"
        ],
        "type": "object"
      },
      "Servicepricing_PricingResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "currency": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "is_free": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "price_per_hour": {
            "type": "number"
          },
          "price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "service_type": {
            "type": "string"
          },
          "sku": {
            "type": "string"
          },
          "unit": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "sku",
          "service_type",
          "unit",
          "price_per_unit",
          "price_per_hour",
          "is_free",
          "currency",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Servicepricing_PricingResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Servicepricing_PricingResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Servicepricing_UnpricedInstanceType": {
        "properties": {
          "display_price_per_hour": {
            "type": "number"
          },
          "display_price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "family": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "display_price_per_unit",
          "display_price_per_hour"
        ],
        "type": "object"
      },
      "Servicepricing_UpdatePricingRequest": {
        "properties": {
          "currency": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "is_free": {
            "type": "boolean"
          },
          "name": {
            "type": "string"
          },
          "price_per_unit": {
            "format": "int64",
            "type": "integer"
          },
          "sku": {
            "type": "string"
          },
          "unit": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Skill_CreateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Skill_FileContentResponse": {
        "properties": {
          "content": {
            "type": "string"
          },
          "path": {
            "type": "string"
          }
        },
        "required": [
          "path",
          "content"
        ],
        "type": "object"
      },
      "Skill_FileEntry": {
        "properties": {
          "path": {
            "type": "string"
          }
        },
        "required": [
          "path"
        ],
        "type": "object"
      },
      "Skill_ListFilesResponse": {
        "properties": {
          "files": {
            "items": {
              "$ref": "#/components/schemas/Skill_FileEntry"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Skill_PutFileRequest": {
        "properties": {
          "content": {
            "type": "string"
          },
          "path": {
            "type": "string"
          }
        },
        "required": [
          "path",
          "content"
        ],
        "type": "object"
      },
      "Skill_Response": {
        "properties": {
          "bucket_id": {
            "format": "uuid",
            "type": "string"
          },
          "bucket_prefix": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "name",
          "bucket_id",
          "bucket_prefix",
          "created_at"
        ],
        "type": "object"
      },
      "Skill_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Skill_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Skill_UpdateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Sshkey_CreateSSHKeyRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "public_key": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name",
          "public_key"
        ],
        "type": "object"
      },
      "Sshkey_GenerateSSHKeyRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Sshkey_GenerateSSHKeyResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "fingerprint": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "key_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "private_key": {
            "type": "string"
          },
          "public_key": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "public_key",
          "fingerprint",
          "key_type",
          "tenant_id",
          "created_at",
          "private_key"
        ],
        "type": "object"
      },
      "Sshkey_SSHKeyResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "fingerprint": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "key_type": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "public_key": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "public_key",
          "fingerprint",
          "key_type",
          "tenant_id",
          "created_at"
        ],
        "type": "object"
      },
      "Sshkey_SSHKeyResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Sshkey_SSHKeyResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Sshkey_UpdateSSHKeyRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Stats_DiskStat": {
        "properties": {
          "disk_id": {
            "type": "string"
          },
          "read_bytes": {
            "type": "number"
          },
          "write_bytes": {
            "type": "number"
          }
        },
        "required": [
          "disk_id",
          "read_bytes",
          "write_bytes"
        ],
        "type": "object"
      },
      "Stats_LiveStats": {
        "properties": {
          "collected_at": {
            "format": "date-time",
            "type": "string"
          },
          "cpu_pct": {
            "type": "number"
          },
          "disk_io_bytes": {
            "type": "number"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "mem_total_mib": {
            "type": "number"
          },
          "mem_used_mib": {
            "type": "number"
          },
          "net_rx_bytes": {
            "type": "number"
          },
          "net_tx_bytes": {
            "type": "number"
          },
          "per_disk": {
            "items": {
              "$ref": "#/components/schemas/Stats_DiskStat"
            },
            "type": "array"
          },
          "per_nic": {
            "items": {
              "$ref": "#/components/schemas/Stats_NICStat"
            },
            "type": "array"
          },
          "raw": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "resource_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "resource_id",
          "host_id",
          "cpu_pct",
          "mem_used_mib",
          "collected_at"
        ],
        "type": "object"
      },
      "Stats_MetricChartSeries": {
        "properties": {
          "points": {
            "items": {
              "$ref": "#/components/schemas/Stats_MetricPoint"
            },
            "type": "array"
          },
          "resource_id": {
            "type": "string"
          }
        },
        "required": [
          "resource_id"
        ],
        "type": "object"
      },
      "Stats_MetricPoint": {
        "properties": {
          "cpu": {
            "type": "number"
          },
          "disk": {
            "type": "number"
          },
          "memory": {
            "type": "number"
          },
          "network": {
            "type": "number"
          },
          "t": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "t",
          "cpu",
          "memory",
          "disk",
          "network"
        ],
        "type": "object"
      },
      "Stats_MetricSeries": {
        "properties": {
          "resource": {
            "type": "string"
          },
          "resource_id": {
            "format": "uuid",
            "type": "string"
          },
          "samples": {
            "items": {
              "$ref": "#/components/schemas/Meta_MetricSample"
            },
            "type": "array"
          },
          "since": {
            "format": "date-time",
            "type": "string"
          },
          "until": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "resource_id",
          "resource",
          "since",
          "until"
        ],
        "type": "object"
      },
      "Stats_NICStat": {
        "properties": {
          "nic_id": {
            "type": "string"
          },
          "rx_bytes": {
            "type": "number"
          },
          "tx_bytes": {
            "type": "number"
          }
        },
        "required": [
          "nic_id",
          "rx_bytes",
          "tx_bytes"
        ],
        "type": "object"
      },
      "Storageiops_SetStorageIopsTierRequest": {
        "properties": {
          "baseline_iops": {
            "format": "int32",
            "type": "integer"
          },
          "max_iops": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "baseline_iops",
          "max_iops"
        ],
        "type": "object"
      },
      "Storageiops_StorageIopsTierResponse": {
        "properties": {
          "available": {
            "type": "boolean"
          },
          "baseline_iops": {
            "format": "int32",
            "type": "integer"
          },
          "eligible_nodes": {
            "format": "int32",
            "type": "integer"
          },
          "max_iops": {
            "format": "int32",
            "type": "integer"
          },
          "replicas": {
            "format": "int32",
            "type": "integer"
          },
          "storage_type": {
            "type": "string"
          }
        },
        "required": [
          "storage_type",
          "baseline_iops",
          "max_iops",
          "replicas",
          "eligible_nodes",
          "available"
        ],
        "type": "object"
      },
      "Subnet_CreateSubnetRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "v4_cidr": {
            "type": "string"
          },
          "v6_cidr": {
            "type": "string"
          },
          "vni": {
            "format": "int32",
            "type": "integer"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "v4_cidr",
          "v6_cidr"
        ],
        "type": "object"
      },
      "Subnet_SubnetResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "dhcp_config_id": {
            "format": "uuid",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "security_policy_ids": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "v4_cidr": {
            "type": "string"
          },
          "v6_cidr": {
            "type": "string"
          },
          "vni": {
            "format": "int32",
            "type": "integer"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "vni",
          "name",
          "v4_cidr",
          "v6_cidr",
          "status",
          "vpc_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Subnet_SubnetResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Subnet_SubnetResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Subnet_UpdateSubnetRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Supportticket_AddMessageRequest": {
        "properties": {
          "body": {
            "type": "string"
          }
        },
        "required": [
          "body"
        ],
        "type": "object"
      },
      "Supportticket_CreateTicketRequest": {
        "properties": {
          "body": {
            "type": "string"
          },
          "priority": {
            "type": "string"
          },
          "subject": {
            "type": "string"
          }
        },
        "required": [
          "subject",
          "body"
        ],
        "type": "object"
      },
      "Supportticket_MessageResponse": {
        "properties": {
          "author_id": {
            "format": "uuid",
            "type": "string"
          },
          "body": {
            "type": "string"
          },
          "is_admin": {
            "type": "boolean"
          },
          "ticket_id": {
            "format": "uuid",
            "type": "string"
          },
          "ts": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "ticket_id",
          "ts",
          "author_id",
          "is_admin",
          "body"
        ],
        "type": "object"
      },
      "Supportticket_TicketResponse": {
        "properties": {
          "assignee_id": {
            "format": "uuid",
            "type": "string"
          },
          "body": {
            "type": "string"
          },
          "closed_at": {
            "format": "date-time",
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "opener_id": {
            "format": "uuid",
            "type": "string"
          },
          "priority": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "subject": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "opener_id",
          "subject",
          "body",
          "status",
          "priority",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Supportticket_TicketResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Supportticket_TicketResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Supportticket_UpdateTicketRequest": {
        "properties": {
          "assignee_id": {
            "format": "uuid",
            "type": "string"
          },
          "body": {
            "type": "string"
          },
          "priority": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "subject": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Tenant_CreateRequest": {
        "properties": {
          "billing_email": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "slug": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name",
          "slug",
          "billing_email"
        ],
        "type": "object"
      },
      "Tenant_EnableZoneRequest": {
        "properties": {
          "zone": {
            "type": "string"
          }
        },
        "required": [
          "zone"
        ],
        "type": "object"
      },
      "Tenant_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "enabled_zones": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "slug": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "slug",
          "status",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Tenant_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Tenant_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Tenant_UpdateRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Tenantadmin_GrantCreditRequest": {
        "properties": {
          "amount_cents": {
            "format": "int64",
            "type": "integer"
          },
          "expires_at": {
            "format": "date-time",
            "type": "string"
          },
          "reason": {
            "type": "string"
          }
        },
        "required": [
          "amount_cents",
          "reason"
        ],
        "type": "object"
      },
      "Tenantadmin_OverdueTenant": {
        "properties": {
          "credit_balance_cents": {
            "format": "int64",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "overdue_cents": {
            "format": "int64",
            "type": "integer"
          },
          "overdue_count": {
            "format": "int32",
            "type": "integer"
          },
          "slug": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "tenant_id",
          "name",
          "slug",
          "status",
          "overdue_cents",
          "overdue_count",
          "credit_balance_cents"
        ],
        "type": "object"
      },
      "Tenantadmin_Overview": {
        "properties": {
          "billing": {
            "$ref": "#/components/schemas/Tenantadmin_OverviewBilling"
          },
          "resources": {
            "items": {
              "$ref": "#/components/schemas/Tenantadmin_ResourceCount"
            },
            "type": "array"
          },
          "suspension": {
            "$ref": "#/components/schemas/Tenantadmin_OverviewSuspension"
          },
          "tenant": {
            "$ref": "#/components/schemas/Tenant_Response"
          },
          "users": {
            "items": {
              "$ref": "#/components/schemas/Tenantadmin_OverviewUser"
            },
            "type": "array"
          }
        },
        "required": [
          "billing",
          "suspension"
        ],
        "type": "object"
      },
      "Tenantadmin_OverviewBilling": {
        "properties": {
          "accounts": {
            "items": {
              "$ref": "#/components/schemas/Billing_AccountResponse"
            },
            "type": "array"
          },
          "credit_balance_cents": {
            "format": "int64",
            "type": "integer"
          },
          "credits": {
            "items": {
              "$ref": "#/components/schemas/Billing_CreditResponse"
            },
            "type": "array"
          },
          "currency": {
            "type": "string"
          },
          "debt_cents": {
            "format": "int64",
            "type": "integer"
          },
          "invoices": {
            "items": {
              "$ref": "#/components/schemas/Billing_InvoiceResponse"
            },
            "type": "array"
          },
          "outstanding_cents": {
            "format": "int64",
            "type": "integer"
          },
          "overdue_cents": {
            "format": "int64",
            "type": "integer"
          },
          "overdue_count": {
            "format": "int32",
            "type": "integer"
          },
          "total_spend_cents": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "credit_balance_cents",
          "debt_cents",
          "outstanding_cents",
          "overdue_cents",
          "overdue_count",
          "total_spend_cents",
          "currency"
        ],
        "type": "object"
      },
      "Tenantadmin_OverviewSuspension": {
        "properties": {
          "suspend_policy_id": {
            "format": "uuid",
            "type": "string"
          },
          "suspended": {
            "type": "boolean"
          },
          "suspended_at": {
            "type": "string"
          }
        },
        "required": [
          "suspended"
        ],
        "type": "object"
      },
      "Tenantadmin_OverviewUser": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "email": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "role_name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "email",
          "role",
          "status",
          "created_at"
        ],
        "type": "object"
      },
      "Tenantadmin_PublicSweep": {
        "properties": {
          "failures": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "gateways_swept": {
            "format": "int32",
            "type": "integer"
          },
          "gateways_total": {
            "format": "int32",
            "type": "integer"
          },
          "public_ips_swept": {
            "format": "int32",
            "type": "integer"
          },
          "public_ips_total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "public_ips_total",
          "public_ips_swept",
          "gateways_total",
          "gateways_swept"
        ],
        "type": "object"
      },
      "Tenantadmin_ResourceCount": {
        "properties": {
          "count": {
            "format": "int32",
            "type": "integer"
          },
          "type": {
            "type": "string"
          }
        },
        "required": [
          "type",
          "count"
        ],
        "type": "object"
      },
      "Tenantadmin_SuspendResponse": {
        "properties": {
          "legacy_acls_cleared": {
            "format": "int32",
            "type": "integer"
          },
          "nic_failures": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "public_sweep": {
            "$ref": "#/components/schemas/Tenantadmin_PublicSweep"
          },
          "status": {
            "type": "string"
          },
          "suspended_at": {
            "format": "date-time",
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "tenant_id",
          "status",
          "public_sweep"
        ],
        "type": "object"
      },
      "Tenantadmin_UnsuspendResponse": {
        "properties": {
          "nic_failures": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "nics_restored": {
            "format": "int32",
            "type": "integer"
          },
          "nics_total": {
            "format": "int32",
            "type": "integer"
          },
          "public_sweep": {
            "$ref": "#/components/schemas/Tenantadmin_PublicSweep"
          },
          "status": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "tenant_id",
          "status",
          "public_sweep",
          "nics_total",
          "nics_restored"
        ],
        "type": "object"
      },
      "Tool_CreateRequest": {
        "properties": {
          "auth_header": {
            "type": "string"
          },
          "auth_method": {
            "type": "string"
          },
          "credential": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "env_var": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "transport": {
            "type": "string"
          },
          "url": {
            "type": "string"
          },
          "usage": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Tool_Response": {
        "properties": {
          "auth_header": {
            "type": "string"
          },
          "auth_method": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "env_var": {
            "type": "string"
          },
          "has_credential": {
            "type": "boolean"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "transport": {
            "type": "string"
          },
          "url": {
            "type": "string"
          },
          "usage": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "tenant_id",
          "name",
          "has_credential",
          "created_at"
        ],
        "type": "object"
      },
      "Tool_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Tool_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Tool_TestRequest": {
        "properties": {
          "test_url": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Tool_TestResult": {
        "properties": {
          "http_status": {
            "format": "int32",
            "type": "integer"
          },
          "message": {
            "type": "string"
          },
          "probed": {
            "type": "boolean"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "status",
          "message",
          "probed"
        ],
        "type": "object"
      },
      "Tool_UpdateRequest": {
        "properties": {
          "auth_header": {
            "type": "string"
          },
          "auth_method": {
            "type": "string"
          },
          "credential": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "env_var": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "transport": {
            "type": "string"
          },
          "url": {
            "type": "string"
          },
          "usage": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Topology_NumaNodeResponse": {
        "properties": {
          "cpus": {
            "items": {
              "format": "int32",
              "type": "integer"
            },
            "type": "array"
          },
          "memory_mib": {
            "format": "int64",
            "type": "integer"
          },
          "metadata": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "node_index": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "node_index",
          "memory_mib"
        ],
        "type": "object"
      },
      "Topology_PreflightResponse": {
        "properties": {
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "passed": {
            "type": "boolean"
          },
          "results": {
            "items": {
              "$ref": "#/components/schemas/Topology_PreflightResultEntry"
            },
            "type": "array"
          }
        },
        "required": [
          "host_id",
          "passed"
        ],
        "type": "object"
      },
      "Topology_PreflightResultEntry": {
        "properties": {
          "message": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "remediation": {
            "type": "string"
          },
          "severity": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "severity",
          "message"
        ],
        "type": "object"
      },
      "Topology_TopologyResponse": {
        "properties": {
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "numa_discovered_at": {
            "format": "date-time",
            "type": "string"
          },
          "numa_nodes": {
            "items": {
              "$ref": "#/components/schemas/Topology_NumaNodeResponse"
            },
            "type": "array"
          }
        },
        "required": [
          "host_id"
        ],
        "type": "object"
      },
      "User_CreateUserRequest": {
        "properties": {
          "email": {
            "type": "string"
          },
          "password": {
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "role_slug": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "email",
          "password",
          "tenant_id"
        ],
        "type": "object"
      },
      "User_UpdateUserRequest": {
        "properties": {
          "email": {
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "role_slug": {
            "type": "string"
          },
          "status": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "User_UserResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "email": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "role": {
            "type": "string"
          },
          "role_name": {
            "type": "string"
          },
          "role_slug": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "id",
          "email",
          "role",
          "role_slug",
          "role_name",
          "status",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "User_UserResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/User_UserResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Vm_AttachDiskRequest": {
        "properties": {
          "disk_id": {
            "format": "uuid",
            "type": "string"
          },
          "slot": {
            "type": "string"
          }
        },
        "required": [
          "disk_id"
        ],
        "type": "object"
      },
      "Vm_AttachNICRequest": {
        "properties": {
          "nic_id": {
            "format": "uuid",
            "type": "string"
          },
          "slot": {
            "type": "string"
          }
        },
        "required": [
          "nic_id"
        ],
        "type": "object"
      },
      "Vm_AttachedDisk": {
        "properties": {
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "serial": {
            "type": "string"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "storage_type": {
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "Vm_AttachedNIC": {
        "properties": {
          "gateway_ip": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "ipv4_address": {
            "type": "string"
          },
          "ipv6_address": {
            "type": "string"
          },
          "mac_address": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "prefix_len": {
            "format": "int32",
            "type": "integer"
          },
          "public_ip": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "Vm_CreateRequest": {
        "properties": {
          "device_spec": {
            "items": {
              "additionalProperties": {
                "additionalProperties": true,
                "type": "object"
              },
              "type": "object"
            },
            "type": "array"
          },
          "disks": {
            "items": {
              "$ref": "#/components/schemas/Vm_VMDiskSpec"
            },
            "type": "array"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "image_id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "iso_bucket_id": {
            "format": "uuid",
            "type": "string"
          },
          "iso_object_key": {
            "type": "string"
          },
          "iso_path": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "password": {
            "type": "string"
          },
          "power_state": {
            "type": "string"
          },
          "processor_units": {
            "format": "int32",
            "type": "integer"
          },
          "resource_type": {
            "type": "string"
          },
          "ssh_key_id": {
            "format": "uuid",
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "user_data": {
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "instance_type",
          "vpc_id"
        ],
        "type": "object"
      },
      "Vm_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "disks": {
            "items": {
              "$ref": "#/components/schemas/Vm_AttachedDisk"
            },
            "type": "array"
          },
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "host_id": {
            "format": "uuid",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "nics": {
            "items": {
              "$ref": "#/components/schemas/Vm_AttachedNIC"
            },
            "type": "array"
          },
          "power_state": {
            "type": "string"
          },
          "processor_units": {
            "format": "int32",
            "type": "integer"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "processor_units",
          "memory_mib",
          "power_state",
          "status",
          "tenant_id",
          "vpc_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Vm_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Vm_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Vm_UpdateRequest": {
        "properties": {
          "env_vars": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "instance_role": {
            "type": "string"
          },
          "instance_type": {
            "type": "string"
          },
          "memory_mib": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "processor_units": {
            "format": "int32",
            "type": "integer"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "user_data": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Vm_VMDiskSpec": {
        "properties": {
          "iops": {
            "format": "int32",
            "type": "integer"
          },
          "size_gib": {
            "format": "int32",
            "type": "integer"
          },
          "storage_type": {
            "type": "string"
          }
        },
        "required": [
          "size_gib"
        ],
        "type": "object"
      },
      "Vpc_CreateVPCRequest": {
        "properties": {
          "ipv6": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "v4_cidr": {
            "type": "string"
          },
          "v6_cidr": {
            "type": "string"
          },
          "vrf_id": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "name",
          "v4_cidr",
          "v6_cidr",
          "vrf_id"
        ],
        "type": "object"
      },
      "Vpc_UpdateVPCRequest": {
        "properties": {
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Vpc_VPCResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "ipv6_mode": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "public_ipv6": {
            "type": "boolean"
          },
          "security_policy_ids": {
            "items": {
              "format": "uuid",
              "type": "string"
            },
            "type": "array"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "v4_cidr": {
            "type": "string"
          },
          "v6_cidr": {
            "type": "string"
          },
          "vrf_id": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "id",
          "vrf_id",
          "name",
          "v4_cidr",
          "v6_cidr",
          "public_ipv6",
          "ipv6_mode",
          "status",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Vpc_VPCResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Vpc_VPCResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Vpngateway_ClientConfigResponse": {
        "properties": {
          "config": {
            "type": "string"
          },
          "filename": {
            "type": "string"
          },
          "protocol": {
            "type": "string"
          }
        },
        "required": [
          "protocol",
          "config",
          "filename"
        ],
        "type": "object"
      },
      "Vpngateway_CreateRequest": {
        "properties": {
          "config": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "name": {
            "type": "string"
          },
          "protocol": {
            "type": "string"
          },
          "resource_type": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "name",
          "protocol",
          "vpc_id",
          "subnet_id"
        ],
        "type": "object"
      },
      "Vpngateway_Response": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "protocol": {
            "type": "string"
          },
          "public_ips": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "status": {
            "type": "string"
          },
          "status_reason": {
            "type": "string"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "protocol",
          "status",
          "vpc_id",
          "subnet_id",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Vpngateway_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Vpngateway_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Vpngateway_UpdateRequest": {
        "properties": {
          "config": {
            "additionalProperties": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "object"
          },
          "name": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Workflow_ApprovalRequest": {
        "properties": {
          "decision": {
            "type": "string"
          },
          "note": {
            "type": "string"
          },
          "step_id": {
            "type": "string"
          }
        },
        "required": [
          "step_id",
          "decision"
        ],
        "type": "object"
      },
      "Workflow_CanaryInfo": {
        "properties": {
          "online": {
            "type": "boolean"
          },
          "state": {
            "type": "string"
          },
          "version": {
            "format": "int32",
            "type": "integer"
          },
          "weight": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "version",
          "weight",
          "state",
          "online"
        ],
        "type": "object"
      },
      "Workflow_CanaryRequest": {
        "properties": {
          "version": {
            "format": "int32",
            "type": "integer"
          },
          "weight": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "version",
          "weight"
        ],
        "type": "object"
      },
      "Workflow_CreateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "spec": {
            "additionalProperties": true,
            "type": "object"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Workflow_DeployRequest": {
        "properties": {
          "idle_undeploy_minutes": {
            "format": "int32",
            "type": "integer"
          },
          "subnet_id": {
            "format": "uuid",
            "type": "string"
          },
          "vpc_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "vpc_id",
          "subnet_id"
        ],
        "type": "object"
      },
      "Workflow_EvalCaseRequest": {
        "properties": {
          "assertion_type": {
            "type": "string"
          },
          "assertion_value": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "input": {
            "additionalProperties": true,
            "type": "object"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "assertion_type",
          "assertion_value"
        ],
        "type": "object"
      },
      "Workflow_EvalCaseResponse": {
        "properties": {
          "assertion_type": {
            "type": "string"
          },
          "assertion_value": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "input": {
            "additionalProperties": true,
            "type": "object"
          },
          "name": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "assertion_type",
          "assertion_value"
        ],
        "type": "object"
      },
      "Workflow_PublishRequest": {
        "properties": {
          "notes": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Workflow_RagEndpointResponse": {
        "properties": {
          "api_key": {
            "type": "string"
          },
          "embed_model": {
            "type": "string"
          },
          "endpoint": {
            "type": "string"
          }
        },
        "required": [
          "endpoint",
          "embed_model"
        ],
        "type": "object"
      },
      "Workflow_Response": {
        "properties": {
          "canary": {
            "$ref": "#/components/schemas/Workflow_CanaryInfo"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "current_version": {
            "format": "int32",
            "type": "integer"
          },
          "deployed_version": {
            "format": "int32",
            "type": "integer"
          },
          "deployment_state": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "idle_undeploy_minutes": {
            "format": "int32",
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "require_eval_pass": {
            "type": "boolean"
          },
          "runner_online": {
            "type": "boolean"
          },
          "spec": {
            "additionalProperties": true,
            "type": "object"
          },
          "status": {
            "type": "string"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          },
          "trigger_type": {
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "webhook_set": {
            "type": "boolean"
          }
        },
        "required": [
          "id",
          "name",
          "current_version",
          "status",
          "webhook_set",
          "runner_online",
          "require_eval_pass",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Workflow_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Workflow_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Workflow_RunListItem": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "finished_at": {
            "format": "date-time",
            "type": "string"
          },
          "run_id": {
            "format": "uuid",
            "type": "string"
          },
          "seq": {
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "tokens_total": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "run_id",
          "seq",
          "state",
          "tokens_total",
          "created_at"
        ],
        "type": "object"
      },
      "Workflow_RunListResponse": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Workflow_RunListItem"
            },
            "type": "array"
          },
          "next_before": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Workflow_RunReport": {
        "properties": {
          "cursor_node_id": {
            "type": "string"
          },
          "error": {
            "type": "string"
          },
          "llm_calls": {
            "format": "int32",
            "type": "integer"
          },
          "output": {
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "step": {
            "$ref": "#/components/schemas/Workflow_StepReport"
          },
          "steps_run": {
            "format": "int32",
            "type": "integer"
          },
          "tokens_total": {
            "format": "int64",
            "type": "integer"
          }
        },
        "type": "object"
      },
      "Workflow_RunRequest": {
        "properties": {
          "input": {
            "additionalProperties": true,
            "type": "object"
          }
        },
        "type": "object"
      },
      "Workflow_RunResponse": {
        "properties": {
          "approval_message": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "cursor_node_id": {
            "type": "string"
          },
          "error": {
            "type": "string"
          },
          "finished_at": {
            "format": "date-time",
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "input": {
            "additionalProperties": true,
            "type": "object"
          },
          "llm_calls": {
            "format": "int32",
            "type": "integer"
          },
          "output": {
            "additionalProperties": true,
            "type": "object"
          },
          "spec": {
            "additionalProperties": true,
            "type": "object"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "steps": {
            "items": {
              "$ref": "#/components/schemas/Workflow_StepResponse"
            },
            "type": "array"
          },
          "steps_executed": {
            "format": "int32",
            "type": "integer"
          },
          "tokens_total": {
            "format": "int64",
            "type": "integer"
          },
          "trigger_kind": {
            "type": "string"
          },
          "version": {
            "format": "int32",
            "type": "integer"
          },
          "workflow_id": {
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "id",
          "workflow_id",
          "version",
          "state",
          "trigger_kind",
          "tokens_total",
          "llm_calls",
          "steps_executed",
          "created_at"
        ],
        "type": "object"
      },
      "Workflow_StepReport": {
        "properties": {
          "attempt": {
            "format": "int32",
            "type": "integer"
          },
          "error": {
            "type": "string"
          },
          "input": {
            "type": "string"
          },
          "node_id": {
            "type": "string"
          },
          "node_type": {
            "type": "string"
          },
          "output": {
            "type": "string"
          },
          "seq": {
            "format": "int32",
            "type": "integer"
          },
          "state": {
            "type": "string"
          },
          "tokens": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "seq",
          "node_id",
          "node_type",
          "attempt",
          "state"
        ],
        "type": "object"
      },
      "Workflow_StepResponse": {
        "properties": {
          "attempt": {
            "format": "int32",
            "type": "integer"
          },
          "error": {
            "type": "string"
          },
          "finished_at": {
            "format": "date-time",
            "type": "string"
          },
          "input": {
            "additionalProperties": true,
            "type": "object"
          },
          "node_id": {
            "type": "string"
          },
          "node_type": {
            "type": "string"
          },
          "output": {
            "additionalProperties": true,
            "type": "object"
          },
          "seq": {
            "format": "int32",
            "type": "integer"
          },
          "started_at": {
            "format": "date-time",
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "tokens": {
            "format": "int64",
            "type": "integer"
          }
        },
        "required": [
          "seq",
          "node_id",
          "node_type",
          "attempt",
          "state",
          "tokens"
        ],
        "type": "object"
      },
      "Workflow_UpdateRequest": {
        "properties": {
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "spec": {
            "additionalProperties": true,
            "type": "object"
          },
          "tags": {
            "additionalProperties": {
              "type": "string"
            },
            "type": "object"
          }
        },
        "type": "object"
      },
      "Workflow_ValidateRequest": {
        "properties": {
          "spec": {
            "additionalProperties": true,
            "type": "object"
          }
        },
        "type": "object"
      },
      "Workflow_VersionResponse": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "notes": {
            "type": "string"
          },
          "spec": {
            "additionalProperties": true,
            "type": "object"
          },
          "version": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "version",
          "created_at"
        ],
        "type": "object"
      },
      "Workflow_VersionResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Workflow_VersionResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Workflowkit_ValidationResult": {
        "properties": {
          "by_node": {
            "additionalProperties": {
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            "type": "object"
          },
          "global": {
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "Workspace_CICDStatus": {
        "properties": {
          "app_status": {
            "type": "string"
          },
          "app_uuid": {
            "type": "string"
          },
          "backend_url": {
            "type": "string"
          },
          "branch": {
            "type": "string"
          },
          "deploy_error": {
            "type": "string"
          },
          "deploy_status": {
            "type": "string"
          },
          "enabled": {
            "type": "boolean"
          },
          "last_deploy_at": {
            "format": "date-time",
            "type": "string"
          },
          "last_deploy_sha": {
            "type": "string"
          },
          "last_deploy_uuid": {
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "last_seen_sha": {
            "type": "string"
          },
          "live_url": {
            "type": "string"
          },
          "storefront_app_uuid": {
            "type": "string"
          },
          "storefront_deploy_status": {
            "type": "string"
          },
          "storefront_status": {
            "type": "string"
          },
          "webhook_registered": {
            "type": "boolean"
          }
        },
        "required": [
          "enabled",
          "branch",
          "webhook_registered",
          "last_deploy_at"
        ],
        "type": "object"
      },
      "Workspace_ChatRef": {
        "properties": {
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "kind": {
            "type": "string"
          },
          "ref_id": {
            "format": "uuid",
            "type": "string"
          },
          "seq": {
            "type": "string"
          },
          "title": {
            "type": "string"
          }
        },
        "required": [
          "kind",
          "ref_id",
          "title",
          "seq",
          "created_at"
        ],
        "type": "object"
      },
      "Workspace_ChatRefPage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Workspace_ChatRef"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Workspace_CreateChatRequest": {
        "properties": {
          "attachments": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_ChatAttachment"
            },
            "type": "array"
          },
          "environment_id": {
            "format": "uuid",
            "type": "string"
          },
          "harness": {
            "type": "string"
          },
          "instance_size": {
            "type": "string"
          },
          "members": {
            "items": {
              "$ref": "#/components/schemas/Agentteam_MemberSpec"
            },
            "type": "array"
          },
          "mode": {
            "type": "string"
          },
          "model": {
            "type": "string"
          },
          "prompt": {
            "type": "string"
          },
          "reasoning_effort": {
            "type": "string"
          }
        },
        "required": [
          "mode",
          "prompt"
        ],
        "type": "object"
      },
      "Workspace_CreateRepoRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "private": {
            "type": "boolean"
          },
          "readme": {
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Workspace_CreateRequest": {
        "properties": {
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "deploy_server_id": {
            "format": "uuid",
            "type": "string"
          },
          "enable_cicd": {
            "type": "boolean"
          },
          "flavor": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "new_repo": {
            "$ref": "#/components/schemas/Workspace_NewRepoSpec"
          },
          "repo_full_name": {
            "type": "string"
          },
          "site_title": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Workspace_DeployLogResponse": {
        "properties": {
          "app": {
            "type": "string"
          },
          "logs": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "status"
        ],
        "type": "object"
      },
      "Workspace_DeploymentEntry": {
        "properties": {
          "app": {
            "type": "string"
          },
          "commit": {
            "type": "string"
          },
          "created_at": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "uuid": {
            "type": "string"
          }
        },
        "required": [
          "uuid",
          "status"
        ],
        "type": "object"
      },
      "Workspace_DeploymentEntryPage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Workspace_DeploymentEntry"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Workspace_MedusaCredentials": {
        "properties": {
          "admin_url": {
            "type": "string"
          },
          "backend_url": {
            "type": "string"
          },
          "db_uuid": {
            "type": "string"
          },
          "email": {
            "type": "string"
          },
          "password": {
            "type": "string"
          },
          "publishable_key": {
            "type": "string"
          },
          "redis_uuid": {
            "type": "string"
          },
          "storefront_url": {
            "type": "string"
          }
        },
        "required": [
          "admin_url",
          "email",
          "password",
          "backend_url",
          "storefront_url"
        ],
        "type": "object"
      },
      "Workspace_NewRepoSpec": {
        "properties": {
          "description": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "private": {
            "type": "boolean"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "Workspace_RepoResponse": {
        "properties": {
          "default_branch": {
            "type": "string"
          },
          "description": {
            "type": "string"
          },
          "full_name": {
            "type": "string"
          },
          "html_url": {
            "type": "string"
          },
          "private": {
            "type": "boolean"
          },
          "pushed_at": {
            "format": "date-time",
            "type": "string"
          }
        },
        "required": [
          "full_name",
          "default_branch",
          "private",
          "html_url",
          "pushed_at"
        ],
        "type": "object"
      },
      "Workspace_RepoResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Workspace_RepoResponse"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Workspace_Response": {
        "properties": {
          "ci_enabled": {
            "type": "boolean"
          },
          "connector_id": {
            "format": "uuid",
            "type": "string"
          },
          "coolify_app_uuid": {
            "type": "string"
          },
          "created_at": {
            "format": "date-time",
            "type": "string"
          },
          "default_branch": {
            "type": "string"
          },
          "deploy_server_id": {
            "format": "uuid",
            "type": "string"
          },
          "flavor": {
            "type": "string"
          },
          "id": {
            "format": "uuid",
            "type": "string"
          },
          "last_deploy_at": {
            "format": "date-time",
            "type": "string"
          },
          "last_deploy_sha": {
            "type": "string"
          },
          "last_error": {
            "type": "string"
          },
          "last_seen_sha": {
            "type": "string"
          },
          "live_url": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "repo_full_name": {
            "type": "string"
          },
          "repo_private": {
            "type": "boolean"
          },
          "repo_url": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "tenant_id": {
            "format": "uuid",
            "type": "string"
          },
          "updated_at": {
            "format": "date-time",
            "type": "string"
          },
          "webhook_registered": {
            "type": "boolean"
          },
          "wp_site_name": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "name",
          "repo_full_name",
          "repo_url",
          "default_branch",
          "repo_private",
          "flavor",
          "ci_enabled",
          "webhook_registered",
          "last_deploy_at",
          "status",
          "tenant_id",
          "created_at",
          "updated_at"
        ],
        "type": "object"
      },
      "Workspace_ResponsePage": {
        "properties": {
          "items": {
            "items": {
              "$ref": "#/components/schemas/Workspace_Response"
            },
            "type": "array"
          },
          "total": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "total"
        ],
        "type": "object"
      },
      "Workspace_RuntimeLogResponse": {
        "properties": {
          "app": {
            "type": "string"
          },
          "logs": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Workspace_UpdateRequest": {
        "properties": {
          "name": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "Workspace_WPExecRequest": {
        "properties": {
          "args": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "timeout_seconds": {
            "format": "int32",
            "type": "integer"
          }
        },
        "required": [
          "args"
        ],
        "type": "object"
      },
      "Workspace_WPExecResponse": {
        "properties": {
          "exit_code": {
            "format": "int32",
            "type": "integer"
          },
          "stderr": {
            "type": "string"
          },
          "stdout": {
            "type": "string"
          }
        },
        "required": [
          "stdout",
          "stderr",
          "exit_code"
        ],
        "type": "object"
      },
      "Workspace_WordPressCredentials": {
        "properties": {
          "admin_url": {
            "type": "string"
          },
          "db_service_id": {
            "type": "string"
          },
          "password": {
            "type": "string"
          },
          "site_url": {
            "type": "string"
          },
          "username": {
            "type": "string"
          }
        },
        "required": [
          "admin_url",
          "username",
          "password",
          "site_url"
        ],
        "type": "object"
      },
      "Zones_Status": {
        "properties": {
          "fetched_at": {
            "format": "date-time",
            "type": "string"
          },
          "from_cache": {
            "type": "boolean"
          },
          "maintenance": {
            "type": "boolean"
          },
          "self": {
            "$ref": "#/components/schemas/Zones_Zone"
          },
          "standalone": {
            "type": "boolean"
          },
          "zones": {
            "items": {
              "$ref": "#/components/schemas/Zones_Zone"
            },
            "type": "array"
          }
        },
        "required": [
          "self",
          "maintenance",
          "standalone",
          "from_cache"
        ],
        "type": "object"
      },
      "Zones_Zone": {
        "properties": {
          "api": {
            "type": "string"
          },
          "city": {
            "type": "string"
          },
          "country": {
            "type": "string"
          },
          "flag": {
            "type": "string"
          },
          "id": {
            "type": "string"
          },
          "region": {
            "type": "string"
          },
          "status": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "api",
          "status"
        ],
        "type": "object"
      },
      "Error": {
        "type": "object",
        "required": [
          "error"
        ],
        "properties": {
          "error": {
            "type": "string",
            "description": "A short machine-readable code, or the failure itself in prose."
          },
          "message": {
            "type": "string",
            "description": "The same failure phrased for a person. Not always present."
          }
        }
      }
    },
    "securitySchemes": {
      "bearerAuth": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "JWT",
        "description": "An access token from this zone's `POST /oauth/token`, or a session token from `POST /api/v1/auth/login`. Send it as `Authorization: Bearer <token>`."
      },
      "oauth2": {
        "type": "oauth2",
        "description": "The client_credentials grant, for API clients. Tokens are issued per zone, by the zone you are calling. The scopes a token may request are permission keys; `GET /api/v1/api-clients/scopes` lists the ones the caller is allowed to grant.",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "/oauth/token",
            "refreshUrl": "/oauth/token",
            "scopes": {}
          }
        }
      }
    }
  },
  "info": {
    "title": "Interlaken Orchestrator API",
    "version": "1.0.0",
    "description": "The Interlaken orchestrator API is the single control plane for compute, storage,\nnetworking, applications and agents. Everything the console can do, it does through\nthese routes.\n\nEvery request needs a bearer token. Machine callers get one from\n`POST /oauth/token` with the `client_credentials` grant; see\n[Authentication](/docs/authentication) for the whole flow, and\n[Permissions and scopes](/docs/authentication/permissions) for what a token is\nallowed to do once it has one.\n\n**There is no single API host.** Every availability zone is a separate\ndeployment with its own base URL, shaped `https://api.<zone>.interlaken.ai`,\nand a resource exists in exactly one of them. Pick the zone above before\ntrying a request. The live list is\n[interlaken.ai/zones.json](https://interlaken.ai/zones.json), and\n`GET /api/v1/zone` tells you which zone answered."
  },
  "openapi": "3.0.3",
  "paths": {
    "/.well-known/jwks.json": {
      "get": {
        "tags": [
          "oauth"
        ],
        "summary": "Signing keys",
        "description": "The public half of the RS256 keys that sign access tokens, as a JSON Web Key Set. Match a token's `kid` header against it to verify a token yourself. Also served at `/api/v1/auth/jwks`, which is the location the discovery document advertises.",
        "security": [],
        "responses": {
          "200": {
            "description": "A JSON Web Key Set.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "keys": {
                      "type": "array",
                      "items": {
                        "type": "object"
                      }
                    }
                  }
                }
              }
            }
          }
        },
        "operationId": "getWellKnownJwksJson"
      }
    },
    "/.well-known/oauth-authorization-server": {
      "get": {
        "tags": [
          "oauth"
        ],
        "summary": "Authorization server metadata",
        "description": "RFC 8414. Lists this zone's endpoints, the grants it supports and the PKCE methods it accepts.",
        "security": [],
        "responses": {
          "200": {
            "description": "Server metadata.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "issuer": {
                      "type": "string"
                    },
                    "authorization_endpoint": {
                      "type": "string"
                    },
                    "token_endpoint": {
                      "type": "string"
                    },
                    "revocation_endpoint": {
                      "type": "string"
                    },
                    "registration_endpoint": {
                      "type": "string"
                    },
                    "jwks_uri": {
                      "type": "string"
                    },
                    "grant_types_supported": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    },
                    "code_challenge_methods_supported": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    },
                    "scopes_supported": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    }
                  }
                }
              }
            }
          }
        },
        "operationId": "getWellKnownOauthAuthorizationServer"
      }
    },
    "/.well-known/oauth-protected-resource": {
      "get": {
        "tags": [
          "oauth"
        ],
        "summary": "Protected resource metadata",
        "description": "RFC 9728. Names the resource and the authorization servers that may issue tokens for it.",
        "security": [],
        "responses": {
          "200": {
            "description": "Resource metadata.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "resource": {
                      "type": "string"
                    },
                    "authorization_servers": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    },
                    "scopes_supported": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    }
                  }
                }
              }
            }
          }
        },
        "operationId": "getWellKnownOauthProtectedResource"
      }
    },
    "/.well-known/openid-configuration": {
      "get": {
        "tags": [
          "oauth"
        ],
        "summary": "OpenID Connect discovery document",
        "description": "The same endpoints as the authorization server metadata, plus the OIDC claims and subject types.",
        "security": [],
        "responses": {
          "200": {
            "description": "Discovery document.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          }
        },
        "operationId": "getWellKnownOpenidConfiguration"
      }
    },
    "/api/v1/agent-roles": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentrole_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List agent roles (builtin lead/coder/reviewer/researcher + this tenant's custom roles)",
        "tags": [
          "agent-roles"
        ],
        "operationId": "getAgentRoles",
        "description": "Requires the `agent_roles:read` permission.",
        "x-required-permissions": [
          "agent_roles:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentrole_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentrole_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a custom agent role (a persona assignable to runs and team members)",
        "tags": [
          "agent-roles"
        ],
        "operationId": "postAgentRoles",
        "description": "Requires the `agent_roles:create` permission.",
        "x-required-permissions": [
          "agent_roles:create"
        ]
      }
    },
    "/api/v1/agent-roles/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a custom agent role",
        "tags": [
          "agent-roles"
        ],
        "operationId": "deleteAgentRolesById",
        "description": "Requires the `agent_roles:delete` permission.",
        "x-required-permissions": [
          "agent_roles:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentrole_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a custom agent role",
        "tags": [
          "agent-roles"
        ],
        "operationId": "getAgentRolesById",
        "description": "Requires the `agent_roles:read` permission.",
        "x-required-permissions": [
          "agent_roles:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentrole_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentrole_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a custom agent role (builtins are immutable; running runs keep their frozen copy)",
        "tags": [
          "agent-roles"
        ],
        "operationId": "putAgentRolesById",
        "description": "Requires the `agent_roles:update` permission.",
        "x-required-permissions": [
          "agent_roles:update"
        ]
      }
    },
    "/api/v1/agent-sessions": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List agent sessions (live status, repo, harness)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessions",
        "description": "Requires the `agent_sessions:read` permission.",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      },
      "post": {
        "description": "Requires the `agent_sessions:create` permission.\n\nBoots a disposable sandbox running the chosen CLI harness against a cloned git repo; chat with it turn-by-turn via /:id/messages. 409 code=connector_required when the harness's provider connector (or github, for repo_full_name) is missing. harness=claude_remote instead connects the sandbox's Claude Code to the caller's own Claude app over Remote Control: the session takes no turns from this API (POST /:id/messages is refused) and answers with remote_control_name, the name it appears under in that app.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentsession_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_CreateResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Spawn an interactive Claude Code / Codex agent session (its own microVM sandbox)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "postAgentSessions",
        "x-required-permissions": [
          "agent_sessions:create"
        ]
      }
    },
    "/api/v1/agent-sessions/branches": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "repo",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_BranchesResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a repository's branches (default branch flagged first) for the session branch picker",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsBranches",
        "description": "Requires the `agent_sessions:read` permission.",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      }
    },
    "/api/v1/agent-sessions/cli-options": {
      "get": {
        "description": "Requires the `agent_sessions:read` permission.\n\nCatalogs of what the harness CLI itself accepts (claude: sonnet/opus/haiku aliases; codex: gpt-5 family + minimal..high efforts) — NOT the platform LLM gateway's model list.",
        "parameters": [
          {
            "in": "query",
            "name": "harness",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Session model + reasoning-effort choices from the CLI's own vocabulary",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsCliOptions",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      }
    },
    "/api/v1/agent-sessions/memory": {
      "delete": {
        "parameters": [
          {
            "in": "query",
            "name": "file",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "repo",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Reset session memory — one file (?file=) or the whole repository (files + recaps)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "deleteAgentSessionsMemory",
        "description": "Requires the `agent_sessions:create` permission.",
        "x-required-permissions": [
          "agent_sessions:create"
        ]
      },
      "get": {
        "description": "Requires the `agent_sessions:read` permission.\n\nThe Xirp-style context layer: MEMORY.md index + topic markdown files per repository, built automatically when sessions wrap and materialized into every new session's sandbox. ?repo=owner/repo returns that repo's files + recent recaps; without it, the tenant-wide listing.",
        "parameters": [
          {
            "in": "query",
            "name": "repo",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_MemoryRepoResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Browse per-repository session memory (living docs distilled from wrapped sessions)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsMemory",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "query",
            "name": "file",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "repo",
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentsession_PutMemoryRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_MemoryRepoResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Edit one session-memory file (human curation; empty content deletes the file)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "putAgentSessionsMemory",
        "description": "Requires the `agent_sessions:create` permission.",
        "x-required-permissions": [
          "agent_sessions:create"
        ]
      }
    },
    "/api/v1/agent-sessions/repos": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "page",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "per_page",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_ReposResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Browse the GitHub connector's repositories — the ADD-repository dialog's source (409 connector_required when none)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsRepos",
        "description": "Requires the `agent_sessions:read` permission.",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Destroy an agent session (tears down the sandbox and deletes the conversation)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "deleteAgentSessionsById",
        "description": "Requires the `agent_sessions:delete` permission.",
        "x-required-permissions": [
          "agent_sessions:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an agent session (state, online, auth link, queued turns)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsById",
        "description": "Requires the `agent_sessions:read` permission.",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentsession_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update an agent session's settings (title, model, idle window)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "putAgentSessionsById",
        "description": "Requires the `agent_sessions:create` permission.",
        "x-required-permissions": [
          "agent_sessions:create"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/auth-code": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentsession_AuthCodeRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Submit the CLI OAuth code shown after opening the session's auth link",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "postAgentSessionsByIdAuthCode",
        "description": "Requires the `agent_sessions:invoke` permission.",
        "x-required-permissions": [
          "agent_sessions:invoke"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/background-tasks/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_StopBackgroundTaskRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_StopBackgroundTaskResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "End a background shell the agent started (a Bash run in the background), by its command; the turn keeps running",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "postAgentSessionsByIdBackgroundTasksStop",
        "description": "Requires the `agent_sessions:invoke` permission.",
        "x-required-permissions": [
          "agent_sessions:invoke"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/interrupt": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop the running turn only (the composer stop button) — sandbox and conversation stay alive",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "postAgentSessionsByIdInterrupt",
        "description": "Requires the `agent_sessions:invoke` permission.",
        "x-required-permissions": [
          "agent_sessions:invoke"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/messages": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "after",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_MessagesResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Read the session conversation (cursor-paged; pass next as ?after=)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsByIdMessages",
        "description": "Requires the `agent_sessions:read` permission.",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentsession_MessageRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_MessageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Send a user turn to the session's CLI agent (wakes a paused session)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "postAgentSessionsByIdMessages",
        "description": "Requires the `agent_sessions:invoke` permission.",
        "x-required-permissions": [
          "agent_sessions:invoke"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/pause": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Pause an agent session (snapshots + frees the sandbox; a message wakes it)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "postAgentSessionsByIdPause",
        "description": "Requires the `agent_sessions:invoke` permission.",
        "x-required-permissions": [
          "agent_sessions:invoke"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/resume": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Resume a paused agent session",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "postAgentSessionsByIdResume",
        "description": "Requires the `agent_sessions:invoke` permission.",
        "x-required-permissions": [
          "agent_sessions:invoke"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/stream": {
      "get": {
        "description": "Requires the `agent_sessions:read` permission.\n\nServer-sent events of the CLI's in-flight output (token-by-token partials). Streaming — consumed by the console, not a JSON call.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Session live-output stream (SSE)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsByIdStream",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/terminal": {
      "get": {
        "description": "Requires the `agent_sessions:invoke` permission.\n\nStreaming WebSocket (binary = PTY bytes, text = {cols,rows} resize) — consumed by the console workbench, not a JSON call.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Interactive terminal into the session sandbox (WebSocket)",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsByIdTerminal",
        "x-required-permissions": [
          "agent_sessions:invoke"
        ]
      }
    },
    "/api/v1/agent-sessions/{id}/usage": {
      "get": {
        "description": "Requires the `agent_sessions:read` permission.\n\nSourced from the provider's own usage APIs (Anthropic OAuth usage for claude; the ChatGPT backend for codex) plus the guest's per-turn context accounting.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_UsageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Session usage: context-window footprint + provider subscription limits",
        "tags": [
          "agent-sessions"
        ],
        "operationId": "getAgentSessionsByIdUsage",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      }
    },
    "/api/v1/agents": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "namespace",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "online",
            "schema": {
              "type": "boolean"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Agents_AgentResponse"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List in-guest agents",
        "tags": [
          "agents"
        ],
        "operationId": "getAgents",
        "description": "Requires the `agents:read` permission.",
        "x-required-permissions": [
          "agents:read"
        ]
      }
    },
    "/api/v1/agents/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agents_AgentResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an in-guest agent",
        "tags": [
          "agents"
        ],
        "operationId": "getAgentsById",
        "description": "Requires the `agents:read` permission.",
        "x-required-permissions": [
          "agents:read"
        ]
      }
    },
    "/api/v1/agents/{id}/message": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agents_CreateMessageRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agents_CreateMessageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Send a shell command to an agent and wait for the result",
        "tags": [
          "agents"
        ],
        "operationId": "postAgentsByIdMessage",
        "description": "Requires the `agents:invoke` permission.",
        "x-required-permissions": [
          "agents:invoke"
        ]
      }
    },
    "/api/v1/agents/{id}/task": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agents_CreateTaskRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/A2a_TaskResult"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delegate an autonomous task to an agent-runtime agent and wait for its answer",
        "tags": [
          "agents"
        ],
        "operationId": "postAgentsByIdTask",
        "description": "Requires the `agents:invoke` permission.",
        "x-required-permissions": [
          "agents:invoke"
        ]
      }
    },
    "/api/v1/api-clients": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apiclient_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List API clients",
        "tags": [
          "api-clients"
        ],
        "operationId": "getApiClients",
        "description": "Requires the `api_clients:read` permission.",
        "x-required-permissions": [
          "api_clients:read"
        ]
      },
      "post": {
        "description": "Requires the `api_clients:create` permission.\n\nThe client_secret is returned once. Exchange it at POST /oauth/token with grant_type=client_credentials (client_secret_basic or client_secret_post) for a bearer token limited to the client's scopes.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apiclient_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apiclient_CreatedResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create an API client (client id + secret)",
        "tags": [
          "api-clients"
        ],
        "operationId": "postApiClients",
        "x-required-permissions": [
          "api_clients:create"
        ]
      }
    },
    "/api/v1/api-clients/scopes": {
      "get": {
        "description": "Requires the `api_clients:read` permission.\n\nRBAC permission keys the caller holds, grouped like /permissions. A client can never be granted more than its creator has.",
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apiclient_ScopeCatalog"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Scopes the caller may grant to an API client",
        "tags": [
          "api-clients"
        ],
        "operationId": "getApiClientsScopes",
        "x-required-permissions": [
          "api_clients:read"
        ]
      }
    },
    "/api/v1/api-clients/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an API client",
        "tags": [
          "api-clients"
        ],
        "operationId": "deleteApiClientsById",
        "description": "Requires the `api_clients:delete` permission.",
        "x-required-permissions": [
          "api_clients:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apiclient_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an API client",
        "tags": [
          "api-clients"
        ],
        "operationId": "getApiClientsById",
        "description": "Requires the `api_clients:read` permission.",
        "x-required-permissions": [
          "api_clients:read"
        ]
      },
      "patch": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apiclient_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apiclient_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rename, re-describe or re-scope an API client",
        "tags": [
          "api-clients"
        ],
        "operationId": "patchApiClientsById",
        "description": "Requires the `api_clients:update` permission.",
        "x-required-permissions": [
          "api_clients:update"
        ]
      }
    },
    "/api/v1/api-clients/{id}/revoke-tokens": {
      "post": {
        "description": "Requires the `api_clients:update` permission.\n\nTokens issued before now stop working within seconds on every orchestrator instance; the client can request new ones.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Revoke every token issued to an API client",
        "tags": [
          "api-clients"
        ],
        "operationId": "postApiClientsByIdRevokeTokens",
        "x-required-permissions": [
          "api_clients:update"
        ]
      }
    },
    "/api/v1/api-clients/{id}/rotate": {
      "post": {
        "description": "Requires the `api_clients:update` permission.\n\nThe previous secret stops working immediately; tokens already issued run to their expiry.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apiclient_SecretResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rotate an API client's secret",
        "tags": [
          "api-clients"
        ],
        "operationId": "postApiClientsByIdRotate",
        "x-required-permissions": [
          "api_clients:update"
        ]
      }
    },
    "/api/v1/applications": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List applications",
        "tags": [
          "applications"
        ],
        "operationId": "getApplications",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create an application from a git repository. Simple path: repo_url + build_command/start_command/port. Advanced: sources, services, environments, pipeline.",
        "tags": [
          "applications"
        ],
        "operationId": "postApplications",
        "description": "Requires the `apps:create` permission.",
        "x-required-permissions": [
          "apps:create"
        ]
      }
    },
    "/api/v1/applications/advise": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_AdviseRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Advice"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Ask a model to propose build and start commands and a deploy shape — from the repository, or from a description when there is no code yet",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsAdvise",
        "description": "Requires the `apps:create` permission.",
        "x-required-permissions": [
          "apps:create"
        ]
      }
    },
    "/api/v1/applications/detect": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_DetectRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Proposal"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Inspect a GitHub repository and propose runtime, build and start commands and port before creating an application",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsDetect",
        "description": "Requires the `apps:create` permission.",
        "x-required-permissions": [
          "apps:create"
        ]
      }
    },
    "/api/v1/applications/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_genericResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an application",
        "tags": [
          "applications"
        ],
        "operationId": "deleteApplicationsById",
        "description": "Requires the `apps:delete` permission.",
        "x-required-permissions": [
          "apps:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an application with its sources, services, environments, pipeline and variable names",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsById",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      },
      "patch": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rename an application",
        "tags": [
          "applications"
        ],
        "operationId": "patchApplicationsById",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/assist": {
      "post": {
        "description": "Requires the `apps:create` permission.\n\nBoots a smallest-footprint helper VM, has an AI engine (interlaken|claude|codex) inspect the application's repository, and answers with a proposal: services, variables and databases. The body is optional — the repository and branch default to the application's first source; repo_url overrides it. claude/codex require the matching connector (409 connector_required otherwise). Poll GET /applications/:id/assist/:assist for the result.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_AppAssistRequest"
              }
            }
          }
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployassist_CreateResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Ask AI to propose the whole application from its repository",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdAssist",
        "x-required-permissions": [
          "apps:create"
        ]
      }
    },
    "/api/v1/applications/{id}/assist/{assist}": {
      "delete": {
        "description": "Requires the `apps:create` permission.\n\nDrops the intent and its unpersisted transcript immediately (on apply or dialog close), which also tears the helper VM down instead of waiting for the drop TTL.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "assist",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Dismiss an application assist",
        "tags": [
          "applications"
        ],
        "operationId": "deleteApplicationsByIdAssistByAssist",
        "x-required-permissions": [
          "apps:create"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "assist",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployassist_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Poll an application assist (state, live transcript, and the proposal once done)",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdAssistByAssist",
        "description": "Requires the `apps:create` permission.",
        "x-required-permissions": [
          "apps:create"
        ]
      }
    },
    "/api/v1/applications/{id}/brief": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "mode",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_BriefResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "The application as an agent must know it before touching the repository: services, build and start commands, port, databases, variable names and the interlaken.yaml. Every change request carries it; a session started by hand can be given it as its first message.",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdBrief",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      }
    },
    "/api/v1/applications/{id}/chats": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_ChatRefPage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List an application's developer chats newest-first (state working|proposed|rejected|merged)",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdChats",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      },
      "post": {
        "description": "Requires the `apps:manage` permission.\n\nMints a branch (interlaken/chat-<short>) off the branch the target environment tracks and spawns the agent team that works on it. The agent pushes to that branch to get CI (every push starts a proposal run, which builds and tests and deploys nothing) and can never push to a tracked branch.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_CreateChatRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_ChatRef"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a developer chat on an application: an agent team on its own branch",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdChats",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/chats/{chat}/approve": {
      "post": {
        "description": "Requires the `apps:deploy` permission.\n\nMerging is all this does — it deploys nothing itself. The merge lands on the tracked branch, which fires the ordinary push trigger and runs the ordinary pipeline, including any approval stages it already has. Idempotent (a double click merges once) and fail-closed (a merge GitHub refuses leaves the chat proposed).",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "chat",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_ChatRef"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Approve a proposed chat: merges its pull request",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdChatsByChatApprove",
        "x-required-permissions": [
          "apps:deploy"
        ]
      }
    },
    "/api/v1/applications/{id}/chats/{chat}/ci": {
      "post": {
        "description": "Requires the `apps:manage` permission.\n\nThe agent's own \"test this\". The platform also starts one on every push it sees; call this when a push has not produced a run within a minute, or to test on demand. The optional body sizes this run's builder (instance_type from GET /instance-types, family vm; disk_gib as the whole disk) — use a smaller one when a run failed with \"no suitable host\". Refused (409) when the branch has not been pushed yet.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "chat",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_ChatCIRequest"
              }
            }
          }
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Run CI on the chat's branch now: a proposal run of its current head (builds and tests, deploys nothing)",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdChatsByChatCi",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/chats/{chat}/finish": {
      "post": {
        "description": "Requires the `apps:manage` permission.\n\nRefused (409) when the chat's latest proposal run did not succeed, in either mode. The mode is the change request's ship_mode (the application's default unless overridden when it was started). Finishing twice is a no-op.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "chat",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_FinishChatRequest"
              }
            }
          }
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_ChatRef"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "The agent's \"done\": in pull-request mode opens the pull request for a human; in main mode merges the branch into the tracked branch with no pull request",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdChatsByChatFinish",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/chats/{chat}/propose": {
      "post": {
        "description": "Requires the `apps:manage` permission.\n\nRefused (409) when the chat's latest proposal run did not succeed — approval is never asked for on a red build. Proposing twice returns the existing pull request rather than opening a second one.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "chat",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_ProposeChatRequest"
              }
            }
          }
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_ChatRef"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Ask for approval: opens a pull request from the chat's branch into the tracked branch",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdChatsByChatPropose",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/chats/{chat}/reject": {
      "post": {
        "description": "Requires the `apps:deploy` permission.\n\nRecords the decision and the reason. It closes nothing: the pull request and the branch stay, so the agent can push a fix on the same branch (which starts a fresh proposal run) and ask again.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "chat",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_RejectChatRequest"
              }
            }
          }
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_ChatRef"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Request changes on a proposed chat",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdChatsByChatReject",
        "x-required-permissions": [
          "apps:deploy"
        ]
      }
    },
    "/api/v1/applications/{id}/environments/{name}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an environment (the last one cannot be deleted)",
        "tags": [
          "applications"
        ],
        "operationId": "deleteApplicationsByIdEnvironmentsByName",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_EnvironmentSpec"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create or replace an environment (branch/tag tracking, auto-deploy, approval, per-service overrides)",
        "tags": [
          "applications"
        ],
        "operationId": "putApplicationsByIdEnvironmentsByName",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/environments/{name}/deploy": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_DeployEnvironmentRequest"
              }
            }
          }
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Deploy a release into an environment. Omit release_id for the newest release; name an older one to roll back. Starts a run so the pipeline's approval stages still apply.",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdEnvironmentsByNameDeploy",
        "description": "Requires the `apps:deploy` permission.",
        "x-required-permissions": [
          "apps:deploy"
        ]
      }
    },
    "/api/v1/applications/{id}/environments/{name}/load-balancer": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Drop the environment's load balancer so the next deploy rebuilds its listener. Changes the environment's public address; this is how an environment moves from HTTP to HTTPS.",
        "tags": [
          "applications"
        ],
        "operationId": "deleteApplicationsByIdEnvironmentsByNameLoadBalancer",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/environments/{name}/promote": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_PromoteEnvironmentRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Promote whatever the 'from' environment is running into this one (the release is resolved from the source environment's deployments)",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdEnvironmentsByNamePromote",
        "description": "Requires the `apps:deploy` permission.",
        "x-required-permissions": [
          "apps:deploy"
        ]
      }
    },
    "/api/v1/applications/{id}/pipeline": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_PipelineSpec"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get the pipeline spec",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdPipeline",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_PipelineSpec"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Replace the pipeline spec (stages of build/run jobs, deploy, approval; triggers). Send generated=true to return to the derived default.",
        "tags": [
          "applications"
        ],
        "operationId": "putApplicationsByIdPipeline",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/releases": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_ReleaseResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List an application's releases newest-first (each carries the per-service image refs a deploy pins)",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdReleases",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      }
    },
    "/api/v1/applications/{id}/runs": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List an application's runs newest-first",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdRuns",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_StartRunRequest"
              }
            }
          }
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a pipeline run: builds every service in a throwaway builder microVM, produces a release, then walks the deploy stages. Body is optional — the default is a manual run on the first source's tracked branch.",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdRuns",
        "description": "Requires the `apps:deploy` permission.",
        "x-required-permissions": [
          "apps:deploy"
        ]
      }
    },
    "/api/v1/applications/{id}/runs/{run}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "run",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get one run (state queued|running|waiting_approval|succeeded|failed|canceled, current stage, resolved commits, release)",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdRunsByRun",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      }
    },
    "/api/v1/applications/{id}/runs/{run}/approve": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "run",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Approve a run waiting at an approval gate; it continues with the next stage",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdRunsByRunApprove",
        "description": "Requires the `apps:deploy` permission.",
        "x-required-permissions": [
          "apps:deploy"
        ]
      }
    },
    "/api/v1/applications/{id}/runs/{run}/cancel": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "run",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Cancel a run in flight; its builders are reaped",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdRunsByRunCancel",
        "description": "Requires the `apps:deploy` permission.",
        "x-required-permissions": [
          "apps:deploy"
        ]
      }
    },
    "/api/v1/applications/{id}/runs/{run}/jobs": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "run",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_JobResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a run's jobs in stage order (build/run jobs, their builder and outputs)",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdRunsByRunJobs",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      }
    },
    "/api/v1/applications/{id}/runs/{run}/jobs/{job}/log": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "run",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "job",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "after",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_JobLogResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Read a job's stored log chunks in seq order; poll with after=<seq>",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdRunsByRunJobsByJobLog",
        "description": "Requires the `apps:read` permission.",
        "x-required-permissions": [
          "apps:read"
        ]
      }
    },
    "/api/v1/applications/{id}/runs/{run}/jobs/{job}/log/stream": {
      "get": {
        "description": "Requires the `apps:read` permission.\n\nServer-sent events: one event per log chunk, its seq as the event id, a \": ping\" comment every 20s. Resume with the Last-Event-ID header (or after=<seq>); the stream closes once the job is terminal and the buffered output has drained.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "run",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "job",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "after",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Live job log (SSE, text/event-stream)",
        "tags": [
          "applications"
        ],
        "operationId": "getApplicationsByIdRunsByRunJobsByJobLogStream",
        "x-required-permissions": [
          "apps:read"
        ]
      }
    },
    "/api/v1/applications/{id}/runs/{run}/reject": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "run",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Reject a run waiting at an approval gate; the run ends canceled",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdRunsByRunReject",
        "description": "Requires the `apps:deploy` permission.",
        "x-required-permissions": [
          "apps:deploy"
        ]
      }
    },
    "/api/v1/applications/{id}/services/{name}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a service",
        "tags": [
          "applications"
        ],
        "operationId": "deleteApplicationsByIdServicesByName",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_ServiceSpec"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create or replace a service (built from a source, or a prebuilt image); the generated pipeline is updated automatically",
        "tags": [
          "applications"
        ],
        "operationId": "putApplicationsByIdServicesByName",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/sources": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_SourceRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Add or replace a repository (source) on an application",
        "tags": [
          "applications"
        ],
        "operationId": "postApplicationsByIdSources",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/sources/{name}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a repository from an application (fails while a service is built from it)",
        "tags": [
          "applications"
        ],
        "operationId": "deleteApplicationsByIdSourcesByName",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/applications/{id}/vars": {
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Apps_VarsRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Apps_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Replace the variables of one scope (app, env:<name> or svc:<name>); values are sealed and never returned",
        "tags": [
          "applications"
        ],
        "operationId": "putApplicationsByIdVars",
        "description": "Requires the `apps:manage` permission.",
        "x-required-permissions": [
          "apps:manage"
        ]
      }
    },
    "/api/v1/auth/change-password": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_ChangePasswordRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Change the caller's password",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthChangePassword"
      }
    },
    "/api/v1/auth/devices": {
      "delete": {
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Forget every remembered browser",
        "tags": [
          "auth"
        ],
        "operationId": "deleteAuthDevices"
      }
    },
    "/api/v1/auth/devices/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Forget one remembered browser",
        "tags": [
          "auth"
        ],
        "operationId": "deleteAuthDevicesById"
      }
    },
    "/api/v1/auth/forgot-password": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_ForgotPasswordRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Mail a password-reset link",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthForgotPassword"
      }
    },
    "/api/v1/auth/locale": {
      "put": {
        "description": "Transactional mail renders in the caller's locale. The console calls this when the interface language changes.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_SetLocaleRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_SetLocaleResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Set the language this account's mail is written in",
        "tags": [
          "auth"
        ],
        "operationId": "putAuthLocale"
      }
    },
    "/api/v1/auth/login": {
      "post": {
        "description": "Returns the token response when the browser presents a live trusted-device cookie; otherwise returns an MFAChallengeResponse (status \"mfa_required\") to complete via /auth/mfa/verify.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_LoginRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_LoginResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Exchange credentials for an OAuth 2.0 token, or open a second-factor challenge",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthLogin"
      }
    },
    "/api/v1/auth/logout": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_LogoutRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Sign out: revoke the presented access token (and the refresh token, if sent)",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthLogout"
      }
    },
    "/api/v1/auth/mfa/resend": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_ResendMFARequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Resend the emailed code for a challenge",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthMfaResend"
      }
    },
    "/api/v1/auth/mfa/verify": {
      "post": {
        "description": "Accepts an emailed code, an authenticator code or a recovery code. With remember_device the response sets the interlaken_device cookie for 30 days.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_VerifyMFARequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_LoginResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Complete a second-factor challenge",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthMfaVerify"
      }
    },
    "/api/v1/auth/register": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_RegisterRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_RegisterResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Register a new tenant + user",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthRegister"
      }
    },
    "/api/v1/auth/reset-password": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_ResetPasswordRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Set a new password with a reset token",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthResetPassword"
      }
    },
    "/api/v1/auth/security": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_SecurityResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Return the caller's sign-in security state",
        "tags": [
          "auth"
        ],
        "operationId": "getAuthSecurity"
      }
    },
    "/api/v1/auth/send-verify-email": {
      "post": {
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Mail the caller a fresh verification link",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthSendVerifyEmail"
      }
    },
    "/api/v1/auth/sessions/revoke-all": {
      "post": {
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Sign out everywhere: every token issued to the caller so far is revoked",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthSessionsRevokeAll"
      }
    },
    "/api/v1/auth/token": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_RefreshRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_LoginResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Refresh an access token",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthToken"
      }
    },
    "/api/v1/auth/totp": {
      "delete": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_PasswordConfirmRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Turn the authenticator app off",
        "tags": [
          "auth"
        ],
        "operationId": "deleteAuthTotp"
      }
    },
    "/api/v1/auth/totp/confirm": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_TOTPConfirmRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_RecoveryCodesResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Finish authenticator-app enrolment and receive recovery codes",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthTotpConfirm"
      }
    },
    "/api/v1/auth/totp/recovery-codes": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_PasswordConfirmRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_RecoveryCodesResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Replace the caller's recovery codes",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthTotpRecoveryCodes"
      }
    },
    "/api/v1/auth/totp/setup": {
      "post": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_TOTPSetupResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start authenticator-app enrolment",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthTotpSetup"
      }
    },
    "/api/v1/auth/userinfo": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Auth_UserinfoResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Return OIDC userinfo",
        "tags": [
          "auth"
        ],
        "operationId": "getAuthUserinfo"
      }
    },
    "/api/v1/auth/verify-email": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Auth_VerifyEmailRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Confirm an email address with a verification token",
        "tags": [
          "auth"
        ],
        "operationId": "postAuthVerifyEmail"
      }
    },
    "/api/v1/auto-scale-groups": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Autoscalegroup_AutoScaleGroupResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List auto-scale groups",
        "tags": [
          "auto-scale-groups"
        ],
        "operationId": "getAutoScaleGroups",
        "description": "Requires the `auto_scale_groups:read` permission.",
        "x-required-permissions": [
          "auto_scale_groups:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Autoscalegroup_CreateAutoScaleGroupRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Autoscalegroup_AutoScaleGroupResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create an auto-scale group",
        "tags": [
          "auto-scale-groups"
        ],
        "operationId": "postAutoScaleGroups",
        "description": "Requires the `auto_scale_groups:create` permission.",
        "x-required-permissions": [
          "auto_scale_groups:create"
        ]
      }
    },
    "/api/v1/auto-scale-groups/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an auto-scale group",
        "tags": [
          "auto-scale-groups"
        ],
        "operationId": "deleteAutoScaleGroupsById",
        "description": "Requires the `auto_scale_groups:delete` permission.",
        "x-required-permissions": [
          "auto_scale_groups:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Autoscalegroup_AutoScaleGroupResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an auto-scale group",
        "tags": [
          "auto-scale-groups"
        ],
        "operationId": "getAutoScaleGroupsById",
        "description": "Requires the `auto_scale_groups:read` permission.",
        "x-required-permissions": [
          "auto_scale_groups:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Autoscalegroup_UpdateAutoScaleGroupRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Autoscalegroup_AutoScaleGroupResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update an auto-scale group",
        "tags": [
          "auto-scale-groups"
        ],
        "operationId": "putAutoScaleGroupsById",
        "description": "Requires the `auto_scale_groups:update` permission.",
        "x-required-permissions": [
          "auto_scale_groups:update"
        ]
      }
    },
    "/api/v1/billing/accounts": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_AccountResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List billing accounts",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingAccounts",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Billing_CreateBillingAccountRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_AccountResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a billing account",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingAccounts",
        "description": "Requires the `billing:account_create` permission.",
        "x-required-permissions": [
          "billing:account_create"
        ]
      }
    },
    "/api/v1/billing/accounts/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_AccountResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a billing account",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingAccountsById",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Billing_UpdateBillingAccountRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_AccountResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a billing account",
        "tags": [
          "billing"
        ],
        "operationId": "putBillingAccountsById",
        "description": "Requires the `billing:account_update` permission.",
        "x-required-permissions": [
          "billing:account_update"
        ]
      }
    },
    "/api/v1/billing/credits": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_CreditResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List credits",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingCredits",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/credits/purchase": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Billing_PurchaseCreditsRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_InvoiceResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Purchase credits (Stripe stub)",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingCreditsPurchase",
        "description": "Requires the `billing:credits_purchase` permission.",
        "x-required-permissions": [
          "billing:credits_purchase"
        ]
      }
    },
    "/api/v1/billing/credits/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_CreditResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a credit",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingCreditsById",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/crypto/assign": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_cryptoAssignRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Cryptopool_Address"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Assign a crypto receive address to the caller",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingCryptoAssign",
        "description": "Requires the `billing:crypto_assign` permission.",
        "x-required-permissions": [
          "billing:crypto_assign"
        ]
      }
    },
    "/api/v1/billing/crypto/assignment/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Cryptopool_Address"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an assigned crypto address",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingCryptoAssignmentById",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/deposit-info": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_DepositInfoResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get bank deposit information",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingDepositInfo",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/disputes": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_DisputeResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List disputes",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingDisputes",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Billing_CreateDisputeRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_DisputeResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a dispute",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingDisputes",
        "description": "Requires the `billing:disputes_create` permission.",
        "x-required-permissions": [
          "billing:disputes_create"
        ]
      }
    },
    "/api/v1/billing/disputes/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_DisputeResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a dispute",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingDisputesById",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/disputes/{id}/close": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_DisputeResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Close a dispute",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingDisputesByIdClose",
        "description": "Requires the `billing:disputes_close` permission.",
        "x-required-permissions": [
          "billing:disputes_close"
        ]
      }
    },
    "/api/v1/billing/disputes/{id}/messages": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Billing_MessageResponse"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List messages on a dispute",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingDisputesByIdMessages",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_disputeMessageRequestSpec"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_MessageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Add a message to a dispute",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingDisputesByIdMessages",
        "description": "Requires the `billing:disputes_message` permission.",
        "x-required-permissions": [
          "billing:disputes_message"
        ]
      }
    },
    "/api/v1/billing/invoices": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_InvoiceResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List invoices",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingInvoices",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/invoices/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_InvoiceResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an invoice",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingInvoicesById",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/invoices/{id}/pay": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_InvoiceResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Pay an invoice (Stripe stub)",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingInvoicesByIdPay",
        "description": "Requires the `billing:invoices_pay` permission.",
        "x-required-permissions": [
          "billing:invoices_pay"
        ]
      }
    },
    "/api/v1/billing/invoices/{id}/pay-credits": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_InvoiceResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Pay an invoice from the tenant's credit balance",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingInvoicesByIdPayCredits",
        "description": "Requires the `billing:invoices_pay` permission.",
        "x-required-permissions": [
          "billing:invoices_pay"
        ]
      }
    },
    "/api/v1/billing/payment-methods": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_PaymentMethodResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List payment methods",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingPaymentMethods",
        "description": "Requires the `payment_methods:read` permission.",
        "x-required-permissions": [
          "payment_methods:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Billing_CreatePaymentMethodRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_PaymentMethodResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a payment method",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingPaymentMethods",
        "description": "Requires the `payment_methods:create` permission.",
        "x-required-permissions": [
          "payment_methods:create"
        ]
      }
    },
    "/api/v1/billing/payment-methods/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a payment method",
        "tags": [
          "billing"
        ],
        "operationId": "deleteBillingPaymentMethodsById",
        "description": "Requires the `payment_methods:delete` permission.",
        "x-required-permissions": [
          "payment_methods:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_PaymentMethodResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a payment method",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingPaymentMethodsById",
        "description": "Requires the `payment_methods:read` permission.",
        "x-required-permissions": [
          "payment_methods:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Billing_UpdatePaymentMethodRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_PaymentMethodResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a payment method",
        "tags": [
          "billing"
        ],
        "operationId": "putBillingPaymentMethodsById",
        "description": "Requires the `payment_methods:update` permission.",
        "x-required-permissions": [
          "payment_methods:update"
        ]
      }
    },
    "/api/v1/billing/payment-methods/{id}/default": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_PaymentMethodResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Set the default payment method",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingPaymentMethodsByIdDefault",
        "description": "Requires the `payment_methods:default` permission.",
        "x-required-permissions": [
          "payment_methods:default"
        ]
      }
    },
    "/api/v1/billing/statements": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_statementListResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List statements (one per billing period, grouping every zone's invoice)",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingStatements",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/statements/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_StatementResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a statement",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingStatementsById",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/statements/{id}/pay": {
      "post": {
        "description": "Requires the `billing:invoices_pay` permission.\n\nThe statement is re-verified against the replicated invoices (per-invoice signatures, member digest, statement signature) before the charge; every zone re-verifies again before marking its invoice paid.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_StatementResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Pay a statement: one charge for every zone's invoice of the period",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingStatementsByIdPay",
        "x-required-permissions": [
          "billing:invoices_pay"
        ]
      }
    },
    "/api/v1/billing/usage": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Billing_UsageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get current-period usage aggregate",
        "tags": [
          "billing"
        ],
        "operationId": "getBillingUsage",
        "description": "Requires the `billing:read` permission.",
        "x-required-permissions": [
          "billing:read"
        ]
      }
    },
    "/api/v1/billing/webhook": {
      "post": {
        "description": "Receives raw Stripe events. The body must be the verbatim Stripe payload — do NOT re-encode or the HMAC signature check will fail.",
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_stripeWebhookResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stripe webhook receiver",
        "tags": [
          "billing"
        ],
        "operationId": "postBillingWebhook"
      }
    },
    "/api/v1/buckets": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Bucket_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List buckets",
        "tags": [
          "buckets"
        ],
        "operationId": "getBuckets",
        "description": "Requires the `object_storage:read` permission.",
        "x-required-permissions": [
          "object_storage:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Bucket_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Bucket_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a bucket",
        "tags": [
          "buckets"
        ],
        "operationId": "postBuckets",
        "description": "Requires the `object_storage:create` permission.",
        "x-required-permissions": [
          "object_storage:create"
        ]
      }
    },
    "/api/v1/buckets/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a bucket (409 if not empty)",
        "tags": [
          "buckets"
        ],
        "operationId": "deleteBucketsById",
        "description": "Requires the `object_storage:delete` permission.",
        "x-required-permissions": [
          "object_storage:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Bucket_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a bucket",
        "tags": [
          "buckets"
        ],
        "operationId": "getBucketsById",
        "description": "Requires the `object_storage:read` permission.",
        "x-required-permissions": [
          "object_storage:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Bucket_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Bucket_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a bucket",
        "tags": [
          "buckets"
        ],
        "operationId": "putBucketsById",
        "description": "Requires the `object_storage:create` permission.",
        "x-required-permissions": [
          "object_storage:create"
        ]
      }
    },
    "/api/v1/buckets/{id}/objects": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "key",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a single object",
        "tags": [
          "buckets"
        ],
        "operationId": "deleteBucketsByIdObjects",
        "description": "Requires the `object_storage:delete` permission.",
        "x-required-permissions": [
          "object_storage:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "prefix",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "recursive",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Bucket_ListObjectsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List objects in a bucket",
        "tags": [
          "buckets"
        ],
        "operationId": "getBucketsByIdObjects",
        "description": "Requires the `object_storage:read` permission.",
        "x-required-permissions": [
          "object_storage:read"
        ]
      },
      "post": {
        "description": "Requires the `object_storage:create` permission.\n\nStreams a multipart upload through the orchestrator into the bucket. Not a JSON body.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "201": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Upload an object (multipart/form-data: file, key, prefix)",
        "tags": [
          "buckets"
        ],
        "operationId": "postBucketsByIdObjects",
        "x-required-permissions": [
          "object_storage:create"
        ]
      }
    },
    "/api/v1/buckets/{id}/objects/download": {
      "get": {
        "description": "Requires the `object_storage:read` permission.\n\nStreams the object identified by the ?key= query param as a binary attachment.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "key",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Download an object",
        "tags": [
          "buckets"
        ],
        "operationId": "getBucketsByIdObjectsDownload",
        "x-required-permissions": [
          "object_storage:read"
        ]
      }
    },
    "/api/v1/buckets/{id}/secret": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Bucket_SecretResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a bucket's scoped access + secret keys",
        "tags": [
          "buckets"
        ],
        "operationId": "getBucketsByIdSecret",
        "description": "Requires the `object_storage:read` permission.",
        "x-required-permissions": [
          "object_storage:read"
        ]
      }
    },
    "/api/v1/certificates": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Certificate_CertificateResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List certificates",
        "tags": [
          "certificates"
        ],
        "operationId": "getCertificates",
        "description": "Requires the `certificates:read` permission.",
        "x-required-permissions": [
          "certificates:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Certificate_CreateCertificateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Certificate_CertificateResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a certificate",
        "tags": [
          "certificates"
        ],
        "operationId": "postCertificates",
        "description": "Requires the `certificates:create` permission.",
        "x-required-permissions": [
          "certificates:create"
        ]
      }
    },
    "/api/v1/certificates/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a certificate",
        "tags": [
          "certificates"
        ],
        "operationId": "deleteCertificatesById",
        "description": "Requires the `certificates:delete` permission.",
        "x-required-permissions": [
          "certificates:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Certificate_CertificateResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a certificate",
        "tags": [
          "certificates"
        ],
        "operationId": "getCertificatesById",
        "description": "Requires the `certificates:read` permission.",
        "x-required-permissions": [
          "certificates:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Certificate_UpdateCertificateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Certificate_CertificateResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a certificate",
        "tags": [
          "certificates"
        ],
        "operationId": "putCertificatesById",
        "description": "Requires the `certificates:create` permission.",
        "x-required-permissions": [
          "certificates:create"
        ]
      }
    },
    "/api/v1/connectors": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Connector_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List agent CLI connectors (credential sets, never the tokens)",
        "tags": [
          "connectors"
        ],
        "operationId": "getConnectors",
        "description": "Requires the `connectors:read` permission.",
        "x-required-permissions": [
          "connectors:read"
        ]
      }
    },
    "/api/v1/connectors/device/poll": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Connector_DevicePollRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Connector_DevicePollResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Poll a pending device login (status pending until approved, then done + connector)",
        "tags": [
          "connectors"
        ],
        "operationId": "postConnectorsDevicePoll",
        "description": "Requires the `connectors:create` permission.",
        "x-required-permissions": [
          "connectors:create"
        ]
      }
    },
    "/api/v1/connectors/device/start": {
      "post": {
        "description": "Requires the `connectors:create` permission.\n\nDevice flow for providers that support it: codex (OpenAI) and github (a repo-scoped token for Deploy-from-Git private clones). The github provider requires a configured GitHub OAuth-app client_id (INTERLAKEN_GITHUB_CLIENT_ID); when unset the login returns a clear \"GitHub deploys not configured\" error. Pass connector_id to reconnect an existing connector in place: when the login completes its credential is replaced under the same id, name and default flag, so application sources and sessions that reference it keep working. A GitHub App's expiring user token is stored with its refresh token and rotated automatically (needs github.client_secret).",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Connector_DeviceStartRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Connector_DeviceStartResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a device-authorization connector login (returns user code + verification URL)",
        "tags": [
          "connectors"
        ],
        "operationId": "postConnectorsDeviceStart",
        "x-required-permissions": [
          "connectors:create"
        ]
      }
    },
    "/api/v1/connectors/import": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Connector_ImportRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Connector_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Import a directly-supplied API key as a connector (connector_id replaces an existing connector's key in place)",
        "tags": [
          "connectors"
        ],
        "operationId": "postConnectorsImport",
        "description": "Requires the `connectors:create` permission.",
        "x-required-permissions": [
          "connectors:create"
        ]
      }
    },
    "/api/v1/connectors/oauth/complete": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Connector_OAuthCompleteRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Connector_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Complete a connector OAuth wizard (exchange the pasted code)",
        "tags": [
          "connectors"
        ],
        "operationId": "postConnectorsOauthComplete",
        "description": "Requires the `connectors:create` permission.",
        "x-required-permissions": [
          "connectors:create"
        ]
      }
    },
    "/api/v1/connectors/oauth/start": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Connector_OAuthStartRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Connector_OAuthStartResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a connector OAuth wizard (returns the authorize URL to open)",
        "tags": [
          "connectors"
        ],
        "operationId": "postConnectorsOauthStart",
        "description": "Requires the `connectors:create` permission.",
        "x-required-permissions": [
          "connectors:create"
        ]
      }
    },
    "/api/v1/connectors/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a connector",
        "tags": [
          "connectors"
        ],
        "operationId": "deleteConnectorsById",
        "description": "Requires the `connectors:delete` permission.",
        "x-required-permissions": [
          "connectors:delete"
        ]
      },
      "patch": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Connector_RenameRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Connector_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rename a connector",
        "tags": [
          "connectors"
        ],
        "operationId": "patchConnectorsById",
        "description": "Requires the `connectors:create` permission.",
        "x-required-permissions": [
          "connectors:create"
        ]
      }
    },
    "/api/v1/connectors/{id}/default": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Make a connector the default for its provider",
        "tags": [
          "connectors"
        ],
        "operationId": "postConnectorsByIdDefault",
        "description": "Requires the `connectors:create` permission.",
        "x-required-permissions": [
          "connectors:create"
        ]
      }
    },
    "/api/v1/containers": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Container_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List containers",
        "tags": [
          "containers"
        ],
        "operationId": "getContainers",
        "description": "Requires the `containers:read` permission.",
        "x-required-permissions": [
          "containers:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Container_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Container_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a container",
        "tags": [
          "containers"
        ],
        "operationId": "postContainers",
        "description": "Requires the `containers:create` permission.",
        "x-required-permissions": [
          "containers:create"
        ]
      }
    },
    "/api/v1/containers/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a container",
        "tags": [
          "containers"
        ],
        "operationId": "deleteContainersById",
        "description": "Requires the `containers:delete` permission.",
        "x-required-permissions": [
          "containers:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Container_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a container",
        "tags": [
          "containers"
        ],
        "operationId": "getContainersById",
        "description": "Requires the `containers:read` permission.",
        "x-required-permissions": [
          "containers:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Container_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Container_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a container",
        "tags": [
          "containers"
        ],
        "operationId": "putContainersById",
        "description": "Requires the `containers:update` permission.",
        "x-required-permissions": [
          "containers:update"
        ]
      }
    },
    "/api/v1/containers/{id}/activity": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Activity_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a container's activity feed (reconciler event log)",
        "tags": [
          "containers"
        ],
        "operationId": "getContainersByIdActivity",
        "description": "Requires the `containers:read` permission.",
        "x-required-permissions": [
          "containers:read"
        ]
      }
    },
    "/api/v1/containers/{id}/attachments": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_dbAttachListResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List databases attached to a container",
        "tags": [
          "containers"
        ],
        "operationId": "getContainersByIdAttachments",
        "description": "Requires the `containers:read` permission.",
        "x-required-permissions": [
          "containers:read"
        ]
      }
    },
    "/api/v1/containers/{id}/attachments/database": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_dbAttachRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dbattach_AttachResult"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a managed database to a container (composes its URL into a config var)",
        "tags": [
          "containers"
        ],
        "operationId": "postContainersByIdAttachmentsDatabase",
        "description": "Requires the `containers:update` permission.",
        "x-required-permissions": [
          "containers:update"
        ]
      }
    },
    "/api/v1/containers/{id}/attachments/database/{database_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "database_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a managed database from a container",
        "tags": [
          "containers"
        ],
        "operationId": "deleteContainersByIdAttachmentsDatabaseByDatabaseId",
        "description": "Requires the `containers:update` permission.",
        "x-required-permissions": [
          "containers:update"
        ]
      }
    },
    "/api/v1/containers/{id}/config-vars": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_configVarsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a container's config vars (env vars)",
        "tags": [
          "containers"
        ],
        "operationId": "getContainersByIdConfigVars",
        "description": "Requires the `containers:read` permission.",
        "x-required-permissions": [
          "containers:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_configVarsPutRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_configVarsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Replace a container's config vars (persists + best-effort live apply via agent)",
        "tags": [
          "containers"
        ],
        "operationId": "putContainersByIdConfigVars",
        "description": "Requires the `containers:update` permission.",
        "x-required-permissions": [
          "containers:update"
        ]
      }
    },
    "/api/v1/containers/{id}/console": {
      "get": {
        "description": "Upgrades to a WebSocket and proxies an interactive shell into the container from the owning hypervisor.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "101": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Container terminal (WebSocket)",
        "tags": [
          "containers"
        ],
        "operationId": "getContainersByIdConsole"
      }
    },
    "/api/v1/containers/{id}/disks": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Container_AttachDiskRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a disk to a container",
        "tags": [
          "containers"
        ],
        "operationId": "postContainersByIdDisks",
        "description": "Requires the `containers:attach_disk` permission.",
        "x-required-permissions": [
          "containers:attach_disk"
        ]
      }
    },
    "/api/v1/containers/{id}/disks/{disk_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "disk_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a disk from a container",
        "tags": [
          "containers"
        ],
        "operationId": "deleteContainersByIdDisksByDiskId",
        "description": "Requires the `containers:detach_disk` permission.",
        "x-required-permissions": [
          "containers:detach_disk"
        ]
      }
    },
    "/api/v1/containers/{id}/logs": {
      "get": {
        "description": "Requires the `containers:read` permission.\n\nStreams the container's captured output from the owning hypervisor as plain text. `tail` bytes of the end are sent first (default 64 KiB, 0 = the whole file); with `follow=1` the response stays open and new output is written as it arrives. The file is capped on the host, so a long-running container keeps its most recent output rather than filling a disk.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Container output (stdout/stderr)",
        "tags": [
          "containers"
        ],
        "operationId": "getContainersByIdLogs",
        "x-required-permissions": [
          "containers:read"
        ]
      }
    },
    "/api/v1/containers/{id}/logs/archive": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Download a container's complete captured output: everything the host's size cap pushed into the archive, in order, followed by what is still on the host",
        "tags": [
          "containers"
        ],
        "operationId": "getContainersByIdLogsArchive",
        "description": "Requires the `containers:read` permission.",
        "x-required-permissions": [
          "containers:read"
        ]
      }
    },
    "/api/v1/containers/{id}/metrics": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "since",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "until",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "window",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Stats_MetricChartSeries"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get container metric history (chart series)",
        "tags": [
          "containers"
        ],
        "operationId": "getContainersByIdMetrics",
        "description": "Requires the `containers:read` permission.",
        "x-required-permissions": [
          "containers:read"
        ]
      }
    },
    "/api/v1/containers/{id}/nics": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Container_AttachNICRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a NIC to a container",
        "tags": [
          "containers"
        ],
        "operationId": "postContainersByIdNics",
        "description": "Requires the `containers:attach_nic` permission.",
        "x-required-permissions": [
          "containers:attach_nic"
        ]
      }
    },
    "/api/v1/containers/{id}/nics/{nic_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "nic_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a NIC from a container",
        "tags": [
          "containers"
        ],
        "operationId": "deleteContainersByIdNicsByNicId",
        "description": "Requires the `containers:detach_nic` permission.",
        "x-required-permissions": [
          "containers:detach_nic"
        ]
      }
    },
    "/api/v1/containers/{id}/reschedule": {
      "post": {
        "description": "Requires the `containers:update` permission.\n\nScheduler picks a target host (excluding the current one); the reconciler re-applies the container on the new host. Refuses when no suitable host is available.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_genericResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Move a container to another host",
        "tags": [
          "containers"
        ],
        "operationId": "postContainersByIdReschedule",
        "x-required-permissions": [
          "containers:update"
        ]
      }
    },
    "/api/v1/containers/{id}/start": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_genericResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a container",
        "tags": [
          "containers"
        ],
        "operationId": "postContainersByIdStart",
        "description": "Requires the `containers:start` permission.",
        "x-required-permissions": [
          "containers:start"
        ]
      }
    },
    "/api/v1/containers/{id}/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_genericResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop a container",
        "tags": [
          "containers"
        ],
        "operationId": "postContainersByIdStop",
        "description": "Requires the `containers:stop` permission.",
        "x-required-permissions": [
          "containers:stop"
        ]
      }
    },
    "/api/v1/deploy-servers": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the tenant's deploy servers",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServers",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create the tenant's deploy server (Coolify) — idempotent: returns the existing one if present. This is the REQUIRED first step before deploying any app; it provisions the Coolify control plane + a worker automatically.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServers",
        "description": "Requires the `deploy_servers:create` permission.",
        "x-required-permissions": [
          "deploy_servers:create"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a deploy server (tears down the control plane + worker)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersById",
        "description": "Requires the `deploy_servers:delete` permission.",
        "x-required-permissions": [
          "deploy_servers:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a deploy server (poll status until 'ready'; init_step shows provisioning progress)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersById",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Scale a deploy server: worker_count adds/removes deploy targets (1-10), worker_instance_type resizes every worker, worker_disk_gib grows their disks (grow-only), app_instance_type resizes the Coolify control plane. Workers change ONE at a time and the dashboard keeps serving; poll workers[] until every entry has registered=true. Resizing a worker RESTARTS it, briefly interrupting the apps on it.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "putDeployServersById",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_AppResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the applications deployed on the deploy server (uuid, status, public URL, image:tag)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdApplications",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateApplicationRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_AppResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create (and by default instantly deploy) an application from a docker image in the worker's local registry. Push the app folder with create_deploy_servers_id_artifacts and docker build+push on the worker FIRST. Returns the app uuid and public URL — poll get_deploy_servers_id_applications until status starts with 'running'.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdApplications",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an application from the deploy server",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdApplicationsByApp",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_AppResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get one application — poll after create/deploy until status starts with 'running', then verify its public URL",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdApplicationsByApp",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "patch": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_UpdateApplicationRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_AppResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update an application's image/tag/port (then trigger a deploy to apply)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "patchDeployServersByIdApplicationsByApp",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/deploy": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_DeployRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_DeployResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Deploy an application. With tag set, repoints the image tag first — ONE call both releases a new version (build+push vN, deploy with tag=vN) and rolls back (deploy with the previous tag).",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdApplicationsByAppDeploy",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/envs": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List an application's environment variables (values included)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdApplicationsByAppEnvs",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_EnvVarsRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Set (upsert) application environment variables; redeploy to apply",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdApplicationsByAppEnvs",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/envs/{key}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "key",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete one environment variable from an application by key; redeploy to apply",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdApplicationsByAppEnvsByKey",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/logs": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_AppLogsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a running application's container logs (RUNTIME logs — why the app is crashing/erroring at run time; distinct from the per-deployment build logs). Optional ?lines=N tail.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdApplicationsByAppLogs",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/restart": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Restart an application",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdApplicationsByAppRestart",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/scheduled-tasks": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List an application's scheduled (cron) tasks",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdApplicationsByAppScheduledTasks",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateTaskRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_TaskResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Add a scheduled cron task to an application (frequency is a cron expression, command runs in the app container)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdApplicationsByAppScheduledTasks",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/scheduled-tasks/{task}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "task",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a scheduled task from an application",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdApplicationsByAppScheduledTasksByTask",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop an application",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdApplicationsByAppStop",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/storages": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List an application's persistent storages (volumes)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdApplicationsByAppStorages",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateStorageRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_StorageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a persistent volume to an application at a mount path so its data survives redeploys; redeploy to apply",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdApplicationsByAppStorages",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/applications/{app}/storages/{storage}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "app",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "storage",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a persistent volume from an application",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdApplicationsByAppStoragesByStorage",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/artifacts": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_ArtifactRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_ArtifactStatus"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Push an app folder tarball (.tgz) onto the deploy server's worker — lands extracted at /opt/apps/<name>. Source: team_object (a tarball a team member previously storage_put into team shared storage) or content_b64 for small archives. ASYNC: poll get_deploy_servers_id_artifacts until status=ready BEFORE building on the worker.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdArtifacts",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/artifacts/{artifact}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "artifact",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_ArtifactStatus"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an artifact push's status (staging|pushing|ready|failed; path is the worker directory when ready)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdArtifactsByArtifact",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/credentials": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_Credentials"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a deploy server's dashboard URL, API base URL, root credentials, API token, and worker id — read after status is ready",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdCredentials",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the deploy server's databases (uuid, name, engine, status)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdDatabases",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateDatabaseRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_DBResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a managed database. type is one of postgresql|mysql|mariadb|mongodb|redis|keydb|dragonfly|clickhouse. Credentials are auto-generated — read the connection string from get_deploy_servers_id_databases_db. Poll until status is 'running'.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdDatabases",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a database. Pass ?delete_volumes=true to also destroy its data volume.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdDatabasesByDb",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_DBResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get one database (poll until status is 'running')",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdDatabasesByDb",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}/backups": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a database's scheduled backups",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdDatabasesByDbBackups",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateBackupRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_BackupResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Schedule recurring backups for a database (frequency is a cron expression, e.g. \"0 2 * * *\")",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdDatabasesByDbBackups",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}/backups/{backup}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "backup",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a database backup schedule",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdDatabasesByDbBackupsByBackup",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}/backups/{backup}/executions": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "backup",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the run history of a database backup schedule (status, size, timestamp)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdDatabasesByDbBackupsByBackupExecutions",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}/restart": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Restart a database",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdDatabasesByDbRestart",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}/start": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a stopped database",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdDatabasesByDbStart",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop a running database",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdDatabasesByDbStop",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}/storages": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a database's persistent storages (volumes)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdDatabasesByDbStorages",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateStorageRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_StorageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a persistent volume to a database at a mount path (survives redeploys); restart to apply",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdDatabasesByDbStorages",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/databases/{db}/storages/{storage}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "db",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "storage",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a persistent volume from a database",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdDatabasesByDbStoragesByStorage",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/deployments": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the deploy server's in-progress and recent deployments (deployment history: uuid, app, status, commit)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdDeployments",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/deployments/{deployment}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "deployment",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_DeploymentResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a deployment's status + log tail — read this when a deploy fails to see the real error",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdDeploymentsByDeployment",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/deployments/{deployment}/cancel": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "deployment",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Cancel an in-progress deployment",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdDeploymentsByDeploymentCancel",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the deploy server's services (uuid, name, type, status)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdServices",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateServiceRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_ServiceResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a service. Provide EITHER type (a Coolify one-click template name, e.g. plausible/n8n) OR docker_compose (a raw docker-compose.yml). Poll until status is 'running'.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdServices",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services/{svc}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a service. Pass ?delete_volumes=true to also destroy its data volumes.",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdServicesBySvc",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_ServiceResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get one service",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdServicesBySvc",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services/{svc}/restart": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Restart a service",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdServicesBySvcRestart",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services/{svc}/scheduled-tasks": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a service's scheduled (cron) tasks",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdServicesBySvcScheduledTasks",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateTaskRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_TaskResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Add a scheduled cron task to a service (frequency is a cron expression)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdServicesBySvcScheduledTasks",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services/{svc}/scheduled-tasks/{task}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "task",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a scheduled task from a service",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdServicesBySvcScheduledTasksByTask",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services/{svc}/start": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a stopped service",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdServicesBySvcStart",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services/{svc}/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop a running service",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdServicesBySvcStop",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services/{svc}/storages": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a service's persistent storages (volumes)",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "getDeployServersByIdServicesBySvcStorages",
        "description": "Requires the `deploy_servers:read` permission.",
        "x-required-permissions": [
          "deploy_servers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployserver_CreateStorageRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployserver_StorageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a persistent volume to a service at a mount path (survives redeploys); restart to apply",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "postDeployServersByIdServicesBySvcStorages",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/deploy-servers/{id}/services/{svc}/storages/{storage}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "svc",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "storage",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a persistent volume from a service",
        "tags": [
          "deploy-servers"
        ],
        "operationId": "deleteDeployServersByIdServicesBySvcStoragesByStorage",
        "description": "Requires the `deploy_servers:manage` permission.",
        "x-required-permissions": [
          "deploy_servers:manage"
        ]
      }
    },
    "/api/v1/dhcp-configs": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dhcpconfig_DHCPConfigResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List DHCP configs",
        "tags": [
          "dhcp-configs"
        ],
        "operationId": "getDhcpConfigs",
        "description": "Requires the `dhcp_configs:read` permission.",
        "x-required-permissions": [
          "dhcp_configs:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Dhcpconfig_CreateDHCPConfigRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dhcpconfig_DHCPConfigResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a DHCP config",
        "tags": [
          "dhcp-configs"
        ],
        "operationId": "postDhcpConfigs",
        "description": "Requires the `dhcp_configs:create` permission.",
        "x-required-permissions": [
          "dhcp_configs:create"
        ]
      }
    },
    "/api/v1/dhcp-configs/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a DHCP config",
        "tags": [
          "dhcp-configs"
        ],
        "operationId": "deleteDhcpConfigsById",
        "description": "Requires the `dhcp_configs:delete` permission.",
        "x-required-permissions": [
          "dhcp_configs:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dhcpconfig_DHCPConfigResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a DHCP config",
        "tags": [
          "dhcp-configs"
        ],
        "operationId": "getDhcpConfigsById",
        "description": "Requires the `dhcp_configs:read` permission.",
        "x-required-permissions": [
          "dhcp_configs:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Dhcpconfig_UpdateDHCPConfigRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dhcpconfig_DHCPConfigResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a DHCP config",
        "tags": [
          "dhcp-configs"
        ],
        "operationId": "putDhcpConfigsById",
        "description": "Requires the `dhcp_configs:update` permission.",
        "x-required-permissions": [
          "dhcp_configs:update"
        ]
      }
    },
    "/api/v1/disks": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Disk_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List disks",
        "tags": [
          "disks"
        ],
        "operationId": "getDisks",
        "description": "Requires the `disks:read` permission.",
        "x-required-permissions": [
          "disks:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Disk_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Disk_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a disk",
        "tags": [
          "disks"
        ],
        "operationId": "postDisks",
        "description": "Requires the `disks:create` permission.",
        "x-required-permissions": [
          "disks:create"
        ]
      }
    },
    "/api/v1/disks/adopt": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_adoptDiskRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "type": "object"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Adopt an orphaned LINSTOR volume into a disk row (admin)",
        "tags": [
          "disks"
        ],
        "operationId": "postDisksAdopt",
        "description": "Requires the `disks:create` permission.",
        "x-required-permissions": [
          "disks:create"
        ]
      }
    },
    "/api/v1/disks/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a disk",
        "tags": [
          "disks"
        ],
        "operationId": "deleteDisksById",
        "description": "Requires the `disks:delete` permission.",
        "x-required-permissions": [
          "disks:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Disk_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a disk",
        "tags": [
          "disks"
        ],
        "operationId": "getDisksById",
        "description": "Requires the `disks:read` permission.",
        "x-required-permissions": [
          "disks:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Disk_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Disk_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a disk",
        "tags": [
          "disks"
        ],
        "operationId": "putDisksById",
        "description": "Requires the `disks:update` permission.",
        "x-required-permissions": [
          "disks:update"
        ]
      }
    },
    "/api/v1/disks/{id}/attach": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Disk_AttachToVMRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_attachRefResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a disk to a VM",
        "tags": [
          "disks"
        ],
        "operationId": "postDisksByIdAttach",
        "description": "Requires the `disks:update` permission.",
        "x-required-permissions": [
          "disks:update"
        ]
      }
    },
    "/api/v1/disks/{id}/detach": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Disk_DetachFromVMRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a disk from a VM",
        "tags": [
          "disks"
        ],
        "operationId": "postDisksByIdDetach",
        "description": "Requires the `disks:update` permission.",
        "x-required-permissions": [
          "disks:update"
        ]
      }
    },
    "/api/v1/disks/{id}/host-access": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Disk_HostAccessRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Ensure a host can access the disk (adds a diskless replica when needed)",
        "tags": [
          "disks"
        ],
        "operationId": "postDisksByIdHostAccess",
        "description": "Requires the `disks:update` permission.",
        "x-required-permissions": [
          "disks:update"
        ]
      }
    },
    "/api/v1/disks/{id}/host-access/{host_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "host_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Release a host's access to the disk",
        "tags": [
          "disks"
        ],
        "operationId": "deleteDisksByIdHostAccessByHostId",
        "description": "Requires the `disks:update` permission.",
        "x-required-permissions": [
          "disks:update"
        ]
      }
    },
    "/api/v1/disks/{id}/migrate": {
      "post": {
        "description": "Requires the `disks:update` permission.\n\nMoves a disk between hosts. The target hypervisor pulls data from the source via LINSTOR replication. Refuses when the disk is attached to a running VM — stop the VM first.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Disk_MigrateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Migrate a disk to another host (LINSTOR-replicated)",
        "tags": [
          "disks"
        ],
        "operationId": "postDisksByIdMigrate",
        "x-required-permissions": [
          "disks:update"
        ]
      }
    },
    "/api/v1/disks/{id}/snapshots": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_snapshotsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List disk snapshots",
        "tags": [
          "disks"
        ],
        "operationId": "getDisksByIdSnapshots",
        "description": "Requires the `disks:read` permission.",
        "x-required-permissions": [
          "disks:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_createSnapshotRequestSpec"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Imperative_SnapshotResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a disk snapshot",
        "tags": [
          "disks"
        ],
        "operationId": "postDisksByIdSnapshots",
        "description": "Requires the `disks:snapshot` permission.",
        "x-required-permissions": [
          "disks:snapshot"
        ]
      }
    },
    "/api/v1/disks/{id}/snapshots/{name}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a disk snapshot",
        "tags": [
          "disks"
        ],
        "operationId": "deleteDisksByIdSnapshotsByName",
        "description": "Requires the `disks:snapshot` permission.",
        "x-required-permissions": [
          "disks:snapshot"
        ]
      }
    },
    "/api/v1/disks/{id}/snapshots/{name}/restore": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Imperative_RestoreResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Restore a disk snapshot into a new resource",
        "tags": [
          "disks"
        ],
        "operationId": "postDisksByIdSnapshotsByNameRestore",
        "description": "Requires the `disks:restore` permission.",
        "x-required-permissions": [
          "disks:restore"
        ]
      }
    },
    "/api/v1/disks/{id}/snapshots/{name}/rollback": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Roll a disk back to a snapshot in place",
        "tags": [
          "disks"
        ],
        "operationId": "postDisksByIdSnapshotsByNameRollback",
        "description": "Requires the `disks:rollback` permission.",
        "x-required-permissions": [
          "disks:rollback"
        ]
      }
    },
    "/api/v1/dns-records": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dnsrecord_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List DNS records",
        "tags": [
          "dns-records"
        ],
        "operationId": "getDnsRecords",
        "description": "Requires the `dns_records:read` permission.",
        "x-required-permissions": [
          "dns_records:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Dnsrecord_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dnsrecord_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a DNS record",
        "tags": [
          "dns-records"
        ],
        "operationId": "postDnsRecords",
        "description": "Requires the `dns_records:create` permission.",
        "x-required-permissions": [
          "dns_records:create"
        ]
      }
    },
    "/api/v1/dns-records/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a DNS record",
        "tags": [
          "dns-records"
        ],
        "operationId": "deleteDnsRecordsById",
        "description": "Requires the `dns_records:delete` permission.",
        "x-required-permissions": [
          "dns_records:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dnsrecord_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a DNS record",
        "tags": [
          "dns-records"
        ],
        "operationId": "getDnsRecordsById",
        "description": "Requires the `dns_records:read` permission.",
        "x-required-permissions": [
          "dns_records:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Dnsrecord_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dnsrecord_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a DNS record",
        "tags": [
          "dns-records"
        ],
        "operationId": "putDnsRecordsById",
        "description": "Requires the `dns_records:update` permission.",
        "x-required-permissions": [
          "dns_records:update"
        ]
      }
    },
    "/api/v1/environments": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Environment_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List environments",
        "tags": [
          "environments"
        ],
        "operationId": "getEnvironments",
        "description": "Requires the `environments:read` permission.",
        "x-required-permissions": [
          "environments:read"
        ]
      },
      "post": {
        "description": "Requires the `environments:create` permission.\n\nBoots a build instance (microVM by default, or a VM) from a base image. The base is auto-picked (newest CLEAN image of the right kind) unless pinned via base_image_id, or forked from another sealed environment via source_environment_id. Install software (manual via console, or an auto provisioner), then POST :id/seal to capture a versioned image. The environment also carries the agent surface its RUNS inherit: type (agent backend), connector, default agent config/model, and default run instance size. Resource-constrained: vm-xsmall only.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Environment_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Environment_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create an environment",
        "tags": [
          "environments"
        ],
        "operationId": "postEnvironments",
        "x-required-permissions": [
          "environments:create"
        ]
      }
    },
    "/api/v1/environments/{id}": {
      "delete": {
        "description": "Requires the `environments:delete` permission.\n\nTears down the build instance and its NIC; the boot disk detaches. The env's private sealed image is reaped with it (published images survive). Refused while runs of this environment exist.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an environment",
        "tags": [
          "environments"
        ],
        "operationId": "deleteEnvironmentsById",
        "x-required-permissions": [
          "environments:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Environment_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an environment",
        "tags": [
          "environments"
        ],
        "operationId": "getEnvironmentsById",
        "description": "Requires the `environments:read` permission.",
        "x-required-permissions": [
          "environments:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Environment_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Environment_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update an environment (rename, tags, connector, agent config, run size)",
        "tags": [
          "environments"
        ],
        "operationId": "putEnvironmentsById",
        "description": "Requires the `environments:update` permission.",
        "x-required-permissions": [
          "environments:update"
        ]
      }
    },
    "/api/v1/environments/{id}/seal": {
      "post": {
        "description": "Requires the `environments:seal` permission.\n\nCaptures the build instance's boot disk into a catalog image and bumps the version → state=sealed. A sealed version is what RUNS cold-boot. Refuses (409 not_settled) while the build instance's first boot has not settled — in-guest agent online + cloud-init terminal — unless force=true.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Environment_SealRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Environment_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Seal an environment into a versioned image",
        "tags": [
          "environments"
        ],
        "operationId": "postEnvironmentsByIdSeal",
        "x-required-permissions": [
          "environments:seal"
        ]
      }
    },
    "/api/v1/events": {
      "get": {
        "description": "Upgrades the connection to a WebSocket and fans engine events out to the caller's tenant.",
        "responses": {
          "101": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "WebSocket event stream",
        "tags": [
          "events"
        ],
        "operationId": "getEvents"
      }
    },
    "/api/v1/gateways": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Gateway_GatewayResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List gateways",
        "tags": [
          "gateways"
        ],
        "operationId": "getGateways",
        "description": "Requires the `gateways:read` permission.",
        "x-required-permissions": [
          "gateways:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Gateway_CreateGatewayRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Gateway_GatewayResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a gateway",
        "tags": [
          "gateways"
        ],
        "operationId": "postGateways",
        "description": "Requires the `gateways:update` permission.",
        "x-required-permissions": [
          "gateways:update"
        ]
      }
    },
    "/api/v1/gateways/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a gateway",
        "tags": [
          "gateways"
        ],
        "operationId": "deleteGatewaysById",
        "description": "Requires the `gateways:delete` permission.",
        "x-required-permissions": [
          "gateways:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Gateway_GatewayResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a gateway",
        "tags": [
          "gateways"
        ],
        "operationId": "getGatewaysById",
        "description": "Requires the `gateways:read` permission.",
        "x-required-permissions": [
          "gateways:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Gateway_UpdateGatewayRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Gateway_GatewayResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a gateway",
        "tags": [
          "gateways"
        ],
        "operationId": "putGatewaysById",
        "description": "Requires the `gateways:update` permission.",
        "x-required-permissions": [
          "gateways:update"
        ]
      }
    },
    "/api/v1/git-deploys": {
      "post": {
        "description": "Requires the `vms:create` permission.\n\nBoots a microVM (default) or VM whose generated cloud-init clones repo_url@branch into /app, runs build_command, and runs start_command as a systemd service (EnvironmentFile /etc/interlaken/env from env_vars). Private repos clone with a token from the github connector (connector_id, or the tenant default). Returns the created VM — watch the build in the machine's Console tab.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Gitdeploy_Request"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Gitdeploy_DeployResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Deploy an app from a git repository",
        "tags": [
          "git-deploys"
        ],
        "operationId": "postGitDeploys",
        "x-required-permissions": [
          "vms:create"
        ]
      }
    },
    "/api/v1/git-deploys/assist": {
      "post": {
        "description": "Requires the `vms:create` permission.\n\nBoots a smallest-footprint helper VM, has an AI engine (interlaken|claude|codex) inspect repo_url, and returns suggested build_command/start_command; the helper is deleted as soon as the answer lands. claude/codex require the matching connector (409 connector_required otherwise). Poll GET /git-deploys/assist/:id for the result.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Deployassist_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployassist_CreateResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Ask AI for build/start commands",
        "tags": [
          "git-deploys"
        ],
        "operationId": "postGitDeploysAssist",
        "x-required-permissions": [
          "vms:create"
        ]
      }
    },
    "/api/v1/git-deploys/assist/{id}": {
      "delete": {
        "description": "Requires the `vms:create` permission.\n\nDrops the assist intent and its unpersisted transcript immediately (on accept or dialog close), instead of waiting for the drop TTL.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Dismiss an AI build/start suggestion",
        "tags": [
          "git-deploys"
        ],
        "operationId": "deleteGitDeploysAssistById",
        "x-required-permissions": [
          "vms:create"
        ]
      },
      "get": {
        "description": "Requires the `vms:read` permission.\n\nReturns the assist's state, the running progress transcript (read-only, not persisted), and — once done — the suggested build/start commands.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Deployassist_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Poll an AI build/start suggestion",
        "tags": [
          "git-deploys"
        ],
        "operationId": "getGitDeploysAssistById",
        "x-required-permissions": [
          "vms:read"
        ]
      }
    },
    "/api/v1/github/repos": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "connector_id",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "page",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "per_page",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_RepoResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the connected GitHub account's repositories (most recently pushed first) — the workspace repo picker. Optional connector_id (defaults to the tenant's default github connector), page, per_page.",
        "tags": [
          "github"
        ],
        "operationId": "getGithubRepos",
        "description": "Requires the `workspaces:create` permission.",
        "x-required-permissions": [
          "workspaces:create"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workspace_CreateRepoRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_RepoResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a repository on the connected GitHub account (auto-initialized so it has a default branch)",
        "tags": [
          "github"
        ],
        "operationId": "postGithubRepos",
        "description": "Requires the `workspaces:create` permission.",
        "x-required-permissions": [
          "workspaces:create"
        ]
      }
    },
    "/api/v1/images": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "kind",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Image_ImageResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List images",
        "tags": [
          "images"
        ],
        "operationId": "getImages",
        "description": "Requires the `images:read` permission.",
        "x-required-permissions": [
          "images:read"
        ]
      }
    },
    "/api/v1/images/from-snapshot": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Image_CreateFromSnapshotRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Image_ImageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a tenant-scoped image from one of the caller's disk snapshots",
        "tags": [
          "images"
        ],
        "operationId": "postImagesFromSnapshot",
        "description": "Requires the `images:create` permission.",
        "x-required-permissions": [
          "images:create"
        ]
      }
    },
    "/api/v1/images/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a tenant-owned image",
        "tags": [
          "images"
        ],
        "operationId": "deleteImagesById",
        "description": "Requires the `images:delete` permission.",
        "x-required-permissions": [
          "images:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Image_ImageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an image",
        "tags": [
          "images"
        ],
        "operationId": "getImagesById",
        "description": "Requires the `images:read` permission.",
        "x-required-permissions": [
          "images:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Image_UpdateImageRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Image_ImageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rename an image",
        "tags": [
          "images"
        ],
        "operationId": "putImagesById",
        "description": "Requires the `images:create` permission.",
        "x-required-permissions": [
          "images:create"
        ]
      }
    },
    "/api/v1/instance-roles": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "additionalProperties": {
                    "items": {
                      "$ref": "#/components/schemas/Metadata_InstanceRoleEntry"
                    },
                    "type": "array"
                  },
                  "type": "object"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List instance roles assigned to the tenant's VMs",
        "tags": [
          "instance-roles"
        ],
        "operationId": "getInstanceRoles",
        "description": "Requires the `instance_roles:read` permission.",
        "x-required-permissions": [
          "instance_roles:read"
        ]
      }
    },
    "/api/v1/instance-types": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Instancetype_InstanceTypeResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List instance types",
        "tags": [
          "instance-types"
        ],
        "operationId": "getInstanceTypes",
        "description": "Requires the `instance_types:read` permission.",
        "x-required-permissions": [
          "instance_types:read"
        ]
      }
    },
    "/api/v1/instance-types/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Instancetype_InstanceTypeResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an instance type",
        "tags": [
          "instance-types"
        ],
        "operationId": "getInstanceTypesById",
        "description": "Requires the `instance_types:read` permission.",
        "x-required-permissions": [
          "instance_types:read"
        ]
      }
    },
    "/api/v1/kubernetes-clusters": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/K8scluster_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List managed Kubernetes clusters",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "getKubernetesClusters",
        "description": "Requires the `kubernetes_clusters:read` permission.",
        "x-required-permissions": [
          "kubernetes_clusters:read"
        ]
      },
      "post": {
        "description": "Requires the `kubernetes_clusters:create` permission.\n\nProvisions an API load balancer, 1 or 3 tainted control-plane VMs, and a worker auto-scaling group in the tenant's VPC. Nodes boot the platform node image and install the pinned k3s version via cloud-init; interlaken-cni/csi/ccm are installed automatically. Pod IPv4s come from the chosen pod subnet (pod_subnet_id, or new_pod_subnet to create one). Requires an internet gateway on the VPC.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/K8scluster_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/K8scluster_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a managed Kubernetes (k3s) cluster",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "postKubernetesClusters",
        "x-required-permissions": [
          "kubernetes_clusters:create"
        ]
      }
    },
    "/api/v1/kubernetes-clusters/versions": {
      "get": {
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List installable k3s versions",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "getKubernetesClustersVersions",
        "description": "Requires the `kubernetes_clusters:read` permission.",
        "x-required-permissions": [
          "kubernetes_clusters:read"
        ]
      }
    },
    "/api/v1/kubernetes-clusters/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a managed Kubernetes cluster",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "deleteKubernetesClustersById",
        "description": "Requires the `kubernetes_clusters:delete` permission.",
        "x-required-permissions": [
          "kubernetes_clusters:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/K8scluster_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a managed Kubernetes cluster",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "getKubernetesClustersById",
        "description": "Requires the `kubernetes_clusters:read` permission.",
        "x-required-permissions": [
          "kubernetes_clusters:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/K8scluster_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/K8scluster_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a managed Kubernetes cluster (rename, scale workers)",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "putKubernetesClustersById",
        "description": "Requires the `kubernetes_clusters:update` permission.",
        "x-required-permissions": [
          "kubernetes_clusters:update"
        ]
      }
    },
    "/api/v1/kubernetes-clusters/{id}/kubeconfig": {
      "get": {
        "description": "Requires the `kubernetes_clusters:read` permission.\n\nThe server URL points at the cluster's API VIP on the node subnet — reachable from inside the VPC. Returns 409 until the control plane is up.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/K8scluster_KubeconfigResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Download the cluster's admin kubeconfig",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "getKubernetesClustersByIdKubeconfig",
        "x-required-permissions": [
          "kubernetes_clusters:read"
        ]
      }
    },
    "/api/v1/kubernetes-clusters/{id}/nodes": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/K8scluster_NodeResponse"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a cluster's nodes (control plane + workers)",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "getKubernetesClustersByIdNodes",
        "description": "Requires the `kubernetes_clusters:read` permission.",
        "x-required-permissions": [
          "kubernetes_clusters:read"
        ]
      }
    },
    "/api/v1/kubernetes-clusters/{id}/upgrade": {
      "post": {
        "description": "Requires the `kubernetes_clusters:upgrade` permission.\n\nServers first, then workers, one node at a time. Same-minor patch bumps or +1 minor only; no downgrades.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/K8scluster_UpgradeRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/K8scluster_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a rolling k3s version upgrade",
        "tags": [
          "kubernetes-clusters"
        ],
        "operationId": "postKubernetesClustersByIdUpgrade",
        "x-required-permissions": [
          "kubernetes_clusters:upgrade"
        ]
      }
    },
    "/api/v1/limits": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Limits_TenantLimitsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get the caller's resource limits",
        "tags": [
          "limits"
        ],
        "operationId": "getLimits",
        "description": "Requires the `limits:read` permission.",
        "x-required-permissions": [
          "limits:read"
        ]
      }
    },
    "/api/v1/load-balancers": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Loadbalancer_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List load balancers",
        "tags": [
          "load-balancers"
        ],
        "operationId": "getLoadBalancers",
        "description": "Requires the `load_balancers:read` permission.",
        "x-required-permissions": [
          "load_balancers:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Loadbalancer_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Loadbalancer_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a load balancer",
        "tags": [
          "load-balancers"
        ],
        "operationId": "postLoadBalancers",
        "description": "Requires the `load_balancers:create` permission.",
        "x-required-permissions": [
          "load_balancers:create"
        ]
      }
    },
    "/api/v1/load-balancers/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a load balancer",
        "tags": [
          "load-balancers"
        ],
        "operationId": "deleteLoadBalancersById",
        "description": "Requires the `load_balancers:delete` permission.",
        "x-required-permissions": [
          "load_balancers:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Loadbalancer_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a load balancer",
        "tags": [
          "load-balancers"
        ],
        "operationId": "getLoadBalancersById",
        "description": "Requires the `load_balancers:read` permission.",
        "x-required-permissions": [
          "load_balancers:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Loadbalancer_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Loadbalancer_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a load balancer",
        "tags": [
          "load-balancers"
        ],
        "operationId": "putLoadBalancersById",
        "description": "Requires the `load_balancers:update` permission.",
        "x-required-permissions": [
          "load_balancers:update"
        ]
      }
    },
    "/api/v1/load-balancers/{id}/routes": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Lbroute_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List LB routes",
        "tags": [
          "load-balancers"
        ],
        "operationId": "getLoadBalancersByIdRoutes",
        "description": "Requires the `load_balancers:read` permission.",
        "x-required-permissions": [
          "load_balancers:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Lbroute_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Lbroute_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create an LB route",
        "tags": [
          "load-balancers"
        ],
        "operationId": "postLoadBalancersByIdRoutes",
        "description": "Requires the `load_balancers:update` permission.",
        "x-required-permissions": [
          "load_balancers:update"
        ]
      }
    },
    "/api/v1/load-balancers/{id}/routes/{route_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "route_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an LB route",
        "tags": [
          "load-balancers"
        ],
        "operationId": "deleteLoadBalancersByIdRoutesByRouteId",
        "description": "Requires the `load_balancers:update` permission.",
        "x-required-permissions": [
          "load_balancers:update"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "route_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Lbroute_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Lbroute_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update an LB route",
        "tags": [
          "load-balancers"
        ],
        "operationId": "putLoadBalancersByIdRoutesByRouteId",
        "description": "Requires the `load_balancers:update` permission.",
        "x-required-permissions": [
          "load_balancers:update"
        ]
      }
    },
    "/api/v1/load-balancers/{id}/targets": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Loadbalancer_RemoveTargetRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Loadbalancer_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a target from a load balancer",
        "tags": [
          "load-balancers"
        ],
        "operationId": "deleteLoadBalancersByIdTargets",
        "description": "Requires the `load_balancers:manage_targets` permission.",
        "x-required-permissions": [
          "load_balancers:manage_targets"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Loadbalancer_AddTargetRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Loadbalancer_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Add a target to a load balancer",
        "tags": [
          "load-balancers"
        ],
        "operationId": "postLoadBalancersByIdTargets",
        "description": "Requires the `load_balancers:manage_targets` permission.",
        "x-required-permissions": [
          "load_balancers:manage_targets"
        ]
      }
    },
    "/api/v1/load-balancers/{id}/targets/weight": {
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Loadbalancer_SetTargetWeightRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Loadbalancer_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Set a target's weight",
        "tags": [
          "load-balancers"
        ],
        "operationId": "putLoadBalancersByIdTargetsWeight",
        "description": "Requires the `load_balancers:manage_targets` permission.",
        "x-required-permissions": [
          "load_balancers:manage_targets"
        ]
      }
    },
    "/api/v1/managed-services": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List managed services",
        "tags": [
          "managed-services"
        ],
        "operationId": "getManagedServices",
        "description": "Requires the `managed_services:read` permission.",
        "x-required-permissions": [
          "managed_services:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Managedservice_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a managed service",
        "tags": [
          "managed-services"
        ],
        "operationId": "postManagedServices",
        "description": "Requires the `managed_services:create` permission.",
        "x-required-permissions": [
          "managed_services:create"
        ]
      }
    },
    "/api/v1/managed-services/backups": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Managedservice_BackupInfo"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List all database backups for the tenant",
        "tags": [
          "managed-services"
        ],
        "operationId": "getManagedServicesBackups",
        "description": "Requires the `managed_services:read` permission.",
        "x-required-permissions": [
          "managed_services:read"
        ]
      }
    },
    "/api/v1/managed-services/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a managed service",
        "tags": [
          "managed-services"
        ],
        "operationId": "deleteManagedServicesById",
        "description": "Requires the `managed_services:delete` permission.",
        "x-required-permissions": [
          "managed_services:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a managed service",
        "tags": [
          "managed-services"
        ],
        "operationId": "getManagedServicesById",
        "description": "Requires the `managed_services:read` permission.",
        "x-required-permissions": [
          "managed_services:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Managedservice_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a managed service — including RESIZE: set instance_type to move the database onto another plan, and its cpu/memory bounds follow. Storage is expand-only and never shrinks with the plan",
        "tags": [
          "managed-services"
        ],
        "operationId": "putManagedServicesById",
        "description": "Requires the `managed_services:update` permission.",
        "x-required-permissions": [
          "managed_services:update"
        ]
      }
    },
    "/api/v1/managed-services/{id}/backup": {
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Managedservice_UpdateBackupRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a database's backup configuration",
        "tags": [
          "managed-services"
        ],
        "operationId": "putManagedServicesByIdBackup",
        "description": "Requires the `managed_services:update` permission.",
        "x-required-permissions": [
          "managed_services:update"
        ]
      }
    },
    "/api/v1/managed-services/{id}/backups": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Managedservice_BackupInfo"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a database's backups",
        "tags": [
          "managed-services"
        ],
        "operationId": "getManagedServicesByIdBackups",
        "description": "Requires the `managed_services:read` permission.",
        "x-required-permissions": [
          "managed_services:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_BackupInfo"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Trigger an on-demand backup",
        "tags": [
          "managed-services"
        ],
        "operationId": "postManagedServicesByIdBackups",
        "description": "Requires the `managed_services:update` permission.",
        "x-required-permissions": [
          "managed_services:update"
        ]
      }
    },
    "/api/v1/managed-services/{id}/backups/{name}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a database backup",
        "tags": [
          "managed-services"
        ],
        "operationId": "deleteManagedServicesByIdBackupsByName",
        "description": "Requires the `managed_services:update` permission.",
        "x-required-permissions": [
          "managed_services:update"
        ]
      }
    },
    "/api/v1/managed-services/{id}/backups/{name}/restore": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Managedservice_RestoreBackupRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Restore a database from a backup into a new database",
        "tags": [
          "managed-services"
        ],
        "operationId": "postManagedServicesByIdBackupsByNameRestore",
        "description": "Requires the `managed_services:create` permission.",
        "x-required-permissions": [
          "managed_services:create"
        ]
      }
    },
    "/api/v1/managed-services/{id}/credentials": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_Credentials"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a managed service's live admin connection credentials (endpoint, username, password)",
        "tags": [
          "managed-services"
        ],
        "operationId": "getManagedServicesByIdCredentials",
        "description": "Requires the `managed_services:read` permission.",
        "x-required-permissions": [
          "managed_services:read"
        ]
      }
    },
    "/api/v1/managed-services/{id}/credentials/rotate": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_RotateResult"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rotate a managed service's admin password: applied to the engine, written to its Secret, and pushed into every attached workload's connection URL. Returns the new credentials",
        "tags": [
          "managed-services"
        ],
        "operationId": "postManagedServicesByIdCredentialsRotate",
        "description": "Requires the `managed_services:update` permission.",
        "x-required-permissions": [
          "managed_services:update"
        ]
      }
    },
    "/api/v1/managed-services/{id}/public-access": {
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_PublicAccessRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Managedservice_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach (enabled=true) or detach (enabled=false) a public IP on the database's load balancer",
        "tags": [
          "managed-services"
        ],
        "operationId": "putManagedServicesByIdPublicAccess",
        "description": "Requires the `managed_services:update` permission.",
        "x-required-permissions": [
          "managed_services:update"
        ]
      }
    },
    "/api/v1/microvms": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List microVMs",
        "tags": [
          "microvms"
        ],
        "operationId": "getMicrovms",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Microvm_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovms",
        "description": "Requires the `vms:create` permission.",
        "x-required-permissions": [
          "vms:create"
        ]
      }
    },
    "/api/v1/microvms/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "deleteMicrovmsById",
        "description": "Requires the `vms:delete` permission.",
        "x-required-permissions": [
          "vms:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "getMicrovmsById",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Microvm_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "putMicrovmsById",
        "description": "Requires the `vms:update` permission.",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/microvms/{id}/activity": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Activity_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a microVM's activity feed (reconciler event log)",
        "tags": [
          "microvms"
        ],
        "operationId": "getMicrovmsByIdActivity",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      }
    },
    "/api/v1/microvms/{id}/attachments": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_dbAttachListResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List databases attached to a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "getMicrovmsByIdAttachments",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      }
    },
    "/api/v1/microvms/{id}/attachments/database": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_dbAttachRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dbattach_AttachResult"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a managed database to a microVM (composes its URL into a config var)",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdAttachmentsDatabase",
        "description": "Requires the `vms:update` permission.",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/microvms/{id}/attachments/database/{database_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "database_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a managed database from a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "deleteMicrovmsByIdAttachmentsDatabaseByDatabaseId",
        "description": "Requires the `vms:update` permission.",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/microvms/{id}/config-vars": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_configVarsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a microVM's config vars (env vars)",
        "tags": [
          "microvms"
        ],
        "operationId": "getMicrovmsByIdConfigVars",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_configVarsPutRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_configVarsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Replace a microVM's config vars (persists + best-effort live apply via agent)",
        "tags": [
          "microvms"
        ],
        "operationId": "putMicrovmsByIdConfigVars",
        "description": "Requires the `vms:update` permission.",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/microvms/{id}/console": {
      "get": {
        "description": "Upgrades to a WebSocket and proxies the Firecracker microVM's serial console from the owning hypervisor.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "101": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "microVM serial console (WebSocket)",
        "tags": [
          "microvms"
        ],
        "operationId": "getMicrovmsByIdConsole"
      }
    },
    "/api/v1/microvms/{id}/disks": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Microvm_AttachDiskRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a disk to a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdDisks",
        "description": "Requires the `vms:attach_disk` permission.",
        "x-required-permissions": [
          "vms:attach_disk"
        ]
      }
    },
    "/api/v1/microvms/{id}/disks/{disk_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "disk_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a disk from a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "deleteMicrovmsByIdDisksByDiskId",
        "description": "Requires the `vms:detach_disk` permission.",
        "x-required-permissions": [
          "vms:detach_disk"
        ]
      }
    },
    "/api/v1/microvms/{id}/metrics": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "since",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "until",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "window",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Stats_MetricChartSeries"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get microVM metric history (chart series)",
        "tags": [
          "microvms"
        ],
        "operationId": "getMicrovmsByIdMetrics",
        "description": "Requires the `vms:read_metrics` permission.",
        "x-required-permissions": [
          "vms:read_metrics"
        ]
      }
    },
    "/api/v1/microvms/{id}/nics": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Microvm_AttachNICRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a NIC to a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdNics",
        "description": "Requires the `vms:attach_nic` permission.",
        "x-required-permissions": [
          "vms:attach_nic"
        ]
      }
    },
    "/api/v1/microvms/{id}/nics/{nic_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "nic_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a NIC from a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "deleteMicrovmsByIdNicsByNicId",
        "description": "Requires the `vms:detach_nic` permission.",
        "x-required-permissions": [
          "vms:detach_nic"
        ]
      }
    },
    "/api/v1/microvms/{id}/reboot": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Reboot a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdReboot",
        "description": "Requires the `vms:reboot` permission.",
        "x-required-permissions": [
          "vms:reboot"
        ]
      }
    },
    "/api/v1/microvms/{id}/reschedule": {
      "post": {
        "description": "Requires the `vms:update` permission.\n\nScheduler picks a target host (excluding the current one); attached disks migrate via LINSTOR; the reconciler re-applies the microVM on the new host. Refuses when no suitable host is available.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Move a microVM to another host",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdReschedule",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/microvms/{id}/resume": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Resume a suspended microVM from its memory snapshot",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdResume",
        "description": "Requires the `vms:resume` permission.",
        "x-required-permissions": [
          "vms:resume"
        ]
      }
    },
    "/api/v1/microvms/{id}/start": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdStart",
        "description": "Requires the `vms:start` permission.",
        "x-required-permissions": [
          "vms:start"
        ]
      }
    },
    "/api/v1/microvms/{id}/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop a microVM",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdStop",
        "description": "Requires the `vms:stop` permission.",
        "x-required-permissions": [
          "vms:stop"
        ]
      }
    },
    "/api/v1/microvms/{id}/suspend": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Microvm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Suspend a microVM to a memory snapshot (frees the host)",
        "tags": [
          "microvms"
        ],
        "operationId": "postMicrovmsByIdSuspend",
        "description": "Requires the `vms:suspend` permission.",
        "x-required-permissions": [
          "vms:suspend"
        ]
      }
    },
    "/api/v1/nics": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Nic_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List NICs",
        "tags": [
          "nics"
        ],
        "operationId": "getNics",
        "description": "Requires the `nics:read` permission.",
        "x-required-permissions": [
          "nics:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Nic_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Nic_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a NIC",
        "tags": [
          "nics"
        ],
        "operationId": "postNics",
        "description": "Requires the `nics:create` permission.",
        "x-required-permissions": [
          "nics:create"
        ]
      }
    },
    "/api/v1/nics/heartbeat": {
      "post": {
        "description": "Requires the `nics:delete` permission.\n\nAction endpoint (creates nothing). The CNI / platform-cni posts the set of pod UIDs it still considers alive; any sub-interface or platform NIC tagged with a pod_uid absent from that set and older than the grace period is deleted. Returns the reaped NIC ids.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Nic_HeartbeatRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Nic_HeartbeatResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Reap orphaned pod NICs (CNI liveness sweep)",
        "tags": [
          "nics"
        ],
        "operationId": "postNicsHeartbeat",
        "x-required-permissions": [
          "nics:delete"
        ]
      }
    },
    "/api/v1/nics/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a NIC",
        "tags": [
          "nics"
        ],
        "operationId": "deleteNicsById",
        "description": "Requires the `nics:delete` permission.",
        "x-required-permissions": [
          "nics:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Nic_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a NIC",
        "tags": [
          "nics"
        ],
        "operationId": "getNicsById",
        "description": "Requires the `nics:read` permission.",
        "x-required-permissions": [
          "nics:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Nic_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Nic_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a NIC",
        "tags": [
          "nics"
        ],
        "operationId": "putNicsById",
        "description": "Requires the `nics:update` permission.",
        "x-required-permissions": [
          "nics:update"
        ]
      }
    },
    "/api/v1/nics/{id}/attach": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Nic_AttachRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a NIC to a workload",
        "tags": [
          "nics"
        ],
        "operationId": "postNicsByIdAttach",
        "description": "Requires the `nics:update` permission.",
        "x-required-permissions": [
          "nics:update"
        ]
      }
    },
    "/api/v1/permissions": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "additionalProperties": {
                    "additionalProperties": true,
                    "type": "object"
                  },
                  "type": "object"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the permission catalog (grouped registry)",
        "tags": [
          "permissions"
        ],
        "operationId": "getPermissions",
        "description": "Requires the `roles:read` permission.",
        "x-required-permissions": [
          "roles:read"
        ]
      }
    },
    "/api/v1/pricing": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Servicepricing_PricingResponse"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List pricing",
        "tags": [
          "pricing"
        ],
        "operationId": "getPricing",
        "description": "Requires the `pricing:read` permission.",
        "x-required-permissions": [
          "pricing:read"
        ]
      }
    },
    "/api/v1/public-ips": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Publicip_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List public IPs",
        "tags": [
          "public-ips"
        ],
        "operationId": "getPublicIps",
        "description": "Requires the `public_ips:read` permission.",
        "x-required-permissions": [
          "public_ips:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Publicip_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Publicip_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a public IP",
        "tags": [
          "public-ips"
        ],
        "operationId": "postPublicIps",
        "description": "Requires the `public_ips:create` permission.",
        "x-required-permissions": [
          "public_ips:create"
        ]
      }
    },
    "/api/v1/public-ips/attach": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Publicip_AttachRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a public IP to a NIC",
        "tags": [
          "public-ips"
        ],
        "operationId": "postPublicIpsAttach",
        "description": "Requires the `public_ips:attach` permission.",
        "x-required-permissions": [
          "public_ips:attach"
        ]
      }
    },
    "/api/v1/public-ips/detach": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Publicip_DetachRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a public IP from a NIC",
        "tags": [
          "public-ips"
        ],
        "operationId": "postPublicIpsDetach",
        "description": "Requires the `public_ips:detach` permission.",
        "x-required-permissions": [
          "public_ips:detach"
        ]
      }
    },
    "/api/v1/public-ips/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a public IP",
        "tags": [
          "public-ips"
        ],
        "operationId": "deletePublicIpsById",
        "description": "Requires the `public_ips:delete` permission.",
        "x-required-permissions": [
          "public_ips:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Publicip_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a public IP",
        "tags": [
          "public-ips"
        ],
        "operationId": "getPublicIpsById",
        "description": "Requires the `public_ips:read` permission.",
        "x-required-permissions": [
          "public_ips:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Publicip_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Publicip_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a public IP",
        "tags": [
          "public-ips"
        ],
        "operationId": "putPublicIpsById",
        "description": "Requires the `public_ips:update` permission.",
        "x-required-permissions": [
          "public_ips:update"
        ]
      }
    },
    "/api/v1/quick-launches": {
      "post": {
        "description": "Requires the `runs:create` permission.\n\nRegisters a launch intent that ensures the quick-launch environment is sealed, the per-kind pool is snapshotted, and a run is forked from it. Poll GET /quick-launches/:id for progress. Prompt is required for claude/codex and must be empty for interlaken; 409 code=connector_required when the kind needs a connector and none is connected.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Quicklaunch_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Quicklaunch_CreateResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a quick launch",
        "tags": [
          "quick-launches"
        ],
        "operationId": "postQuickLaunches",
        "x-required-permissions": [
          "runs:create"
        ]
      }
    },
    "/api/v1/quick-launches/preflight": {
      "get": {
        "description": "Requires the `runs:read` permission.\n\nCheap warm-path probe: connector present, environment sealed, pool sealed.",
        "parameters": [
          {
            "in": "query",
            "name": "kind",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Quicklaunch_PreflightResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Preflight a quick launch",
        "tags": [
          "quick-launches"
        ],
        "operationId": "getQuickLaunchesPreflight",
        "x-required-permissions": [
          "runs:read"
        ]
      }
    },
    "/api/v1/quick-launches/{id}": {
      "get": {
        "description": "Requires the `runs:read` permission.\n\nIn-memory launch intent. A 404 after an orchestrator restart is expected — re-POST the launch; the ensure chain resumes from the durable resources.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Quicklaunch_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a quick launch's progress",
        "tags": [
          "quick-launches"
        ],
        "operationId": "getQuickLaunchesById",
        "x-required-permissions": [
          "runs:read"
        ]
      }
    },
    "/api/v1/rag": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Rag_StatusResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "RAG store status (enabled, ready, endpoint)",
        "tags": [
          "rag"
        ],
        "operationId": "getRag",
        "description": "Requires the `rag:read` permission.",
        "x-required-permissions": [
          "rag:read"
        ]
      }
    },
    "/api/v1/rag/collections": {
      "get": {
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List RAG collections",
        "tags": [
          "rag"
        ],
        "operationId": "getRagCollections",
        "description": "Requires the `rag:read` permission.",
        "x-required-permissions": [
          "rag:read"
        ]
      },
      "post": {
        "responses": {
          "201": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a RAG collection",
        "tags": [
          "rag"
        ],
        "operationId": "postRagCollections",
        "description": "Requires the `rag:write` permission.",
        "x-required-permissions": [
          "rag:write"
        ]
      }
    },
    "/api/v1/rag/collections/{name}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a RAG collection and its documents",
        "tags": [
          "rag"
        ],
        "operationId": "deleteRagCollectionsByName",
        "description": "Requires the `rag:write` permission.",
        "x-required-permissions": [
          "rag:write"
        ]
      }
    },
    "/api/v1/rag/collections/{name}/documents": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a collection's documents",
        "tags": [
          "rag"
        ],
        "operationId": "getRagCollectionsByNameDocuments",
        "description": "Requires the `rag:read` permission.",
        "x-required-permissions": [
          "rag:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Rag_UploadRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Rag_DocumentResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Upload a document (text or base64 pdf/txt/md/json/csv): extracted, chunked, embedded, indexed",
        "tags": [
          "rag"
        ],
        "operationId": "postRagCollectionsByNameDocuments",
        "description": "Requires the `rag:write` permission.",
        "x-required-permissions": [
          "rag:write"
        ]
      }
    },
    "/api/v1/rag/collections/{name}/documents/{docId}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "docId",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a document (its vectors are removed)",
        "tags": [
          "rag"
        ],
        "operationId": "deleteRagCollectionsByNameDocumentsByDocId",
        "description": "Requires the `rag:write` permission.",
        "x-required-permissions": [
          "rag:write"
        ]
      }
    },
    "/api/v1/rag/disable": {
      "post": {
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Disable RAG: deletes the store, collections and documents",
        "tags": [
          "rag"
        ],
        "operationId": "postRagDisable",
        "description": "Requires the `rag:write` permission.",
        "x-required-permissions": [
          "rag:write"
        ]
      }
    },
    "/api/v1/rag/enable": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Rag_EnableRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Rag_StatusResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Enable RAG: provisions the tenant's managed Qdrant store on the chosen subnet",
        "tags": [
          "rag"
        ],
        "operationId": "postRagEnable",
        "description": "Requires the `rag:write` permission.",
        "x-required-permissions": [
          "rag:write"
        ]
      }
    },
    "/api/v1/repos": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_AddedReposResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the tenant's registered repositories (what session creation and @repo mentions offer)",
        "tags": [
          "repos"
        ],
        "operationId": "getRepos",
        "description": "Requires the `agent_sessions:read` permission.",
        "x-required-permissions": [
          "agent_sessions:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentsession_AddRepoRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentsession_AddedRepo"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Register a repository (validated through the GitHub connector; idempotent)",
        "tags": [
          "repos"
        ],
        "operationId": "postRepos",
        "description": "Requires the `agent_sessions:create` permission.",
        "x-required-permissions": [
          "agent_sessions:create"
        ]
      }
    },
    "/api/v1/repos/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a registered repository (existing sessions keep working)",
        "tags": [
          "repos"
        ],
        "operationId": "deleteReposById",
        "description": "Requires the `agent_sessions:create` permission.",
        "x-required-permissions": [
          "agent_sessions:create"
        ]
      }
    },
    "/api/v1/roles": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Role_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List roles",
        "tags": [
          "roles"
        ],
        "operationId": "getRoles",
        "description": "Requires the `roles:read` permission.",
        "x-required-permissions": [
          "roles:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Role_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Role_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a role",
        "tags": [
          "roles"
        ],
        "operationId": "postRoles",
        "description": "Requires the `roles:create` permission.",
        "x-required-permissions": [
          "roles:create"
        ]
      }
    },
    "/api/v1/roles/{name}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a role",
        "tags": [
          "roles"
        ],
        "operationId": "deleteRolesByName",
        "description": "Requires the `roles:delete` permission.",
        "x-required-permissions": [
          "roles:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Role_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a role by name",
        "tags": [
          "roles"
        ],
        "operationId": "getRolesByName",
        "description": "Requires the `roles:read` permission.",
        "x-required-permissions": [
          "roles:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Role_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Role_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a role",
        "tags": [
          "roles"
        ],
        "operationId": "putRolesByName",
        "description": "Requires the `roles:update` permission.",
        "x-required-permissions": [
          "roles:update"
        ]
      }
    },
    "/api/v1/roles/{name}/permissions": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_addPermissionRequestSpec"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Grant a permission to a role",
        "tags": [
          "roles"
        ],
        "operationId": "postRolesByNamePermissions",
        "description": "Requires the `roles:update` permission.",
        "x-required-permissions": [
          "roles:update"
        ]
      }
    },
    "/api/v1/roles/{name}/permissions/{permission}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "name",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "permission",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Revoke a permission from a role",
        "tags": [
          "roles"
        ],
        "operationId": "deleteRolesByNamePermissionsByPermission",
        "description": "Requires the `roles:update` permission.",
        "x-required-permissions": [
          "roles:update"
        ]
      }
    },
    "/api/v1/runs": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List runs",
        "tags": [
          "runs"
        ],
        "operationId": "getRuns",
        "description": "Requires the `runs:read` permission.",
        "x-required-permissions": [
          "runs:read"
        ]
      },
      "post": {
        "description": "Requires the `runs:create` permission.\n\nForks the pool's snapshot and RESUMES it into a live vm/microVM (userfaultfd lazy paging for microVMs). Resumable/pausable.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Run_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a run from a sealed pool",
        "tags": [
          "runs"
        ],
        "operationId": "postRuns",
        "x-required-permissions": [
          "runs:create"
        ]
      }
    },
    "/api/v1/runs/{id}": {
      "delete": {
        "description": "Requires the `runs:delete` permission.\n\nTears down the resumed instance and its NIC; the boot disk detaches. The pool's snapshot blobs are untouched (the run only forked them).",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a run",
        "tags": [
          "runs"
        ],
        "operationId": "deleteRunsById",
        "x-required-permissions": [
          "runs:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a run",
        "tags": [
          "runs"
        ],
        "operationId": "getRunsById",
        "description": "Requires the `runs:read` permission.",
        "x-required-permissions": [
          "runs:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Run_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a run (rename, tags)",
        "tags": [
          "runs"
        ],
        "operationId": "putRunsById",
        "description": "Requires the `runs:update` permission.",
        "x-required-permissions": [
          "runs:update"
        ]
      }
    },
    "/api/v1/runs/{id}/pause": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Pause a run",
        "tags": [
          "runs"
        ],
        "operationId": "postRunsByIdPause",
        "description": "Requires the `runs:control` permission.",
        "x-required-permissions": [
          "runs:control"
        ]
      }
    },
    "/api/v1/runs/{id}/promote": {
      "post": {
        "description": "Requires the `runs:promote` permission.\n\nCreates a new draft environment seeded from the run's lineage, so you can install on top and re-seal.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Run_PromoteRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run_PromoteResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Promote a run into a new environment",
        "tags": [
          "runs"
        ],
        "operationId": "postRunsByIdPromote",
        "x-required-permissions": [
          "runs:promote"
        ]
      }
    },
    "/api/v1/runs/{id}/resume": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Resume a run",
        "tags": [
          "runs"
        ],
        "operationId": "postRunsByIdResume",
        "description": "Requires the `runs:control` permission.",
        "x-required-permissions": [
          "runs:control"
        ]
      }
    },
    "/api/v1/runs/{id}/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop a run",
        "tags": [
          "runs"
        ],
        "operationId": "postRunsByIdStop",
        "description": "Requires the `runs:control` permission.",
        "x-required-permissions": [
          "runs:control"
        ]
      }
    },
    "/api/v1/scheduler/queue": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Scheduler_QueueItem"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get this tenant's queue items",
        "tags": [
          "scheduler"
        ],
        "operationId": "getSchedulerQueue",
        "description": "Requires the `scheduler:read` permission.",
        "x-required-permissions": [
          "scheduler:read"
        ]
      }
    },
    "/api/v1/scheduler/queue/{kind}/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "kind",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Cancel a queued item",
        "tags": [
          "scheduler"
        ],
        "operationId": "deleteSchedulerQueueByKindById",
        "description": "Requires the `scheduler:cancel` permission.",
        "x-required-permissions": [
          "scheduler:cancel"
        ]
      }
    },
    "/api/v1/security-policies": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Securitypolicy_PolicyResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List security policies",
        "tags": [
          "security-policies"
        ],
        "operationId": "getSecurityPolicies",
        "description": "Requires the `security_policies:read` permission.",
        "x-required-permissions": [
          "security_policies:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Securitypolicy_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Securitypolicy_PolicyResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a security policy",
        "tags": [
          "security-policies"
        ],
        "operationId": "postSecurityPolicies",
        "description": "Requires the `security_policies:create` permission.",
        "x-required-permissions": [
          "security_policies:create"
        ]
      }
    },
    "/api/v1/security-policies/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a security policy",
        "tags": [
          "security-policies"
        ],
        "operationId": "deleteSecurityPoliciesById",
        "description": "Requires the `security_policies:delete` permission.",
        "x-required-permissions": [
          "security_policies:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Securitypolicy_PolicyResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a security policy",
        "tags": [
          "security-policies"
        ],
        "operationId": "getSecurityPoliciesById",
        "description": "Requires the `security_policies:read` permission.",
        "x-required-permissions": [
          "security_policies:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Securitypolicy_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Securitypolicy_PolicyResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a security policy",
        "tags": [
          "security-policies"
        ],
        "operationId": "putSecurityPoliciesById",
        "description": "Requires the `security_policies:update` permission.",
        "x-required-permissions": [
          "security_policies:update"
        ]
      }
    },
    "/api/v1/security-policies/{id}/nics": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Securitypolicy_ApplyToNICRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Apply a security policy to a NIC",
        "tags": [
          "security-policies"
        ],
        "operationId": "postSecurityPoliciesByIdNics",
        "description": "Requires the `security_policies:update` permission.",
        "x-required-permissions": [
          "security_policies:update"
        ]
      }
    },
    "/api/v1/security-policies/{id}/nics/{nic_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "nic_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a security policy from a NIC",
        "tags": [
          "security-policies"
        ],
        "operationId": "deleteSecurityPoliciesByIdNicsByNicId",
        "description": "Requires the `security_policies:update` permission.",
        "x-required-permissions": [
          "security_policies:update"
        ]
      }
    },
    "/api/v1/security-policies/{id}/subnets": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Securitypolicy_ApplyToSubnetRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Apply a security policy to every NIC in a subnet",
        "tags": [
          "security-policies"
        ],
        "operationId": "postSecurityPoliciesByIdSubnets",
        "description": "Requires the `security_policies:update` permission.",
        "x-required-permissions": [
          "security_policies:update"
        ]
      }
    },
    "/api/v1/security-policies/{id}/subnets/{subnet_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "subnet_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a security policy from a subnet",
        "tags": [
          "security-policies"
        ],
        "operationId": "deleteSecurityPoliciesByIdSubnetsBySubnetId",
        "description": "Requires the `security_policies:update` permission.",
        "x-required-permissions": [
          "security_policies:update"
        ]
      }
    },
    "/api/v1/security-policies/{id}/vpcs": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Securitypolicy_ApplyToVPCRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Apply a security policy to every NIC in a VPC",
        "tags": [
          "security-policies"
        ],
        "operationId": "postSecurityPoliciesByIdVpcs",
        "description": "Requires the `security_policies:update` permission.",
        "x-required-permissions": [
          "security_policies:update"
        ]
      }
    },
    "/api/v1/security-policies/{id}/vpcs/{vpc_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "vpc_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Remove a security policy from a VPC",
        "tags": [
          "security-policies"
        ],
        "operationId": "deleteSecurityPoliciesByIdVpcsByVpcId",
        "description": "Requires the `security_policies:update` permission.",
        "x-required-permissions": [
          "security_policies:update"
        ]
      }
    },
    "/api/v1/skills": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Skill_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List skills",
        "tags": [
          "skills"
        ],
        "operationId": "getSkills",
        "description": "Requires the `skills:read` permission.",
        "x-required-permissions": [
          "skills:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Skill_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Skill_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a skill",
        "tags": [
          "skills"
        ],
        "operationId": "postSkills",
        "description": "Requires the `skills:create` permission.",
        "x-required-permissions": [
          "skills:create"
        ]
      }
    },
    "/api/v1/skills/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a skill",
        "tags": [
          "skills"
        ],
        "operationId": "deleteSkillsById",
        "description": "Requires the `skills:delete` permission.",
        "x-required-permissions": [
          "skills:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Skill_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a skill",
        "tags": [
          "skills"
        ],
        "operationId": "getSkillsById",
        "description": "Requires the `skills:read` permission.",
        "x-required-permissions": [
          "skills:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Skill_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Skill_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a skill",
        "tags": [
          "skills"
        ],
        "operationId": "putSkillsById",
        "description": "Requires the `skills:update` permission.",
        "x-required-permissions": [
          "skills:update"
        ]
      }
    },
    "/api/v1/skills/{id}/files": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "path",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a skill file",
        "tags": [
          "skills"
        ],
        "operationId": "deleteSkillsByIdFiles",
        "description": "Requires the `skills:create` permission.",
        "x-required-permissions": [
          "skills:create"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Skill_ListFilesResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a skill's files",
        "tags": [
          "skills"
        ],
        "operationId": "getSkillsByIdFiles",
        "description": "Requires the `skills:read` permission.",
        "x-required-permissions": [
          "skills:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Skill_PutFileRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create or replace a skill file",
        "tags": [
          "skills"
        ],
        "operationId": "putSkillsByIdFiles",
        "description": "Requires the `skills:create` permission.",
        "x-required-permissions": [
          "skills:create"
        ]
      }
    },
    "/api/v1/skills/{id}/files/content": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "path",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Skill_FileContentResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Read a skill file's content",
        "tags": [
          "skills"
        ],
        "operationId": "getSkillsByIdFilesContent",
        "description": "Requires the `skills:read` permission.",
        "x-required-permissions": [
          "skills:read"
        ]
      }
    },
    "/api/v1/ssh-keys": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Sshkey_SSHKeyResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List SSH keys",
        "tags": [
          "ssh-keys"
        ],
        "operationId": "getSshKeys",
        "description": "Requires the `ssh_keys:read` permission.",
        "x-required-permissions": [
          "ssh_keys:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Sshkey_CreateSSHKeyRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Sshkey_SSHKeyResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create an SSH key",
        "tags": [
          "ssh-keys"
        ],
        "operationId": "postSshKeys",
        "description": "Requires the `ssh_keys:create` permission.",
        "x-required-permissions": [
          "ssh_keys:create"
        ]
      }
    },
    "/api/v1/ssh-keys/generate": {
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Sshkey_GenerateSSHKeyRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Sshkey_GenerateSSHKeyResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Generate an SSH key pair",
        "tags": [
          "ssh-keys"
        ],
        "operationId": "postSshKeysGenerate",
        "description": "Requires the `ssh_keys:generate` permission.",
        "x-required-permissions": [
          "ssh_keys:generate"
        ]
      }
    },
    "/api/v1/ssh-keys/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an SSH key",
        "tags": [
          "ssh-keys"
        ],
        "operationId": "deleteSshKeysById",
        "description": "Requires the `ssh_keys:delete` permission.",
        "x-required-permissions": [
          "ssh_keys:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Sshkey_SSHKeyResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an SSH key",
        "tags": [
          "ssh-keys"
        ],
        "operationId": "getSshKeysById",
        "description": "Requires the `ssh_keys:read` permission.",
        "x-required-permissions": [
          "ssh_keys:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Sshkey_UpdateSSHKeyRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Sshkey_SSHKeyResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rename / retag an SSH key",
        "tags": [
          "ssh-keys"
        ],
        "operationId": "putSshKeysById",
        "description": "Requires the `ssh_keys:create` permission.",
        "x-required-permissions": [
          "ssh_keys:create"
        ]
      }
    },
    "/api/v1/storage-iops-tiers": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Storageiops_StorageIopsTierResponse"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List storage IOPS tiers",
        "tags": [
          "storage-iops-tiers"
        ],
        "operationId": "getStorageIopsTiers"
      }
    },
    "/api/v1/subnets": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Subnet_SubnetResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List subnets",
        "tags": [
          "subnets"
        ],
        "operationId": "getSubnets",
        "description": "Requires the `subnets:read` permission.",
        "x-required-permissions": [
          "subnets:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Subnet_CreateSubnetRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Subnet_SubnetResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a subnet",
        "tags": [
          "subnets"
        ],
        "operationId": "postSubnets",
        "description": "Requires the `subnets:create` permission.",
        "x-required-permissions": [
          "subnets:create"
        ]
      }
    },
    "/api/v1/subnets/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a subnet",
        "tags": [
          "subnets"
        ],
        "operationId": "deleteSubnetsById",
        "description": "Requires the `subnets:delete` permission.",
        "x-required-permissions": [
          "subnets:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Subnet_SubnetResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a subnet",
        "tags": [
          "subnets"
        ],
        "operationId": "getSubnetsById",
        "description": "Requires the `subnets:read` permission.",
        "x-required-permissions": [
          "subnets:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Subnet_UpdateSubnetRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Subnet_SubnetResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a subnet",
        "tags": [
          "subnets"
        ],
        "operationId": "putSubnetsById",
        "description": "Requires the `subnets:update` permission.",
        "x-required-permissions": [
          "subnets:update"
        ]
      }
    },
    "/api/v1/subnets/{id}/dhcp-config": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach the DHCP config from a subnet",
        "tags": [
          "subnets"
        ],
        "operationId": "deleteSubnetsByIdDhcpConfig",
        "description": "Requires the `dhcp_configs:attach` permission.",
        "x-required-permissions": [
          "dhcp_configs:attach"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dhcpconfig_AttachmentResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a DHCP config to a subnet",
        "tags": [
          "subnets"
        ],
        "operationId": "postSubnetsByIdDhcpConfig",
        "description": "Requires the `dhcp_configs:attach` permission.",
        "x-required-permissions": [
          "dhcp_configs:attach"
        ]
      }
    },
    "/api/v1/support-tickets": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Supportticket_TicketResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List support tickets",
        "tags": [
          "support-tickets"
        ],
        "operationId": "getSupportTickets",
        "description": "Requires the `support:read` permission.",
        "x-required-permissions": [
          "support:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Supportticket_CreateTicketRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Supportticket_TicketResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a support ticket",
        "tags": [
          "support-tickets"
        ],
        "operationId": "postSupportTickets",
        "description": "Requires the `support:create` permission.",
        "x-required-permissions": [
          "support:create"
        ]
      }
    },
    "/api/v1/support-tickets/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a support ticket",
        "tags": [
          "support-tickets"
        ],
        "operationId": "deleteSupportTicketsById",
        "description": "Requires the `support:delete` permission.",
        "x-required-permissions": [
          "support:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Supportticket_TicketResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a support ticket",
        "tags": [
          "support-tickets"
        ],
        "operationId": "getSupportTicketsById",
        "description": "Requires the `support:read` permission.",
        "x-required-permissions": [
          "support:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Supportticket_UpdateTicketRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Supportticket_TicketResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a support ticket",
        "tags": [
          "support-tickets"
        ],
        "operationId": "putSupportTicketsById",
        "description": "Requires the `support:update` permission.",
        "x-required-permissions": [
          "support:update"
        ]
      }
    },
    "/api/v1/support-tickets/{id}/close": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Supportticket_TicketResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Close a support ticket",
        "tags": [
          "support-tickets"
        ],
        "operationId": "postSupportTicketsByIdClose",
        "description": "Requires the `support:close` permission.",
        "x-required-permissions": [
          "support:close"
        ]
      }
    },
    "/api/v1/support-tickets/{id}/messages": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Supportticket_MessageResponse"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List messages on a support ticket",
        "tags": [
          "support-tickets"
        ],
        "operationId": "getSupportTicketsByIdMessages",
        "description": "Requires the `support:read` permission.",
        "x-required-permissions": [
          "support:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Supportticket_AddMessageRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Supportticket_MessageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Add a message to a support ticket",
        "tags": [
          "support-tickets"
        ],
        "operationId": "postSupportTicketsByIdMessages",
        "description": "Requires the `support:message` permission.",
        "x-required-permissions": [
          "support:message"
        ]
      }
    },
    "/api/v1/team-agents": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "namespace",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "online",
            "schema": {
              "type": "boolean"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "items": {
                    "$ref": "#/components/schemas/Agents_AgentResponse"
                  },
                  "type": "array"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List your teammate agents",
        "tags": [
          "team-agents"
        ],
        "operationId": "getTeamAgents",
        "description": "Requires the `agents:read` permission.",
        "x-required-permissions": [
          "agents:read"
        ]
      }
    },
    "/api/v1/teams": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List agent teams",
        "tags": [
          "teams"
        ],
        "operationId": "getTeams",
        "description": "Requires the `agent_teams:read` permission.",
        "x-required-permissions": [
          "agent_teams:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentteam_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_CreateResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Spawn an agent team (role-assigned agents that collaborate on a task)",
        "tags": [
          "teams"
        ],
        "operationId": "postTeams",
        "description": "Requires the `agent_teams:create` permission.",
        "x-required-permissions": [
          "agent_teams:create"
        ]
      }
    },
    "/api/v1/teams/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an agent team and its conversation log",
        "tags": [
          "teams"
        ],
        "operationId": "deleteTeamsById",
        "description": "Requires the `agent_teams:delete` permission.",
        "x-required-permissions": [
          "agent_teams:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get an agent team (members + live online state)",
        "tags": [
          "teams"
        ],
        "operationId": "getTeamsById",
        "description": "Requires the `agent_teams:read` permission.",
        "x-required-permissions": [
          "agent_teams:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentteam_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update an agent team's settings (name, model, budgets)",
        "tags": [
          "teams"
        ],
        "operationId": "putTeamsById",
        "description": "Requires the `agent_teams:create` permission.",
        "x-required-permissions": [
          "agent_teams:create"
        ]
      }
    },
    "/api/v1/teams/{id}/archive": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Archive an agent team (deletes member VMs for good; keeps the conversation log)",
        "tags": [
          "teams"
        ],
        "operationId": "postTeamsByIdArchive",
        "description": "Requires the `agent_teams:invoke` permission.",
        "x-required-permissions": [
          "agent_teams:invoke"
        ]
      }
    },
    "/api/v1/teams/{id}/chat": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentteam_ChatRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_ChatResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Send a chat message to the team's lead agent",
        "tags": [
          "teams"
        ],
        "operationId": "postTeamsByIdChat",
        "description": "Requires the `agent_teams:invoke` permission.",
        "x-required-permissions": [
          "agent_teams:invoke"
        ]
      }
    },
    "/api/v1/teams/{id}/files": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "name",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Download a file an agent shared from the team's storage",
        "tags": [
          "teams"
        ],
        "operationId": "getTeamsByIdFiles",
        "description": "Requires the `agent_teams:read` permission.",
        "x-required-permissions": [
          "agent_teams:read"
        ]
      }
    },
    "/api/v1/teams/{id}/interrupt": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_ChatResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop the running task only (the composer stop button) — members and conversation stay alive",
        "tags": [
          "teams"
        ],
        "operationId": "postTeamsByIdInterrupt",
        "description": "Requires the `agent_teams:invoke` permission.",
        "x-required-permissions": [
          "agent_teams:invoke"
        ]
      }
    },
    "/api/v1/teams/{id}/members/{memberId}/terminal": {
      "get": {
        "description": "Requires the `agent_teams:invoke` permission.\n\nStreaming WebSocket (binary = PTY bytes, text = {cols,rows} resize) — consumed by the console workbench, not a JSON call.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "memberId",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Interactive terminal into a team member's sandbox (WebSocket)",
        "tags": [
          "teams"
        ],
        "operationId": "getTeamsByIdMembersByMemberIdTerminal",
        "x-required-permissions": [
          "agent_teams:invoke"
        ]
      }
    },
    "/api/v1/teams/{id}/messages": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "after",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_MessagesResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Read the team conversation log (cursor-paged; pass next as ?after=)",
        "tags": [
          "teams"
        ],
        "operationId": "getTeamsByIdMessages",
        "description": "Requires the `agent_teams:read` permission.",
        "x-required-permissions": [
          "agent_teams:read"
        ]
      }
    },
    "/api/v1/teams/{id}/pause": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Pause an agent team (snapshots + frees member VMs; the next chat message wakes it)",
        "tags": [
          "teams"
        ],
        "operationId": "postTeamsByIdPause",
        "description": "Requires the `agent_teams:invoke` permission.",
        "x-required-permissions": [
          "agent_teams:invoke"
        ]
      }
    },
    "/api/v1/teams/{id}/plan/approve": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Agentteam_ApprovePlanRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Approve a planning team's proposed roster (optionally edited) and launch it",
        "tags": [
          "teams"
        ],
        "operationId": "postTeamsByIdPlanApprove",
        "description": "Requires the `agent_teams:create` permission.",
        "x-required-permissions": [
          "agent_teams:create"
        ]
      }
    },
    "/api/v1/teams/{id}/retry": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_ChatResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Re-deliver the lead's last task exactly as originally sent (after a failure)",
        "tags": [
          "teams"
        ],
        "operationId": "postTeamsByIdRetry",
        "description": "Requires the `agent_teams:invoke` permission.",
        "x-required-permissions": [
          "agent_teams:invoke"
        ]
      }
    },
    "/api/v1/teams/{id}/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Agentteam_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop an agent team (tears down member runs; keeps the conversation log)",
        "tags": [
          "teams"
        ],
        "operationId": "postTeamsByIdStop",
        "description": "Requires the `agent_teams:invoke` permission.",
        "x-required-permissions": [
          "agent_teams:invoke"
        ]
      }
    },
    "/api/v1/teams/{id}/stream": {
      "get": {
        "description": "Requires the `agent_teams:read` permission.\n\nServer-sent events of member in-flight output (token-by-token partials). Streaming — consumed by the console, not a JSON call.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Team live-output stream (SSE)",
        "tags": [
          "teams"
        ],
        "operationId": "getTeamsByIdStream",
        "x-required-permissions": [
          "agent_teams:read"
        ]
      }
    },
    "/api/v1/tenants": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "owner_email",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tenant_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List tenants",
        "tags": [
          "tenants"
        ],
        "operationId": "getTenants",
        "description": "Requires the `tenants:read` permission.",
        "x-required-permissions": [
          "tenants:read"
        ]
      }
    },
    "/api/v1/tenants/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tenant_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a tenant",
        "tags": [
          "tenants"
        ],
        "operationId": "getTenantsById",
        "description": "Requires the `tenants:read` permission.",
        "x-required-permissions": [
          "tenants:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Tenant_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tenant_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a tenant",
        "tags": [
          "tenants"
        ],
        "operationId": "putTenantsById",
        "description": "Requires the `tenants:update` permission.",
        "x-required-permissions": [
          "tenants:update"
        ]
      }
    },
    "/api/v1/tenants/{id}/zones": {
      "post": {
        "description": "Requires the `tenants:update` permission.\n\nSelf-service: a workspace exists in every zone (IAM is global) but runs workloads only where it is enabled. Idempotent.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Tenant_EnableZoneRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tenant_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Enable the workspace in another availability zone",
        "tags": [
          "tenants"
        ],
        "operationId": "postTenantsByIdZones",
        "x-required-permissions": [
          "tenants:update"
        ]
      }
    },
    "/api/v1/tools": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tool_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List tools",
        "tags": [
          "tools"
        ],
        "operationId": "getTools",
        "description": "Requires the `tools:read` permission.",
        "x-required-permissions": [
          "tools:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Tool_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tool_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a tool",
        "tags": [
          "tools"
        ],
        "operationId": "postTools",
        "description": "Requires the `tools:create` permission.",
        "x-required-permissions": [
          "tools:create"
        ]
      }
    },
    "/api/v1/tools/credential-storage": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_CredentialStorageResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Whether tool credential storage is configured",
        "tags": [
          "tools"
        ],
        "operationId": "getToolsCredentialStorage",
        "description": "Requires the `tools:read` permission.",
        "x-required-permissions": [
          "tools:read"
        ]
      }
    },
    "/api/v1/tools/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a tool",
        "tags": [
          "tools"
        ],
        "operationId": "deleteToolsById",
        "description": "Requires the `tools:delete` permission.",
        "x-required-permissions": [
          "tools:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tool_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a tool",
        "tags": [
          "tools"
        ],
        "operationId": "getToolsById",
        "description": "Requires the `tools:read` permission.",
        "x-required-permissions": [
          "tools:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Tool_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tool_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a tool",
        "tags": [
          "tools"
        ],
        "operationId": "putToolsById",
        "description": "Requires the `tools:update` permission.",
        "x-required-permissions": [
          "tools:update"
        ]
      }
    },
    "/api/v1/tools/{id}/mcp-tools": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the tools advertised by this MCP server (live tools/list probe)",
        "tags": [
          "tools"
        ],
        "operationId": "getToolsByIdMcpTools",
        "description": "Requires the `tools:read` permission.",
        "x-required-permissions": [
          "tools:read"
        ]
      }
    },
    "/api/v1/tools/{id}/test": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Tool_TestRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Tool_TestResult"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Test a tool's stored credential (structural check, plus an optional reachability probe when test_url is provided)",
        "tags": [
          "tools"
        ],
        "operationId": "postToolsByIdTest",
        "description": "Requires the `tools:read` permission.",
        "x-required-permissions": [
          "tools:read"
        ]
      }
    },
    "/api/v1/users": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/User_UserResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List users",
        "tags": [
          "users"
        ],
        "operationId": "getUsers",
        "description": "Requires the `users:read` permission.",
        "x-required-permissions": [
          "users:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/User_CreateUserRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/User_UserResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a user",
        "tags": [
          "users"
        ],
        "operationId": "postUsers",
        "description": "Requires the `users:create` permission.",
        "x-required-permissions": [
          "users:create"
        ]
      }
    },
    "/api/v1/users/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a user",
        "tags": [
          "users"
        ],
        "operationId": "deleteUsersById",
        "description": "Requires the `users:delete` permission.",
        "x-required-permissions": [
          "users:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/User_UserResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a user",
        "tags": [
          "users"
        ],
        "operationId": "getUsersById",
        "description": "Requires the `users:read` permission.",
        "x-required-permissions": [
          "users:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/User_UpdateUserRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/User_UserResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a user",
        "tags": [
          "users"
        ],
        "operationId": "putUsersById",
        "description": "Requires the `users:update` permission.",
        "x-required-permissions": [
          "users:update"
        ]
      }
    },
    "/api/v1/vms": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List VMs",
        "tags": [
          "vms"
        ],
        "operationId": "getVms",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Vm_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a VM",
        "tags": [
          "vms"
        ],
        "operationId": "postVms",
        "description": "Requires the `vms:create` permission.",
        "x-required-permissions": [
          "vms:create"
        ]
      }
    },
    "/api/v1/vms/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a VM",
        "tags": [
          "vms"
        ],
        "operationId": "deleteVmsById",
        "description": "Requires the `vms:delete` permission.",
        "x-required-permissions": [
          "vms:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a VM",
        "tags": [
          "vms"
        ],
        "operationId": "getVmsById",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Vm_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a VM",
        "tags": [
          "vms"
        ],
        "operationId": "putVmsById",
        "description": "Requires the `vms:update` permission.",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/vms/{id}/activity": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Activity_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a VM's activity feed (reconciler event log)",
        "tags": [
          "vms"
        ],
        "operationId": "getVmsByIdActivity",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      }
    },
    "/api/v1/vms/{id}/attachments": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_dbAttachListResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List databases attached to a VM",
        "tags": [
          "vms"
        ],
        "operationId": "getVmsByIdAttachments",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      }
    },
    "/api/v1/vms/{id}/attachments/database": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_dbAttachRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Dbattach_AttachResult"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a managed database to a VM (composes its URL into a config var)",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdAttachmentsDatabase",
        "description": "Requires the `vms:update` permission.",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/vms/{id}/attachments/database/{database_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "database_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a managed database from a VM",
        "tags": [
          "vms"
        ],
        "operationId": "deleteVmsByIdAttachmentsDatabaseByDatabaseId",
        "description": "Requires the `vms:update` permission.",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/vms/{id}/config-vars": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_configVarsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a VM's config vars (env vars)",
        "tags": [
          "vms"
        ],
        "operationId": "getVmsByIdConfigVars",
        "description": "Requires the `vms:read` permission.",
        "x-required-permissions": [
          "vms:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_configVarsPutRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Handler_configVarsResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Replace a VM's config vars (persists + best-effort live apply via agent)",
        "tags": [
          "vms"
        ],
        "operationId": "putVmsByIdConfigVars",
        "description": "Requires the `vms:update` permission.",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/vms/{id}/console": {
      "get": {
        "description": "Upgrades to a WebSocket and proxies the VM's noVNC console from the owning hypervisor.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "101": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "VM VNC console (WebSocket)",
        "tags": [
          "vms"
        ],
        "operationId": "getVmsByIdConsole"
      }
    },
    "/api/v1/vms/{id}/disks": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Vm_AttachDiskRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a disk to a VM",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdDisks",
        "description": "Requires the `vms:attach_disk` permission.",
        "x-required-permissions": [
          "vms:attach_disk"
        ]
      }
    },
    "/api/v1/vms/{id}/disks/{disk_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "disk_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a disk from a VM",
        "tags": [
          "vms"
        ],
        "operationId": "deleteVmsByIdDisksByDiskId",
        "description": "Requires the `vms:detach_disk` permission.",
        "x-required-permissions": [
          "vms:detach_disk"
        ]
      }
    },
    "/api/v1/vms/{id}/force-stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Force-stop a VM",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdForceStop",
        "description": "Requires the `vms:stop` permission.",
        "x-required-permissions": [
          "vms:stop"
        ]
      }
    },
    "/api/v1/vms/{id}/hard-reboot": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Hard-reboot a VM",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdHardReboot",
        "description": "Requires the `vms:reboot` permission.",
        "x-required-permissions": [
          "vms:reboot"
        ]
      }
    },
    "/api/v1/vms/{id}/iso": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Unmount the VM's CD-ROM ISO",
        "tags": [
          "vms"
        ],
        "operationId": "deleteVmsByIdIso",
        "description": "Requires the `vms:unmount_iso` permission.",
        "x-required-permissions": [
          "vms:unmount_iso"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_mountISORequestSpec"
              }
            }
          },
          "required": true
        },
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Mount an ISO into a VM's CD-ROM",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdIso",
        "description": "Requires the `vms:mount_iso` permission.",
        "x-required-permissions": [
          "vms:mount_iso"
        ]
      }
    },
    "/api/v1/vms/{id}/metrics": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "since",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "until",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "window",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Stats_MetricChartSeries"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get VM metric history (chart series)",
        "tags": [
          "vms"
        ],
        "operationId": "getVmsByIdMetrics",
        "description": "Requires the `vms:read_metrics` permission.",
        "x-required-permissions": [
          "vms:read_metrics"
        ]
      }
    },
    "/api/v1/vms/{id}/nics": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Vm_AttachNICRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Attach a NIC to a VM",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdNics",
        "description": "Requires the `vms:attach_nic` permission.",
        "x-required-permissions": [
          "vms:attach_nic"
        ]
      }
    },
    "/api/v1/vms/{id}/nics/{nic_id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "nic_id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Detach a NIC from a VM",
        "tags": [
          "vms"
        ],
        "operationId": "deleteVmsByIdNicsByNicId",
        "description": "Requires the `vms:detach_nic` permission.",
        "x-required-permissions": [
          "vms:detach_nic"
        ]
      }
    },
    "/api/v1/vms/{id}/reboot": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Reboot a VM",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdReboot",
        "description": "Requires the `vms:reboot` permission.",
        "x-required-permissions": [
          "vms:reboot"
        ]
      }
    },
    "/api/v1/vms/{id}/reschedule": {
      "post": {
        "description": "Requires the `vms:update` permission.\n\nScheduler picks a target host (excluding the current one); attached disks migrate via LINSTOR; the reconciler re-applies the VM on the new host. Refuses when no suitable host is available.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Move a VM to another host",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdReschedule",
        "x-required-permissions": [
          "vms:update"
        ]
      }
    },
    "/api/v1/vms/{id}/resume": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Resume a suspended VM from its memory snapshot",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdResume",
        "description": "Requires the `vms:resume` permission.",
        "x-required-permissions": [
          "vms:resume"
        ]
      }
    },
    "/api/v1/vms/{id}/start": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a VM",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdStart",
        "description": "Requires the `vms:start` permission.",
        "x-required-permissions": [
          "vms:start"
        ]
      }
    },
    "/api/v1/vms/{id}/stop": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop a VM",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdStop",
        "description": "Requires the `vms:stop` permission.",
        "x-required-permissions": [
          "vms:stop"
        ]
      }
    },
    "/api/v1/vms/{id}/suspend": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vm_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Suspend a VM to a memory snapshot (frees the host)",
        "tags": [
          "vms"
        ],
        "operationId": "postVmsByIdSuspend",
        "description": "Requires the `vms:suspend` permission.",
        "x-required-permissions": [
          "vms:suspend"
        ]
      }
    },
    "/api/v1/vpcs": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpc_VPCResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List VPCs",
        "tags": [
          "vpcs"
        ],
        "operationId": "getVpcs",
        "description": "Requires the `vpcs:read` permission.",
        "x-required-permissions": [
          "vpcs:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Vpc_CreateVPCRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpc_VPCResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a VPC",
        "tags": [
          "vpcs"
        ],
        "operationId": "postVpcs",
        "description": "Requires the `vpcs:create` permission.",
        "x-required-permissions": [
          "vpcs:create"
        ]
      }
    },
    "/api/v1/vpcs/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a VPC",
        "tags": [
          "vpcs"
        ],
        "operationId": "deleteVpcsById",
        "description": "Requires the `vpcs:delete` permission.",
        "x-required-permissions": [
          "vpcs:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpc_VPCResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a VPC",
        "tags": [
          "vpcs"
        ],
        "operationId": "getVpcsById",
        "description": "Requires the `vpcs:read` permission.",
        "x-required-permissions": [
          "vpcs:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Vpc_UpdateVPCRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpc_VPCResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a VPC",
        "tags": [
          "vpcs"
        ],
        "operationId": "putVpcsById",
        "description": "Requires the `vpcs:update` permission.",
        "x-required-permissions": [
          "vpcs:update"
        ]
      }
    },
    "/api/v1/vpn-gateways": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpngateway_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List VPN gateways",
        "tags": [
          "vpn-gateways"
        ],
        "operationId": "getVpnGateways",
        "description": "Requires the `vpn_gateways:read` permission.",
        "x-required-permissions": [
          "vpn_gateways:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Vpngateway_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpngateway_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create a VPN gateway",
        "tags": [
          "vpn-gateways"
        ],
        "operationId": "postVpnGateways",
        "description": "Requires the `vpn_gateways:create` permission.",
        "x-required-permissions": [
          "vpn_gateways:create"
        ]
      }
    },
    "/api/v1/vpn-gateways/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a VPN gateway",
        "tags": [
          "vpn-gateways"
        ],
        "operationId": "deleteVpnGatewaysById",
        "description": "Requires the `vpn_gateways:delete` permission.",
        "x-required-permissions": [
          "vpn_gateways:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpngateway_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a VPN gateway",
        "tags": [
          "vpn-gateways"
        ],
        "operationId": "getVpnGatewaysById",
        "description": "Requires the `vpn_gateways:read` permission.",
        "x-required-permissions": [
          "vpn_gateways:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Vpngateway_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpngateway_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a VPN gateway",
        "tags": [
          "vpn-gateways"
        ],
        "operationId": "putVpnGatewaysById",
        "description": "Requires the `vpn_gateways:update` permission.",
        "x-required-permissions": [
          "vpn_gateways:update"
        ]
      }
    },
    "/api/v1/vpn-gateways/{id}/config": {
      "get": {
        "description": "Requires the `vpn_gateways:read` permission.\n\nRenders the client-side configuration for the gateway's protocol: a ready wg0.conf (wireguard, includes the generated client keypair), a client.ovpn with the shared static key (openvpn), or IKEv2 connection details + PSK.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Vpngateway_ClientConfigResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Download the VPN client profile",
        "tags": [
          "vpn-gateways"
        ],
        "operationId": "getVpnGatewaysByIdConfig",
        "x-required-permissions": [
          "vpn_gateways:read"
        ]
      }
    },
    "/api/v1/webhooks/github/apps/{appId}": {
      "post": {
        "description": "Receives raw GitHub webhook events for one application. The body must be the verbatim GitHub payload — the X-Hub-Signature-256 HMAC is verified against the application's secret, and a bad signature is 401. Non-push events, and pushes to refs no environment tracks, are acknowledged and ignored.",
        "parameters": [
          {
            "in": "path",
            "name": "appId",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "GitHub push webhook receiver (Applications)",
        "tags": [
          "webhooks"
        ],
        "operationId": "postWebhooksGithubAppsByAppId"
      }
    },
    "/api/v1/webhooks/github/{workspaceId}": {
      "post": {
        "description": "Receives raw GitHub webhook events for one workspace. The body must be the verbatim GitHub payload — the X-Hub-Signature-256 HMAC is verified against the workspace's secret. Non-push events and pushes to other branches are acknowledged and ignored.",
        "parameters": [
          {
            "in": "path",
            "name": "workspaceId",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "GitHub push webhook receiver (App Builder workspaces)",
        "tags": [
          "webhooks"
        ],
        "operationId": "postWebhooksGithubByWorkspaceId"
      }
    },
    "/api/v1/webhooks/workflows/{workflowId}": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "workflowId",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Public workflow webhook trigger (HMAC-SHA256 over the raw body in X-Signature-256)",
        "tags": [
          "webhooks"
        ],
        "operationId": "postWebhooksWorkflowsByWorkflowId"
      }
    },
    "/api/v1/workflow-runs/{id}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a run with its step trail and the executed spec",
        "tags": [
          "workflow-runs"
        ],
        "operationId": "getWorkflowRunsById",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      }
    },
    "/api/v1/workflow-runs/{id}/approvals": {
      "post": {
        "description": "Requires the `workflows:approve` permission.\n\nThe human gate must stay human — deliberately NoMCP so the assistant can never approve a workflow's own approval step.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_ApprovalRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Approve or reject a parked approval gate",
        "tags": [
          "workflow-runs"
        ],
        "operationId": "postWorkflowRunsByIdApprovals",
        "x-required-permissions": [
          "workflows:approve"
        ]
      }
    },
    "/api/v1/workflow-runs/{id}/cancel": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Cancel a run",
        "tags": [
          "workflow-runs"
        ],
        "operationId": "postWorkflowRunsByIdCancel",
        "description": "Requires the `workflows:run` permission.",
        "x-required-permissions": [
          "workflows:run"
        ]
      }
    },
    "/api/v1/workflow-runs/{id}/stream": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Live run progress (SSE)",
        "tags": [
          "workflow-runs"
        ],
        "operationId": "getWorkflowRunsByIdStream",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      }
    },
    "/api/v1/workflows": {
      "get": {
        "parameters": [
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "offset",
            "schema": {
              "type": "integer"
            }
          },
          {
            "in": "query",
            "name": "order",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "q",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "sort_by",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "tags",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List AI workflows",
        "tags": [
          "workflows"
        ],
        "operationId": "getWorkflows",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      },
      "post": {
        "description": "Requires the `workflows:create` permission.\n\nThe optional spec is the JSON DAG (nodes + edges); it lands as the mutable draft. Node types: trigger.manual, trigger.webhook, llm, template, http, branch, approval, output.",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create an AI workflow (a visual DAG of inference steps)",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflows",
        "x-required-permissions": [
          "workflows:create"
        ]
      }
    },
    "/api/v1/workflows/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a workflow (409 while runs are in flight)",
        "tags": [
          "workflows"
        ],
        "operationId": "deleteWorkflowsById",
        "description": "Requires the `workflows:delete` permission.",
        "x-required-permissions": [
          "workflows:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a workflow with its draft spec",
        "tags": [
          "workflows"
        ],
        "operationId": "getWorkflowsById",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      },
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Update a workflow's metadata and/or draft spec",
        "tags": [
          "workflows"
        ],
        "operationId": "putWorkflowsById",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/canary": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Stop the canary (its in-flight runs fail)",
        "tags": [
          "workflows"
        ],
        "operationId": "deleteWorkflowsByIdCanary",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_CanaryRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start (or reweight) a canary: a second runner pinned to another version taking weight% of new runs",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdCanary",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/canary/promote": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Promote the canary to primary (container swap; gated by require_eval_pass)",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdCanaryPromote",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/deploy": {
      "post": {
        "description": "Requires the `workflows:update` permission.\n\nCompiles the current version into a bundle (spec + skills + tenant tool endpoints) and provisions a managed runner container on the chosen subnet. Redeploy replaces the container.",
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_DeployRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Deploy the published workflow: provision its tenant-side runner container",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdDeploy",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/eval-gate": {
      "put": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Require a passing eval suite before canary promote",
        "tags": [
          "workflows"
        ],
        "operationId": "putWorkflowsByIdEvalGate",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/evals": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List eval cases",
        "tags": [
          "workflows"
        ],
        "operationId": "getWorkflowsByIdEvals",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_EvalCaseRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_EvalCaseResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create or update an eval case (contains / equals / LLM-judge assertion)",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdEvals",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/evals/results": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List eval verdicts (newest suites first)",
        "tags": [
          "workflows"
        ],
        "operationId": "getWorkflowsByIdEvalsResults",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      }
    },
    "/api/v1/workflows/{id}/evals/run": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Run the eval suite against the primary or canary deployment",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdEvalsRun",
        "description": "Requires the `workflows:run` permission.",
        "x-required-permissions": [
          "workflows:run"
        ]
      }
    },
    "/api/v1/workflows/{id}/evals/{caseId}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "caseId",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete an eval case",
        "tags": [
          "workflows"
        ],
        "operationId": "deleteWorkflowsByIdEvalsByCaseId",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/publish": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_PublishRequest"
              }
            }
          }
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Publish the draft as the next immutable version (422 with per-node errors when invalid)",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdPublish",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/run": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_RunRequest"
              }
            }
          }
        },
        "responses": {
          "202": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_RunResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a manual run of the published version",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdRun",
        "description": "Requires the `workflows:run` permission.",
        "x-required-permissions": [
          "workflows:run"
        ]
      }
    },
    "/api/v1/workflows/{id}/runs": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "before",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_RunListResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List run history (cursor-paginated: ?before=<timeuuid>&limit=)",
        "tags": [
          "workflows"
        ],
        "operationId": "getWorkflowsByIdRuns",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      }
    },
    "/api/v1/workflows/{id}/undeploy": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Undeploy the workflow's runner container (in-flight runs fail)",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdUndeploy",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workflows/{id}/validate": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workflow_ValidateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflowkit_ValidationResult"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Lint a spec (full validation, nothing saved) — per-node error map",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdValidate",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      }
    },
    "/api/v1/workflows/{id}/versions": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_VersionResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List published versions",
        "tags": [
          "workflows"
        ],
        "operationId": "getWorkflowsByIdVersions",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      }
    },
    "/api/v1/workflows/{id}/versions/{version}": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "version",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workflow_VersionResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get one published version's frozen spec",
        "tags": [
          "workflows"
        ],
        "operationId": "getWorkflowsByIdVersionsByVersion",
        "description": "Requires the `workflows:read` permission.",
        "x-required-permissions": [
          "workflows:read"
        ]
      }
    },
    "/api/v1/workflows/{id}/webhook/rotate": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rotate the webhook signing secret (plaintext returned once)",
        "tags": [
          "workflows"
        ],
        "operationId": "postWorkflowsByIdWebhookRotate",
        "description": "Requires the `workflows:update` permission.",
        "x-required-permissions": [
          "workflows:update"
        ]
      }
    },
    "/api/v1/workspaces": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_ResponsePage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the tenant's App Builder workspaces",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspaces",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      },
      "post": {
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workspace_CreateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Create an App Builder workspace: bind an existing GitHub repository (repo_full_name) or create a fresh one (new_repo) on the connected account. With enable_cicd + deploy_server_id the platform registers a deploy key and a Coolify application so every push to the default branch auto-deploys. Requires a github connector.",
        "tags": [
          "workspaces"
        ],
        "operationId": "postWorkspaces",
        "description": "Requires the `workspaces:create` permission.",
        "x-required-permissions": [
          "workspaces:create"
        ]
      }
    },
    "/api/v1/workspaces/{id}": {
      "delete": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "202": {
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Delete a workspace: removes the Coolify app + deploy key + webhook. The GitHub repository itself is NEVER deleted.",
        "tags": [
          "workspaces"
        ],
        "operationId": "deleteWorkspacesById",
        "description": "Requires the `workspaces:delete` permission.",
        "x-required-permissions": [
          "workspaces:delete"
        ]
      },
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a workspace (status creating|ready|ci_error|failed; last_error explains failures)",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesById",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      },
      "patch": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workspace_UpdateRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Rename a workspace",
        "tags": [
          "workspaces"
        ],
        "operationId": "patchWorkspacesById",
        "description": "Requires the `workspaces:update` permission.",
        "x-required-permissions": [
          "workspaces:update"
        ]
      }
    },
    "/api/v1/workspaces/{id}/chats": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "before",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "limit",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_ChatRefPage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List a workspace's chats newest-first (kind run|team + ref_id to open the run/team surface). Cursor: before=<seq>.",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesByIdChats",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      },
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workspace_CreateChatRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "201": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_ChatRef"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Start a repo-bound chat under the workspace: mode=agent spawns a single-agent run, mode=team an agent team. The repo is cloned into the agent's workspace; results ship as commits pushed to the default branch.",
        "tags": [
          "workspaces"
        ],
        "operationId": "postWorkspacesByIdChats",
        "description": "Requires the `workspaces:chat` permission.",
        "x-required-permissions": [
          "workspaces:chat"
        ]
      }
    },
    "/api/v1/workspaces/{id}/cicd": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_CICDStatus"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get the workspace's CI/CD status: tracked branch, last seen/deployed sha, Coolify app status, live URL. Read this to verify a push deployed.",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesByIdCicd",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      }
    },
    "/api/v1/workspaces/{id}/cicd/deploy": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_CICDStatus"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Trigger an immediate deploy of the workspace's branch head (manual release — no new commit required). Returns the refreshed CI/CD status; poll list_workspaces_id_cicd until app_status starts with 'running'.",
        "tags": [
          "workspaces"
        ],
        "operationId": "postWorkspacesByIdCicdDeploy",
        "description": "Requires the `workspaces:cicd` permission.",
        "x-required-permissions": [
          "workspaces:cicd"
        ]
      }
    },
    "/api/v1/workspaces/{id}/cicd/deployments": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_DeploymentEntryPage"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "List the workspace app's deployment history (status + commit per deploy). A store lists BOTH apps — check the app field, since backend and storefront fail independently.",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesByIdCicdDeployments",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      }
    },
    "/api/v1/workspaces/{id}/cicd/deployments/log": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_DeployLogResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Read the BUILD LOG of the workspace's most recent deployment. This is the first thing to read when a deploy failed — it carries the compiler/installer output that says why. For an older deploy, take its uuid from the deployments list and use the /log variant.",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesByIdCicdDeploymentsLog",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      }
    },
    "/api/v1/workspaces/{id}/cicd/deployments/{deployment}/log": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "path",
            "name": "deployment",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_DeployLogResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Read one deployment's BUILD LOG by uuid (from the deployments list). Use this to find out why a specific build failed before changing any code.",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesByIdCicdDeploymentsByDeploymentLog",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      }
    },
    "/api/v1/workspaces/{id}/cicd/disable": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Disable the workspace's push-triggered CI/CD (the Coolify app stays; re-enable resumes)",
        "tags": [
          "workspaces"
        ],
        "operationId": "postWorkspacesByIdCicdDisable",
        "description": "Requires the `workspaces:cicd` permission.",
        "x-required-permissions": [
          "workspaces:cicd"
        ]
      }
    },
    "/api/v1/workspaces/{id}/cicd/enable": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Handler_EnableCICDRequest"
              }
            }
          }
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_Response"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Enable (or retry) CI/CD on the workspace; optional deploy_server_id binds the deploy server when the workspace has none yet",
        "tags": [
          "workspaces"
        ],
        "operationId": "postWorkspacesByIdCicdEnable",
        "description": "Requires the `workspaces:cicd` permission.",
        "x-required-permissions": [
          "workspaces:cicd"
        ]
      }
    },
    "/api/v1/workspaces/{id}/cicd/runtime-log": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "app",
            "schema": {
              "type": "string"
            }
          },
          {
            "in": "query",
            "name": "lines",
            "schema": {
              "type": "integer"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_RuntimeLogResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Read the RUNNING app's container log — use this when the build succeeded but the site errors (500s, crash loops). Query: app=backend|storefront (a store has two; defaults to the storefront, which is what visitors hit), lines=1..1000 (default 200). This is the runtime log; for a build that FAILED read the deployments log instead.",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesByIdCicdRuntimeLog",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      }
    },
    "/api/v1/workspaces/{id}/medusa-credentials": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_MedusaCredentials"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a Medusa store's admin dashboard URL + admin credentials (SENSITIVE: contains the real password), storefront URL and publishable key",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesByIdMedusaCredentials",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      }
    },
    "/api/v1/workspaces/{id}/wordpress-credentials": {
      "get": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_WordPressCredentials"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Get a WordPress workspace's wp-admin URL + admin credentials (SENSITIVE: contains the real password) and site URL",
        "tags": [
          "workspaces"
        ],
        "operationId": "getWorkspacesByIdWordpressCredentials",
        "description": "Requires the `workspaces:read` permission.",
        "x-required-permissions": [
          "workspaces:read"
        ]
      }
    },
    "/api/v1/workspaces/{id}/wp": {
      "post": {
        "parameters": [
          {
            "in": "path",
            "name": "id",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Workspace_WPExecRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Workspace_WPExecResponse"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Run a wp-cli command inside a WordPress workspace's site (args WITHOUT the leading 'wp', e.g. [\"plugin\",\"activate\",\"woocommerce\"]). THE surface for content/config: activate plugins/themes, create pages/posts, set options, manage menus. NEVER 'wp plugin install' — plugin/theme CODE must be added to the workspace repo and pushed (the site's files are re-cloned from the repo on every deploy; installs outside the repo are LOST).",
        "tags": [
          "workspaces"
        ],
        "operationId": "postWorkspacesByIdWp",
        "description": "Requires the `workspaces:wp` permission.",
        "x-required-permissions": [
          "workspaces:wp"
        ]
      }
    },
    "/api/v1/zone": {
      "get": {
        "responses": {
          "200": {
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Zones_Status"
                }
              }
            },
            "description": "OK"
          },
          "400": {
            "description": "The request could not be parsed, or a field failed validation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "No bearer token, or a token that is expired, revoked or not signed by this zone.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "Authenticated, but the caller lacks the permission this route requires.",
            "content": {
              "application/json": {
                "schema": {
                  "allOf": [
                    {
                      "$ref": "#/components/schemas/Error"
                    },
                    {
                      "type": "object",
                      "properties": {
                        "required_permission": {
                          "type": "string",
                          "description": "The permission key the caller was missing, such as `vms:create`."
                        }
                      }
                    }
                  ]
                }
              }
            }
          },
          "404": {
            "description": "No such resource in the caller's tenant.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "500": {
            "description": "The request failed inside the platform. Safe to retry an idempotent call.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "summary": "Which availability zone this API is, and the zone catalog",
        "tags": [
          "zone"
        ],
        "operationId": "getZone"
      }
    },
    "/oauth/authorize": {
      "get": {
        "tags": [
          "oauth"
        ],
        "summary": "Start an authorization code flow",
        "description": "Renders the sign-in form, or redirects straight back with a code when the browser already holds a valid IdP session cookie. PKCE is mandatory. Authorization codes live 90 seconds.",
        "security": [],
        "parameters": [
          {
            "name": "response_type",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "enum": [
                "code"
              ]
            }
          },
          {
            "name": "client_id",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "redirect_uri",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "code_challenge",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "code_challenge_method",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "enum": [
                "S256"
              ]
            }
          },
          {
            "name": "scope",
            "in": "query",
            "schema": {
              "type": "string"
            },
            "description": "Space-separated. `openid` adds an id_token, `mcp` unlocks the MCP server."
          },
          {
            "name": "state",
            "in": "query",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "resource",
            "in": "query",
            "schema": {
              "type": "string"
            },
            "description": "RFC 8707 audience. Defaults to the MCP endpoint."
          }
        ],
        "responses": {
          "200": {
            "description": "The sign-in form, as HTML.",
            "content": {
              "text/html": {
                "schema": {
                  "type": "string"
                }
              }
            }
          },
          "302": {
            "description": "A redirect back to `redirect_uri` carrying `code` and `state`."
          },
          "400": {
            "description": "The request could not be redirected back to the client.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "error"
                  ],
                  "properties": {
                    "error": {
                      "type": "string",
                      "description": "An RFC 6749 error code, such as `invalid_client`, `invalid_grant`, `invalid_scope` or `unsupported_grant_type`."
                    },
                    "error_description": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          }
        },
        "operationId": "getOauthAuthorize"
      },
      "post": {
        "tags": [
          "oauth"
        ],
        "summary": "Submit credentials for an authorization code flow",
        "description": "Receives the sign-in form. When the account requires a second factor the response is the one-time-code form rather than a redirect, and this endpoint is posted to again with the code.",
        "security": [],
        "requestBody": {
          "required": true,
          "content": {
            "application/x-www-form-urlencoded": {
              "schema": {
                "type": "object",
                "properties": {
                  "email": {
                    "type": "string",
                    "format": "email"
                  },
                  "password": {
                    "type": "string",
                    "format": "password"
                  },
                  "code": {
                    "type": "string",
                    "description": "The second factor, when one was asked for."
                  },
                  "remember_device": {
                    "type": "string",
                    "description": "Set to skip the second factor on this browser for 30 days."
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "The form again, with an error or a second-factor prompt.",
            "content": {
              "text/html": {
                "schema": {
                  "type": "string"
                }
              }
            }
          },
          "302": {
            "description": "A redirect back to `redirect_uri` carrying `code` and `state`."
          }
        },
        "operationId": "postOauthAuthorize"
      }
    },
    "/oauth/register": {
      "post": {
        "tags": [
          "oauth"
        ],
        "summary": "Register a client dynamically",
        "description": "RFC 7591 dynamic client registration, used by MCP clients that discover the platform rather than being configured against it. For a credential you control, create an API client instead and use the client_credentials grant.",
        "security": [],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "redirect_uris"
                ],
                "properties": {
                  "redirect_uris": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "client_name": {
                    "type": "string"
                  },
                  "grant_types": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "response_types": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  },
                  "token_endpoint_auth_method": {
                    "type": "string"
                  },
                  "scope": {
                    "type": "string"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "201": {
            "description": "The registered client.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "client_id": {
                      "type": "string"
                    },
                    "client_secret": {
                      "type": "string",
                      "description": "Absent for public clients."
                    },
                    "client_id_issued_at": {
                      "type": "integer",
                      "format": "int64"
                    },
                    "redirect_uris": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    },
                    "client_name": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "The registration was rejected.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "error"
                  ],
                  "properties": {
                    "error": {
                      "type": "string",
                      "description": "An RFC 6749 error code, such as `invalid_client`, `invalid_grant`, `invalid_scope` or `unsupported_grant_type`."
                    },
                    "error_description": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          }
        },
        "operationId": "postOauthRegister"
      }
    },
    "/oauth/revoke": {
      "post": {
        "tags": [
          "oauth"
        ],
        "summary": "Revoke a token",
        "description": "RFC 7009 revocation. Revoking a refresh token also revokes the access tokens issued from it. The endpoint always answers 200, whether or not the token existed, so a caller cannot use it to probe for valid tokens.",
        "security": [],
        "requestBody": {
          "required": true,
          "content": {
            "application/x-www-form-urlencoded": {
              "schema": {
                "type": "object",
                "required": [
                  "token"
                ],
                "properties": {
                  "token": {
                    "type": "string"
                  },
                  "token_type_hint": {
                    "type": "string",
                    "enum": [
                      "access_token",
                      "refresh_token"
                    ]
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Accepted. The body is empty."
          }
        },
        "operationId": "postOauthRevoke"
      }
    },
    "/oauth/session": {
      "post": {
        "tags": [
          "oauth"
        ],
        "summary": "Establish the single sign-on cookie",
        "description": "Exchanges a bearer token for the `interlaken_idp_session` cookie, so a browser that is already signed in to the console can run an authorization code flow without seeing the sign-in form again. Called by the console, not by API clients.",
        "responses": {
          "204": {
            "description": "The cookie was set."
          },
          "401": {
            "description": "Missing or invalid bearer token.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "error"
                  ],
                  "properties": {
                    "error": {
                      "type": "string",
                      "description": "An RFC 6749 error code, such as `invalid_client`, `invalid_grant`, `invalid_scope` or `unsupported_grant_type`."
                    },
                    "error_description": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          }
        },
        "operationId": "postOauthSession"
      }
    },
    "/oauth/token": {
      "post": {
        "tags": [
          "oauth"
        ],
        "summary": "Issue an access token",
        "description": "The token endpoint for all three supported grants.\n\n`client_credentials` is the grant for API clients. Authenticate with HTTP Basic, sending the client id as the username and the client secret as the password (`client_secret_basic`), or put both in the form body (`client_secret_post`). Omit `scope` to receive everything the client was granted, or pass a space-separated subset to narrow it.\n\n`authorization_code` completes a browser flow started at `/oauth/authorize` and requires the PKCE `code_verifier`. `refresh_token` exchanges a refresh token for a new access token.\n\nResponses are never cached: the endpoint sets `Cache-Control: no-store`.",
        "security": [],
        "requestBody": {
          "required": true,
          "content": {
            "application/x-www-form-urlencoded": {
              "schema": {
                "type": "object",
                "required": [
                  "grant_type"
                ],
                "properties": {
                  "grant_type": {
                    "type": "string",
                    "enum": [
                      "client_credentials",
                      "authorization_code",
                      "refresh_token"
                    ]
                  },
                  "scope": {
                    "type": "string",
                    "description": "client_credentials only. Space-separated permission keys, a subset of what the client holds."
                  },
                  "client_id": {
                    "type": "string",
                    "description": "Required unless the credentials are sent as HTTP Basic."
                  },
                  "client_secret": {
                    "type": "string",
                    "description": "Required unless the credentials are sent as HTTP Basic."
                  },
                  "code": {
                    "type": "string",
                    "description": "authorization_code only."
                  },
                  "redirect_uri": {
                    "type": "string",
                    "description": "authorization_code only. Must match the value used at /oauth/authorize."
                  },
                  "code_verifier": {
                    "type": "string",
                    "description": "authorization_code only. The PKCE verifier."
                  },
                  "refresh_token": {
                    "type": "string",
                    "description": "refresh_token only."
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "A token.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "access_token",
                    "token_type",
                    "expires_in"
                  ],
                  "properties": {
                    "access_token": {
                      "type": "string",
                      "description": "An RS256 JWT. Send it as `Authorization: Bearer <token>`."
                    },
                    "token_type": {
                      "type": "string",
                      "enum": [
                        "Bearer"
                      ]
                    },
                    "expires_in": {
                      "type": "integer",
                      "format": "int64",
                      "description": "Lifetime in seconds. One hour by default."
                    },
                    "refresh_token": {
                      "type": "string",
                      "description": "Returned for the authorization_code and refresh_token grants only. The client_credentials grant has no refresh token; request a new one instead."
                    },
                    "scope": {
                      "type": "string",
                      "description": "Space-separated permission keys actually granted."
                    },
                    "id_token": {
                      "type": "string",
                      "description": "Returned when the `openid` scope was requested."
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "The grant or its parameters were rejected.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "error"
                  ],
                  "properties": {
                    "error": {
                      "type": "string",
                      "description": "An RFC 6749 error code, such as `invalid_client`, `invalid_grant`, `invalid_scope` or `unsupported_grant_type`."
                    },
                    "error_description": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          },
          "401": {
            "description": "Client authentication failed. The response carries `WWW-Authenticate: Basic realm=\"interlaken\"`.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "error"
                  ],
                  "properties": {
                    "error": {
                      "type": "string",
                      "description": "An RFC 6749 error code, such as `invalid_client`, `invalid_grant`, `invalid_scope` or `unsupported_grant_type`."
                    },
                    "error_description": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          }
        },
        "operationId": "postOauthToken"
      }
    },
    "/oauth/userinfo": {
      "get": {
        "tags": [
          "oauth"
        ],
        "summary": "Claims about the signed-in user",
        "description": "The OpenID Connect userinfo endpoint. Requires a bearer token that represents a user; a token issued to an API client has no user behind it and is rejected.",
        "responses": {
          "200": {
            "description": "Claims for the token subject.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "sub": {
                      "type": "string",
                      "format": "uuid"
                    },
                    "email": {
                      "type": "string",
                      "format": "email"
                    },
                    "email_verified": {
                      "type": "boolean"
                    },
                    "name": {
                      "type": "string"
                    },
                    "tenant_id": {
                      "type": "string",
                      "format": "uuid"
                    }
                  }
                }
              }
            }
          },
          "401": {
            "description": "Missing, expired or revoked token.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "error"
                  ],
                  "properties": {
                    "error": {
                      "type": "string",
                      "description": "An RFC 6749 error code, such as `invalid_client`, `invalid_grant`, `invalid_scope` or `unsupported_grant_type`."
                    },
                    "error_description": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          }
        },
        "operationId": "getOauthUserinfo"
      }
    }
  },
  "servers": [
    {
      "url": "https://api.{zone}.interlaken.ai",
      "description": "An availability zone. Each one is a separate deployment.",
      "variables": {
        "zone": {
          "default": "eu-par-1",
          "enum": [
            "eu-par-1"
          ],
          "description": "Availability zone id, from interlaken.ai/zones.json."
        }
      }
    }
  ],
  "security": [
    {
      "bearerAuth": []
    },
    {
      "oauth2": []
    }
  ],
  "tags": [
    {
      "name": "oauth",
      "x-displayName": "OAuth 2.1"
    },
    {
      "name": "auth",
      "x-displayName": "Authentication"
    },
    {
      "name": "api-clients",
      "x-displayName": "API clients"
    },
    {
      "name": "users",
      "x-displayName": "Users"
    },
    {
      "name": "roles",
      "x-displayName": "Roles"
    },
    {
      "name": "permissions",
      "x-displayName": "Permissions"
    },
    {
      "name": "tenants",
      "x-displayName": "Tenants"
    },
    {
      "name": "vms",
      "x-displayName": "Virtual machines"
    },
    {
      "name": "microvms",
      "x-displayName": "MicroVMs"
    },
    {
      "name": "containers",
      "x-displayName": "Containers"
    },
    {
      "name": "instance-types",
      "x-displayName": "Instance types"
    },
    {
      "name": "instance-roles",
      "x-displayName": "Instance roles"
    },
    {
      "name": "images",
      "x-displayName": "Images"
    },
    {
      "name": "ssh-keys",
      "x-displayName": "SSH keys"
    },
    {
      "name": "auto-scale-groups",
      "x-displayName": "Auto scale groups"
    },
    {
      "name": "quick-launches",
      "x-displayName": "Quick launches"
    },
    {
      "name": "scheduler",
      "x-displayName": "Scheduler"
    },
    {
      "name": "disks",
      "x-displayName": "Disks"
    },
    {
      "name": "buckets",
      "x-displayName": "Buckets"
    },
    {
      "name": "storage-iops-tiers",
      "x-displayName": "IOPS tiers"
    },
    {
      "name": "vpcs",
      "x-displayName": "VPCs"
    },
    {
      "name": "subnets",
      "x-displayName": "Subnets"
    },
    {
      "name": "nics",
      "x-displayName": "Network interfaces"
    },
    {
      "name": "public-ips",
      "x-displayName": "Public IPs"
    },
    {
      "name": "address-pools",
      "x-displayName": "Address pools"
    },
    {
      "name": "load-balancers",
      "x-displayName": "Load balancers"
    },
    {
      "name": "gateways",
      "x-displayName": "Gateways"
    },
    {
      "name": "vpn-gateways",
      "x-displayName": "Vpn gateways"
    },
    {
      "name": "dns-records",
      "x-displayName": "DNS records"
    },
    {
      "name": "dhcp-configs",
      "x-displayName": "DHCP configs"
    },
    {
      "name": "certificates",
      "x-displayName": "Certificates"
    },
    {
      "name": "security-policies",
      "x-displayName": "Security policies"
    },
    {
      "name": "kubernetes-clusters",
      "x-displayName": "Kubernetes clusters"
    },
    {
      "name": "applications",
      "x-displayName": "Applications"
    },
    {
      "name": "deploy-servers",
      "x-displayName": "Deploy servers"
    },
    {
      "name": "git-deploys",
      "x-displayName": "Git deploys"
    },
    {
      "name": "environments",
      "x-displayName": "Environments"
    },
    {
      "name": "connectors",
      "x-displayName": "Connectors"
    },
    {
      "name": "runs",
      "x-displayName": "Runs"
    },
    {
      "name": "repos",
      "x-displayName": "Repos"
    },
    {
      "name": "github",
      "x-displayName": "GitHub"
    },
    {
      "name": "webhooks",
      "x-displayName": "Webhooks"
    },
    {
      "name": "agents",
      "x-displayName": "Agents"
    },
    {
      "name": "teams",
      "x-displayName": "Teams"
    },
    {
      "name": "agent-roles",
      "x-displayName": "Agent roles"
    },
    {
      "name": "agent-sessions",
      "x-displayName": "Agent sessions"
    },
    {
      "name": "team-agents",
      "x-displayName": "Team agents"
    },
    {
      "name": "skills",
      "x-displayName": "Skills"
    },
    {
      "name": "tools",
      "x-displayName": "Tools"
    },
    {
      "name": "rag",
      "x-displayName": "Retrieval"
    },
    {
      "name": "workspaces",
      "x-displayName": "Workspaces"
    },
    {
      "name": "workflows",
      "x-displayName": "Workflows"
    },
    {
      "name": "workflow-runs",
      "x-displayName": "Workflow runs"
    },
    {
      "name": "managed-services",
      "x-displayName": "Managed services"
    },
    {
      "name": "billing",
      "x-displayName": "Billing"
    },
    {
      "name": "pricing",
      "x-displayName": "Pricing"
    },
    {
      "name": "limits",
      "x-displayName": "Limits"
    },
    {
      "name": "support-tickets",
      "x-displayName": "Support tickets"
    },
    {
      "name": "zone",
      "x-displayName": "Zone"
    },
    {
      "name": "events",
      "x-displayName": "Events"
    }
  ]
}