openapi.yaml

openapi: 3.1.0
info:
  title: Artifact Keeper API
  description: Enterprise artifact registry supporting 45+ package formats.
  contact:
    name: Artifact Keeper
    url: https://artifactkeeper.com
  license:
    name: MIT
    url: https://opensource.org/licenses/MIT
  version: 1.0.0-rc.3
servers:
- url: /
  description: Current server
paths:
  /api/v1/admin/analytics/artifacts/stale:
    get:
      tags:
      - analytics
      summary: GET /api/v1/admin/analytics/artifacts/stale
      operationId: get_stale_artifacts
      parameters:
      - name: days
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
      - name: limit
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: List of stale artifacts
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/StaleArtifact'
      security:
      - bearer_auth: []
  /api/v1/admin/analytics/downloads/trend:
    get:
      tags:
      - analytics
      summary: GET /api/v1/admin/analytics/downloads/trend
      operationId: get_download_trends
      parameters:
      - name: from
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: to
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Download trends over date range
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DownloadTrend'
      security:
      - bearer_auth: []
  /api/v1/admin/analytics/repositories/{id}/trend:
    get:
      tags:
      - analytics
      summary: GET /api/v1/admin/analytics/repositories/{id}/trend
      operationId: get_repository_trend
      parameters:
      - name: id
        in: path
        description: Repository ID
        required: true
        schema:
          type: string
          format: uuid
      - name: from
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: to
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Repository storage trend over date range
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RepositorySnapshot'
      security:
      - bearer_auth: []
  /api/v1/admin/analytics/snapshot:
    post:
      tags:
      - analytics
      summary: POST /api/v1/admin/analytics/snapshot - manually trigger a snapshot
      operationId: capture_snapshot
      responses:
        '200':
          description: Snapshot captured successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StorageSnapshot'
      security:
      - bearer_auth: []
  /api/v1/admin/analytics/storage/breakdown:
    get:
      tags:
      - analytics
      summary: GET /api/v1/admin/analytics/storage/breakdown
      operationId: get_storage_breakdown
      responses:
        '200':
          description: Per-repository storage breakdown
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RepositoryStorageBreakdown'
      security:
      - bearer_auth: []
  /api/v1/admin/analytics/storage/growth:
    get:
      tags:
      - analytics
      summary: GET /api/v1/admin/analytics/storage/growth
      operationId: get_growth_summary
      parameters:
      - name: from
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: to
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Growth summary for date range
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GrowthSummary'
      security:
      - bearer_auth: []
  /api/v1/admin/analytics/storage/trend:
    get:
      tags:
      - analytics
      summary: GET /api/v1/admin/analytics/storage/trend
      operationId: get_storage_trend
      parameters:
      - name: from
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: to
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Storage trend over date range
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/StorageSnapshot'
      security:
      - bearer_auth: []
  /api/v1/admin/backups:
    get:
      tags:
      - admin
      summary: List backups
      operationId: list_backups
      parameters:
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: type
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: List of backups
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BackupListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - admin
      summary: Create backup
      operationId: create_backup
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateBackupRequest'
        required: true
      responses:
        '200':
          description: Backup created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BackupResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/backups/{id}:
    get:
      tags:
      - admin
      summary: Get backup by ID
      operationId: get_backup
      parameters:
      - name: id
        in: path
        description: Backup ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Backup details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BackupResponse'
        '404':
          description: Backup not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    delete:
      tags:
      - admin
      summary: Delete a backup
      operationId: delete_backup
      parameters:
      - name: id
        in: path
        description: Backup ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Backup deleted
        '404':
          description: Backup not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/backups/{id}/cancel:
    post:
      tags:
      - admin
      summary: Cancel a running backup
      operationId: cancel_backup
      parameters:
      - name: id
        in: path
        description: Backup ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Backup cancelled
        '404':
          description: Backup not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/backups/{id}/execute:
    post:
      tags:
      - admin
      summary: Execute a pending backup
      operationId: execute_backup
      parameters:
      - name: id
        in: path
        description: Backup ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Backup executed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BackupResponse'
        '404':
          description: Backup not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/backups/{id}/restore:
    post:
      tags:
      - admin
      summary: Restore from backup
      operationId: restore_backup
      parameters:
      - name: id
        in: path
        description: Backup ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RestoreRequest'
        required: true
      responses:
        '200':
          description: Backup restored
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RestoreResponse'
        '404':
          description: Backup not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/cleanup:
    post:
      tags:
      - admin
      summary: Run cleanup tasks
      operationId: run_cleanup
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CleanupRequest'
        required: true
      responses:
        '200':
          description: Cleanup completed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CleanupResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/lifecycle:
    get:
      tags:
      - lifecycle
      summary: GET /api/v1/admin/lifecycle
      operationId: list_lifecycle_policies
      parameters:
      - name: repository_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      responses:
        '200':
          description: List lifecycle policies
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/LifecyclePolicy'
      security:
      - bearer_auth: []
    post:
      tags:
      - lifecycle
      summary: POST /api/v1/admin/lifecycle
      operationId: create_lifecycle_policy
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreatePolicyRequest'
        required: true
      responses:
        '200':
          description: Policy created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LifecyclePolicy'
      security:
      - bearer_auth: []
  /api/v1/admin/lifecycle/execute-all:
    post:
      tags:
      - lifecycle
      summary: POST /api/v1/admin/lifecycle/execute-all
      operationId: execute_all_policies
      responses:
        '200':
          description: All enabled policies executed
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/PolicyExecutionResult'
      security:
      - bearer_auth: []
  /api/v1/admin/lifecycle/{id}:
    get:
      tags:
      - lifecycle
      summary: GET /api/v1/admin/lifecycle/:id
      operationId: get_lifecycle_policy
      parameters:
      - name: id
        in: path
        description: Policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Lifecycle policy details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LifecyclePolicy'
      security:
      - bearer_auth: []
    delete:
      tags:
      - lifecycle
      summary: DELETE /api/v1/admin/lifecycle/:id
      operationId: delete_lifecycle_policy
      parameters:
      - name: id
        in: path
        description: Policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Policy deleted
      security:
      - bearer_auth: []
    patch:
      tags:
      - lifecycle
      summary: PATCH /api/v1/admin/lifecycle/:id
      operationId: update_lifecycle_policy
      parameters:
      - name: id
        in: path
        description: Policy ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdatePolicyRequest'
        required: true
      responses:
        '200':
          description: Policy updated successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LifecyclePolicy'
      security:
      - bearer_auth: []
  /api/v1/admin/lifecycle/{id}/execute:
    post:
      tags:
      - lifecycle
      summary: POST /api/v1/admin/lifecycle/:id/execute
      operationId: execute_policy
      parameters:
      - name: id
        in: path
        description: Policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Policy executed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyExecutionResult'
      security:
      - bearer_auth: []
  /api/v1/admin/lifecycle/{id}/preview:
    post:
      tags:
      - lifecycle
      summary: POST /api/v1/admin/lifecycle/:id/preview - dry-run
      operationId: preview_policy
      parameters:
      - name: id
        in: path
        description: Policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Policy preview (dry-run)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyExecutionResult'
      security:
      - bearer_auth: []
  /api/v1/admin/metrics:
    get:
      tags:
      - health
      summary: 'Prometheus metrics endpoint.

        Renders all registered metrics from the metrics-exporter-prometheus recorder.'
      operationId: metrics
      responses:
        '200':
          description: Prometheus metrics in text format
          content:
            text/plain: {}
  /api/v1/admin/monitoring/alerts:
    get:
      tags:
      - monitoring
      summary: GET /api/v1/admin/monitoring/alerts
      operationId: get_alert_states
      responses:
        '200':
          description: Current alert states
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/AlertState'
      security:
      - bearer_auth: []
  /api/v1/admin/monitoring/alerts/suppress:
    post:
      tags:
      - monitoring
      summary: POST /api/v1/admin/monitoring/alerts/suppress
      operationId: suppress_alert
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SuppressRequest'
        required: true
      responses:
        '200':
          description: Alert suppressed
      security:
      - bearer_auth: []
  /api/v1/admin/monitoring/check:
    post:
      tags:
      - monitoring
      summary: POST /api/v1/admin/monitoring/check - manually trigger health checks
      operationId: run_health_check
      responses:
        '200':
          description: Health check results
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ServiceHealthEntry'
      security:
      - bearer_auth: []
  /api/v1/admin/monitoring/health-log:
    get:
      tags:
      - monitoring
      summary: GET /api/v1/admin/monitoring/health-log
      operationId: get_health_log
      parameters:
      - name: service
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: limit
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Health log entries
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ServiceHealthEntry'
      security:
      - bearer_auth: []
  /api/v1/admin/reindex:
    post:
      tags:
      - admin
      summary: Trigger a full Meilisearch reindex of all artifacts and repositories.
      description: Requires admin privileges and Meilisearch to be configured.
      operationId: trigger_reindex
      responses:
        '200':
          description: Reindex completed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReindexResponse'
        '401':
          description: Admin privileges required
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/search/reindex:
    post:
      tags:
      - admin
      summary: Trigger a full reindex of all artifacts and repositories in Meilisearch.
      description: 'The reindex runs asynchronously in the background. The endpoint returns

        immediately with a confirmation that the task was started.'
      operationId: trigger_search_reindex
      responses:
        '200':
          description: Reindex started in background
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReindexResponse'
        '500':
          description: Meilisearch is not configured
  /api/v1/admin/settings:
    get:
      tags:
      - admin
      summary: Get system settings
      operationId: get_settings
      responses:
        '200':
          description: System settings
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SystemSettings'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - admin
      summary: Update system settings
      operationId: update_settings
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SystemSettings'
        required: true
      responses:
        '200':
          description: Settings updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SystemSettings'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/sso/ldap:
    get:
      tags:
      - sso
      summary: List all LDAP provider configurations
      operationId: list_ldap
      responses:
        '200':
          description: List of LDAP configurations
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/LdapConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - sso
      summary: Create a new LDAP provider configuration
      operationId: create_ldap
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateLdapConfigRequest'
        required: true
      responses:
        '200':
          description: LDAP configuration created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LdapConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/ldap/{id}:
    get:
      tags:
      - sso
      summary: Get LDAP provider configuration by ID
      operationId: get_ldap
      parameters:
      - name: id
        in: path
        description: LDAP configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: LDAP configuration details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LdapConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    put:
      tags:
      - sso
      summary: Update an LDAP provider configuration
      operationId: update_ldap
      parameters:
      - name: id
        in: path
        description: LDAP configuration ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateLdapConfigRequest'
        required: true
      responses:
        '200':
          description: LDAP configuration updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LdapConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - sso
      summary: Delete an LDAP provider configuration
      operationId: delete_ldap
      parameters:
      - name: id
        in: path
        description: LDAP configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: LDAP configuration deleted
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/ldap/{id}/test:
    post:
      tags:
      - sso
      summary: Test an LDAP provider connection
      operationId: test_ldap
      parameters:
      - name: id
        in: path
        description: LDAP configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: LDAP connection test result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LdapTestResult'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/ldap/{id}/toggle:
    patch:
      tags:
      - sso
      summary: Toggle an LDAP provider enabled/disabled
      operationId: toggle_ldap
      parameters:
      - name: id
        in: path
        description: LDAP configuration ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ToggleRequest'
        required: true
      responses:
        '200':
          description: LDAP configuration toggled
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/oidc:
    get:
      tags:
      - sso
      summary: List all OIDC provider configurations
      operationId: list_oidc
      responses:
        '200':
          description: List of OIDC configurations
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/OidcConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - sso
      summary: Create a new OIDC provider configuration
      operationId: create_oidc
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateOidcConfigRequest'
        required: true
      responses:
        '200':
          description: OIDC configuration created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OidcConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/oidc/{id}:
    get:
      tags:
      - sso
      summary: Get OIDC provider configuration by ID
      operationId: get_oidc
      parameters:
      - name: id
        in: path
        description: OIDC configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OIDC configuration details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OidcConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    put:
      tags:
      - sso
      summary: Update an OIDC provider configuration
      operationId: update_oidc
      parameters:
      - name: id
        in: path
        description: OIDC configuration ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateOidcConfigRequest'
        required: true
      responses:
        '200':
          description: OIDC configuration updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OidcConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - sso
      summary: Delete an OIDC provider configuration
      operationId: delete_oidc
      parameters:
      - name: id
        in: path
        description: OIDC configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OIDC configuration deleted
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/oidc/{id}/toggle:
    patch:
      tags:
      - sso
      summary: Toggle an OIDC provider enabled/disabled
      operationId: toggle_oidc
      parameters:
      - name: id
        in: path
        description: OIDC configuration ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ToggleRequest'
        required: true
      responses:
        '200':
          description: OIDC configuration toggled
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/providers:
    get:
      tags:
      - sso
      summary: List all enabled SSO providers (admin view)
      operationId: list_sso_providers_admin
      responses:
        '200':
          description: List of enabled SSO providers
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SsoProviderInfo'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/saml:
    get:
      tags:
      - sso
      summary: List all SAML provider configurations
      operationId: list_saml
      responses:
        '200':
          description: List of SAML configurations
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SamlConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - sso
      summary: Create a new SAML provider configuration
      operationId: create_saml
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateSamlConfigRequest'
        required: true
      responses:
        '200':
          description: SAML configuration created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SamlConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/saml/{id}:
    get:
      tags:
      - sso
      summary: Get SAML provider configuration by ID
      operationId: get_saml
      parameters:
      - name: id
        in: path
        description: SAML configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: SAML configuration details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SamlConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    put:
      tags:
      - sso
      summary: Update a SAML provider configuration
      operationId: update_saml
      parameters:
      - name: id
        in: path
        description: SAML configuration ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateSamlConfigRequest'
        required: true
      responses:
        '200':
          description: SAML configuration updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SamlConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - sso
      summary: Delete a SAML provider configuration
      operationId: delete_saml
      parameters:
      - name: id
        in: path
        description: SAML configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: SAML configuration deleted
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/sso/saml/{id}/toggle:
    patch:
      tags:
      - sso
      summary: Toggle a SAML provider enabled/disabled
      operationId: toggle_saml
      parameters:
      - name: id
        in: path
        description: SAML configuration ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ToggleRequest'
        required: true
      responses:
        '200':
          description: SAML configuration toggled
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Configuration not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/stats:
    get:
      tags:
      - admin
      summary: Get system statistics
      operationId: get_system_stats
      responses:
        '200':
          description: System statistics
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SystemStats'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/admin/storage-backends:
    get:
      tags:
      - admin
      summary: List available storage backends.
      description: 'Returns the names of all configured and available storage backends.

        Requires admin privileges.'
      operationId: list_storage_backends
      responses:
        '200':
          description: Available storage backends
          content:
            application/json:
              schema:
                type: array
                items:
                  type: string
        '403':
          description: Admin privileges required
      security:
      - bearer_auth: []
  /api/v1/admin/storage-gc:
    post:
      tags:
      - admin
      summary: POST /api/v1/admin/storage-gc
      operationId: run_storage_gc
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/StorageGcRequest'
        required: true
      responses:
        '200':
          description: GC result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StorageGcResult'
      security:
      - bearer_auth: []
  /api/v1/admin/telemetry/crashes:
    get:
      tags:
      - telemetry
      summary: GET /api/v1/admin/telemetry/crashes
      operationId: list_crashes
      parameters:
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: Paginated crash reports
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CrashListResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/telemetry/crashes/pending:
    get:
      tags:
      - telemetry
      summary: GET /api/v1/admin/telemetry/crashes/pending
      operationId: list_pending_crashes
      responses:
        '200':
          description: Pending crash reports
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CrashReport'
      security:
      - bearer_auth: []
  /api/v1/admin/telemetry/crashes/submit:
    post:
      tags:
      - telemetry
      summary: POST /api/v1/admin/telemetry/crashes/submit
      operationId: submit_crashes
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SubmitCrashesRequest'
        required: true
      responses:
        '200':
          description: Crashes submitted
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SubmitResponse'
      security:
      - bearer_auth: []
  /api/v1/admin/telemetry/crashes/{id}:
    get:
      tags:
      - telemetry
      summary: GET /api/v1/admin/telemetry/crashes/:id
      operationId: get_crash
      parameters:
      - name: id
        in: path
        description: Crash report ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Crash report details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CrashReport'
      security:
      - bearer_auth: []
    delete:
      tags:
      - telemetry
      summary: DELETE /api/v1/admin/telemetry/crashes/:id
      operationId: delete_crash
      parameters:
      - name: id
        in: path
        description: Crash report ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Crash report deleted
      security:
      - bearer_auth: []
  /api/v1/admin/telemetry/settings:
    get:
      tags:
      - telemetry
      summary: GET /api/v1/admin/telemetry/settings
      operationId: get_telemetry_settings
      responses:
        '200':
          description: Current telemetry settings
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TelemetrySettings'
      security:
      - bearer_auth: []
    post:
      tags:
      - telemetry
      summary: POST /api/v1/admin/telemetry/settings
      operationId: update_telemetry_settings
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TelemetrySettings'
        required: true
      responses:
        '200':
          description: Settings updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TelemetrySettings'
      security:
      - bearer_auth: []
  /api/v1/approval/history:
    get:
      tags:
      - approval
      summary: List approval history with optional filtering by status or source repository.
      operationId: list_approval_history
      parameters:
      - name: page
        in: query
        description: Page number (1-indexed)
        required: false
        schema:
          type: integer
          format: int32
          minimum: 0
      - name: per_page
        in: query
        description: Items per page (max 100)
        required: false
        schema:
          type: integer
          format: int32
          minimum: 0
      - name: status
        in: query
        description: Filter by status (pending, approved, rejected)
        required: false
        schema:
          type: string
      - name: source_repository
        in: query
        description: Filter by source repository key
        required: false
        schema:
          type: string
      responses:
        '200':
          description: Approval history
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApprovalListResponse'
      security:
      - bearer_auth: []
  /api/v1/approval/pending:
    get:
      tags:
      - approval
      summary: List pending approval requests. Optionally filter by source repository.
      operationId: list_pending_approvals
      parameters:
      - name: page
        in: query
        description: Page number (1-indexed)
        required: false
        schema:
          type: integer
          format: int32
          minimum: 0
      - name: per_page
        in: query
        description: Items per page (max 100)
        required: false
        schema:
          type: integer
          format: int32
          minimum: 0
      - name: source_repository
        in: query
        description: Filter by source repository key
        required: false
        schema:
          type: string
      responses:
        '200':
          description: Pending approval requests
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApprovalListResponse'
      security:
      - bearer_auth: []
  /api/v1/approval/request:
    post:
      tags:
      - approval
      summary: Request approval for promoting an artifact from staging to release.
      operationId: request_approval
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ApprovalRequest'
        required: true
      responses:
        '201':
          description: Approval request created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApprovalResponse'
        '404':
          description: Artifact or repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '409':
          description: Pending approval already exists
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/approval/{id}:
    get:
      tags:
      - approval
      summary: Get a single approval request by ID.
      operationId: get_approval
      parameters:
      - name: id
        in: path
        description: Approval request ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Approval request details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApprovalResponse'
        '404':
          description: Approval request not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/approval/{id}/approve:
    post:
      tags:
      - approval
      summary: Approve a pending promotion request. Admin-only.
      description: 'This copies the artifact from the staging repo to the release repo,

        inserts the new artifact record, records promotion history, and

        updates the approval status to "approved".'
      operationId: approve_promotion
      parameters:
      - name: id
        in: path
        description: Approval request ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ReviewRequest'
        required: true
      responses:
        '200':
          description: Promotion approved and executed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApprovalResponse'
        '403':
          description: Admin access required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Approval request not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '409':
          description: Approval already reviewed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/approval/{id}/reject:
    post:
      tags:
      - approval
      summary: Reject a pending promotion request. Admin-only.
      operationId: reject_promotion
      parameters:
      - name: id
        in: path
        description: Approval request ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ReviewRequest'
        required: true
      responses:
        '200':
          description: Promotion rejected
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApprovalResponse'
        '403':
          description: Admin access required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Approval request not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '409':
          description: Approval already reviewed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/artifacts/{id}:
    get:
      tags:
      - artifacts
      summary: Get artifact by ID
      operationId: get_artifact
      parameters:
      - name: id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Artifact details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactResponse'
        '404':
          description: Artifact not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/artifacts/{id}/labels:
    get:
      tags:
      - artifact-labels
      summary: List all labels on an artifact
      operationId: list_artifact_labels
      parameters:
      - name: id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Labels retrieved
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactLabelsListResponse'
        '404':
          description: Artifact not found
      security:
      - bearer_auth: []
    put:
      tags:
      - artifact-labels
      summary: Set all labels on an artifact (replaces existing)
      operationId: set_artifact_labels
      parameters:
      - name: id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SetArtifactLabelsRequest'
        required: true
      responses:
        '200':
          description: Labels updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactLabelsListResponse'
        '404':
          description: Artifact not found
      security:
      - bearer_auth: []
  /api/v1/artifacts/{id}/labels/{label_key}:
    post:
      tags:
      - artifact-labels
      summary: Add or update a single label on an artifact
      operationId: add_artifact_label
      parameters:
      - name: id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      - name: label_key
        in: path
        description: Label key to set
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AddArtifactLabelRequest'
        required: true
      responses:
        '200':
          description: Label added/updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactLabelResponse'
        '404':
          description: Artifact not found
      security:
      - bearer_auth: []
    delete:
      tags:
      - artifact-labels
      summary: Delete a label by key from an artifact
      operationId: delete_artifact_label
      parameters:
      - name: id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      - name: label_key
        in: path
        description: Label key to remove
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Label removed
        '404':
          description: Artifact not found
      security:
      - bearer_auth: []
  /api/v1/artifacts/{id}/metadata:
    get:
      tags:
      - artifacts
      summary: Get artifact metadata by artifact ID
      operationId: get_artifact_metadata
      parameters:
      - name: id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Artifact metadata
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactMetadataResponse'
        '404':
          description: Artifact or metadata not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/artifacts/{id}/stats:
    get:
      tags:
      - artifacts
      summary: Get artifact download statistics
      operationId: get_artifact_stats
      parameters:
      - name: id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Artifact download statistics
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactStatsResponse'
        '404':
          description: Artifact not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/login:
    post:
      tags:
      - auth
      summary: Login with credentials
      operationId: login
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/LoginRequest'
        required: true
      responses:
        '200':
          description: Login successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LoginResponse'
        '401':
          description: Invalid credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/logout:
    post:
      tags:
      - auth
      summary: Logout current session
      operationId: logout
      responses:
        '200':
          description: Logout successful, auth cookies cleared
  /api/v1/auth/me:
    get:
      tags:
      - auth
      summary: Get current user info
      operationId: get_current_user
      responses:
        '200':
          description: Current user info
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserResponse'
        '401':
          description: Not authenticated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: User not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/auth/refresh:
    post:
      tags:
      - auth
      summary: Refresh access token
      operationId: refresh_token
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RefreshTokenRequest'
        required: true
      responses:
        '200':
          description: Token refreshed successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LoginResponse'
        '401':
          description: Invalid or expired refresh token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/sso/exchange:
    post:
      tags:
      - sso
      summary: Exchange a short-lived code for access and refresh tokens
      operationId: exchange_code
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ExchangeCodeRequest'
        required: true
      responses:
        '200':
          description: Token exchange successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExchangeCodeResponse'
        '400':
          description: Invalid or expired exchange code
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/sso/ldap/{id}/login:
    post:
      tags:
      - sso
      summary: Authenticate via LDAP
      operationId: ldap_login
      parameters:
      - name: id
        in: path
        description: LDAP provider configuration ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/LdapLoginRequest'
        required: true
      responses:
        '200':
          description: Authentication successful with tokens
        '401':
          description: Invalid credentials
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: LDAP provider not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/sso/oidc/{id}/callback:
    get:
      tags:
      - sso
      summary: Handle OIDC authorization callback
      operationId: oidc_callback
      parameters:
      - name: id
        in: path
        description: OIDC provider configuration ID
        required: true
        schema:
          type: string
          format: uuid
      - name: code
        in: query
        required: true
        schema:
          type: string
      - name: state
        in: query
        required: true
        schema:
          type: string
      responses:
        '307':
          description: Redirect to frontend with exchange code
        '400':
          description: Invalid callback parameters
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/sso/oidc/{id}/login:
    get:
      tags:
      - sso
      summary: Initiate OIDC login redirect
      operationId: oidc_login
      parameters:
      - name: id
        in: path
        description: OIDC provider configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '307':
          description: Redirect to OIDC authorization endpoint
        '404':
          description: OIDC provider not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/sso/providers:
    get:
      tags:
      - sso
      summary: List all enabled SSO providers
      operationId: list_providers
      responses:
        '200':
          description: List of enabled SSO providers
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SsoProviderInfo'
  /api/v1/auth/sso/saml/{id}/acs:
    post:
      tags:
      - sso
      summary: Handle SAML Assertion Consumer Service (ACS) callback
      operationId: saml_acs
      parameters:
      - name: id
        in: path
        description: SAML provider configuration ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/SamlAcsForm'
        required: true
      responses:
        '307':
          description: Redirect to frontend with exchange code
        '400':
          description: Invalid SAML response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/sso/saml/{id}/login:
    get:
      tags:
      - sso
      summary: Initiate SAML login redirect
      operationId: saml_login
      parameters:
      - name: id
        in: path
        description: SAML provider configuration ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '307':
          description: Redirect to SAML IdP SSO endpoint
        '404':
          description: SAML provider not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/auth/ticket:
    post:
      tags:
      - auth
      summary: 'Create a short-lived, single-use download/stream ticket for the current user.

        The ticket can be passed as a `?ticket=` query parameter on endpoints that

        cannot use `Authorization` headers (e.g. `<a>` downloads, `EventSource` SSE).'
      operationId: create_download_ticket
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateTicketRequest'
        required: true
      responses:
        '200':
          description: Download ticket created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TicketResponse'
        '401':
          description: Not authenticated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/auth/tokens:
    post:
      tags:
      - auth
      summary: Create a new API token for the current user
      operationId: create_api_token
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateApiTokenRequest'
        required: true
      responses:
        '200':
          description: API token created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateApiTokenResponse'
        '401':
          description: Not authenticated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/auth/tokens/{token_id}:
    delete:
      tags:
      - auth
      summary: Revoke an API token
      operationId: revoke_api_token
      parameters:
      - name: token_id
        in: path
        description: ID of the API token to revoke
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: API token revoked
        '401':
          description: Not authenticated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Token not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/auth/totp/disable:
    post:
      tags:
      - auth
      summary: Disable TOTP for the authenticated user (requires password and current TOTP code)
      operationId: disable_totp
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpDisableRequest'
        required: true
      responses:
        '200':
          description: TOTP disabled successfully
        '401':
          description: Invalid password or TOTP code
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/auth/totp/enable:
    post:
      tags:
      - auth
      summary: Enable TOTP by verifying the initial code and generating backup codes
      operationId: enable_totp
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpCodeRequest'
        required: true
      responses:
        '200':
          description: TOTP enabled with backup codes
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpEnableResponse'
        '401':
          description: Unauthorized or invalid TOTP code
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/auth/totp/setup:
    post:
      tags:
      - auth
      summary: Generate a new TOTP secret and QR code URL for the authenticated user
      operationId: setup_totp
      responses:
        '200':
          description: TOTP setup details with secret and QR code URL
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpSetupResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/auth/totp/verify:
    post:
      tags:
      - auth
      summary: Verify TOTP code during login (exchanges totp_token + code for full auth tokens)
      operationId: verify_totp
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpVerifyRequest'
        required: true
      responses:
        '200':
          description: TOTP verified, authentication tokens returned
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LoginResponse'
        '401':
          description: Invalid TOTP code or token
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
  /api/v1/builds:
    get:
      tags:
      - builds
      summary: List builds
      operationId: list_builds
      parameters:
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: search
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: sort_by
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: sort_order
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: List of builds
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BuildListResponse'
    post:
      tags:
      - builds
      summary: Create a new build (POST /api/v1/builds)
      operationId: create_build
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateBuildRequest'
        required: true
      responses:
        '200':
          description: Build created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BuildResponse'
        '401':
          description: Authentication required
      security:
      - bearer_auth: []
  /api/v1/builds/diff:
    get:
      tags:
      - builds
      summary: Get diff between two builds
      operationId: get_build_diff
      parameters:
      - name: build_a
        in: query
        required: true
        schema:
          type: string
          format: uuid
      - name: build_b
        in: query
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Diff between two builds
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BuildDiffResponse'
  /api/v1/builds/{id}:
    get:
      tags:
      - builds
      summary: Get a build by ID
      operationId: get_build
      parameters:
      - name: id
        in: path
        description: Build ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Build details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BuildResponse'
        '404':
          description: Build not found
    put:
      tags:
      - builds
      summary: Update build status (PUT /api/v1/builds/:id)
      operationId: update_build
      parameters:
      - name: id
        in: path
        description: Build ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateBuildRequest'
        required: true
      responses:
        '200':
          description: Build updated successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BuildResponse'
        '401':
          description: Authentication required
        '404':
          description: Build not found
      security:
      - bearer_auth: []
  /api/v1/builds/{id}/artifacts:
    post:
      tags:
      - builds
      summary: Attach artifacts to a build (POST /api/v1/builds/:id/artifacts)
      operationId: add_build_artifacts
      parameters:
      - name: id
        in: path
        description: Build ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AddBuildArtifactsRequest'
        required: true
      responses:
        '200':
          description: Artifacts added to build
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AddBuildArtifactsResponse'
        '401':
          description: Authentication required
        '404':
          description: Build not found
      security:
      - bearer_auth: []
  /api/v1/curation/packages:
    get:
      tags:
      - Curation
      operationId: list_curation_packages
      parameters:
      - name: staging_repo_id
        in: query
        required: true
        schema:
          type: string
          format: uuid
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: limit
        in: query
        required: false
        schema:
          type: integer
          format: int64
      - name: offset
        in: query
        required: false
        schema:
          type: integer
          format: int64
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/PackageResponse'
  /api/v1/curation/packages/bulk-approve:
    post:
      tags:
      - Curation
      operationId: bulk_approve
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BulkStatusRequest'
        required: true
      responses:
        '200':
          description: ''
          content:
            text/plain:
              schema:
                type: integer
                format: int64
                minimum: 0
  /api/v1/curation/packages/bulk-block:
    post:
      tags:
      - Curation
      operationId: bulk_block
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BulkStatusRequest'
        required: true
      responses:
        '200':
          description: ''
          content:
            text/plain:
              schema:
                type: integer
                format: int64
                minimum: 0
  /api/v1/curation/packages/re-evaluate:
    post:
      tags:
      - Curation
      operationId: re_evaluate
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ReEvaluateRequest'
        required: true
      responses:
        '200':
          description: ''
          content:
            text/plain:
              schema:
                type: integer
                format: int64
                minimum: 0
  /api/v1/curation/packages/{id}:
    get:
      tags:
      - Curation
      operationId: get_curation_package
      parameters:
      - name: id
        in: path
        description: Package ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PackageResponse'
  /api/v1/curation/packages/{id}/approve:
    post:
      tags:
      - Curation
      operationId: approve_package
      parameters:
      - name: id
        in: path
        description: Package ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PackageResponse'
  /api/v1/curation/packages/{id}/block:
    post:
      tags:
      - Curation
      operationId: block_package
      parameters:
      - name: id
        in: path
        description: Package ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PackageResponse'
  /api/v1/curation/rules:
    get:
      tags:
      - Curation
      operationId: list_curation_rules
      parameters:
      - name: staging_repo_id
        in: query
        description: Filter by staging repo
        required: false
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RuleResponse'
    post:
      tags:
      - Curation
      operationId: create_curation_rule
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateRuleRequest'
        required: true
      responses:
        '201':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RuleResponse'
  /api/v1/curation/rules/{id}:
    put:
      tags:
      - Curation
      operationId: update_curation_rule
      parameters:
      - name: id
        in: path
        description: Rule ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateRuleRequest'
        required: true
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RuleResponse'
    delete:
      tags:
      - Curation
      operationId: delete_curation_rule
      parameters:
      - name: id
        in: path
        description: Rule ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: ''
  /api/v1/curation/stats:
    get:
      tags:
      - Curation
      operationId: stats
      parameters:
      - name: staging_repo_id
        in: query
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StatsResponse'
  /api/v1/dependency-track/analysis:
    put:
      tags:
      - security
      summary: Update analysis (triage) for a finding
      operationId: update_analysis
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateAnalysisBody'
        required: true
      responses:
        '200':
          description: Updated analysis
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DtAnalysisResponse'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/metrics/portfolio:
    get:
      tags:
      - security
      summary: Get portfolio-level metrics
      operationId: get_portfolio_metrics
      responses:
        '200':
          description: Portfolio metrics
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DtPortfolioMetrics'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/policies:
    get:
      tags:
      - security
      summary: List all policies
      operationId: list_dependency_track_policies
      responses:
        '200':
          description: List of policies
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DtPolicyFull'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/projects:
    get:
      tags:
      - security
      summary: List all Dependency-Track projects
      operationId: list_projects
      responses:
        '200':
          description: List of projects
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DtProject'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/projects/{project_uuid}:
    get:
      tags:
      - security
      summary: Get project findings by project UUID
      operationId: get_project
      parameters:
      - name: project_uuid
        in: path
        description: Project UUID
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Project findings
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DtFinding'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/projects/{project_uuid}/components:
    get:
      tags:
      - security
      summary: Get components for a project
      operationId: get_project_components
      parameters:
      - name: project_uuid
        in: path
        description: Project UUID
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Project components
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DtComponentFull'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/projects/{project_uuid}/findings:
    get:
      tags:
      - security
      summary: Get vulnerability findings for a project
      operationId: get_project_findings
      parameters:
      - name: project_uuid
        in: path
        description: Project UUID
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Project vulnerability findings
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DtFinding'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/projects/{project_uuid}/metrics:
    get:
      tags:
      - security
      summary: Get metrics for a project
      operationId: get_project_metrics
      parameters:
      - name: project_uuid
        in: path
        description: Project UUID
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Project metrics
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DtProjectMetrics'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/projects/{project_uuid}/metrics/history:
    get:
      tags:
      - security
      summary: Get metrics history for a project
      operationId: get_project_metrics_history
      parameters:
      - name: project_uuid
        in: path
        description: Project UUID
        required: true
        schema:
          type: string
      - name: days
        in: query
        required: false
        schema:
          type: integer
          format: int32
          minimum: 0
      responses:
        '200':
          description: Project metrics history
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DtProjectMetrics'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/projects/{project_uuid}/violations:
    get:
      tags:
      - security
      summary: Get policy violations for a project
      operationId: get_project_violations
      parameters:
      - name: project_uuid
        in: path
        description: Project UUID
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Project policy violations
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DtPolicyViolation'
      security:
      - bearer_auth: []
  /api/v1/dependency-track/status:
    get:
      tags:
      - security
      summary: Get Dependency-Track integration status
      operationId: dt_status
      responses:
        '200':
          description: Dependency-Track status
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DtStatusResponse'
      security:
      - bearer_auth: []
  /api/v1/formats:
    get:
      tags:
      - plugins
      summary: List all format handlers (T039)
      operationId: list_format_handlers
      parameters:
      - name: type
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: enabled
        in: query
        required: false
        schema:
          type:
          - boolean
          - 'null'
      responses:
        '200':
          description: List of format handlers
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/FormatHandlerResponse'
  /api/v1/formats/{format_key}:
    get:
      tags:
      - plugins
      summary: Get a format handler by key (T040)
      operationId: get_format_handler
      parameters:
      - name: format_key
        in: path
        description: Format handler key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Format handler details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FormatHandlerResponse'
        '404':
          description: Format handler not found
  /api/v1/formats/{format_key}/disable:
    post:
      tags:
      - plugins
      summary: Disable a format handler (T042)
      operationId: disable_format_handler
      parameters:
      - name: format_key
        in: path
        description: Format handler key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Format handler disabled
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FormatHandlerResponse'
      security:
      - bearer_auth: []
  /api/v1/formats/{format_key}/enable:
    post:
      tags:
      - plugins
      summary: Enable a format handler (T041)
      operationId: enable_format_handler
      parameters:
      - name: format_key
        in: path
        description: Format handler key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Format handler enabled
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FormatHandlerResponse'
      security:
      - bearer_auth: []
  /api/v1/formats/{format_key}/test:
    post:
      tags:
      - plugins
      summary: Test a format handler with sample content (T062)
      operationId: test_format_handler
      parameters:
      - name: format_key
        in: path
        description: Format handler key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TestFormatRequest'
        required: true
      responses:
        '200':
          description: Format handler test results
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TestFormatResponse'
      security:
      - bearer_auth: []
  /api/v1/groups:
    get:
      tags:
      - groups
      summary: List groups
      operationId: list_groups
      parameters:
      - name: search
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: List of groups
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GroupListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - groups
      summary: Create a group
      operationId: create_group
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateGroupRequest'
        required: true
      responses:
        '200':
          description: Group created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GroupResponse'
        '409':
          description: Group name already exists
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/groups/{id}:
    get:
      tags:
      - groups
      summary: Get a group by ID
      operationId: get_group
      parameters:
      - name: id
        in: path
        description: Group ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Group details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GroupResponse'
        '404':
          description: Group not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    put:
      tags:
      - groups
      summary: Update a group
      operationId: update_group
      parameters:
      - name: id
        in: path
        description: Group ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateGroupRequest'
        required: true
      responses:
        '200':
          description: Group updated successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GroupResponse'
        '404':
          description: Group not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    delete:
      tags:
      - groups
      summary: Delete a group
      operationId: delete_group
      parameters:
      - name: id
        in: path
        description: Group ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Group deleted successfully
        '404':
          description: Group not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/groups/{id}/members:
    post:
      tags:
      - groups
      summary: Add members to a group
      operationId: add_members
      parameters:
      - name: id
        in: path
        description: Group ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MembersRequest'
        required: true
      responses:
        '200':
          description: Members added successfully
        '404':
          description: Group not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    delete:
      tags:
      - groups
      summary: Remove members from a group
      operationId: remove_members
      parameters:
      - name: id
        in: path
        description: Group ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MembersRequest'
        required: true
      responses:
        '200':
          description: Members removed successfully
        '404':
          description: Group not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/instances:
    get:
      tags:
      - admin
      summary: List all remote instances for the authenticated user
      operationId: list_instances
      responses:
        '200':
          description: List of remote instances
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RemoteInstanceResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - admin
      summary: Create a new remote instance
      operationId: create_instance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateInstanceRequest'
        required: true
      responses:
        '200':
          description: Created remote instance
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RemoteInstanceResponse'
      security:
      - bearer_auth: []
  /api/v1/instances/{id}:
    delete:
      tags:
      - admin
      summary: Delete a remote instance
      operationId: delete_instance
      parameters:
      - name: id
        in: path
        description: Remote instance ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Instance deleted
      security:
      - bearer_auth: []
  /api/v1/instances/{id}/proxy/{path}:
    get:
      tags:
      - admin
      summary: Proxy a GET request to a remote instance
      operationId: proxy_get
      parameters:
      - name: id
        in: path
        description: Remote instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: path
        in: path
        description: Sub-path to proxy
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Proxied response
      security:
      - bearer_auth: []
    put:
      tags:
      - admin
      summary: Proxy a PUT request to a remote instance
      operationId: proxy_put
      parameters:
      - name: id
        in: path
        description: Remote instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: path
        in: path
        description: Sub-path to proxy
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        required: true
      responses:
        '200':
          description: Proxied response
      security:
      - bearer_auth: []
    post:
      tags:
      - admin
      summary: Proxy a POST request to a remote instance
      operationId: proxy_post
      parameters:
      - name: id
        in: path
        description: Remote instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: path
        in: path
        description: Sub-path to proxy
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: string
        required: true
      responses:
        '200':
          description: Proxied response
      security:
      - bearer_auth: []
    delete:
      tags:
      - admin
      summary: Proxy a DELETE request to a remote instance
      operationId: proxy_delete
      parameters:
      - name: id
        in: path
        description: Remote instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: path
        in: path
        description: Sub-path to proxy
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Proxied response
      security:
      - bearer_auth: []
  /api/v1/migrations:
    get:
      tags:
      - migration
      summary: List migration jobs
      operationId: list_migrations
      parameters:
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: List of migration jobs
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/MigrationJobResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - migration
      summary: Create a new migration job
      operationId: create_migration
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateMigrationRequest'
        required: true
      responses:
        '201':
          description: Migration job created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MigrationJobResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/connections:
    get:
      tags:
      - migration
      summary: List all source connections for the current user
      operationId: list_connections
      responses:
        '200':
          description: List of source connections
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ConnectionResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - migration
      summary: Create a new source connection
      operationId: create_connection
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateConnectionRequest'
        required: true
      responses:
        '201':
          description: Connection created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ConnectionResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/connections/{id}:
    get:
      tags:
      - migration
      summary: Get a specific source connection
      operationId: get_connection
      parameters:
      - name: id
        in: path
        description: Connection ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Connection details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ConnectionResponse'
        '404':
          description: Connection not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    delete:
      tags:
      - migration
      summary: Delete a source connection
      operationId: delete_connection
      parameters:
      - name: id
        in: path
        description: Connection ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: Connection deleted successfully
        '404':
          description: Connection not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/connections/{id}/repositories:
    get:
      tags:
      - migration
      summary: List repositories from Artifactory source
      operationId: list_source_repositories
      parameters:
      - name: id
        in: path
        description: Connection ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of source repositories
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SourceRepository'
        '404':
          description: Connection not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/connections/{id}/test:
    post:
      tags:
      - migration
      summary: Test connection to Artifactory
      operationId: test_connection
      parameters:
      - name: id
        in: path
        description: Connection ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Connection test result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ConnectionTestResult'
        '404':
          description: Connection not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}:
    get:
      tags:
      - migration
      summary: Get a specific migration job
      operationId: get_migration
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Migration job details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MigrationJobResponse'
        '404':
          description: Migration job not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    delete:
      tags:
      - migration
      summary: Delete a migration job
      operationId: delete_migration
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: Migration job deleted successfully
        '404':
          description: Migration job not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/assess:
    post:
      tags:
      - migration
      summary: Run pre-migration assessment
      operationId: run_assessment
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '202':
          description: Assessment started
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MigrationJobResponse'
        '409':
          description: Cannot start assessment (wrong state)
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/assessment:
    get:
      tags:
      - migration
      summary: Get assessment results
      operationId: get_assessment
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Assessment results
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AssessmentResult'
        '404':
          description: Migration job not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/cancel:
    post:
      tags:
      - migration
      summary: Cancel a migration job
      operationId: cancel_migration
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Migration job cancelled
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MigrationJobResponse'
        '409':
          description: Migration cannot be cancelled (wrong state)
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/items:
    get:
      tags:
      - migration
      summary: List migration items for a job
      operationId: list_migration_items
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: item_type
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: List of migration items
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/MigrationItemResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/pause:
    post:
      tags:
      - migration
      summary: Pause a migration job
      operationId: pause_migration
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Migration job paused
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MigrationJobResponse'
        '409':
          description: Migration cannot be paused (wrong state)
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/report:
    get:
      tags:
      - migration
      summary: Get migration report
      operationId: get_migration_report
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      - name: format
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Migration report
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MigrationReportResponse'
        '404':
          description: Migration report not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/resume:
    post:
      tags:
      - migration
      summary: Resume a paused migration job
      operationId: resume_migration
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Migration job resumed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MigrationJobResponse'
        '409':
          description: Migration cannot be resumed (wrong state)
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/start:
    post:
      tags:
      - migration
      summary: Start a migration job
      operationId: start_migration
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Migration job started
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MigrationJobResponse'
        '404':
          description: Migration job not found
        '409':
          description: Migration cannot be started (wrong state)
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/migrations/{id}/stream:
    get:
      tags:
      - migration
      summary: Stream migration progress via Server-Sent Events
      operationId: stream_migration_progress
      parameters:
      - name: id
        in: path
        description: Migration job ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: SSE stream of migration progress
        '404':
          description: Migration job not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/packages:
    get:
      tags:
      - packages
      summary: List packages
      operationId: list_packages
      parameters:
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: repository_key
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: format
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: search
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Paginated list of packages
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PackageListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/packages/{id}:
    get:
      tags:
      - packages
      summary: Get a package by ID
      operationId: get_package
      parameters:
      - name: id
        in: path
        description: Package ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Package details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PackageResponse'
        '404':
          description: Package not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/packages/{id}/versions:
    get:
      tags:
      - packages
      summary: Get package versions
      operationId: get_package_versions
      parameters:
      - name: id
        in: path
        description: Package ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of package versions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PackageVersionsResponse'
        '404':
          description: Package not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers:
    get:
      tags:
      - peers
      summary: List peer instances
      operationId: list_peers
      parameters:
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: region
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: List of peer instances
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PeerInstanceListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - peers
      summary: Register new peer instance
      operationId: register_peer
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RegisterPeerRequest'
        required: true
      responses:
        '200':
          description: Peer instance registered successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PeerInstanceResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/announce:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/announce
      operationId: announce_peer
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AnnouncePeerRequest'
        required: true
      responses:
        '200':
          description: Peer announcement accepted
          content:
            application/json:
              schema:
                type: object
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/identity:
    get:
      tags:
      - peers
      summary: GET /api/v1/peers/identity
      operationId: get_identity
      responses:
        '200':
          description: Local peer identity
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IdentityResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/{id}:
    get:
      tags:
      - peers
      summary: Get peer instance details
      operationId: get_peer
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Peer instance details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PeerInstanceResponse'
        '404':
          description: Peer instance not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    delete:
      tags:
      - peers
      summary: Unregister peer instance
      operationId: unregister_peer
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Peer instance unregistered successfully
        '404':
          description: Peer instance not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/chunks/{artifact_id}:
    get:
      tags:
      - peers
      summary: GET /api/v1/peers/:id/chunks/:artifact_id
      operationId: get_chunk_availability
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: artifact_id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Chunk availability for this peer and artifact
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChunkAvailabilityResponse'
        '404':
          description: No chunk availability data
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    put:
      tags:
      - peers
      summary: PUT /api/v1/peers/:id/chunks/:artifact_id
      operationId: update_chunk_availability
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: artifact_id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateChunkAvailabilityBody'
        required: true
      responses:
        '200':
          description: Chunk availability updated
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/chunks/{artifact_id}/peers:
    get:
      tags:
      - peers
      summary: GET /api/v1/peers/:id/chunks/:artifact_id/peers
      operationId: get_peers_with_chunks
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: artifact_id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Peers that have chunks for this artifact
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ChunkAvailabilityResponse'
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/chunks/{artifact_id}/scored-peers:
    get:
      tags:
      - peers
      summary: GET /api/v1/peers/:id/chunks/:artifact_id/scored-peers
      operationId: get_scored_peers
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: artifact_id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Scored peers for artifact download
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ScoredPeerResponse'
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/connections:
    get:
      tags:
      - peers
      summary: GET /api/v1/peers/:id/connections
      operationId: list_peer_connections
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: status
        in: query
        description: Filter peers by status (active, probing, unreachable, disabled)
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: List of peer connections
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/PeerResponse'
        '404':
          description: Peer not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/connections/discover:
    get:
      tags:
      - peers
      summary: GET /api/v1/peers/:id/connections/discover
      operationId: discover_peers
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Discoverable peers
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DiscoverablePeerResponse'
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/connections/probe:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/:id/connections/probe
      operationId: probe_peer
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ProbeBody'
        required: true
      responses:
        '200':
          description: Probe result recorded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PeerResponse'
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/connections/{target_id}/unreachable:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/:id/connections/:target_id/unreachable
      operationId: mark_unreachable
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: target_id
        in: path
        description: Target peer ID to mark unreachable
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Peer marked as unreachable
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/heartbeat:
    post:
      tags:
      - peers
      summary: Heartbeat from peer instance
      operationId: heartbeat
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/HeartbeatRequest'
        required: true
      responses:
        '200':
          description: Heartbeat recorded successfully
        '404':
          description: Peer instance not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/labels:
    get:
      tags:
      - peer-instance-labels
      summary: List all labels on a peer instance
      operationId: list_labels
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Labels retrieved
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PeerLabelsListResponse'
        '404':
          description: Peer instance not found
      security:
      - bearer_auth: []
    put:
      tags:
      - peer-instance-labels
      summary: Set all labels on a peer instance (replaces existing)
      operationId: set_labels
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SetPeerLabelsRequest'
        required: true
      responses:
        '200':
          description: Labels updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PeerLabelsListResponse'
        '404':
          description: Peer instance not found
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/labels/{label_key}:
    post:
      tags:
      - peer-instance-labels
      summary: Add or update a single label on a peer instance
      operationId: add_label
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: label_key
        in: path
        description: Label key to set
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AddPeerLabelRequest'
        required: true
      responses:
        '200':
          description: Label added/updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PeerLabelResponse'
        '404':
          description: Peer instance not found
      security:
      - bearer_auth: []
    delete:
      tags:
      - peer-instance-labels
      summary: Delete a label by key from a peer instance
      operationId: delete_label
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: label_key
        in: path
        description: Label key to remove
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Label removed
        '404':
          description: Peer instance or label not found
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/network-profile:
    put:
      tags:
      - peers
      summary: PUT /api/v1/peers/:id/network-profile
      operationId: update_network_profile
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/NetworkProfileBody'
        required: true
      responses:
        '200':
          description: Network profile updated
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/repositories:
    get:
      tags:
      - peers
      summary: Get assigned repositories for peer instance
      operationId: get_assigned_repos
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of assigned repository IDs
          content:
            application/json:
              schema:
                type: array
                items:
                  type: string
                  format: uuid
        '404':
          description: Peer instance not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - peers
      summary: Assign repository to peer instance
      operationId: assign_repo
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AssignRepoRequest'
        required: true
      responses:
        '200':
          description: Repository assigned successfully
        '404':
          description: Peer instance not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/repositories/{repo_id}:
    delete:
      tags:
      - peers
      summary: Unassign repository from peer instance
      operationId: unassign_repo
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: repo_id
        in: path
        description: Repository ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Repository unassigned successfully
        '404':
          description: Peer instance or repository not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/sync:
    post:
      tags:
      - peers
      summary: Trigger sync for peer instance
      operationId: trigger_sync
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Sync triggered successfully
        '404':
          description: Peer instance not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/sync/tasks:
    get:
      tags:
      - peers
      summary: Get pending sync tasks for peer instance
      operationId: get_sync_tasks
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: region
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: List of pending sync tasks
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SyncTaskResponse'
        '404':
          description: Peer instance not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/transfer/init:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/:id/transfer/init
      operationId: init_transfer
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/InitTransferBody'
        required: true
      responses:
        '200':
          description: Transfer session initialized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TransferSessionResponse'
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/transfer/{session_id}:
    get:
      tags:
      - peers
      summary: GET /api/v1/peers/:id/transfer/:session_id
      operationId: get_session
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: session_id
        in: path
        description: Transfer session ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Transfer session details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TransferSessionResponse'
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/transfer/{session_id}/chunk/{chunk_index}/complete:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/:id/transfer/:session_id/chunk/:chunk_index/complete
      operationId: complete_chunk
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: session_id
        in: path
        description: Transfer session ID
        required: true
        schema:
          type: string
          format: uuid
      - name: chunk_index
        in: path
        description: Chunk index
        required: true
        schema:
          type: integer
          format: int32
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CompleteChunkBody'
        required: true
      responses:
        '200':
          description: Chunk marked as complete
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/transfer/{session_id}/chunk/{chunk_index}/fail:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/:id/transfer/:session_id/chunk/:chunk_index/fail
      operationId: fail_chunk
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: session_id
        in: path
        description: Transfer session ID
        required: true
        schema:
          type: string
          format: uuid
      - name: chunk_index
        in: path
        description: Chunk index
        required: true
        schema:
          type: integer
          format: int32
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/FailBody'
        required: true
      responses:
        '200':
          description: Chunk marked as failed
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/transfer/{session_id}/chunk/{chunk_index}/retry:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/:id/transfer/:session_id/chunk/:chunk_index/retry
      operationId: retry_chunk
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: session_id
        in: path
        description: Transfer session ID
        required: true
        schema:
          type: string
          format: uuid
      - name: chunk_index
        in: path
        description: Chunk index
        required: true
        schema:
          type: integer
          format: int32
      responses:
        '200':
          description: Chunk queued for retry
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/transfer/{session_id}/chunks:
    get:
      tags:
      - peers
      summary: GET /api/v1/peers/:id/transfer/:session_id/chunks
      operationId: get_chunk_manifest
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: session_id
        in: path
        description: Transfer session ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Chunk manifest for the transfer session
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChunkManifestResponse'
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/transfer/{session_id}/complete:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/:id/transfer/:session_id/complete
      operationId: complete_session
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: session_id
        in: path
        description: Transfer session ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Transfer session marked as complete
      security:
      - bearer_auth: []
  /api/v1/peers/{id}/transfer/{session_id}/fail:
    post:
      tags:
      - peers
      summary: POST /api/v1/peers/:id/transfer/:session_id/fail
      operationId: fail_session
      parameters:
      - name: id
        in: path
        description: Peer instance ID
        required: true
        schema:
          type: string
          format: uuid
      - name: session_id
        in: path
        description: Transfer session ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/FailBody'
        required: true
      responses:
        '200':
          description: Transfer session marked as failed
      security:
      - bearer_auth: []
  /api/v1/permissions:
    get:
      tags:
      - permissions
      summary: List permissions
      operationId: list_permissions
      parameters:
      - name: principal_type
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: principal_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: target_type
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: target_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: List of permissions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PermissionListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - permissions
      summary: Create a permission
      operationId: create_permission
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreatePermissionRequest'
        required: true
      responses:
        '200':
          description: Permission created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PermissionResponse'
        '409':
          description: Permission already exists
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/permissions/{id}:
    get:
      tags:
      - permissions
      summary: Get a permission by ID
      operationId: get_permission
      parameters:
      - name: id
        in: path
        description: Permission ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Permission details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PermissionResponse'
        '404':
          description: Permission not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    put:
      tags:
      - permissions
      summary: Update a permission
      operationId: update_permission
      parameters:
      - name: id
        in: path
        description: Permission ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreatePermissionRequest'
        required: true
      responses:
        '200':
          description: Permission updated successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PermissionResponse'
        '404':
          description: Permission not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    delete:
      tags:
      - permissions
      summary: Delete a permission
      operationId: delete_permission
      parameters:
      - name: id
        in: path
        description: Permission ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Permission deleted successfully
        '404':
          description: Permission not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/plugins:
    get:
      tags:
      - plugins
      summary: List installed plugins
      operationId: list_plugins
      parameters:
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: type
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: List of installed plugins
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginListResponse'
    post:
      tags:
      - plugins
      summary: Install plugin from uploaded package
      operationId: install_plugin
      requestBody:
        description: Plugin package with manifest
        content:
          multipart/form-data: {}
      responses:
        '200':
          description: Plugin installed successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginResponse'
        '400':
          description: Invalid plugin manifest
        '409':
          description: Plugin already installed
      security:
      - bearer_auth: []
  /api/v1/plugins/install/git:
    post:
      tags:
      - plugins
      summary: Install a plugin from a Git repository (T021)
      operationId: install_from_git
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/InstallFromGitRequest'
        required: true
      responses:
        '200':
          description: Plugin installed from Git
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginInstallResponse'
      security:
      - bearer_auth: []
  /api/v1/plugins/install/local:
    post:
      tags:
      - plugins
      summary: 'Install a plugin from local filesystem path (T063)

        This endpoint is intended for development use only.'
      operationId: install_from_local
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/InstallFromLocalRequest'
        required: true
      responses:
        '200':
          description: Plugin installed from local path
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginInstallResponse'
        '400':
          description: Invalid path
      security:
      - bearer_auth: []
  /api/v1/plugins/install/zip:
    post:
      tags:
      - plugins
      summary: Install a plugin from a ZIP file (T034)
      operationId: install_from_zip
      requestBody:
        description: ZIP file containing plugin package
        content:
          multipart/form-data: {}
      responses:
        '200':
          description: Plugin installed from ZIP
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginInstallResponse'
        '400':
          description: Missing or invalid ZIP file
      security:
      - bearer_auth: []
  /api/v1/plugins/{id}:
    get:
      tags:
      - plugins
      summary: Get plugin details
      operationId: get_plugin
      parameters:
      - name: id
        in: path
        description: Plugin ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Plugin details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginResponse'
        '404':
          description: Plugin not found
    delete:
      tags:
      - plugins
      summary: Uninstall plugin
      operationId: uninstall_plugin
      parameters:
      - name: id
        in: path
        description: Plugin ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Plugin uninstalled successfully
        '404':
          description: Plugin not found
      security:
      - bearer_auth: []
  /api/v1/plugins/{id}/config:
    get:
      tags:
      - plugins
      summary: Get plugin configuration
      operationId: get_plugin_config
      parameters:
      - name: id
        in: path
        description: Plugin ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Plugin configuration
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginConfigResponse'
        '404':
          description: Plugin not found
    post:
      tags:
      - plugins
      summary: Update plugin configuration
      operationId: update_plugin_config
      parameters:
      - name: id
        in: path
        description: Plugin ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdatePluginConfigRequest'
        required: true
      responses:
        '200':
          description: Plugin configuration updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginConfigResponse'
        '404':
          description: Plugin not found
      security:
      - bearer_auth: []
  /api/v1/plugins/{id}/disable:
    post:
      tags:
      - plugins
      summary: Disable plugin
      operationId: disable_plugin
      parameters:
      - name: id
        in: path
        description: Plugin ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Plugin disabled successfully
        '404':
          description: Plugin not found
      security:
      - bearer_auth: []
  /api/v1/plugins/{id}/enable:
    post:
      tags:
      - plugins
      summary: Enable plugin
      operationId: enable_plugin
      parameters:
      - name: id
        in: path
        description: Plugin ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Plugin enabled successfully
        '404':
          description: Plugin not found
      security:
      - bearer_auth: []
  /api/v1/plugins/{id}/events:
    get:
      tags:
      - plugins
      summary: Get plugin events (T026)
      operationId: get_plugin_events
      parameters:
      - name: id
        in: path
        description: Plugin ID
        required: true
        schema:
          type: string
          format: uuid
      - name: limit
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Plugin events
          content:
            application/json:
              schema:
                type: array
                items: {}
  /api/v1/plugins/{id}/reload:
    post:
      tags:
      - plugins
      summary: Reload a plugin (hot-reload) (T048)
      operationId: reload_plugin
      parameters:
      - name: id
        in: path
        description: Plugin ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Plugin reloaded successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WasmPluginResponse'
      security:
      - bearer_auth: []
  /api/v1/promotion-rules:
    get:
      tags:
      - promotion
      summary: List all promotion rules
      operationId: list_rules
      parameters:
      - name: source_repo_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      responses:
        '200':
          description: List of promotion rules
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PromotionRuleListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - promotion
      summary: Create a promotion rule
      operationId: create_rule
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateRuleRequest'
        required: true
      responses:
        '200':
          description: Promotion rule created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PromotionRuleResponse'
        '400':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/promotion-rules/{id}:
    get:
      tags:
      - promotion
      summary: Get a promotion rule by ID
      operationId: get_rule
      parameters:
      - name: id
        in: path
        description: Promotion rule ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Promotion rule details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PromotionRuleResponse'
        '404':
          description: Rule not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    put:
      tags:
      - promotion
      summary: Update a promotion rule
      operationId: update_rule
      parameters:
      - name: id
        in: path
        description: Promotion rule ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateRuleRequest'
        required: true
      responses:
        '200':
          description: Promotion rule updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PromotionRuleResponse'
        '404':
          description: Rule not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - promotion
      summary: Delete a promotion rule
      operationId: delete_rule
      parameters:
      - name: id
        in: path
        description: Promotion rule ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Promotion rule deleted
        '404':
          description: Rule not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/promotion-rules/{id}/evaluate:
    post:
      tags:
      - promotion
      summary: Dry-run evaluate a rule against all artifacts in its source repository
      operationId: evaluate_rule
      parameters:
      - name: id
        in: path
        description: Promotion rule ID to evaluate
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Evaluation results
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BulkEvaluationResponse'
        '404':
          description: Rule not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/promotion/repositories/{key}/artifacts/{artifact_id}/promote:
    post:
      tags:
      - promotion
      operationId: promote_artifact
      parameters:
      - name: key
        in: path
        description: Source repository key
        required: true
        schema:
          type: string
      - name: artifact_id
        in: path
        description: Artifact ID to promote
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PromoteArtifactRequest'
        required: true
      responses:
        '200':
          description: Artifact promotion result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PromotionResponse'
        '404':
          description: Artifact or repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '409':
          description: Artifact already exists in target
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Validation error (repo type/format mismatch)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/promotion/repositories/{key}/artifacts/{artifact_id}/reject:
    post:
      tags:
      - promotion
      operationId: reject_artifact
      parameters:
      - name: key
        in: path
        description: Source repository key
        required: true
        schema:
          type: string
      - name: artifact_id
        in: path
        description: Artifact ID to reject
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RejectArtifactRequest'
        required: true
      responses:
        '200':
          description: Artifact rejection result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RejectionResponse'
        '404':
          description: Artifact or repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/promotion/repositories/{key}/promote:
    post:
      tags:
      - promotion
      operationId: promote_artifacts_bulk
      parameters:
      - name: key
        in: path
        description: Source repository key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BulkPromoteRequest'
        required: true
      responses:
        '200':
          description: Bulk promotion results
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BulkPromotionResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Validation error (repo type/format mismatch)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/promotion/repositories/{key}/promotion-history:
    get:
      tags:
      - promotion
      operationId: promotion_history
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: page
        in: query
        description: Page number (1-indexed)
        required: false
        schema:
          type: integer
          format: int32
          minimum: 0
      - name: per_page
        in: query
        description: Items per page (max 100)
        required: false
        schema:
          type: integer
          format: int32
          minimum: 0
      - name: artifact_id
        in: query
        description: Filter by artifact ID
        required: false
        schema:
          type: string
          format: uuid
      - name: status
        in: query
        description: Filter by status (promoted, rejected, pending_approval)
        required: false
        schema:
          type: string
      responses:
        '200':
          description: Promotion history for repository
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PromotionHistoryResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/checks:
    get:
      tags:
      - quality
      operationId: list_checks
      parameters:
      - name: artifact_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: repository_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      responses:
        '200':
          description: List of quality check results
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CheckResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/checks/trigger:
    post:
      tags:
      - quality
      operationId: trigger_checks
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TriggerChecksRequest'
        required: true
      responses:
        '200':
          description: Quality checks triggered
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TriggerChecksResponse'
        '400':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/checks/{id}:
    get:
      tags:
      - quality
      operationId: get_check
      parameters:
      - name: id
        in: path
        description: Check result ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Check result details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CheckResponse'
        '404':
          description: Check result not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/checks/{id}/issues:
    get:
      tags:
      - quality
      operationId: list_check_issues
      parameters:
      - name: id
        in: path
        description: Check result ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of issues for a check result
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/IssueResponse'
        '404':
          description: Check result not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/gates:
    get:
      tags:
      - quality
      operationId: list_gates
      responses:
        '200':
          description: List of quality gates
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/GateResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - quality
      operationId: create_gate
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateGateRequest'
        required: true
      responses:
        '200':
          description: Quality gate created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GateResponse'
        '422':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/gates/evaluate/{artifact_id}:
    post:
      tags:
      - quality
      operationId: evaluate_gate
      parameters:
      - name: artifact_id
        in: path
        description: Artifact ID to evaluate
        required: true
        schema:
          type: string
          format: uuid
      - name: repository_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      responses:
        '200':
          description: Gate evaluation result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GateEvaluationResponse'
        '404':
          description: Artifact or gate not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/gates/{id}:
    get:
      tags:
      - quality
      operationId: get_gate
      parameters:
      - name: id
        in: path
        description: Quality gate ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Quality gate details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GateResponse'
        '404':
          description: Quality gate not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    put:
      tags:
      - quality
      operationId: update_gate
      parameters:
      - name: id
        in: path
        description: Quality gate ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateGateRequest'
        required: true
      responses:
        '200':
          description: Quality gate updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GateResponse'
        '404':
          description: Quality gate not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - quality
      operationId: delete_gate
      parameters:
      - name: id
        in: path
        description: Quality gate ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Quality gate deleted
          content:
            application/json:
              schema:
                type: object
        '404':
          description: Quality gate not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/health/artifacts/{artifact_id}:
    get:
      tags:
      - quality
      operationId: get_artifact_health
      parameters:
      - name: artifact_id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Artifact health score
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactHealthResponse'
        '404':
          description: Artifact not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/health/dashboard:
    get:
      tags:
      - quality
      operationId: get_health_dashboard
      responses:
        '200':
          description: Health dashboard summary
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HealthDashboardResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/health/repositories/{key}:
    get:
      tags:
      - quality
      operationId: get_repo_health
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Repository health score
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RepoHealthResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/quality/issues/{id}/suppress:
    post:
      tags:
      - quality
      operationId: suppress_issue
      parameters:
      - name: id
        in: path
        description: Issue ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SuppressIssueRequest'
        required: true
      responses:
        '200':
          description: Issue suppressed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IssueResponse'
        '404':
          description: Issue not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - quality
      operationId: unsuppress_issue
      parameters:
      - name: id
        in: path
        description: Issue ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Issue unsuppressed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IssueResponse'
        '404':
          description: Issue not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/repositories:
    get:
      tags:
      - repositories
      summary: List repositories
      operationId: list_repositories
      parameters:
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: format
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: type
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: q
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: List of repositories
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RepositoryListResponse'
    post:
      tags:
      - repositories
      summary: Create a new repository
      operationId: create_repository
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateRepositoryRequest'
        required: true
      responses:
        '200':
          description: Repository created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RepositoryResponse'
        '401':
          description: Authentication required
        '409':
          description: Repository key already exists
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}:
    get:
      tags:
      - repositories
      summary: Get repository details
      operationId: get_repository
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Repository details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RepositoryResponse'
        '404':
          description: Repository not found
    delete:
      tags:
      - repositories
      summary: Delete repository
      operationId: delete_repository
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Repository deleted
        '401':
          description: Authentication required
        '404':
          description: Repository not found
      security:
      - bearer_auth: []
    patch:
      tags:
      - repositories
      summary: Update repository
      operationId: update_repository
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateRepositoryRequest'
        required: true
      responses:
        '200':
          description: Repository updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RepositoryResponse'
        '401':
          description: Authentication required
        '404':
          description: Repository not found
        '409':
          description: Repository key already exists
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/artifacts:
    get:
      tags:
      - repositories
      summary: List artifacts in repository
      operationId: list_artifacts
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: q
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: path_prefix
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: List of artifacts
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactListResponse'
        '404':
          description: Repository not found
  /api/v1/repositories/{key}/artifacts/{path}:
    get:
      tags:
      - repositories
      summary: Get artifact metadata
      operationId: get_repository_artifact_metadata
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: path
        in: path
        description: Artifact path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Artifact metadata
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactResponse'
        '404':
          description: Artifact not found
    put:
      tags:
      - repositories
      summary: Upload artifact
      operationId: upload_artifact
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: path
        in: path
        description: Artifact path
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/octet-stream:
            schema:
              type: array
              items:
                type: integer
                format: int32
                minimum: 0
        required: true
      responses:
        '200':
          description: Artifact uploaded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArtifactResponse'
        '401':
          description: Authentication required
        '404':
          description: Repository not found
      security:
      - bearer_auth: []
    delete:
      tags:
      - repositories
      summary: Delete artifact
      operationId: delete_artifact
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: path
        in: path
        description: Artifact path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Artifact deleted
        '401':
          description: Authentication required
        '404':
          description: Artifact not found
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/cache-ttl:
    get:
      tags:
      - repositories
      summary: Get the proxy cache TTL for a repository
      operationId: get_cache_ttl
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Current cache TTL
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CacheTtlResponse'
        '404':
          description: Repository not found
    put:
      tags:
      - repositories
      summary: Set the proxy cache TTL for a repository
      operationId: set_cache_ttl
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SetCacheTtlRequest'
        required: true
      responses:
        '200':
          description: Cache TTL updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CacheTtlResponse'
        '400':
          description: Invalid TTL value
        '401':
          description: Authentication required
        '404':
          description: Repository not found
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/download/{path}:
    get:
      tags:
      - repositories
      summary: Download artifact
      operationId: download_artifact
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: path
        in: path
        description: Artifact path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Artifact binary content
          content:
            application/octet-stream: {}
        '302':
          description: Redirect to S3 presigned URL
        '404':
          description: Artifact not found
  /api/v1/repositories/{key}/labels:
    get:
      tags:
      - repository-labels
      summary: List all labels on a repository
      operationId: list_repo_labels
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Labels retrieved
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LabelsListResponse'
        '404':
          description: Repository not found
      security:
      - bearer_auth: []
    put:
      tags:
      - repository-labels
      summary: Set all labels on a repository (replaces existing)
      operationId: set_repo_labels
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SetLabelsRequest'
        required: true
      responses:
        '200':
          description: Labels updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LabelsListResponse'
        '404':
          description: Repository not found
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/labels/{label_key}:
    post:
      tags:
      - repository-labels
      summary: Add or update a single label
      operationId: add_repo_label
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: label_key
        in: path
        description: Label key to set
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AddLabelRequest'
        required: true
      responses:
        '200':
          description: Label added/updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LabelResponse'
        '404':
          description: Repository not found
      security:
      - bearer_auth: []
    delete:
      tags:
      - repository-labels
      summary: Delete a label by key
      operationId: delete_repo_label
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: label_key
        in: path
        description: Label key to remove
        required: true
        schema:
          type: string
      responses:
        '204':
          description: Label removed
        '404':
          description: Repository or label not found
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/members:
    get:
      tags:
      - repositories
      summary: List virtual repository members
      operationId: list_virtual_members
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: List of virtual repository members
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VirtualMembersListResponse'
        '400':
          description: Repository is not virtual
        '404':
          description: Repository not found
    put:
      tags:
      - repositories
      summary: Update priorities for all members (bulk reorder)
      operationId: update_virtual_members
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateVirtualMembersRequest'
        required: true
      responses:
        '200':
          description: Members updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VirtualMembersListResponse'
        '400':
          description: Repository is not virtual
        '401':
          description: Authentication required
        '404':
          description: Repository not found
      security:
      - bearer_auth: []
    post:
      tags:
      - repositories
      summary: Add a member to a virtual repository
      operationId: add_virtual_member
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AddVirtualMemberRequest'
        required: true
      responses:
        '200':
          description: Member added
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VirtualMemberResponse'
        '401':
          description: Authentication required
        '404':
          description: Repository or member not found
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/members/{member_key}:
    delete:
      tags:
      - repositories
      summary: Remove a member from a virtual repository
      operationId: remove_virtual_member
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: member_key
        in: path
        description: Member repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Member removed
        '400':
          description: Repository is not virtual
        '401':
          description: Authentication required
        '404':
          description: Repository or member not found
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/security:
    get:
      tags:
      - security
      operationId: get_repo_security
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Repository security config and score
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RepoSecurityResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    put:
      tags:
      - security
      operationId: update_repo_security
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpsertScanConfigRequest'
        required: true
      responses:
        '200':
          description: Repository security config updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanConfigResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/security/scans:
    get:
      tags:
      - security
      operationId: list_repo_scans
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      - name: repository_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: artifact_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Paginated list of scans for a repository
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanListResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/test-upstream:
    post:
      tags:
      - repositories
      summary: Test connectivity to the upstream URL of a remote repository
      operationId: test_upstream
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Upstream reachable
        '400':
          description: Repository is not remote or has no upstream URL
        '401':
          description: Authentication required
        '404':
          description: Repository not found
        '502':
          description: Upstream unreachable
      security:
      - bearer_auth: []
  /api/v1/repositories/{key}/upstream-auth:
    put:
      tags:
      - repositories
      summary: Set or remove upstream auth for a remote repository
      operationId: set_upstream_auth
      parameters:
      - name: key
        in: path
        description: Repository key
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpstreamAuthRequest'
        required: true
      responses:
        '200':
          description: Upstream auth updated
        '400':
          description: Invalid auth type or missing fields
        '401':
          description: Authentication required
        '404':
          description: Repository not found
      security:
      - bearer_auth: []
  /api/v1/sbom:
    get:
      tags:
      - sbom
      summary: List SBOMs with optional filters
      operationId: list_sboms
      parameters:
      - name: artifact_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: repository_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: format
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: List of SBOMs
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SbomResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - sbom
      summary: Generate an SBOM for an artifact
      operationId: generate_sbom
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GenerateSbomRequest'
        required: true
      responses:
        '200':
          description: Generated SBOM
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SbomResponse'
        '404':
          description: Artifact not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sbom/by-artifact/{artifact_id}:
    get:
      tags:
      - sbom
      summary: Get SBOM by artifact ID
      operationId: get_sbom_by_artifact
      parameters:
      - name: artifact_id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: SBOM for the artifact
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SbomContentResponse'
        '404':
          description: SBOM not found for artifact
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sbom/check-compliance:
    post:
      tags:
      - sbom
      summary: Check license compliance against policies
      operationId: check_license_compliance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CheckLicenseComplianceRequest'
        required: true
      responses:
        '200':
          description: License compliance result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LicenseCheckResult'
        '404':
          description: No license policy configured
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sbom/cve/history/{artifact_id}:
    get:
      tags:
      - sbom
      summary: Get CVE history for an artifact
      operationId: get_cve_history
      parameters:
      - name: artifact_id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: CVE history entries
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CveHistoryEntry'
      security:
      - bearer_auth: []
  /api/v1/sbom/cve/status/{id}:
    post:
      tags:
      - sbom
      summary: Update CVE status
      operationId: update_cve_status
      parameters:
      - name: id
        in: path
        description: CVE history entry ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateCveStatusRequest'
        required: true
      responses:
        '200':
          description: Updated CVE entry
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CveHistoryEntry'
        '422':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sbom/cve/trends:
    get:
      tags:
      - sbom
      summary: Get CVE trends and statistics
      operationId: get_cve_trends
      parameters:
      - name: repository_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: days
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
      responses:
        '200':
          description: CVE trends
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CveTrends'
      security:
      - bearer_auth: []
  /api/v1/sbom/license-policies:
    get:
      tags:
      - sbom
      summary: List all license policies
      operationId: list_license_policies
      responses:
        '200':
          description: List of license policies
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/LicensePolicyResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - sbom
      summary: Create or update a license policy
      operationId: upsert_license_policy
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpsertLicensePolicyRequest'
        required: true
      responses:
        '200':
          description: Created or updated license policy
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LicensePolicyResponse'
        '422':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sbom/license-policies/{id}:
    get:
      tags:
      - sbom
      summary: Get a license policy by ID
      operationId: get_license_policy
      parameters:
      - name: id
        in: path
        description: License policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: License policy details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LicensePolicyResponse'
        '404':
          description: License policy not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - sbom
      summary: Delete a license policy
      operationId: delete_license_policy
      parameters:
      - name: id
        in: path
        description: License policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: License policy deleted
          content:
            application/json:
              schema:
                type: object
        '404':
          description: License policy not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sbom/{id}:
    get:
      tags:
      - sbom
      summary: Get SBOM by ID with full content
      operationId: get_sbom
      parameters:
      - name: id
        in: path
        description: SBOM ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: SBOM with content
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SbomContentResponse'
        '404':
          description: SBOM not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - sbom
      summary: Delete an SBOM
      operationId: delete_sbom
      parameters:
      - name: id
        in: path
        description: SBOM ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: SBOM deleted
          content:
            application/json:
              schema:
                type: object
        '404':
          description: SBOM not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sbom/{id}/components:
    get:
      tags:
      - sbom
      summary: Get components of an SBOM
      operationId: get_sbom_components
      parameters:
      - name: id
        in: path
        description: SBOM ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of SBOM components
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ComponentResponse'
        '404':
          description: SBOM not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sbom/{id}/convert:
    post:
      tags:
      - sbom
      summary: Convert an SBOM to a different format
      operationId: convert_sbom
      parameters:
      - name: id
        in: path
        description: SBOM ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ConvertSbomRequest'
        required: true
      responses:
        '200':
          description: Converted SBOM
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SbomResponse'
        '404':
          description: SBOM not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/search/advanced:
    get:
      tags:
      - search
      operationId: advanced_search
      parameters:
      - name: query
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: format
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: repository_key
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: name
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: path
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: version
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: min_size
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      - name: max_size
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      - name: created_after
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: created_before
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: sort_by
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: sort_order
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Advanced search results with pagination and facets
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AdvancedSearchResponse'
  /api/v1/search/checksum:
    get:
      tags:
      - search
      operationId: checksum_search
      parameters:
      - name: checksum
        in: query
        required: true
        schema:
          type: string
      - name: algorithm
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Artifacts matching the given checksum
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChecksumSearchResponse'
        '422':
          description: Unsupported checksum algorithm
  /api/v1/search/quick:
    get:
      tags:
      - search
      operationId: quick_search
      parameters:
      - name: q
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: limit
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      - name: types
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      responses:
        '200':
          description: Quick search results
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/QuickSearchResponse'
  /api/v1/search/recent:
    get:
      tags:
      - search
      operationId: recent
      parameters:
      - name: limit
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Recently uploaded artifacts
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SearchResultItem'
  /api/v1/search/suggest:
    get:
      tags:
      - search
      operationId: suggest
      parameters:
      - name: prefix
        in: query
        required: true
        schema:
          type: string
      - name: limit
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Autocomplete suggestions for the given prefix
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SuggestResponse'
  /api/v1/search/trending:
    get:
      tags:
      - search
      operationId: trending
      parameters:
      - name: days
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
      - name: limit
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Trending artifacts by download count
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SearchResultItem'
  /api/v1/security/artifacts/{artifact_id}/scans:
    get:
      tags:
      - security
      operationId: list_artifact_scans
      parameters:
      - name: artifact_id
        in: path
        description: Artifact ID
        required: true
        schema:
          type: string
          format: uuid
      - name: status
        in: query
        description: Filter by scan status
        required: false
        schema:
          type: string
      - name: page
        in: query
        description: 'Page number (default: 1)'
        required: false
        schema:
          type: integer
          format: int64
      - name: per_page
        in: query
        description: 'Items per page (default: 20, max: 100)'
        required: false
        schema:
          type: integer
          format: int64
      responses:
        '200':
          description: Paginated list of scans for an artifact
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanListResponse'
      security:
      - bearer_auth: []
  /api/v1/security/configs:
    get:
      tags:
      - security
      operationId: list_scan_configs
      responses:
        '200':
          description: List of scan configurations
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ScanConfigResponse'
      security:
      - bearer_auth: []
  /api/v1/security/dashboard:
    get:
      tags:
      - security
      operationId: get_dashboard
      responses:
        '200':
          description: Security dashboard summary
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DashboardResponse'
      security:
      - bearer_auth: []
  /api/v1/security/findings/{id}/acknowledge:
    post:
      tags:
      - security
      operationId: acknowledge_finding
      parameters:
      - name: id
        in: path
        description: Finding ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AcknowledgeRequest'
        required: true
      responses:
        '200':
          description: Finding acknowledged
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FindingResponse'
        '404':
          description: Finding not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - security
      operationId: revoke_acknowledgment
      parameters:
      - name: id
        in: path
        description: Finding ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Acknowledgment revoked
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FindingResponse'
        '404':
          description: Finding not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/security/policies:
    get:
      tags:
      - security
      operationId: list_policies
      responses:
        '200':
          description: List of security policies
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/PolicyResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - security
      operationId: create_policy
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreatePolicyRequest'
        required: true
      responses:
        '200':
          description: Policy created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyResponse'
        '422':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/security/policies/{id}:
    get:
      tags:
      - security
      operationId: get_policy
      parameters:
      - name: id
        in: path
        description: Policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Policy details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyResponse'
        '404':
          description: Policy not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    put:
      tags:
      - security
      operationId: update_policy
      parameters:
      - name: id
        in: path
        description: Policy ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdatePolicyRequest'
        required: true
      responses:
        '200':
          description: Policy updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyResponse'
        '404':
          description: Policy not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - security
      operationId: delete_policy
      parameters:
      - name: id
        in: path
        description: Policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Policy deleted
          content:
            application/json:
              schema:
                type: object
        '404':
          description: Policy not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/security/scan:
    post:
      tags:
      - security
      operationId: trigger_scan
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TriggerScanRequest'
        required: true
      responses:
        '200':
          description: Scan triggered successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TriggerScanResponse'
        '400':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '500':
          description: Scanner service not configured
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/security/scans:
    get:
      tags:
      - security
      operationId: list_scans
      parameters:
      - name: repository_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: artifact_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Paginated list of scans
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanListResponse'
      security:
      - bearer_auth: []
  /api/v1/security/scans/{id}:
    get:
      tags:
      - security
      operationId: get_scan
      parameters:
      - name: id
        in: path
        description: Scan result ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Scan details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScanResponse'
        '404':
          description: Scan not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/security/scans/{id}/findings:
    get:
      tags:
      - security
      operationId: list_findings
      parameters:
      - name: id
        in: path
        description: Scan result ID
        required: true
        schema:
          type: string
          format: uuid
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Paginated list of findings for a scan
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/FindingListResponse'
        '404':
          description: Scan not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/security/scores:
    get:
      tags:
      - security
      operationId: get_all_scores
      responses:
        '200':
          description: All repository security scores
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ScoreResponse'
      security:
      - bearer_auth: []
  /api/v1/service-accounts:
    get:
      tags:
      - service_accounts
      summary: List all service accounts
      operationId: list_service_accounts
      responses:
        '200':
          description: List of service accounts
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountListResponse'
        '403':
          description: Not admin
      security:
      - bearer_auth: []
    post:
      tags:
      - service_accounts
      summary: Create a new service account
      operationId: create_service_account
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateServiceAccountRequest'
        required: true
      responses:
        '201':
          description: Service account created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountResponse'
        '400':
          description: Validation error
        '403':
          description: Not admin
      security:
      - bearer_auth: []
  /api/v1/service-accounts/repo-selector/preview:
    post:
      tags:
      - service_accounts
      summary: Preview which repositories match a given repo selector.
      description: 'Does not create or modify anything. Useful for testing selectors before

        attaching them to a token.'
      operationId: preview_repo_selector
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PreviewRepoSelectorRequest'
        required: true
      responses:
        '200':
          description: Matched repositories
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PreviewRepoSelectorResponse'
        '400':
          description: Invalid selector
        '403':
          description: Not admin
      security:
      - bearer_auth: []
  /api/v1/service-accounts/{id}:
    get:
      tags:
      - service_accounts
      summary: Get a service account by ID
      operationId: get_service_account
      parameters:
      - name: id
        in: path
        description: Service account ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Service account details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountResponse'
        '404':
          description: Not found
      security:
      - bearer_auth: []
    delete:
      tags:
      - service_accounts
      summary: Delete a service account
      operationId: delete_service_account
      parameters:
      - name: id
        in: path
        description: Service account ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: Deleted
        '404':
          description: Not found
      security:
      - bearer_auth: []
    patch:
      tags:
      - service_accounts
      summary: Update a service account
      operationId: update_service_account
      parameters:
      - name: id
        in: path
        description: Service account ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateServiceAccountRequest'
        required: true
      responses:
        '200':
          description: Updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountResponse'
        '404':
          description: Not found
      security:
      - bearer_auth: []
  /api/v1/service-accounts/{id}/tokens:
    get:
      tags:
      - service_accounts
      summary: List tokens for a service account
      operationId: list_tokens
      parameters:
      - name: id
        in: path
        description: Service account ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Token list
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TokenListResponse'
        '404':
          description: Service account not found
      security:
      - bearer_auth: []
    post:
      tags:
      - service_accounts
      summary: Create a token for a service account
      operationId: create_token
      parameters:
      - name: id
        in: path
        description: Service account ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateTokenRequest'
        required: true
      responses:
        '200':
          description: Token created (value shown once)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateTokenResponse'
        '404':
          description: Service account not found
      security:
      - bearer_auth: []
  /api/v1/service-accounts/{id}/tokens/{token_id}:
    delete:
      tags:
      - service_accounts
      summary: Revoke a token from a service account
      operationId: revoke_token
      parameters:
      - name: id
        in: path
        description: Service account ID
        required: true
        schema:
          type: string
          format: uuid
      - name: token_id
        in: path
        description: Token ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: Token revoked
        '404':
          description: Not found
      security:
      - bearer_auth: []
  /api/v1/setup/status:
    get:
      tags:
      - auth
      summary: Returns whether initial setup (password change) is required.
      operationId: setup_status
      responses:
        '200':
          description: Setup status retrieved
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SetupStatusResponse'
  /api/v1/signing/keys:
    get:
      tags:
      - signing
      summary: List all signing keys, optionally filtered by repository.
      operationId: list_keys
      parameters:
      - name: repository_id
        in: query
        description: Filter by repository ID
        required: false
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of signing keys
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/KeyListResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - signing
      summary: Create a new signing key.
      operationId: create_key
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateKeyPayload'
        required: true
      responses:
        '200':
          description: Created signing key
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SigningKeyPublic'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/signing/keys/{key_id}:
    get:
      tags:
      - signing
      summary: Get a signing key by ID.
      operationId: get_key
      parameters:
      - name: key_id
        in: path
        description: Signing key ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Signing key details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SigningKeyPublic'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Key not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - signing
      summary: Delete a signing key.
      operationId: delete_key
      parameters:
      - name: key_id
        in: path
        description: Signing key ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Key deleted
          content:
            application/json:
              schema:
                type: object
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Key not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/signing/keys/{key_id}/public:
    get:
      tags:
      - signing
      summary: Get the public key in PEM format (for client import).
      operationId: get_public_key
      parameters:
      - name: key_id
        in: path
        description: Signing key ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Public key in PEM format
          content:
            text/plain:
              schema:
                type: string
        '404':
          description: Key not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/signing/keys/{key_id}/revoke:
    post:
      tags:
      - signing
      summary: Revoke (deactivate) a signing key.
      operationId: revoke_key
      parameters:
      - name: key_id
        in: path
        description: Signing key ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Key revoked
          content:
            application/json:
              schema:
                type: object
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Key not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/signing/keys/{key_id}/rotate:
    post:
      tags:
      - signing
      summary: Rotate a signing key — generates new key, deactivates old one.
      operationId: rotate_key
      parameters:
      - name: key_id
        in: path
        description: Signing key ID to rotate
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Newly generated signing key
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SigningKeyPublic'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Key not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/signing/repositories/{repo_id}/config:
    get:
      tags:
      - signing
      summary: Get signing configuration for a repository.
      operationId: get_repo_signing_config
      parameters:
      - name: repo_id
        in: path
        description: Repository ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Repository signing configuration
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SigningConfigResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - signing
      summary: Update signing configuration for a repository.
      operationId: update_repo_signing_config
      parameters:
      - name: repo_id
        in: path
        description: Repository ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateSigningConfigPayload'
        required: true
      responses:
        '200':
          description: Updated signing configuration
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RepositorySigningConfig'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/signing/repositories/{repo_id}/public-key:
    get:
      tags:
      - signing
      summary: Get the public key for a repository (convenience endpoint).
      operationId: get_repo_public_key
      parameters:
      - name: repo_id
        in: path
        description: Repository ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Public key in PEM format
          content:
            text/plain:
              schema:
                type: string
        '404':
          description: No active signing key for repository
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/sync-policies:
    get:
      tags:
      - peers
      summary: List all sync policies
      operationId: list_sync_policies
      responses:
        '200':
          description: List of sync policies
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SyncPolicyListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - peers
      summary: Create a new sync policy
      operationId: create_sync_policy
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateSyncPolicyPayload'
        required: true
      responses:
        '200':
          description: Sync policy created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SyncPolicyResponse'
        '400':
          description: Validation error
        '409':
          description: Policy name already exists
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/sync-policies/evaluate:
    post:
      tags:
      - peers
      summary: Force re-evaluate all sync policies
      operationId: evaluate_policies
      responses:
        '200':
          description: Evaluation completed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EvaluationResultResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/sync-policies/preview:
    post:
      tags:
      - peers
      summary: Preview what a policy would match (dry-run)
      operationId: preview_sync_policy
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PreviewPolicyPayload'
        required: true
      responses:
        '200':
          description: Preview result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PreviewResultResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/sync-policies/{id}:
    get:
      tags:
      - peers
      summary: Get a sync policy by ID
      operationId: get_sync_policy
      parameters:
      - name: id
        in: path
        description: Sync policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Sync policy details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SyncPolicyResponse'
        '404':
          description: Sync policy not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    put:
      tags:
      - peers
      summary: Update a sync policy
      operationId: update_sync_policy
      parameters:
      - name: id
        in: path
        description: Sync policy ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateSyncPolicyPayload'
        required: true
      responses:
        '200':
          description: Sync policy updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SyncPolicyResponse'
        '404':
          description: Sync policy not found
        '409':
          description: Policy name already exists
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    delete:
      tags:
      - peers
      summary: Delete a sync policy
      operationId: delete_sync_policy
      parameters:
      - name: id
        in: path
        description: Sync policy ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: Sync policy deleted
        '404':
          description: Sync policy not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/sync-policies/{id}/toggle:
    post:
      tags:
      - peers
      summary: Toggle a sync policy (enable/disable)
      operationId: toggle_policy
      parameters:
      - name: id
        in: path
        description: Sync policy ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TogglePolicyPayload'
        required: true
      responses:
        '200':
          description: Sync policy toggled
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SyncPolicyResponse'
        '404':
          description: Sync policy not found
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/tree:
    get:
      tags:
      - repositories
      operationId: get_tree
      parameters:
      - name: repository_key
        in: query
        description: Repository key to browse
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: path
        in: query
        description: Path prefix to browse within the repository
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: include_metadata
        in: query
        description: Whether to include metadata in the response
        required: false
        schema:
          type:
          - boolean
          - 'null'
      responses:
        '200':
          description: Virtual folder tree for the repository
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TreeResponse'
        '400':
          description: Validation error (e.g. missing repository_key)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/tree/content:
    get:
      tags:
      - repositories
      operationId: get_content
      parameters:
      - name: repository_key
        in: query
        description: Repository key containing the artifact
        required: true
        schema:
          type: string
      - name: path
        in: query
        description: Full artifact path within the repository
        required: true
        schema:
          type: string
      - name: max_bytes
        in: query
        description: Optional maximum number of bytes to return (truncates the response)
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int64
      responses:
        '200':
          description: Artifact file content
          content:
            application/octet-stream: {}
        '400':
          description: Validation error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Artifact not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/uploads:
    post:
      tags:
      - uploads
      operationId: create_session
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateSessionRequest'
        required: true
      responses:
        '201':
          description: Upload session created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateSessionResponse'
        '400':
          description: Invalid request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Unauthorized
        '404':
          description: Repository not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/uploads/{session_id}:
    get:
      tags:
      - uploads
      operationId: get_session_status
      parameters:
      - name: session_id
        in: path
        description: Upload session ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Session status
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SessionStatusResponse'
        '404':
          description: Session not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '410':
          description: Session expired
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    delete:
      tags:
      - uploads
      operationId: cancel
      parameters:
      - name: session_id
        in: path
        description: Upload session ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: Upload cancelled
        '404':
          description: Session not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
    patch:
      tags:
      - uploads
      operationId: upload_chunk
      parameters:
      - name: session_id
        in: path
        description: Upload session ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Chunk uploaded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChunkResponse'
        '400':
          description: Invalid chunk or Content-Range
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Unauthorized
        '404':
          description: Session not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '410':
          description: Session expired
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/uploads/{session_id}/complete:
    put:
      tags:
      - uploads
      operationId: complete
      parameters:
      - name: session_id
        in: path
        description: Upload session ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Upload finalized, artifact created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CompleteResponse'
        '400':
          description: Incomplete chunks or invalid state
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Session not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '409':
          description: Checksum mismatch
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '410':
          description: Session expired
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
      - bearer_auth: []
  /api/v1/users:
    get:
      tags:
      - users
      summary: List users
      operationId: list_users
      parameters:
      - name: search
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: is_active
        in: query
        required: false
        schema:
          type:
          - boolean
          - 'null'
      - name: is_admin
        in: query
        required: false
        schema:
          type:
          - boolean
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: List of users
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserListResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - users
      summary: Create user
      operationId: create_user
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateUserRequest'
        required: true
      responses:
        '200':
          description: User created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateUserResponse'
        '409':
          description: User already exists
        '422':
          description: Validation error
      security:
      - bearer_auth: []
  /api/v1/users/{id}:
    get:
      tags:
      - users
      summary: Get user details
      operationId: get_user
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: User details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AdminUserResponse'
        '404':
          description: User not found
      security:
      - bearer_auth: []
    delete:
      tags:
      - users
      summary: Delete user
      operationId: delete_user
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: User deleted successfully
        '404':
          description: User not found
        '422':
          description: Cannot delete yourself
      security:
      - bearer_auth: []
    patch:
      tags:
      - users
      summary: Update user
      operationId: update_user
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateUserRequest'
        required: true
      responses:
        '200':
          description: User updated successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AdminUserResponse'
        '404':
          description: User not found
      security:
      - bearer_auth: []
  /api/v1/users/{id}/password:
    post:
      tags:
      - users
      summary: Change user password
      operationId: change_password
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ChangePasswordRequest'
        required: true
      responses:
        '200':
          description: Password changed successfully
        '401':
          description: Current password is incorrect
        '403':
          description: Cannot change other users' passwords
        '404':
          description: User not found
        '422':
          description: Validation error
      security:
      - bearer_auth: []
  /api/v1/users/{id}/password/reset:
    post:
      tags:
      - users
      summary: 'Reset user password (admin only)

        Generates a new temporary password and sets must_change_password=true'
      operationId: reset_password
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Password reset successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResetPasswordResponse'
        '403':
          description: Only administrators can reset passwords
        '404':
          description: User not found
        '422':
          description: Validation error
      security:
      - bearer_auth: []
  /api/v1/users/{id}/roles:
    get:
      tags:
      - users
      summary: Get user roles
      operationId: get_user_roles
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of user roles
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RoleListResponse'
      security:
      - bearer_auth: []
    post:
      tags:
      - users
      summary: Assign role to user
      operationId: assign_role
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AssignRoleRequest'
        required: true
      responses:
        '200':
          description: Role assigned successfully
      security:
      - bearer_auth: []
  /api/v1/users/{id}/roles/{role_id}:
    delete:
      tags:
      - users
      summary: Revoke role from user
      operationId: revoke_role
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      - name: role_id
        in: path
        description: Role ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Role revoked successfully
        '404':
          description: Role assignment not found
      security:
      - bearer_auth: []
  /api/v1/users/{id}/tokens:
    get:
      tags:
      - users
      summary: List user's API tokens
      operationId: list_user_tokens
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: List of API tokens
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiTokenListResponse'
        '403':
          description: Cannot view other users' tokens
      security:
      - bearer_auth: []
    post:
      tags:
      - users
      summary: Create API token
      operationId: create_user_api_token
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateApiTokenRequest'
        required: true
      responses:
        '200':
          description: API token created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiTokenCreatedResponse'
        '403':
          description: Cannot create tokens for other users
      security:
      - bearer_auth: []
  /api/v1/users/{id}/tokens/{token_id}:
    delete:
      tags:
      - users
      summary: Revoke API token
      operationId: revoke_user_api_token
      parameters:
      - name: id
        in: path
        description: User ID
        required: true
        schema:
          type: string
          format: uuid
      - name: token_id
        in: path
        description: API token ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: API token revoked successfully
        '403':
          description: Cannot revoke other users' tokens
      security:
      - bearer_auth: []
  /api/v1/webhooks:
    get:
      tags:
      - webhooks
      summary: List webhooks
      operationId: list_webhooks
      parameters:
      - name: repository_id
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
          format: uuid
      - name: enabled
        in: query
        required: false
        schema:
          type:
          - boolean
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: List of webhooks
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
    post:
      tags:
      - webhooks
      summary: Create webhook
      operationId: create_webhook
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateWebhookRequest'
        required: true
      responses:
        '200':
          description: Webhook created successfully
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookResponse'
        '422':
          description: Validation error
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/webhooks/{id}:
    get:
      tags:
      - webhooks
      summary: Get webhook by ID
      operationId: get_webhook
      parameters:
      - name: id
        in: path
        description: Webhook ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Webhook details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookResponse'
        '404':
          description: Webhook not found
      security:
      - bearer_auth: []
    delete:
      tags:
      - webhooks
      summary: Delete webhook
      operationId: delete_webhook
      parameters:
      - name: id
        in: path
        description: Webhook ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Webhook deleted successfully
        '404':
          description: Webhook not found
      security:
      - bearer_auth: []
  /api/v1/webhooks/{id}/deliveries:
    get:
      tags:
      - webhooks
      summary: List webhook deliveries
      operationId: list_deliveries
      parameters:
      - name: id
        in: path
        description: Webhook ID
        required: true
        schema:
          type: string
          format: uuid
      - name: status
        in: query
        required: false
        schema:
          type:
          - string
          - 'null'
      - name: page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      - name: per_page
        in: query
        required: false
        schema:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
      responses:
        '200':
          description: List of webhook deliveries
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeliveryListResponse'
        '500':
          description: Internal server error
      security:
      - bearer_auth: []
  /api/v1/webhooks/{id}/deliveries/{delivery_id}/redeliver:
    post:
      tags:
      - webhooks
      summary: Redeliver a failed webhook
      operationId: redeliver
      parameters:
      - name: id
        in: path
        description: Webhook ID
        required: true
        schema:
          type: string
          format: uuid
      - name: delivery_id
        in: path
        description: Delivery ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Redelivery result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeliveryResponse'
        '404':
          description: Webhook or delivery not found
      security:
      - bearer_auth: []
  /api/v1/webhooks/{id}/disable:
    post:
      tags:
      - webhooks
      summary: Disable webhook
      operationId: disable_webhook
      parameters:
      - name: id
        in: path
        description: Webhook ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Webhook disabled successfully
        '404':
          description: Webhook not found
      security:
      - bearer_auth: []
  /api/v1/webhooks/{id}/enable:
    post:
      tags:
      - webhooks
      summary: Enable webhook
      operationId: enable_webhook
      parameters:
      - name: id
        in: path
        description: Webhook ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Webhook enabled successfully
        '404':
          description: Webhook not found
      security:
      - bearer_auth: []
  /api/v1/webhooks/{id}/test:
    post:
      tags:
      - webhooks
      summary: Test webhook by sending a test payload
      operationId: test_webhook
      parameters:
      - name: id
        in: path
        description: Webhook ID
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: Test delivery result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TestWebhookResponse'
        '404':
          description: Webhook not found
      security:
      - bearer_auth: []
  /health:
    get:
      tags:
      - health
      summary: Health check endpoint — rich status page for dashboards.
      description: 'Checks database, storage (real write/read probe), optional services (Trivy,

        Meilisearch), and exposes DB connection pool statistics.'
      operationId: health_check
      responses:
        '200':
          description: Service is healthy
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HealthResponse'
        '503':
          description: Service is unhealthy
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HealthResponse'
  /livez:
    get:
      tags:
      - health
      summary: Liveness probe — confirms the process is alive and can serve HTTP.
      description: 'Takes no State parameter. If Axum can route the request and execute this

        function, the process is alive. External service failures cannot trigger

        pod restarts.'
      operationId: liveness_check
      responses:
        '200':
          description: Process is alive
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LivezResponse'
  /readyz:
    get:
      tags:
      - health
      summary: Readiness probe — is the service ready to accept traffic?
      description: 'Checks database connectivity, that migrations have run successfully,

        and that initial setup (admin password) is complete.'
      operationId: readiness_check
      responses:
        '200':
          description: Service is ready
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReadyzResponse'
        '503':
          description: Service is not ready
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReadyzResponse'
components:
  schemas:
    AcknowledgeRequest:
      type: object
      required:
      - reason
      properties:
        reason:
          type: string
    AddArtifactLabelRequest:
      type: object
      properties:
        value:
          type: string
    AddBuildArtifactsRequest:
      type: object
      required:
      - artifacts
      properties:
        artifacts:
          type: array
          items:
            $ref: '#/components/schemas/BuildArtifactInputPayload'
    AddBuildArtifactsResponse:
      type: object
      required:
      - artifacts
      properties:
        artifacts:
          type: array
          items:
            $ref: '#/components/schemas/BuildArtifactResponse'
    AddLabelRequest:
      type: object
      properties:
        value:
          type: string
    AddPeerLabelRequest:
      type: object
      properties:
        value:
          type: string
    AddVirtualMemberRequest:
      type: object
      required:
      - member_key
      properties:
        member_key:
          type: string
        priority:
          type:
          - integer
          - 'null'
          format: int32
    AdminUserResponse:
      type: object
      required:
      - id
      - username
      - email
      - auth_provider
      - is_active
      - is_admin
      - must_change_password
      - created_at
      properties:
        auth_provider:
          type: string
        created_at:
          type: string
          format: date-time
        display_name:
          type:
          - string
          - 'null'
        email:
          type: string
        id:
          type: string
          format: uuid
        is_active:
          type: boolean
        is_admin:
          type: boolean
        last_login_at:
          type:
          - string
          - 'null'
          format: date-time
        must_change_password:
          type: boolean
        username:
          type: string
    AdvancedSearchResponse:
      type: object
      required:
      - items
      - pagination
      - facets
      properties:
        facets:
          $ref: '#/components/schemas/FacetsResponse'
        items:
          type: array
          items:
            $ref: '#/components/schemas/SearchResultItem'
        pagination:
          $ref: '#/components/schemas/PaginationInfo'
    AlertState:
      type: object
      description: Alert state for a service.
      required:
      - service_name
      - current_status
      - consecutive_failures
      - updated_at
      properties:
        consecutive_failures:
          type: integer
          format: int32
        current_status:
          type: string
        last_alert_sent_at:
          type:
          - string
          - 'null'
          format: date-time
        service_name:
          type: string
        suppressed_until:
          type:
          - string
          - 'null'
          format: date-time
        updated_at:
          type: string
          format: date-time
    AnnouncePeerRequest:
      type: object
      required:
      - peer_id
      - name
      - endpoint_url
      - api_key
      properties:
        api_key:
          type: string
        endpoint_url:
          type: string
        name:
          type: string
        peer_id:
          type: string
          format: uuid
    ApiTokenCreatedResponse:
      type: object
      required:
      - id
      - name
      - token
      properties:
        id:
          type: string
          format: uuid
        name:
          type: string
        token:
          type: string
    ApiTokenListResponse:
      type: object
      required:
      - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/ApiTokenResponse'
    ApiTokenResponse:
      type: object
      required:
      - id
      - name
      - token_prefix
      - scopes
      - created_at
      properties:
        created_at:
          type: string
          format: date-time
        expires_at:
          type:
          - string
          - 'null'
          format: date-time
        id:
          type: string
          format: uuid
        last_used_at:
          type:
          - string
          - 'null'
          format: date-time
        name:
          type: string
        scopes:
          type: array
          items:
            type: string
        token_prefix:
          type: string
    ApprovalHistoryQuery:
      type: object
      properties:
        page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        per_page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        source_repository:
          type:
          - string
          - 'null'
        status:
          type:
          - string
          - 'null'
    ApprovalListResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/ApprovalResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    ApprovalRequest:
      type: object
      required:
      - source_repository
      - target_repository
      - artifact_id
      properties:
        artifact_id:
          type: string
          format: uuid
          description: Artifact ID to promote
        notes:
          type:
          - string
          - 'null'
          description: Free-text justification
        skip_policy_check:
          type: boolean
          description: Skip policy evaluation
        source_repository:
          type: string
          description: Source staging repository key
        target_repository:
          type: string
          description: Target release repository key
    ApprovalResponse:
      type: object
      required:
      - id
      - artifact_id
      - source_repository
      - target_repository
      - status
      - requested_by
      - requested_at
      properties:
        artifact_id:
          type: string
          format: uuid
        id:
          type: string
          format: uuid
        notes:
          type:
          - string
          - 'null'
        policy_result:
          type:
          - object
          - 'null'
        requested_at:
          type: string
          format: date-time
        requested_by:
          type: string
          format: uuid
        review_notes:
          type:
          - string
          - 'null'
        reviewed_at:
          type:
          - string
          - 'null'
          format: date-time
        reviewed_by:
          type:
          - string
          - 'null'
          format: uuid
        source_repository:
          type: string
        status:
          type: string
        target_repository:
          type: string
    ArtifactEvalEntry:
      type: object
      required:
      - artifact_id
      - passed
      - violations
      properties:
        artifact_id:
          type: string
          format: uuid
        passed:
          type: boolean
        violations:
          type: array
          items:
            type: string
    ArtifactFilterSchema:
      type: object
      properties:
        exclude_paths:
          type: array
          items:
            type: string
        include_paths:
          type: array
          items:
            type: string
        match_tags:
          type: object
          description: 'Tag selectors (AND semantics). Key = tag key, value = required tag value.

            Empty value means "key must exist with any value".'
          additionalProperties:
            type: string
          propertyNames:
            type: string
        max_age_days:
          type:
          - integer
          - 'null'
          format: int32
        max_size_bytes:
          type:
          - integer
          - 'null'
          format: int64
    ArtifactHealthResponse:
      type: object
      required:
      - artifact_id
      - health_score
      - health_grade
      - total_issues
      - critical_issues
      - checks_passed
      - checks_total
      - checks
      properties:
        artifact_id:
          type: string
          format: uuid
        checks:
          type: array
          items:
            $ref: '#/components/schemas/CheckSummary'
        checks_passed:
          type: integer
          format: int32
        checks_total:
          type: integer
          format: int32
        critical_issues:
          type: integer
          format: int32
        health_grade:
          type: string
        health_score:
          type: integer
          format: int32
        last_checked_at:
          type:
          - string
          - 'null'
          format: date-time
        license_score:
          type:
          - integer
          - 'null'
          format: int32
        metadata_score:
          type:
          - integer
          - 'null'
          format: int32
        quality_score:
          type:
          - integer
          - 'null'
          format: int32
        security_score:
          type:
          - integer
          - 'null'
          format: int32
        total_issues:
          type: integer
          format: int32
    ArtifactLabelEntrySchema:
      type: object
      required:
      - key
      properties:
        key:
          type: string
        value:
          type: string
    ArtifactLabelResponse:
      type: object
      required:
      - id
      - artifact_id
      - key
      - value
      - created_at
      properties:
        artifact_id:
          type: string
          format: uuid
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        key:
          type: string
        value:
          type: string
    ArtifactLabelsListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/ArtifactLabelResponse'
        total:
          type: integer
          minimum: 0
    ArtifactListResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/ArtifactResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    ArtifactMetadataResponse:
      type: object
      required:
      - artifact_id
      - format
      - metadata
      - properties
      properties:
        artifact_id:
          type: string
          format: uuid
        format:
          type: string
        metadata: {}
        properties: {}
    ArtifactResponse:
      type: object
      required:
      - id
      - repository_key
      - path
      - name
      - size_bytes
      - checksum_sha256
      - content_type
      - download_count
      - created_at
      properties:
        checksum_sha256:
          type: string
        content_type:
          type: string
        created_at:
          type: string
          format: date-time
        download_count:
          type: integer
          format: int64
        id:
          type: string
          format: uuid
        metadata:
          type:
          - object
          - 'null'
        name:
          type: string
        path:
          type: string
        repository_key:
          type: string
        size_bytes:
          type: integer
          format: int64
        version:
          type:
          - string
          - 'null'
    ArtifactStatsResponse:
      type: object
      required:
      - artifact_id
      - download_count
      properties:
        artifact_id:
          type: string
          format: uuid
        download_count:
          type: integer
          format: int64
        first_downloaded:
          type:
          - string
          - 'null'
          format: date-time
        last_downloaded:
          type:
          - string
          - 'null'
          format: date-time
    AssessmentResult:
      type: object
      required:
      - job_id
      - status
      - repositories
      - users_count
      - groups_count
      - permissions_count
      - total_artifacts
      - total_size_bytes
      - estimated_duration_seconds
      - warnings
      - blockers
      properties:
        blockers:
          type: array
          items:
            type: string
        estimated_duration_seconds:
          type: integer
          format: int64
        groups_count:
          type: integer
          format: int64
        job_id:
          type: string
          format: uuid
        permissions_count:
          type: integer
          format: int64
        repositories:
          type: array
          items:
            $ref: '#/components/schemas/RepositoryAssessment'
        status:
          type: string
        total_artifacts:
          type: integer
          format: int64
        total_size_bytes:
          type: integer
          format: int64
        users_count:
          type: integer
          format: int64
        warnings:
          type: array
          items:
            type: string
    AssignRepoRequest:
      type: object
      required:
      - repository_id
      properties:
        replication_mode:
          type:
          - string
          - 'null'
        replication_schedule:
          type:
          - string
          - 'null'
        repository_id:
          type: string
          format: uuid
        sync_enabled:
          type:
          - boolean
          - 'null'
    AssignRoleRequest:
      type: object
      required:
      - role_id
      properties:
        role_id:
          type: string
          format: uuid
    BackupListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/BackupResponse'
        total:
          type: integer
          format: int64
    BackupResponse:
      type: object
      required:
      - id
      - type
      - status
      - size_bytes
      - artifact_count
      - created_at
      properties:
        artifact_count:
          type: integer
          format: int64
        completed_at:
          type:
          - string
          - 'null'
          format: date-time
        created_at:
          type: string
          format: date-time
        created_by:
          type:
          - string
          - 'null'
          format: uuid
        error_message:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        size_bytes:
          type: integer
          format: int64
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
        storage_path:
          type:
          - string
          - 'null'
        type:
          type: string
    BuildArtifact:
      type: object
      required:
      - name
      - path
      - checksum_sha256
      - size_bytes
      properties:
        checksum_sha256:
          type: string
        name:
          type: string
        path:
          type: string
        size_bytes:
          type: integer
          format: int64
    BuildArtifactDiff:
      type: object
      required:
      - name
      - path
      - old_checksum
      - new_checksum
      - old_size_bytes
      - new_size_bytes
      properties:
        name:
          type: string
        new_checksum:
          type: string
        new_size_bytes:
          type: integer
          format: int64
        old_checksum:
          type: string
        old_size_bytes:
          type: integer
          format: int64
        path:
          type: string
    BuildArtifactInputPayload:
      type: object
      required:
      - name
      - path
      - checksum_sha256
      - size_bytes
      properties:
        checksum_sha256:
          type: string
        module_name:
          type:
          - string
          - 'null'
        name:
          type: string
        path:
          type: string
        size_bytes:
          type: integer
          format: int64
    BuildArtifactResponse:
      type: object
      required:
      - id
      - build_id
      - name
      - path
      - checksum_sha256
      - size_bytes
      - created_at
      properties:
        build_id:
          type: string
          format: uuid
        checksum_sha256:
          type: string
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        module_name:
          type:
          - string
          - 'null'
        name:
          type: string
        path:
          type: string
        size_bytes:
          type: integer
          format: int64
    BuildDiffQuery:
      type: object
      required:
      - build_a
      - build_b
      properties:
        build_a:
          type: string
          format: uuid
        build_b:
          type: string
          format: uuid
    BuildDiffResponse:
      type: object
      required:
      - build_a
      - build_b
      - added
      - removed
      - modified
      properties:
        added:
          type: array
          items:
            $ref: '#/components/schemas/BuildArtifact'
        build_a:
          type: string
          format: uuid
        build_b:
          type: string
          format: uuid
        modified:
          type: array
          items:
            $ref: '#/components/schemas/BuildArtifactDiff'
        removed:
          type: array
          items:
            $ref: '#/components/schemas/BuildArtifact'
    BuildListResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/BuildResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    BuildModule:
      type: object
      required:
      - id
      - name
      - artifacts
      properties:
        artifacts:
          type: array
          items:
            $ref: '#/components/schemas/BuildArtifact'
        id:
          type: string
          format: uuid
        name:
          type: string
    BuildResponse:
      type: object
      required:
      - id
      - name
      - number
      - status
      - created_at
      - updated_at
      properties:
        agent:
          type:
          - string
          - 'null'
        artifact_count:
          type:
          - integer
          - 'null'
          format: int32
        created_at:
          type: string
          format: date-time
        duration_ms:
          type:
          - integer
          - 'null'
          format: int64
        finished_at:
          type:
          - string
          - 'null'
          format: date-time
        id:
          type: string
          format: uuid
        metadata:
          type: object
        modules:
          type:
          - array
          - 'null'
          items:
            $ref: '#/components/schemas/BuildModule'
        name:
          type: string
        number:
          type: integer
          format: int32
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
        updated_at:
          type: string
          format: date-time
        vcs_branch:
          type:
          - string
          - 'null'
        vcs_message:
          type:
          - string
          - 'null'
        vcs_revision:
          type:
          - string
          - 'null'
        vcs_url:
          type:
          - string
          - 'null'
    BuildRow:
      type: object
      required:
      - id
      - name
      - build_number
      - status
      - created_at
      - updated_at
      properties:
        agent:
          type:
          - string
          - 'null'
        artifact_count:
          type:
          - integer
          - 'null'
          format: int32
        build_number:
          type: integer
          format: int32
        created_at:
          type: string
          format: date-time
        duration_ms:
          type:
          - integer
          - 'null'
          format: int64
        finished_at:
          type:
          - string
          - 'null'
          format: date-time
        id:
          type: string
          format: uuid
        name:
          type: string
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
        updated_at:
          type: string
          format: date-time
    BulkEvaluationResponse:
      type: object
      required:
      - rule_id
      - rule_name
      - total_artifacts
      - passed
      - failed
      - results
      properties:
        failed:
          type: integer
          minimum: 0
        passed:
          type: integer
          minimum: 0
        results:
          type: array
          items:
            $ref: '#/components/schemas/ArtifactEvalEntry'
        rule_id:
          type: string
          format: uuid
        rule_name:
          type: string
        total_artifacts:
          type: integer
          minimum: 0
    BulkPromoteRequest:
      type: object
      required:
      - target_repository
      - artifact_ids
      properties:
        artifact_ids:
          type: array
          items:
            type: string
            format: uuid
        notes:
          type:
          - string
          - 'null'
        skip_policy_check:
          type: boolean
        target_repository:
          type: string
    BulkPromotionResponse:
      type: object
      required:
      - total
      - promoted
      - failed
      - results
      properties:
        failed:
          type: integer
          minimum: 0
        promoted:
          type: integer
          minimum: 0
        results:
          type: array
          items:
            $ref: '#/components/schemas/PromotionResponse'
        total:
          type: integer
          minimum: 0
    BulkStatusRequest:
      type: object
      required:
      - ids
      - reason
      properties:
        ids:
          type: array
          items:
            type: string
            format: uuid
        reason:
          type: string
    CacheTtlResponse:
      type: object
      required:
      - repository_key
      - cache_ttl_seconds
      properties:
        cache_ttl_seconds:
          type: integer
          format: int64
        repository_key:
          type: string
    ChangePasswordRequest:
      type: object
      required:
      - new_password
      properties:
        current_password:
          type:
          - string
          - 'null'
        new_password:
          type: string
    CheckLicenseComplianceRequest:
      type: object
      required:
      - licenses
      properties:
        licenses:
          type: array
          items:
            type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
    CheckResponse:
      type: object
      required:
      - id
      - artifact_id
      - repository_id
      - check_type
      - status
      - issues_count
      - critical_count
      - high_count
      - medium_count
      - low_count
      - info_count
      - created_at
      properties:
        artifact_id:
          type: string
          format: uuid
        check_type:
          type: string
        checker_version:
          type:
          - string
          - 'null'
        completed_at:
          type:
          - string
          - 'null'
          format: date-time
        created_at:
          type: string
          format: date-time
        critical_count:
          type: integer
          format: int32
        details:
          type:
          - object
          - 'null'
        error_message:
          type:
          - string
          - 'null'
        high_count:
          type: integer
          format: int32
        id:
          type: string
          format: uuid
        info_count:
          type: integer
          format: int32
        issues_count:
          type: integer
          format: int32
        low_count:
          type: integer
          format: int32
        medium_count:
          type: integer
          format: int32
        passed:
          type:
          - boolean
          - 'null'
        repository_id:
          type: string
          format: uuid
        score:
          type:
          - integer
          - 'null'
          format: int32
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
    CheckStatus:
      type: object
      required:
      - status
      properties:
        message:
          type:
          - string
          - 'null'
        status:
          type: string
    CheckSummary:
      type: object
      required:
      - check_type
      - status
      - issues_count
      properties:
        check_type:
          type: string
        completed_at:
          type:
          - string
          - 'null'
          format: date-time
        issues_count:
          type: integer
          format: int32
        passed:
          type:
          - boolean
          - 'null'
        score:
          type:
          - integer
          - 'null'
          format: int32
        status:
          type: string
    ChecksumArtifact:
      type: object
      required:
      - id
      - repository_key
      - path
      - name
      - size_bytes
      - checksum_sha256
      - content_type
      - download_count
      - created_at
      properties:
        checksum_sha256:
          type: string
        content_type:
          type: string
        created_at:
          type: string
          format: date-time
        download_count:
          type: integer
          format: int64
        id:
          type: string
          format: uuid
        name:
          type: string
        path:
          type: string
        repository_key:
          type: string
        size_bytes:
          type: integer
          format: int64
        version:
          type:
          - string
          - 'null'
    ChecksumSearchResponse:
      type: object
      required:
      - artifacts
      properties:
        artifacts:
          type: array
          items:
            $ref: '#/components/schemas/ChecksumArtifact'
    ChunkAvailabilityResponse:
      type: object
      required:
      - peer_instance_id
      - artifact_id
      - chunk_bitmap
      - total_chunks
      - available_chunks
      properties:
        artifact_id:
          type: string
          format: uuid
        available_chunks:
          type: integer
          format: int32
        chunk_bitmap:
          type: array
          items:
            type: integer
            format: int32
            minimum: 0
        peer_instance_id:
          type: string
          format: uuid
        total_chunks:
          type: integer
          format: int32
    ChunkEntry:
      type: object
      required:
      - chunk_index
      - byte_offset
      - byte_length
      - checksum
      - status
      properties:
        byte_length:
          type: integer
          format: int32
        byte_offset:
          type: integer
          format: int64
        checksum:
          type: string
        chunk_index:
          type: integer
          format: int32
        source_peer_id:
          type:
          - string
          - 'null'
          format: uuid
        status:
          type: string
    ChunkManifestResponse:
      type: object
      required:
      - session_id
      - chunks
      properties:
        chunks:
          type: array
          items:
            $ref: '#/components/schemas/ChunkEntry'
        session_id:
          type: string
          format: uuid
    ChunkResponse:
      type: object
      required:
      - chunk_index
      - bytes_received
      - chunks_completed
      - chunks_remaining
      properties:
        bytes_received:
          type: integer
          format: int64
        chunk_index:
          type: integer
          format: int32
        chunks_completed:
          type: integer
          format: int32
        chunks_remaining:
          type: integer
          format: int32
    CleanupRequest:
      type: object
      properties:
        cleanup_audit_logs:
          type:
          - boolean
          - 'null'
        cleanup_old_backups:
          type:
          - boolean
          - 'null'
        cleanup_stale_peers:
          type:
          - boolean
          - 'null'
        cleanup_stale_uploads:
          type:
          - boolean
          - 'null'
    CleanupResponse:
      type: object
      required:
      - audit_logs_deleted
      - backups_deleted
      - peers_marked_offline
      - stale_uploads_deleted
      properties:
        audit_logs_deleted:
          type: integer
          format: int64
        backups_deleted:
          type: integer
          format: int64
        peers_marked_offline:
          type: integer
          format: int64
        stale_uploads_deleted:
          type: integer
          format: int64
    CompleteChunkBody:
      type: object
      required:
      - checksum
      properties:
        checksum:
          type: string
        source_peer_id:
          type:
          - string
          - 'null'
          format: uuid
    CompleteResponse:
      type: object
      required:
      - artifact_id
      - path
      - size
      - checksum_sha256
      properties:
        artifact_id:
          type: string
          format: uuid
        checksum_sha256:
          type: string
        path:
          type: string
        size:
          type: integer
          format: int64
    ComponentResponse:
      type: object
      required:
      - id
      - sbom_id
      - name
      - licenses
      properties:
        author:
          type:
          - string
          - 'null'
        component_type:
          type:
          - string
          - 'null'
        cpe:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        licenses:
          type: array
          items:
            type: string
        md5:
          type:
          - string
          - 'null'
        name:
          type: string
        purl:
          type:
          - string
          - 'null'
        sbom_id:
          type: string
          format: uuid
        sha1:
          type:
          - string
          - 'null'
        sha256:
          type:
          - string
          - 'null'
        supplier:
          type:
          - string
          - 'null'
        version:
          type:
          - string
          - 'null'
    ConnectionCredentials:
      type: object
      properties:
        password:
          type:
          - string
          - 'null'
        token:
          type:
          - string
          - 'null'
        username:
          type:
          - string
          - 'null'
    ConnectionResponse:
      type: object
      required:
      - id
      - name
      - url
      - auth_type
      - source_type
      - created_at
      properties:
        auth_type:
          type: string
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        name:
          type: string
        source_type:
          type: string
        url:
          type: string
        verified_at:
          type:
          - string
          - 'null'
          format: date-time
    ConnectionTestResult:
      type: object
      required:
      - success
      - message
      properties:
        artifactory_version:
          type:
          - string
          - 'null'
        license_type:
          type:
          - string
          - 'null'
        message:
          type: string
        success:
          type: boolean
    ConvertSbomRequest:
      type: object
      required:
      - target_format
      properties:
        target_format:
          type: string
    CrashListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/CrashReport'
        total:
          type: integer
          format: int64
    CrashReport:
      type: object
      description: A stored crash report.
      required:
      - id
      - error_type
      - error_message
      - component
      - severity
      - app_version
      - context
      - submitted
      - error_signature
      - occurrence_count
      - first_seen_at
      - last_seen_at
      - created_at
      properties:
        app_version:
          type: string
        component:
          type: string
        context:
          type: object
        created_at:
          type: string
          format: date-time
        error_message:
          type: string
        error_signature:
          type: string
        error_type:
          type: string
        first_seen_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        last_seen_at:
          type: string
          format: date-time
        occurrence_count:
          type: integer
          format: int32
        os_info:
          type:
          - string
          - 'null'
        severity:
          type: string
        stack_trace:
          type:
          - string
          - 'null'
        submission_error:
          type:
          - string
          - 'null'
        submitted:
          type: boolean
        submitted_at:
          type:
          - string
          - 'null'
          format: date-time
        uptime_seconds:
          type:
          - integer
          - 'null'
          format: int64
    CreateApiTokenRequest:
      type: object
      description: Create API token request
      required:
      - name
      - scopes
      properties:
        expires_in_days:
          type:
          - integer
          - 'null'
          format: int64
        name:
          type: string
        scopes:
          type: array
          items:
            type: string
    CreateApiTokenResponse:
      type: object
      description: Create API token response
      required:
      - id
      - token
      - name
      properties:
        id:
          type: string
          format: uuid
        name:
          type: string
        token:
          type: string
    CreateBackupRequest:
      type: object
      properties:
        repository_ids:
          type:
          - array
          - 'null'
          items:
            type: string
            format: uuid
        type:
          type:
          - string
          - 'null'
    CreateBuildRequest:
      type: object
      required:
      - name
      - build_number
      - metadata
      properties:
        agent:
          type:
          - string
          - 'null'
        build_number:
          type: integer
          format: int32
        metadata:
          type: object
        name:
          type: string
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        vcs_branch:
          type:
          - string
          - 'null'
        vcs_message:
          type:
          - string
          - 'null'
        vcs_revision:
          type:
          - string
          - 'null'
        vcs_url:
          type:
          - string
          - 'null'
    CreateConnectionRequest:
      type: object
      required:
      - name
      - url
      - auth_type
      - credentials
      properties:
        auth_type:
          type: string
        credentials:
          $ref: '#/components/schemas/ConnectionCredentials'
        name:
          type: string
        source_type:
          type:
          - string
          - 'null'
          description: 'Source registry type: "artifactory" (default) or "nexus"'
        url:
          type: string
    CreateGateRequest:
      type: object
      required:
      - name
      properties:
        action:
          type: string
        description:
          type:
          - string
          - 'null'
        enforce_on_download:
          type: boolean
        enforce_on_promotion:
          type: boolean
        max_critical_issues:
          type:
          - integer
          - 'null'
          format: int32
        max_high_issues:
          type:
          - integer
          - 'null'
          format: int32
        max_medium_issues:
          type:
          - integer
          - 'null'
          format: int32
        min_health_score:
          type:
          - integer
          - 'null'
          format: int32
        min_metadata_score:
          type:
          - integer
          - 'null'
          format: int32
        min_quality_score:
          type:
          - integer
          - 'null'
          format: int32
        min_security_score:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        required_checks:
          type: array
          items:
            type: string
    CreateGroupRequest:
      type: object
      required:
      - name
      properties:
        description:
          type:
          - string
          - 'null'
        name:
          type: string
    CreateInstanceRequest:
      type: object
      required:
      - name
      - url
      - api_key
      properties:
        api_key:
          type: string
        name:
          type: string
        url:
          type: string
    CreateKeyPayload:
      type: object
      required:
      - name
      properties:
        algorithm:
          type:
          - string
          - 'null'
        key_type:
          type:
          - string
          - 'null'
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        uid_email:
          type:
          - string
          - 'null'
        uid_name:
          type:
          - string
          - 'null'
    CreateLdapConfigRequest:
      type: object
      required:
      - name
      - server_url
      - user_base_dn
      properties:
        admin_group_dn:
          type:
          - string
          - 'null'
        bind_dn:
          type:
          - string
          - 'null'
        bind_password:
          type:
          - string
          - 'null'
        display_name_attribute:
          type:
          - string
          - 'null'
        email_attribute:
          type:
          - string
          - 'null'
        group_base_dn:
          type:
          - string
          - 'null'
        group_filter:
          type:
          - string
          - 'null'
        groups_attribute:
          type:
          - string
          - 'null'
        is_enabled:
          type:
          - boolean
          - 'null'
        name:
          type: string
        priority:
          type:
          - integer
          - 'null'
          format: int32
        server_url:
          type: string
        use_starttls:
          type:
          - boolean
          - 'null'
        user_base_dn:
          type: string
        user_filter:
          type:
          - string
          - 'null'
        username_attribute:
          type:
          - string
          - 'null'
    CreateMigrationRequest:
      type: object
      required:
      - source_connection_id
      - config
      properties:
        config:
          type: object
        job_type:
          type:
          - string
          - 'null'
        source_connection_id:
          type: string
          format: uuid
    CreateOidcConfigRequest:
      type: object
      required:
      - name
      - issuer_url
      - client_id
      - client_secret
      properties:
        attribute_mapping:
          type:
          - object
          - 'null'
        auto_create_users:
          type:
          - boolean
          - 'null'
        client_id:
          type: string
        client_secret:
          type: string
        is_enabled:
          type:
          - boolean
          - 'null'
        issuer_url:
          type: string
        name:
          type: string
        scopes:
          type:
          - array
          - 'null'
          items:
            type: string
    CreatePermissionRequest:
      type: object
      required:
      - principal_type
      - principal_id
      - target_type
      - target_id
      - actions
      properties:
        actions:
          type: array
          items:
            type: string
        principal_id:
          type: string
          format: uuid
        principal_type:
          type: string
        target_id:
          type: string
          format: uuid
        target_type:
          type: string
    CreatePolicyRequest:
      type: object
      required:
      - name
      - max_severity
      - block_unscanned
      - block_on_fail
      properties:
        block_on_fail:
          type: boolean
        block_unscanned:
          type: boolean
        max_artifact_age_days:
          type:
          - integer
          - 'null'
          format: int32
        max_severity:
          type: string
        min_staging_hours:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        require_signature:
          type: boolean
    CreateRepositoryRequest:
      type: object
      required:
      - key
      - name
      - format
      - repo_type
      properties:
        description:
          type:
          - string
          - 'null'
        format:
          type: string
        format_key:
          type:
          - string
          - 'null'
          description: Custom format key for WASM plugin format handlers (e.g. "rpm-custom").
        index_upstream_url:
          type:
          - string
          - 'null'
          description: 'Separate index host for Cargo registries that split index and download

            across two hosts (e.g. crates.io uses `https://index.crates.io` for

            the sparse index but `https://crates.io` for tarball downloads).

            Stored in `repository_config` under the key `index_upstream_url`.'
        is_public:
          type:
          - boolean
          - 'null'
        key:
          type: string
        member_repos:
          type:
          - array
          - 'null'
          items:
            $ref: '#/components/schemas/CreateVirtualMemberInput'
          description: 'Member repositories to add when creating a virtual repository.

            Each entry specifies a repository key and optional priority.'
        name:
          type: string
        quota_bytes:
          type:
          - integer
          - 'null'
          format: int64
        repo_type:
          type: string
        storage_backend:
          type:
          - string
          - 'null'
          description: 'Override the default storage backend for this repository.

            When omitted, the server''s configured default is used.

            Non-admin users may only use the default backend.'
        upstream_auth_type:
          type:
          - string
          - 'null'
          description: 'Upstream auth type: "basic" or "bearer". Only valid for remote repos.'
        upstream_password:
          type:
          - string
          - 'null'
          description: Password (basic) or token (bearer). Write-only, never returned in responses.
        upstream_url:
          type:
          - string
          - 'null'
        upstream_username:
          type:
          - string
          - 'null'
          description: Username for basic auth.
    CreateRuleRequest:
      type: object
      required:
      - name
      - source_repo_id
      - target_repo_id
      properties:
        allowed_licenses:
          type:
          - array
          - 'null'
          items:
            type: string
        auto_promote:
          type: boolean
        is_enabled:
          type: boolean
        max_artifact_age_days:
          type:
          - integer
          - 'null'
          format: int32
        max_cve_severity:
          type:
          - string
          - 'null'
        min_health_score:
          type:
          - integer
          - 'null'
          format: int32
        min_staging_hours:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type: string
        require_signature:
          type: boolean
        source_repo_id:
          type: string
          format: uuid
        target_repo_id:
          type: string
          format: uuid
    CreateSamlConfigRequest:
      type: object
      required:
      - name
      - entity_id
      - sso_url
      - certificate
      properties:
        admin_group:
          type:
          - string
          - 'null'
        attribute_mapping:
          type:
          - object
          - 'null'
        certificate:
          type: string
        entity_id:
          type: string
        is_enabled:
          type:
          - boolean
          - 'null'
        name:
          type: string
        name_id_format:
          type:
          - string
          - 'null'
        require_signed_assertions:
          type:
          - boolean
          - 'null'
        sign_requests:
          type:
          - boolean
          - 'null'
        slo_url:
          type:
          - string
          - 'null'
        sp_entity_id:
          type:
          - string
          - 'null'
        sso_url:
          type: string
    CreateServiceAccountRequest:
      type: object
      required:
      - name
      properties:
        description:
          type:
          - string
          - 'null'
          description: Optional description
        name:
          type: string
          description: Name for the service account (will be prefixed with "svc-")
    CreateSessionRequest:
      type: object
      required:
      - repository_key
      - artifact_path
      - total_size
      - checksum_sha256
      properties:
        artifact_path:
          type: string
          description: Path within the repository (e.g. "images/vm.ova")
        checksum_sha256:
          type: string
          description: Expected SHA256 checksum of the complete file
        chunk_size:
          type:
          - integer
          - 'null'
          format: int32
          description: Chunk size in bytes (default 8 MB, range 1 MB - 256 MB)
        content_type:
          type:
          - string
          - 'null'
          description: MIME content type (default "application/octet-stream")
        repository_key:
          type: string
          description: Repository key (e.g. "my-repo")
        total_size:
          type: integer
          format: int64
          description: Total file size in bytes
    CreateSessionResponse:
      type: object
      required:
      - session_id
      - chunk_count
      - chunk_size
      - expires_at
      properties:
        chunk_count:
          type: integer
          format: int32
        chunk_size:
          type: integer
          format: int32
        expires_at:
          type: string
        session_id:
          type: string
          format: uuid
    CreateSyncPolicyPayload:
      type: object
      required:
      - name
      properties:
        artifact_filter:
          type: object
        description:
          type: string
        enabled:
          type: boolean
        name:
          type: string
        peer_selector:
          type: object
        precedence:
          type: integer
          format: int32
        priority:
          type: integer
          format: int32
        replication_mode:
          type: string
        repo_selector:
          type: object
    CreateTicketRequest:
      type: object
      required:
      - purpose
      properties:
        purpose:
          type: string
        resource_path:
          type:
          - string
          - 'null'
    CreateTokenRequest:
      type: object
      required:
      - name
      - scopes
      properties:
        description:
          type:
          - string
          - 'null'
        expires_in_days:
          type:
          - integer
          - 'null'
          format: int64
        name:
          type: string
        repo_selector:
          type:
          - object
          - 'null'
          description: 'Dynamic repository selector (match by labels, formats, name pattern).

            Mutually exclusive with `repository_ids`. When set, matched repos are

            resolved at auth time so new repos that match the selector are picked up

            automatically.'
        repository_ids:
          type:
          - array
          - 'null'
          items:
            type: string
            format: uuid
          description: Explicit repository IDs to restrict access to. Mutually exclusive with `repo_selector`.
        scopes:
          type: array
          items:
            type: string
    CreateTokenResponse:
      type: object
      required:
      - id
      - token
      - name
      properties:
        id:
          type: string
          format: uuid
        name:
          type: string
        token:
          type: string
    CreateUserRequest:
      type: object
      required:
      - username
      - email
      properties:
        display_name:
          type:
          - string
          - 'null'
        email:
          type: string
        is_admin:
          type:
          - boolean
          - 'null'
        password:
          type:
          - string
          - 'null'
        username:
          type: string
    CreateUserResponse:
      type: object
      required:
      - user
      properties:
        generated_password:
          type:
          - string
          - 'null'
        user:
          $ref: '#/components/schemas/AdminUserResponse'
    CreateVirtualMemberInput:
      type: object
      required:
      - repo_key
      properties:
        priority:
          type: integer
          format: int32
        repo_key:
          type: string
    CreateWebhookRequest:
      type: object
      required:
      - name
      - url
      - events
      properties:
        events:
          type: array
          items:
            type: string
        headers:
          type:
          - object
          - 'null'
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        secret:
          type:
          - string
          - 'null'
        url:
          type: string
    CreatedGroupRow:
      type: object
      required:
      - id
      - name
      - created_at
      - updated_at
      properties:
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        name:
          type: string
        updated_at:
          type: string
          format: date-time
    CreatedPermissionRow:
      type: object
      required:
      - id
      - principal_type
      - principal_id
      - target_type
      - target_id
      - actions
      - created_at
      - updated_at
      properties:
        actions:
          type: array
          items:
            type: string
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        principal_id:
          type: string
          format: uuid
        principal_type:
          type: string
        target_id:
          type: string
          format: uuid
        target_type:
          type: string
        updated_at:
          type: string
          format: date-time
    CveHistoryEntry:
      type: object
      description: CVE history entry for tracking vulnerability timeline.
      required:
      - id
      - artifact_id
      - cve_id
      - first_detected_at
      - last_detected_at
      - status
      - created_at
      - updated_at
      properties:
        acknowledged_at:
          type:
          - string
          - 'null'
          format: date-time
        acknowledged_by:
          type:
          - string
          - 'null'
          format: uuid
        acknowledged_reason:
          type:
          - string
          - 'null'
        affected_component:
          type:
          - string
          - 'null'
        affected_version:
          type:
          - string
          - 'null'
        artifact_id:
          type: string
          format: uuid
        component_id:
          type:
          - string
          - 'null'
          format: uuid
        created_at:
          type: string
          format: date-time
        cve_id:
          type: string
        cve_published_at:
          type:
          - string
          - 'null'
          format: date-time
        cvss_score:
          type:
          - number
          - 'null'
          format: double
        first_detected_at:
          type: string
          format: date-time
        fixed_version:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        last_detected_at:
          type: string
          format: date-time
        sbom_id:
          type:
          - string
          - 'null'
          format: uuid
        scan_result_id:
          type:
          - string
          - 'null'
          format: uuid
        severity:
          type:
          - string
          - 'null'
        status:
          type: string
        updated_at:
          type: string
          format: date-time
    CveStatus:
      type: string
      description: CVE status for tracking.
      enum:
      - open
      - fixed
      - acknowledged
      - false_positive
    CveTimelineEntry:
      type: object
      description: CVE timeline entry for trending.
      required:
      - cve_id
      - severity
      - affected_component
      - first_detected_at
      - status
      - days_exposed
      properties:
        affected_component:
          type: string
        cve_id:
          type: string
        cve_published_at:
          type:
          - string
          - 'null'
          format: date-time
        days_exposed:
          type: integer
          format: int64
        first_detected_at:
          type: string
          format: date-time
        severity:
          type: string
        status:
          $ref: '#/components/schemas/CveStatus'
    CveTrends:
      type: object
      description: CVE trends summary.
      required:
      - total_cves
      - open_cves
      - fixed_cves
      - acknowledged_cves
      - critical_count
      - high_count
      - medium_count
      - low_count
      - timeline
      properties:
        acknowledged_cves:
          type: integer
          format: int64
        avg_days_to_fix:
          type:
          - number
          - 'null'
          format: double
        critical_count:
          type: integer
          format: int64
        fixed_cves:
          type: integer
          format: int64
        high_count:
          type: integer
          format: int64
        low_count:
          type: integer
          format: int64
        medium_count:
          type: integer
          format: int64
        open_cves:
          type: integer
          format: int64
        timeline:
          type: array
          items:
            $ref: '#/components/schemas/CveTimelineEntry'
        total_cves:
          type: integer
          format: int64
    DashboardResponse:
      type: object
      required:
      - repos_with_scanning
      - total_scans
      - total_findings
      - critical_findings
      - high_findings
      - policy_violations_blocked
      - repos_grade_a
      - repos_grade_f
      properties:
        critical_findings:
          type: integer
          format: int64
        high_findings:
          type: integer
          format: int64
        policy_violations_blocked:
          type: integer
          format: int64
        repos_grade_a:
          type: integer
          format: int64
        repos_grade_f:
          type: integer
          format: int64
        repos_with_scanning:
          type: integer
          format: int64
        total_findings:
          type: integer
          format: int64
        total_scans:
          type: integer
          format: int64
    DateRangeQuery:
      type: object
      properties:
        from:
          type:
          - string
          - 'null'
        to:
          type:
          - string
          - 'null'
    DbPoolStats:
      type: object
      description: Database connection pool statistics.
      required:
      - max_connections
      - idle_connections
      - active_connections
      - size
      properties:
        active_connections:
          type: integer
          format: int32
          minimum: 0
        idle_connections:
          type: integer
          format: int32
          minimum: 0
        max_connections:
          type: integer
          format: int32
          minimum: 0
        size:
          type: integer
          format: int32
          minimum: 0
    DeliveryListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/DeliveryResponse'
        total:
          type: integer
          format: int64
    DeliveryResponse:
      type: object
      required:
      - id
      - webhook_id
      - event
      - payload
      - success
      - attempts
      - created_at
      properties:
        attempts:
          type: integer
          format: int32
        created_at:
          type: string
          format: date-time
        delivered_at:
          type:
          - string
          - 'null'
          format: date-time
        event:
          type: string
        id:
          type: string
          format: uuid
        payload:
          type: object
        response_body:
          type:
          - string
          - 'null'
        response_status:
          type:
          - integer
          - 'null'
          format: int32
        success:
          type: boolean
        webhook_id:
          type: string
          format: uuid
    DiscoverablePeerResponse:
      type: object
      required:
      - peer_id
      - name
      - endpoint_url
      - status
      properties:
        endpoint_url:
          type: string
        name:
          type: string
        peer_id:
          type: string
          format: uuid
        region:
          type:
          - string
          - 'null'
        status:
          type: string
    DownloadTrend:
      type: object
      description: Download trend data point.
      required:
      - date
      - download_count
      properties:
        date:
          type: string
          format: date
        download_count:
          type: integer
          format: int64
    DtAnalysis:
      type: object
      description: Analysis state for a finding
      required:
      - isSuppressed
      properties:
        details:
          type:
          - string
          - 'null'
        isSuppressed:
          type: boolean
        justification:
          type:
          - string
          - 'null'
        response:
          type:
          - string
          - 'null'
        state:
          type:
          - string
          - 'null'
    DtAnalysisResponse:
      type: object
      description: Response from analysis update
      required:
      - analysisState
      - isSuppressed
      properties:
        analysisDetails:
          type:
          - string
          - 'null'
        analysisJustification:
          type:
          - string
          - 'null'
        analysisState:
          type: string
        isSuppressed:
          type: boolean
    DtAttribution:
      type: object
      description: Attribution info
      properties:
        analyzerIdentity:
          type:
          - string
          - 'null'
        attributedOn:
          type:
          - integer
          - 'null'
          format: int64
    DtComponent:
      type: object
      description: Component affected by a vulnerability
      required:
      - uuid
      - name
      properties:
        group:
          type:
          - string
          - 'null'
        name:
          type: string
        purl:
          type:
          - string
          - 'null'
        uuid:
          type: string
        version:
          type:
          - string
          - 'null'
    DtComponentFull:
      type: object
      description: Full component representation from Dependency-Track
      required:
      - uuid
      - name
      properties:
        cpe:
          type:
          - string
          - 'null'
        group:
          type:
          - string
          - 'null'
        isInternal:
          type:
          - boolean
          - 'null'
        name:
          type: string
        purl:
          type:
          - string
          - 'null'
        resolvedLicense:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/DtLicense'
        uuid:
          type: string
        version:
          type:
          - string
          - 'null'
    DtCwe:
      type: object
      description: CWE reference
      required:
      - cweId
      - name
      properties:
        cweId:
          type: integer
          format: int32
        name:
          type: string
    DtFinding:
      type: object
      description: Vulnerability finding from Dependency-Track
      required:
      - component
      - vulnerability
      properties:
        analysis:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/DtAnalysis'
        attribution:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/DtAttribution'
        component:
          $ref: '#/components/schemas/DtComponent'
        vulnerability:
          $ref: '#/components/schemas/DtVulnerability'
    DtLicense:
      type: object
      description: License information from Dependency-Track
      required:
      - name
      properties:
        licenseId:
          type:
          - string
          - 'null'
        name:
          type: string
        uuid:
          type:
          - string
          - 'null'
    DtPolicy:
      type: object
      description: Policy definition
      required:
      - uuid
      - name
      - violationState
      properties:
        name:
          type: string
        uuid:
          type: string
        violationState:
          type: string
    DtPolicyCondition:
      type: object
      description: Policy condition that was violated
      required:
      - uuid
      - subject
      - operator
      - value
      - policy
      properties:
        operator:
          type: string
        policy:
          $ref: '#/components/schemas/DtPolicy'
        subject:
          type: string
        uuid:
          type: string
        value:
          type: string
    DtPolicyConditionFull:
      type: object
      description: Full policy condition with all fields
      required:
      - uuid
      - subject
      - operator
      - value
      properties:
        operator:
          type: string
        subject:
          type: string
        uuid:
          type: string
        value:
          type: string
    DtPolicyFull:
      type: object
      description: Full policy representation with conditions and projects
      required:
      - uuid
      - name
      - violationState
      - policyConditions
      - projects
      - tags
      properties:
        includeChildren:
          type:
          - boolean
          - 'null'
        name:
          type: string
        policyConditions:
          type: array
          items:
            $ref: '#/components/schemas/DtPolicyConditionFull'
        projects:
          type: array
          items:
            $ref: '#/components/schemas/DtProject'
        tags:
          type: array
          items:
            type: object
        uuid:
          type: string
        violationState:
          type: string
    DtPolicyViolation:
      type: object
      description: Policy violation from Dependency-Track
      required:
      - uuid
      - type
      - component
      - policyCondition
      properties:
        component:
          $ref: '#/components/schemas/DtComponent'
        policyCondition:
          $ref: '#/components/schemas/DtPolicyCondition'
        type:
          type: string
        uuid:
          type: string
    DtPortfolioMetrics:
      type: object
      description: Portfolio-level metrics from Dependency-Track
      properties:
        critical:
          type: integer
          format: int64
        findingsAudited:
          type: integer
          format: int64
        findingsTotal:
          type: integer
          format: int64
        findingsUnaudited:
          type: integer
          format: int64
        high:
          type: integer
          format: int64
        inheritedRiskScore:
          type: number
          format: double
        low:
          type: integer
          format: int64
        medium:
          type: integer
          format: int64
        policyViolationsFail:
          type: integer
          format: int64
        policyViolationsInfo:
          type: integer
          format: int64
        policyViolationsTotal:
          type: integer
          format: int64
        policyViolationsWarn:
          type: integer
          format: int64
        projects:
          type: integer
          format: int64
        suppressions:
          type: integer
          format: int64
        unassigned:
          type: integer
          format: int64
        vulnerabilities:
          type:
          - integer
          - 'null'
          format: int64
    DtProject:
      type: object
      description: Dependency-Track project representation
      required:
      - uuid
      - name
      properties:
        description:
          type:
          - string
          - 'null'
        lastBomImport:
          type:
          - integer
          - 'null'
          format: int64
        lastBomImportFormat:
          type:
          - string
          - 'null'
        name:
          type: string
        uuid:
          type: string
        version:
          type:
          - string
          - 'null'
    DtProjectMetrics:
      type: object
      description: Project-level metrics from Dependency-Track
      properties:
        critical:
          type: integer
          format: int64
        findingsAudited:
          type: integer
          format: int64
        findingsTotal:
          type: integer
          format: int64
        findingsUnaudited:
          type: integer
          format: int64
        firstOccurrence:
          type:
          - integer
          - 'null'
          format: int64
        high:
          type: integer
          format: int64
        inheritedRiskScore:
          type: number
          format: double
        lastOccurrence:
          type:
          - integer
          - 'null'
          format: int64
        low:
          type: integer
          format: int64
        medium:
          type: integer
          format: int64
        policyViolationsFail:
          type: integer
          format: int64
        policyViolationsInfo:
          type: integer
          format: int64
        policyViolationsTotal:
          type: integer
          format: int64
        policyViolationsWarn:
          type: integer
          format: int64
        suppressions:
          type: integer
          format: int64
        unassigned:
          type: integer
          format: int64
        vulnerabilities:
          type:
          - integer
          - 'null'
          format: int64
    DtStatusResponse:
      type: object
      required:
      - enabled
      - healthy
      properties:
        enabled:
          type: boolean
        healthy:
          type: boolean
        url:
          type:
          - string
          - 'null'
    DtVulnerability:
      type: object
      description: Vulnerability details
      required:
      - uuid
      - vulnId
      - source
      - severity
      properties:
        cvssV3BaseScore:
          type:
          - number
          - 'null'
          format: double
        cwe:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/DtCwe'
        description:
          type:
          - string
          - 'null'
        severity:
          type: string
        source:
          type: string
        title:
          type:
          - string
          - 'null'
        uuid:
          type: string
        vulnId:
          type: string
    ErrorResponse:
      type: object
      description: Standard error response body returned by all endpoints on failure.
      required:
      - code
      - message
      properties:
        code:
          type: string
          description: Machine-readable error code (e.g. "NOT_FOUND", "VALIDATION_ERROR")
        message:
          type: string
          description: Human-readable error message
    EvaluationResultResponse:
      type: object
      required:
      - created
      - updated
      - removed
      - policies_evaluated
      - retroactive_tasks_queued
      properties:
        created:
          type: integer
          minimum: 0
        policies_evaluated:
          type: integer
          minimum: 0
        removed:
          type: integer
          minimum: 0
        retroactive_tasks_queued:
          type: integer
          minimum: 0
        updated:
          type: integer
          minimum: 0
    EventsQuery:
      type: object
      properties:
        limit:
          type:
          - integer
          - 'null'
          format: int64
    ExchangeCodeRequest:
      type: object
      required:
      - code
      properties:
        code:
          type: string
    ExchangeCodeResponse:
      type: object
      required:
      - access_token
      - refresh_token
      - token_type
      properties:
        access_token:
          type: string
        refresh_token:
          type: string
        token_type:
          type: string
    FacetValue:
      type: object
      required:
      - value
      - count
      properties:
        count:
          type: integer
          format: int64
        value:
          type: string
    FacetsResponse:
      type: object
      required:
      - formats
      - repositories
      - content_types
      properties:
        content_types:
          type: array
          items:
            $ref: '#/components/schemas/FacetValue'
        formats:
          type: array
          items:
            $ref: '#/components/schemas/FacetValue'
        repositories:
          type: array
          items:
            $ref: '#/components/schemas/FacetValue'
    FailBody:
      type: object
      required:
      - error
      properties:
        error:
          type: string
    FindingListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/FindingResponse'
        total:
          type: integer
          format: int64
    FindingResponse:
      type: object
      required:
      - id
      - scan_result_id
      - artifact_id
      - severity
      - title
      - is_acknowledged
      - created_at
      properties:
        acknowledged_at:
          type:
          - string
          - 'null'
          format: date-time
        acknowledged_by:
          type:
          - string
          - 'null'
          format: uuid
        acknowledged_reason:
          type:
          - string
          - 'null'
        affected_component:
          type:
          - string
          - 'null'
        affected_version:
          type:
          - string
          - 'null'
        artifact_id:
          type: string
          format: uuid
        created_at:
          type: string
          format: date-time
        cve_id:
          type:
          - string
          - 'null'
        description:
          type:
          - string
          - 'null'
        fixed_version:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        is_acknowledged:
          type: boolean
        scan_result_id:
          type: string
          format: uuid
        severity:
          type: string
        source:
          type:
          - string
          - 'null'
        source_url:
          type:
          - string
          - 'null'
        title:
          type: string
    FormatHandlerResponse:
      type: object
      description: Format handler response with additional computed fields.
      required:
      - id
      - format_key
      - handler_type
      - display_name
      - extensions
      - is_enabled
      - priority
      - created_at
      - updated_at
      properties:
        capabilities:
          type:
          - object
          - 'null'
          description: Plugin capabilities if this is a WASM handler
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        display_name:
          type: string
        extensions:
          type: array
          items:
            type: string
        format_key:
          type: string
        handler_type:
          $ref: '#/components/schemas/FormatHandlerType'
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        plugin_id:
          type:
          - string
          - 'null'
          format: uuid
        priority:
          type: integer
          format: int32
        repository_count:
          type:
          - integer
          - 'null'
          format: int64
          description: Number of repositories using this format (computed)
        updated_at:
          type: string
          format: date-time
    FormatHandlerType:
      type: string
      description: 'Format handler type enum.


        Indicates whether the handler is compiled-in (core) or loaded from WASM.'
      enum:
      - Core
      - Wasm
    GateEvaluationResponse:
      type: object
      required:
      - passed
      - action
      - gate_name
      - health_score
      - health_grade
      - violations
      - component_scores
      properties:
        action:
          type: string
        component_scores:
          type: object
        gate_name:
          type: string
        health_grade:
          type: string
        health_score:
          type: integer
          format: int32
        passed:
          type: boolean
        violations:
          type: array
          items:
            $ref: '#/components/schemas/GateViolationResponse'
    GateResponse:
      type: object
      required:
      - id
      - name
      - required_checks
      - enforce_on_promotion
      - enforce_on_download
      - action
      - is_enabled
      - created_at
      - updated_at
      properties:
        action:
          type: string
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        enforce_on_download:
          type: boolean
        enforce_on_promotion:
          type: boolean
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        max_critical_issues:
          type:
          - integer
          - 'null'
          format: int32
        max_high_issues:
          type:
          - integer
          - 'null'
          format: int32
        max_medium_issues:
          type:
          - integer
          - 'null'
          format: int32
        min_health_score:
          type:
          - integer
          - 'null'
          format: int32
        min_metadata_score:
          type:
          - integer
          - 'null'
          format: int32
        min_quality_score:
          type:
          - integer
          - 'null'
          format: int32
        min_security_score:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        required_checks:
          type: array
          items:
            type: string
        updated_at:
          type: string
          format: date-time
    GateViolationResponse:
      type: object
      required:
      - rule
      - expected
      - actual
      - message
      properties:
        actual:
          type: string
        expected:
          type: string
        message:
          type: string
        rule:
          type: string
    GenerateSbomRequest:
      type: object
      required:
      - artifact_id
      properties:
        artifact_id:
          type: string
          format: uuid
        force_regenerate:
          type: boolean
        format:
          type: string
    GetCveTrendsQuery:
      type: object
      properties:
        days:
          type:
          - integer
          - 'null'
          format: int32
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
    GroupListResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/GroupResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    GroupResponse:
      type: object
      required:
      - id
      - name
      - member_count
      - created_at
      - updated_at
      properties:
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        member_count:
          type: integer
          format: int64
        name:
          type: string
        updated_at:
          type: string
          format: date-time
    GroupRow:
      type: object
      required:
      - id
      - name
      - member_count
      - created_at
      - updated_at
      properties:
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        member_count:
          type: integer
          format: int64
        name:
          type: string
        updated_at:
          type: string
          format: date-time
    GrowthSummary:
      type: object
      description: Growth summary for a time range.
      required:
      - period_start
      - period_end
      - storage_bytes_start
      - storage_bytes_end
      - storage_growth_bytes
      - storage_growth_percent
      - artifacts_start
      - artifacts_end
      - artifacts_added
      - downloads_in_period
      properties:
        artifacts_added:
          type: integer
          format: int64
        artifacts_end:
          type: integer
          format: int64
        artifacts_start:
          type: integer
          format: int64
        downloads_in_period:
          type: integer
          format: int64
        period_end:
          type: string
          format: date
        period_start:
          type: string
          format: date
        storage_bytes_end:
          type: integer
          format: int64
        storage_bytes_start:
          type: integer
          format: int64
        storage_growth_bytes:
          type: integer
          format: int64
        storage_growth_percent:
          type: number
          format: double
    HealthChecks:
      type: object
      required:
      - database
      - storage
      properties:
        database:
          $ref: '#/components/schemas/CheckStatus'
        ldap:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/CheckStatus'
        meilisearch:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/CheckStatus'
        security_scanner:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/CheckStatus'
        storage:
          $ref: '#/components/schemas/CheckStatus'
    HealthDashboardResponse:
      type: object
      required:
      - total_repositories
      - total_artifacts_evaluated
      - avg_health_score
      - repos_grade_a
      - repos_grade_b
      - repos_grade_c
      - repos_grade_d
      - repos_grade_f
      - repositories
      properties:
        avg_health_score:
          type: integer
          format: int32
        repos_grade_a:
          type: integer
          format: int64
        repos_grade_b:
          type: integer
          format: int64
        repos_grade_c:
          type: integer
          format: int64
        repos_grade_d:
          type: integer
          format: int64
        repos_grade_f:
          type: integer
          format: int64
        repositories:
          type: array
          items:
            $ref: '#/components/schemas/RepoHealthResponse'
        total_artifacts_evaluated:
          type: integer
          format: int64
        total_repositories:
          type: integer
          format: int64
    HealthResponse:
      type: object
      required:
      - status
      - version
      - demo_mode
      - checks
      properties:
        checks:
          $ref: '#/components/schemas/HealthChecks'
        commit:
          type:
          - string
          - 'null'
        db_pool:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/DbPoolStats'
        demo_mode:
          type: boolean
        dirty:
          type:
          - boolean
          - 'null'
        status:
          type: string
        version:
          type: string
    HeartbeatRequest:
      type: object
      required:
      - cache_used_bytes
      properties:
        cache_used_bytes:
          type: integer
          format: int64
        status:
          type:
          - string
          - 'null'
    IdentityResponse:
      type: object
      required:
      - peer_id
      - name
      - endpoint_url
      properties:
        endpoint_url:
          type: string
        name:
          type: string
        peer_id:
          type: string
          format: uuid
    InitTransferBody:
      type: object
      required:
      - artifact_id
      properties:
        artifact_id:
          type: string
          format: uuid
        chunk_size:
          type:
          - integer
          - 'null'
          format: int32
    InstallFromGitRequest:
      type: object
      description: Request to install a plugin from Git
      required:
      - url
      properties:
        ref:
          type:
          - string
          - 'null'
          description: Git ref (tag, branch, or commit)
        url:
          type: string
          description: Git repository URL
    InstallFromLocalRequest:
      type: object
      description: Request for installing from local file path
      required:
      - path
      properties:
        path:
          type: string
          description: Local filesystem path to plugin directory
    IssueResponse:
      type: object
      required:
      - id
      - check_result_id
      - artifact_id
      - severity
      - category
      - title
      - is_suppressed
      - created_at
      properties:
        artifact_id:
          type: string
          format: uuid
        category:
          type: string
        check_result_id:
          type: string
          format: uuid
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        is_suppressed:
          type: boolean
        location:
          type:
          - string
          - 'null'
        severity:
          type: string
        suppressed_at:
          type:
          - string
          - 'null'
          format: date-time
        suppressed_by:
          type:
          - string
          - 'null'
          format: uuid
        suppressed_reason:
          type:
          - string
          - 'null'
        title:
          type: string
    KeyListResponse:
      type: object
      required:
      - keys
      - total
      properties:
        keys:
          type: array
          items:
            $ref: '#/components/schemas/SigningKeyPublic'
        total:
          type: integer
          minimum: 0
    LabelEntrySchema:
      type: object
      required:
      - key
      properties:
        key:
          type: string
        value:
          type: string
    LabelResponse:
      type: object
      required:
      - id
      - repository_id
      - key
      - value
      - created_at
      properties:
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        key:
          type: string
        repository_id:
          type: string
          format: uuid
        value:
          type: string
    LabelsListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/LabelResponse'
        total:
          type: integer
          minimum: 0
    LdapConfigResponse:
      type: object
      required:
      - id
      - name
      - server_url
      - has_bind_password
      - user_base_dn
      - user_filter
      - email_attribute
      - display_name_attribute
      - username_attribute
      - groups_attribute
      - use_starttls
      - is_enabled
      - priority
      - created_at
      - updated_at
      properties:
        admin_group_dn:
          type:
          - string
          - 'null'
        bind_dn:
          type:
          - string
          - 'null'
        created_at:
          type: string
          format: date-time
        display_name_attribute:
          type: string
        email_attribute:
          type: string
        group_base_dn:
          type:
          - string
          - 'null'
        group_filter:
          type:
          - string
          - 'null'
        groups_attribute:
          type: string
        has_bind_password:
          type: boolean
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        name:
          type: string
        priority:
          type: integer
          format: int32
        server_url:
          type: string
        updated_at:
          type: string
          format: date-time
        use_starttls:
          type: boolean
        user_base_dn:
          type: string
        user_filter:
          type: string
        username_attribute:
          type: string
    LdapLoginRequest:
      type: object
      required:
      - username
      - password
      properties:
        password:
          type: string
        username:
          type: string
    LdapTestResult:
      type: object
      required:
      - success
      - message
      - response_time_ms
      properties:
        message:
          type: string
        response_time_ms:
          type: integer
          format: int64
          minimum: 0
        success:
          type: boolean
    LicenseCheckResult:
      type: object
      description: Result of license compliance check.
      required:
      - compliant
      - violations
      - warnings
      properties:
        compliant:
          type: boolean
        violations:
          type: array
          items:
            type: string
        warnings:
          type: array
          items:
            type: string
    LicensePolicyResponse:
      type: object
      required:
      - id
      - name
      - allowed_licenses
      - denied_licenses
      - allow_unknown
      - action
      - is_enabled
      - created_at
      properties:
        action:
          type: string
        allow_unknown:
          type: boolean
        allowed_licenses:
          type: array
          items:
            type: string
        created_at:
          type: string
          format: date-time
        denied_licenses:
          type: array
          items:
            type: string
        description:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        updated_at:
          type:
          - string
          - 'null'
          format: date-time
    LifecyclePolicy:
      type: object
      description: A lifecycle policy attached to a repository (or global if repository_id is NULL).
      required:
      - id
      - name
      - enabled
      - policy_type
      - config
      - priority
      - created_at
      - updated_at
      properties:
        config:
          type: object
        created_at:
          type: string
          format: date-time
        cron_schedule:
          type:
          - string
          - 'null'
        description:
          type:
          - string
          - 'null'
        enabled:
          type: boolean
        id:
          type: string
          format: uuid
        last_run_at:
          type:
          - string
          - 'null'
          format: date-time
        last_run_items_removed:
          type:
          - integer
          - 'null'
          format: int64
        name:
          type: string
        policy_type:
          type: string
        priority:
          type: integer
          format: int32
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        updated_at:
          type: string
          format: date-time
    ListArtifactsQuery:
      type: object
      properties:
        page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        path_prefix:
          type:
          - string
          - 'null'
        per_page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        q:
          type:
          - string
          - 'null'
    ListBackupsQuery:
      type: object
      properties:
        page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        per_page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        status:
          type:
          - string
          - 'null'
        type:
          type:
          - string
          - 'null'
    ListBuildsQuery:
      type: object
      properties:
        page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        per_page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        search:
          type:
          - string
          - 'null'
        sort_by:
          type:
          - string
          - 'null'
        sort_order:
          type:
          - string
          - 'null'
        status:
          type:
          - string
          - 'null'
    ListFormatsQuery:
      type: object
      properties:
        enabled:
          type:
          - boolean
          - 'null'
        type:
          type:
          - string
          - 'null'
    ListKeysQuery:
      type: object
      properties:
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
    ListPluginsQuery:
      type: object
      properties:
        status:
          type:
          - string
          - 'null'
        type:
          type:
          - string
          - 'null'
    ListRepositoriesQuery:
      type: object
      properties:
        format:
          type:
          - string
          - 'null'
        page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        per_page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        q:
          type:
          - string
          - 'null'
        type:
          type:
          - string
          - 'null'
    ListSbomsQuery:
      type: object
      properties:
        artifact_id:
          type:
          - string
          - 'null'
          format: uuid
        format:
          type:
          - string
          - 'null'
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
    ListUsersQuery:
      type: object
      properties:
        is_active:
          type:
          - boolean
          - 'null'
        is_admin:
          type:
          - boolean
          - 'null'
        page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        per_page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        search:
          type:
          - string
          - 'null'
    LivezResponse:
      type: object
      description: Lightweight liveness response.
      required:
      - status
      properties:
        status:
          type: string
    LoginRequest:
      type: object
      required:
      - username
      - password
      properties:
        password:
          type: string
        username:
          type: string
    LoginResponse:
      type: object
      required:
      - access_token
      - refresh_token
      - expires_in
      - token_type
      - must_change_password
      properties:
        access_token:
          type: string
        expires_in:
          type: integer
          format: int64
          minimum: 0
        must_change_password:
          type: boolean
        refresh_token:
          type: string
        token_type:
          type: string
        totp_required:
          type:
          - boolean
          - 'null'
        totp_token:
          type:
          - string
          - 'null'
    MatchedPeerSchema:
      type: object
      required:
      - id
      - name
      properties:
        id:
          type: string
          format: uuid
        name:
          type: string
        region:
          type:
          - string
          - 'null'
    MatchedRepoResponse:
      type: object
      description: A single matched repository in the preview response.
      required:
      - id
      - key
      - format
      properties:
        format:
          type: string
        id:
          type: string
          format: uuid
        key:
          type: string
    MatchedRepoSchema:
      type: object
      required:
      - id
      - key
      - format
      properties:
        format:
          type: string
        id:
          type: string
          format: uuid
        key:
          type: string
    MembersRequest:
      type: object
      required:
      - user_ids
      properties:
        user_ids:
          type: array
          items:
            type: string
            format: uuid
    MigrationItemResponse:
      type: object
      required:
      - id
      - job_id
      - item_type
      - source_path
      - status
      - size_bytes
      - retry_count
      properties:
        checksum_source:
          type:
          - string
          - 'null'
        checksum_target:
          type:
          - string
          - 'null'
        completed_at:
          type:
          - string
          - 'null'
          format: date-time
        error_message:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        item_type:
          type: string
        job_id:
          type: string
          format: uuid
        retry_count:
          type: integer
          format: int32
        size_bytes:
          type: integer
          format: int64
        source_path:
          type: string
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
        target_path:
          type:
          - string
          - 'null'
    MigrationItemRow:
      type: object
      required:
      - id
      - job_id
      - item_type
      - source_path
      - status
      - size_bytes
      - metadata
      - retry_count
      properties:
        checksum_source:
          type:
          - string
          - 'null'
        checksum_target:
          type:
          - string
          - 'null'
        completed_at:
          type:
          - string
          - 'null'
          format: date-time
        error_message:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        item_type:
          type: string
        job_id:
          type: string
          format: uuid
        metadata:
          type: object
        retry_count:
          type: integer
          format: int32
        size_bytes:
          type: integer
          format: int64
        source_path:
          type: string
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
        target_path:
          type:
          - string
          - 'null'
    MigrationJobResponse:
      type: object
      required:
      - id
      - source_connection_id
      - status
      - job_type
      - config
      - total_items
      - completed_items
      - failed_items
      - skipped_items
      - total_bytes
      - transferred_bytes
      - progress_percent
      - created_at
      properties:
        completed_items:
          type: integer
          format: int32
        config:
          type: object
        created_at:
          type: string
          format: date-time
        error_summary:
          type:
          - string
          - 'null'
        estimated_time_remaining:
          type:
          - integer
          - 'null'
          format: int64
        failed_items:
          type: integer
          format: int32
        finished_at:
          type:
          - string
          - 'null'
          format: date-time
        id:
          type: string
          format: uuid
        job_type:
          type: string
        progress_percent:
          type: number
          format: double
        skipped_items:
          type: integer
          format: int32
        source_connection_id:
          type: string
          format: uuid
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
        total_bytes:
          type: integer
          format: int64
        total_items:
          type: integer
          format: int32
        transferred_bytes:
          type: integer
          format: int64
    MigrationJobRow:
      type: object
      required:
      - id
      - source_connection_id
      - status
      - job_type
      - config
      - total_items
      - completed_items
      - failed_items
      - skipped_items
      - total_bytes
      - transferred_bytes
      - created_at
      properties:
        completed_items:
          type: integer
          format: int32
        config:
          type: object
        created_at:
          type: string
          format: date-time
        created_by:
          type:
          - string
          - 'null'
          format: uuid
        error_summary:
          type:
          - string
          - 'null'
        failed_items:
          type: integer
          format: int32
        finished_at:
          type:
          - string
          - 'null'
          format: date-time
        id:
          type: string
          format: uuid
        job_type:
          type: string
        skipped_items:
          type: integer
          format: int32
        source_connection_id:
          type: string
          format: uuid
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
        total_bytes:
          type: integer
          format: int64
        total_items:
          type: integer
          format: int32
        transferred_bytes:
          type: integer
          format: int64
    MigrationReportResponse:
      type: object
      required:
      - id
      - job_id
      - generated_at
      - summary
      - warnings
      - errors
      - recommendations
      properties:
        errors:
          type: object
        generated_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        job_id:
          type: string
          format: uuid
        recommendations:
          type: object
        summary:
          type: object
        warnings:
          type: object
    MigrationReportRow:
      type: object
      required:
      - id
      - job_id
      - generated_at
      - summary
      - warnings
      - errors
      - recommendations
      properties:
        errors:
          type: object
        generated_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        job_id:
          type: string
          format: uuid
        recommendations:
          type: object
        summary:
          type: object
        warnings:
          type: object
    NetworkProfileBody:
      type: object
      properties:
        concurrent_transfers_limit:
          type:
          - integer
          - 'null'
          format: int32
        max_bandwidth_bps:
          type:
          - integer
          - 'null'
          format: int64
        sync_window_end:
          type:
          - string
          - 'null'
        sync_window_start:
          type:
          - string
          - 'null'
        sync_window_timezone:
          type:
          - string
          - 'null'
    OidcConfigResponse:
      type: object
      required:
      - id
      - name
      - issuer_url
      - client_id
      - has_secret
      - scopes
      - attribute_mapping
      - is_enabled
      - auto_create_users
      - created_at
      - updated_at
      properties:
        attribute_mapping:
          type: object
        auto_create_users:
          type: boolean
        client_id:
          type: string
        created_at:
          type: string
          format: date-time
        has_secret:
          type: boolean
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        issuer_url:
          type: string
        name:
          type: string
        scopes:
          type: array
          items:
            type: string
        updated_at:
          type: string
          format: date-time
    PackageListQuery:
      type: object
      required:
      - staging_repo_id
      properties:
        limit:
          type: integer
          format: int64
        offset:
          type: integer
          format: int64
        staging_repo_id:
          type: string
          format: uuid
        status:
          type:
          - string
          - 'null'
    PackageListResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/PackageResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    PackageResponse:
      type: object
      required:
      - id
      - repository_key
      - name
      - version
      - format
      - size_bytes
      - download_count
      - created_at
      - updated_at
      - metadata
      properties:
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        download_count:
          type: integer
          format: int64
        format:
          type: string
        id:
          type: string
          format: uuid
        metadata:
          type: object
        name:
          type: string
        repository_key:
          type: string
        size_bytes:
          type: integer
          format: int64
        updated_at:
          type: string
          format: date-time
        version:
          type: string
    PackageRow:
      type: object
      required:
      - id
      - repository_key
      - name
      - version
      - format
      - size_bytes
      - download_count
      - created_at
      - updated_at
      - metadata
      properties:
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        download_count:
          type: integer
          format: int64
        format:
          type: string
        id:
          type: string
          format: uuid
        metadata:
          type: object
        name:
          type: string
        repository_key:
          type: string
        size_bytes:
          type: integer
          format: int64
        updated_at:
          type: string
          format: date-time
        version:
          type: string
    PackageVersionResponse:
      type: object
      required:
      - version
      - size_bytes
      - download_count
      - created_at
      - checksum_sha256
      properties:
        checksum_sha256:
          type: string
        created_at:
          type: string
          format: date-time
        download_count:
          type: integer
          format: int64
        size_bytes:
          type: integer
          format: int64
        version:
          type: string
    PackageVersionRow:
      type: object
      required:
      - version
      - size_bytes
      - download_count
      - created_at
      - checksum_sha256
      properties:
        checksum_sha256:
          type: string
        created_at:
          type: string
          format: date-time
        download_count:
          type: integer
          format: int64
        size_bytes:
          type: integer
          format: int64
        version:
          type: string
    PackageVersionsResponse:
      type: object
      required:
      - versions
      properties:
        versions:
          type: array
          items:
            $ref: '#/components/schemas/PackageVersionResponse'
    Pagination:
      type: object
      description: 'Pagination metadata for list responses.


        Used consistently across all paginated API endpoints to provide

        standard pagination information to clients.'
      required:
      - page
      - per_page
      - total
      - total_pages
      properties:
        page:
          type: integer
          format: int32
          description: Current page number (1-indexed)
          minimum: 0
        per_page:
          type: integer
          format: int32
          description: Number of items per page
          minimum: 0
        total:
          type: integer
          format: int64
          description: Total number of items across all pages
        total_pages:
          type: integer
          format: int32
          description: Total number of pages
          minimum: 0
    PaginationInfo:
      type: object
      required:
      - page
      - per_page
      - total
      - total_pages
      properties:
        page:
          type: integer
          format: int32
          minimum: 0
        per_page:
          type: integer
          format: int32
          minimum: 0
        total:
          type: integer
          format: int64
        total_pages:
          type: integer
          format: int32
          minimum: 0
    PeerInstanceListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/PeerInstanceResponse'
        total:
          type: integer
          format: int64
    PeerInstanceResponse:
      type: object
      required:
      - id
      - name
      - endpoint_url
      - status
      - cache_size_bytes
      - cache_used_bytes
      - cache_usage_percent
      - created_at
      - is_local
      properties:
        cache_size_bytes:
          type: integer
          format: int64
        cache_usage_percent:
          type: number
          format: double
        cache_used_bytes:
          type: integer
          format: int64
        created_at:
          type: string
          format: date-time
        endpoint_url:
          type: string
        id:
          type: string
          format: uuid
        is_local:
          type: boolean
        last_heartbeat_at:
          type:
          - string
          - 'null'
          format: date-time
        last_sync_at:
          type:
          - string
          - 'null'
          format: date-time
        name:
          type: string
        region:
          type:
          - string
          - 'null'
        status:
          type: string
    PeerLabelEntrySchema:
      type: object
      required:
      - key
      properties:
        key:
          type: string
        value:
          type: string
    PeerLabelResponse:
      type: object
      required:
      - id
      - peer_instance_id
      - key
      - value
      - created_at
      properties:
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        key:
          type: string
        peer_instance_id:
          type: string
          format: uuid
        value:
          type: string
    PeerLabelsListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/PeerLabelResponse'
        total:
          type: integer
          minimum: 0
    PeerResponse:
      type: object
      required:
      - id
      - target_peer_id
      - status
      - shared_artifacts_count
      - shared_chunks_count
      - bytes_transferred_total
      - transfer_success_count
      - transfer_failure_count
      properties:
        bandwidth_estimate_bps:
          type:
          - integer
          - 'null'
          format: int64
        bytes_transferred_total:
          type: integer
          format: int64
        id:
          type: string
          format: uuid
        last_probed_at:
          type:
          - string
          - 'null'
          format: date-time
        last_transfer_at:
          type:
          - string
          - 'null'
          format: date-time
        latency_ms:
          type:
          - integer
          - 'null'
          format: int32
        shared_artifacts_count:
          type: integer
          format: int32
        shared_chunks_count:
          type: integer
          format: int32
        status:
          type: string
        target_peer_id:
          type: string
          format: uuid
        transfer_failure_count:
          type: integer
          format: int32
        transfer_success_count:
          type: integer
          format: int32
    PeerSelectorSchema:
      type: object
      properties:
        all:
          type: boolean
        match_labels:
          type: object
          additionalProperties:
            type: string
          propertyNames:
            type: string
        match_peers:
          type: array
          items:
            type: string
            format: uuid
        match_region:
          type:
          - string
          - 'null'
    PendingQuery:
      type: object
      properties:
        page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        per_page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        source_repository:
          type:
          - string
          - 'null'
    PermissionListResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/PermissionResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    PermissionResponse:
      type: object
      required:
      - id
      - principal_type
      - principal_id
      - target_type
      - target_id
      - actions
      - created_at
      - updated_at
      properties:
        actions:
          type: array
          items:
            type: string
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        principal_id:
          type: string
          format: uuid
        principal_name:
          type:
          - string
          - 'null'
        principal_type:
          type: string
        target_id:
          type: string
          format: uuid
        target_name:
          type:
          - string
          - 'null'
        target_type:
          type: string
        updated_at:
          type: string
          format: date-time
    PermissionRow:
      type: object
      required:
      - id
      - principal_type
      - principal_id
      - target_type
      - target_id
      - actions
      - created_at
      - updated_at
      properties:
        actions:
          type: array
          items:
            type: string
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        principal_id:
          type: string
          format: uuid
        principal_name:
          type:
          - string
          - 'null'
        principal_type:
          type: string
        target_id:
          type: string
          format: uuid
        target_name:
          type:
          - string
          - 'null'
        target_type:
          type: string
        updated_at:
          type: string
          format: date-time
    PluginConfigResponse:
      type: object
      required:
      - plugin_id
      - config
      - schema
      properties:
        config:
          type: object
        plugin_id:
          type: string
          format: uuid
        schema:
          type: object
    PluginInstallResponse:
      type: object
      description: Response for plugin installation
      required:
      - plugin_id
      - name
      - version
      - format_key
      - message
      properties:
        format_key:
          type: string
        message:
          type: string
        name:
          type: string
        plugin_id:
          type: string
          format: uuid
        version:
          type: string
    PluginListResponse:
      type: object
      required:
      - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/PluginResponse'
    PluginResponse:
      type: object
      required:
      - id
      - name
      - version
      - display_name
      - status
      - plugin_type
      - config_schema
      - installed_at
      properties:
        author:
          type:
          - string
          - 'null'
        config_schema:
          type: object
        description:
          type:
          - string
          - 'null'
        display_name:
          type: string
        enabled_at:
          type:
          - string
          - 'null'
          format: date-time
        homepage:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        installed_at:
          type: string
          format: date-time
        name:
          type: string
        plugin_type:
          type: string
        status:
          type: string
        version:
          type: string
    PluginStatus:
      type: string
      description: Plugin status
      enum:
      - active
      - disabled
      - error
    PluginType:
      type: string
      description: Plugin type
      enum:
      - format_handler
      - storage_backend
      - authentication
      - authorization
      - webhook
      - custom
    PolicyExecutionResult:
      type: object
      description: Result of a lifecycle policy dry-run or execution.
      required:
      - policy_id
      - policy_name
      - dry_run
      - artifacts_matched
      - artifacts_removed
      - bytes_freed
      - errors
      properties:
        artifacts_matched:
          type: integer
          format: int64
        artifacts_removed:
          type: integer
          format: int64
        bytes_freed:
          type: integer
          format: int64
        dry_run:
          type: boolean
        errors:
          type: array
          items:
            type: string
        policy_id:
          type: string
          format: uuid
        policy_name:
          type: string
    PolicyResponse:
      type: object
      required:
      - id
      - name
      - max_severity
      - block_unscanned
      - block_on_fail
      - is_enabled
      - require_signature
      - created_at
      - updated_at
      properties:
        block_on_fail:
          type: boolean
        block_unscanned:
          type: boolean
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        max_artifact_age_days:
          type:
          - integer
          - 'null'
          format: int32
        max_severity:
          type: string
        min_staging_hours:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        require_signature:
          type: boolean
        updated_at:
          type: string
          format: date-time
    PolicyViolation:
      type: object
      required:
      - rule
      - severity
      - message
      properties:
        message:
          type: string
        rule:
          type: string
        severity:
          type: string
    PreviewPolicyPayload:
      type: object
      required:
      - name
      properties:
        artifact_filter:
          type: object
        description:
          type: string
        enabled:
          type: boolean
        name:
          type: string
        peer_selector:
          type: object
        precedence:
          type: integer
          format: int32
        priority:
          type: integer
          format: int32
        replication_mode:
          type: string
        repo_selector:
          type: object
    PreviewRepoSelectorRequest:
      type: object
      description: Request body for previewing which repositories a selector matches.
      required:
      - repo_selector
      properties:
        repo_selector:
          type: object
          description: The repository selector to evaluate.
    PreviewRepoSelectorResponse:
      type: object
      description: Response for the repo selector preview endpoint.
      required:
      - matched_repositories
      - total
      properties:
        matched_repositories:
          type: array
          items:
            $ref: '#/components/schemas/MatchedRepoResponse'
        total:
          type: integer
          minimum: 0
    PreviewResultResponse:
      type: object
      required:
      - matched_repositories
      - matched_peers
      - subscription_count
      properties:
        matched_peers:
          type: array
          items:
            $ref: '#/components/schemas/MatchedPeerSchema'
        matched_repositories:
          type: array
          items:
            $ref: '#/components/schemas/MatchedRepoSchema'
        subscription_count:
          type: integer
          minimum: 0
    ProbeBody:
      type: object
      required:
      - target_peer_id
      - latency_ms
      properties:
        bandwidth_estimate_bps:
          type:
          - integer
          - 'null'
          format: int64
        latency_ms:
          type: integer
          format: int32
        target_peer_id:
          type: string
          format: uuid
    PromoteArtifactRequest:
      type: object
      required:
      - target_repository
      properties:
        notes:
          type:
          - string
          - 'null'
        skip_policy_check:
          type: boolean
        target_repository:
          type: string
    PromotionHistoryEntry:
      type: object
      required:
      - id
      - artifact_id
      - artifact_path
      - source_repo_key
      - target_repo_key
      - status
      - created_at
      properties:
        artifact_id:
          type: string
          format: uuid
        artifact_path:
          type: string
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        notes:
          type:
          - string
          - 'null'
        policy_result:
          type:
          - object
          - 'null'
        promoted_by:
          type:
          - string
          - 'null'
          format: uuid
        promoted_by_username:
          type:
          - string
          - 'null'
        rejection_reason:
          type:
          - string
          - 'null'
        source_repo_key:
          type: string
        status:
          type: string
        target_repo_key:
          type: string
    PromotionHistoryQuery:
      type: object
      properties:
        artifact_id:
          type:
          - string
          - 'null'
          format: uuid
        page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        per_page:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        status:
          type:
          - string
          - 'null'
    PromotionHistoryResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/PromotionHistoryEntry'
        pagination:
          $ref: '#/components/schemas/Pagination'
    PromotionResponse:
      type: object
      required:
      - promoted
      - source
      - target
      - policy_violations
      properties:
        message:
          type:
          - string
          - 'null'
        policy_violations:
          type: array
          items:
            $ref: '#/components/schemas/PolicyViolation'
        promoted:
          type: boolean
        promotion_id:
          type:
          - string
          - 'null'
          format: uuid
        source:
          type: string
        target:
          type: string
    PromotionRuleListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/PromotionRuleResponse'
        total:
          type: integer
          minimum: 0
    PromotionRuleResponse:
      type: object
      required:
      - id
      - name
      - source_repo_id
      - target_repo_id
      - is_enabled
      - require_signature
      - auto_promote
      - created_at
      - updated_at
      properties:
        allowed_licenses:
          type:
          - array
          - 'null'
          items:
            type: string
        auto_promote:
          type: boolean
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        max_artifact_age_days:
          type:
          - integer
          - 'null'
          format: int32
        max_cve_severity:
          type:
          - string
          - 'null'
        min_health_score:
          type:
          - integer
          - 'null'
          format: int32
        min_staging_hours:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type: string
        require_signature:
          type: boolean
        source_repo_id:
          type: string
          format: uuid
        target_repo_id:
          type: string
          format: uuid
        updated_at:
          type: string
          format: date-time
    QuickSearchResponse:
      type: object
      required:
      - results
      properties:
        results:
          type: array
          items:
            $ref: '#/components/schemas/SearchResultItem'
    ReEvaluateRequest:
      type: object
      required:
      - staging_repo_id
      - default_action
      properties:
        default_action:
          type: string
        staging_repo_id:
          type: string
          format: uuid
    ReadyzChecks:
      type: object
      required:
      - database
      - migrations
      - setup_complete
      properties:
        database:
          $ref: '#/components/schemas/CheckStatus'
        migrations:
          $ref: '#/components/schemas/CheckStatus'
        setup_complete:
          $ref: '#/components/schemas/CheckStatus'
    ReadyzResponse:
      type: object
      description: Readiness response with per-check detail.
      required:
      - status
      - checks
      properties:
        checks:
          $ref: '#/components/schemas/ReadyzChecks'
        status:
          type: string
    RefreshTokenRequest:
      type: object
      properties:
        refresh_token:
          type:
          - string
          - 'null'
    RegisterPeerRequest:
      type: object
      required:
      - name
      - endpoint_url
      - sync_filter
      - api_key
      properties:
        api_key:
          type: string
        cache_size_bytes:
          type:
          - integer
          - 'null'
          format: int64
        endpoint_url:
          type: string
        name:
          type: string
        region:
          type:
          - string
          - 'null'
        sync_filter:
          type: object
    ReindexResponse:
      type: object
      description: Response returned when a reindex is triggered.
      required:
      - status
      - message
      properties:
        message:
          type: string
        status:
          type: string
    RejectArtifactRequest:
      type: object
      required:
      - reason
      properties:
        notes:
          type:
          - string
          - 'null'
        reason:
          type: string
    RejectionResponse:
      type: object
      required:
      - rejected
      - artifact_id
      - source
      - reason
      - rejection_id
      properties:
        artifact_id:
          type: string
          format: uuid
        reason:
          type: string
        rejected:
          type: boolean
        rejection_id:
          type: string
          format: uuid
        source:
          type: string
    RemoteInstanceResponse:
      type: object
      required:
      - id
      - name
      - url
      - created_at
      properties:
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        name:
          type: string
        url:
          type: string
    RepoHealthResponse:
      type: object
      required:
      - repository_id
      - repository_key
      - health_score
      - health_grade
      - artifacts_evaluated
      - artifacts_passing
      - artifacts_failing
      properties:
        artifacts_evaluated:
          type: integer
          format: int32
        artifacts_failing:
          type: integer
          format: int32
        artifacts_passing:
          type: integer
          format: int32
        avg_license_score:
          type:
          - integer
          - 'null'
          format: int32
        avg_metadata_score:
          type:
          - integer
          - 'null'
          format: int32
        avg_quality_score:
          type:
          - integer
          - 'null'
          format: int32
        avg_security_score:
          type:
          - integer
          - 'null'
          format: int32
        health_grade:
          type: string
        health_score:
          type: integer
          format: int32
        last_evaluated_at:
          type:
          - string
          - 'null'
          format: date-time
        repository_id:
          type: string
          format: uuid
        repository_key:
          type: string
    RepoSecurityResponse:
      type: object
      properties:
        config:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/ScanConfigResponse'
        score:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/ScoreResponse'
    RepoSelectorSchema:
      type: object
      properties:
        match_formats:
          type: array
          items:
            type: string
        match_labels:
          type: object
          additionalProperties:
            type: string
          propertyNames:
            type: string
        match_pattern:
          type:
          - string
          - 'null'
        match_repos:
          type: array
          items:
            type: string
            format: uuid
    RepositoryAssessment:
      type: object
      required:
      - key
      - type
      - package_type
      - artifact_count
      - total_size_bytes
      - compatibility
      - warnings
      properties:
        artifact_count:
          type: integer
          format: int64
        compatibility:
          type: string
        key:
          type: string
        package_type:
          type: string
        total_size_bytes:
          type: integer
          format: int64
        type:
          type: string
        warnings:
          type: array
          items:
            type: string
    RepositoryListResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/RepositoryResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    RepositoryResponse:
      type: object
      required:
      - id
      - key
      - name
      - format
      - repo_type
      - is_public
      - storage_used_bytes
      - upstream_auth_configured
      - created_at
      - updated_at
      properties:
        created_at:
          type: string
          format: date-time
        description:
          type:
          - string
          - 'null'
        format:
          type: string
        id:
          type: string
          format: uuid
        is_public:
          type: boolean
        key:
          type: string
        name:
          type: string
        quota_bytes:
          type:
          - integer
          - 'null'
          format: int64
        repo_type:
          type: string
        storage_used_bytes:
          type: integer
          format: int64
        updated_at:
          type: string
          format: date-time
        upstream_auth_configured:
          type: boolean
        upstream_auth_type:
          type:
          - string
          - 'null'
        upstream_url:
          type:
          - string
          - 'null'
    RepositorySigningConfig:
      type: object
      description: Repository signing configuration.
      required:
      - id
      - repository_id
      - sign_metadata
      - sign_packages
      - require_signatures
      - created_at
      - updated_at
      properties:
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        repository_id:
          type: string
          format: uuid
        require_signatures:
          type: boolean
        sign_metadata:
          type: boolean
        sign_packages:
          type: boolean
        signing_key_id:
          type:
          - string
          - 'null'
          format: uuid
        updated_at:
          type: string
          format: date-time
    RepositorySnapshot:
      type: object
      description: Per-repository metrics snapshot.
      required:
      - repository_id
      - snapshot_date
      - artifact_count
      - storage_bytes
      - download_count
      properties:
        artifact_count:
          type: integer
          format: int64
        download_count:
          type: integer
          format: int64
        repository_id:
          type: string
          format: uuid
        repository_key:
          type:
          - string
          - 'null'
        repository_name:
          type:
          - string
          - 'null'
        snapshot_date:
          type: string
          format: date
        storage_bytes:
          type: integer
          format: int64
    RepositoryStorageBreakdown:
      type: object
      description: Current per-repository storage breakdown.
      required:
      - repository_id
      - repository_key
      - repository_name
      - format
      - artifact_count
      - storage_bytes
      - download_count
      properties:
        artifact_count:
          type: integer
          format: int64
        download_count:
          type: integer
          format: int64
        format:
          type: string
        last_upload_at:
          type:
          - string
          - 'null'
          format: date-time
        repository_id:
          type: string
          format: uuid
        repository_key:
          type: string
        repository_name:
          type: string
        storage_bytes:
          type: integer
          format: int64
    ResetPasswordResponse:
      type: object
      description: Response for password reset
      required:
      - temporary_password
      properties:
        temporary_password:
          type: string
    RestoreRequest:
      type: object
      properties:
        restore_artifacts:
          type:
          - boolean
          - 'null'
        restore_database:
          type:
          - boolean
          - 'null'
        target_repository_id:
          type:
          - string
          - 'null'
          format: uuid
    RestoreResponse:
      type: object
      required:
      - tables_restored
      - artifacts_restored
      - errors
      properties:
        artifacts_restored:
          type: integer
          format: int32
        errors:
          type: array
          items:
            type: string
        tables_restored:
          type: array
          items:
            type: string
    ReviewRequest:
      type: object
      properties:
        notes:
          type:
          - string
          - 'null'
          description: Optional reviewer notes
    RoleListResponse:
      type: object
      required:
      - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/RoleResponse'
    RoleResponse:
      type: object
      required:
      - id
      - name
      - permissions
      properties:
        description:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        name:
          type: string
        permissions:
          type: array
          items:
            type: string
    RuleEvaluationResponse:
      type: object
      required:
      - rule_id
      - rule_name
      - passed
      - violations
      properties:
        passed:
          type: boolean
        rule_id:
          type: string
          format: uuid
        rule_name:
          type: string
        violations:
          type: array
          items:
            type: string
    RuleResponse:
      type: object
      required:
      - id
      - package_pattern
      - version_constraint
      - architecture
      - action
      - priority
      - reason
      - enabled
      - created_at
      - updated_at
      properties:
        action:
          type: string
        architecture:
          type: string
        created_at:
          type: string
        created_by:
          type:
          - string
          - 'null'
          format: uuid
        enabled:
          type: boolean
        id:
          type: string
          format: uuid
        package_pattern:
          type: string
        priority:
          type: integer
          format: int32
        reason:
          type: string
        staging_repo_id:
          type:
          - string
          - 'null'
          format: uuid
        updated_at:
          type: string
        version_constraint:
          type: string
    SamlAcsForm:
      type: object
      required:
      - SAMLResponse
      properties:
        RelayState:
          type:
          - string
          - 'null'
        SAMLResponse:
          type: string
    SamlConfigResponse:
      type: object
      required:
      - id
      - name
      - entity_id
      - sso_url
      - has_certificate
      - name_id_format
      - attribute_mapping
      - sp_entity_id
      - sign_requests
      - require_signed_assertions
      - is_enabled
      - created_at
      - updated_at
      properties:
        admin_group:
          type:
          - string
          - 'null'
        attribute_mapping:
          type: object
        created_at:
          type: string
          format: date-time
        entity_id:
          type: string
        has_certificate:
          type: boolean
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        name:
          type: string
        name_id_format:
          type: string
        require_signed_assertions:
          type: boolean
        sign_requests:
          type: boolean
        slo_url:
          type:
          - string
          - 'null'
        sp_entity_id:
          type: string
        sso_url:
          type: string
        updated_at:
          type: string
          format: date-time
    SbomContentResponse:
      allOf:
      - $ref: '#/components/schemas/SbomResponse'
      - type: object
        required:
        - content
        properties:
          content:
            type: object
    SbomResponse:
      type: object
      required:
      - id
      - artifact_id
      - repository_id
      - format
      - format_version
      - component_count
      - dependency_count
      - license_count
      - licenses
      - content_hash
      - generated_at
      - created_at
      properties:
        artifact_id:
          type: string
          format: uuid
        component_count:
          type: integer
          format: int32
        content_hash:
          type: string
        created_at:
          type: string
          format: date-time
        dependency_count:
          type: integer
          format: int32
        format:
          type: string
        format_version:
          type: string
        generated_at:
          type: string
          format: date-time
        generator:
          type:
          - string
          - 'null'
        generator_version:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        license_count:
          type: integer
          format: int32
        licenses:
          type: array
          items:
            type: string
        repository_id:
          type: string
          format: uuid
        spec_version:
          type:
          - string
          - 'null'
    ScanConfigResponse:
      type: object
      required:
      - id
      - repository_id
      - scan_enabled
      - scan_on_upload
      - scan_on_proxy
      - block_on_policy_violation
      - severity_threshold
      - created_at
      - updated_at
      properties:
        block_on_policy_violation:
          type: boolean
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        repository_id:
          type: string
          format: uuid
        scan_enabled:
          type: boolean
        scan_on_proxy:
          type: boolean
        scan_on_upload:
          type: boolean
        severity_threshold:
          type: string
        updated_at:
          type: string
          format: date-time
    ScanListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/ScanResponse'
        total:
          type: integer
          format: int64
    ScanResponse:
      type: object
      required:
      - id
      - artifact_id
      - repository_id
      - scan_type
      - status
      - findings_count
      - critical_count
      - high_count
      - medium_count
      - low_count
      - info_count
      - created_at
      properties:
        artifact_id:
          type: string
          format: uuid
        artifact_name:
          type:
          - string
          - 'null'
        artifact_version:
          type:
          - string
          - 'null'
        completed_at:
          type:
          - string
          - 'null'
          format: date-time
        created_at:
          type: string
          format: date-time
        critical_count:
          type: integer
          format: int32
        error_message:
          type:
          - string
          - 'null'
        findings_count:
          type: integer
          format: int32
        high_count:
          type: integer
          format: int32
        id:
          type: string
          format: uuid
        info_count:
          type: integer
          format: int32
        low_count:
          type: integer
          format: int32
        medium_count:
          type: integer
          format: int32
        repository_id:
          type: string
          format: uuid
        scan_type:
          type: string
        scanner_version:
          type:
          - string
          - 'null'
        started_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
    ScoreResponse:
      type: object
      required:
      - id
      - repository_id
      - score
      - grade
      - total_findings
      - critical_count
      - high_count
      - medium_count
      - low_count
      - acknowledged_count
      - calculated_at
      properties:
        acknowledged_count:
          type: integer
          format: int32
        calculated_at:
          type: string
          format: date-time
        critical_count:
          type: integer
          format: int32
        grade:
          type: string
        high_count:
          type: integer
          format: int32
        id:
          type: string
          format: uuid
        last_scan_at:
          type:
          - string
          - 'null'
          format: date-time
        low_count:
          type: integer
          format: int32
        medium_count:
          type: integer
          format: int32
        repository_id:
          type: string
          format: uuid
        score:
          type: integer
          format: int32
        total_findings:
          type: integer
          format: int32
    ScoredPeerResponse:
      type: object
      required:
      - peer_id
      - endpoint_url
      - available_chunks
      - score
      properties:
        available_chunks:
          type: integer
          format: int32
        bandwidth_estimate_bps:
          type:
          - integer
          - 'null'
          format: int64
        endpoint_url:
          type: string
        latency_ms:
          type:
          - integer
          - 'null'
          format: int32
        peer_id:
          type: string
          format: uuid
        score:
          type: number
          format: double
    SearchResultItem:
      type: object
      description: A unified search result matching the frontend `SearchResult` interface.
      required:
      - id
      - type
      - name
      - repository_key
      - created_at
      properties:
        created_at:
          type: string
          format: date-time
        format:
          type:
          - string
          - 'null'
        highlights:
          type:
          - array
          - 'null'
          items:
            type: string
        id:
          type: string
          format: uuid
        name:
          type: string
        path:
          type:
          - string
          - 'null'
        repository_key:
          type: string
        size_bytes:
          type:
          - integer
          - 'null'
          format: int64
        type:
          type: string
        version:
          type:
          - string
          - 'null'
    ServiceAccountListResponse:
      type: object
      required:
      - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/ServiceAccountSummaryResponse'
    ServiceAccountResponse:
      type: object
      required:
      - id
      - username
      - is_active
      - created_at
      - updated_at
      properties:
        created_at:
          type: string
          format: date-time
        display_name:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        is_active:
          type: boolean
        updated_at:
          type: string
          format: date-time
        username:
          type: string
    ServiceAccountSummaryResponse:
      type: object
      required:
      - id
      - username
      - is_active
      - token_count
      - created_at
      - updated_at
      properties:
        created_at:
          type: string
          format: date-time
        display_name:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        is_active:
          type: boolean
        token_count:
          type: integer
          format: int64
        updated_at:
          type: string
          format: date-time
        username:
          type: string
    ServiceHealthEntry:
      type: object
      description: A health check result for a single service.
      required:
      - service_name
      - status
      - checked_at
      properties:
        checked_at:
          type: string
          format: date-time
        message:
          type:
          - string
          - 'null'
        previous_status:
          type:
          - string
          - 'null'
        response_time_ms:
          type:
          - integer
          - 'null'
          format: int32
        service_name:
          type: string
        status:
          type: string
    SessionStatusResponse:
      type: object
      required:
      - session_id
      - status
      - total_size
      - bytes_received
      - chunks_completed
      - chunks_total
      - repository_key
      - artifact_path
      - created_at
      - expires_at
      properties:
        artifact_path:
          type: string
        bytes_received:
          type: integer
          format: int64
        chunks_completed:
          type: integer
          format: int32
        chunks_total:
          type: integer
          format: int32
        created_at:
          type: string
        expires_at:
          type: string
        repository_key:
          type: string
        session_id:
          type: string
          format: uuid
        status:
          type: string
        total_size:
          type: integer
          format: int64
    SetArtifactLabelsRequest:
      type: object
      required:
      - labels
      properties:
        labels:
          type: array
          items:
            $ref: '#/components/schemas/ArtifactLabelEntrySchema'
    SetCacheTtlRequest:
      type: object
      required:
      - cache_ttl_seconds
      properties:
        cache_ttl_seconds:
          type: integer
          format: int64
    SetLabelsRequest:
      type: object
      required:
      - labels
      properties:
        labels:
          type: array
          items:
            $ref: '#/components/schemas/LabelEntrySchema'
    SetPeerLabelsRequest:
      type: object
      required:
      - labels
      properties:
        labels:
          type: array
          items:
            $ref: '#/components/schemas/PeerLabelEntrySchema'
    SetupStatusResponse:
      type: object
      description: Response body for the setup status endpoint.
      required:
      - setup_required
      properties:
        setup_required:
          type: boolean
          description: Whether the initial admin password change is still required.
    SigningConfigResponse:
      type: object
      required:
      - repository_id
      - sign_metadata
      - sign_packages
      - require_signatures
      properties:
        key:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/SigningKeyPublic'
        repository_id:
          type: string
          format: uuid
        require_signatures:
          type: boolean
        sign_metadata:
          type: boolean
        sign_packages:
          type: boolean
        signing_key_id:
          type:
          - string
          - 'null'
          format: uuid
    SigningKeyPublic:
      type: object
      description: Public view of a signing key (no private material).
      required:
      - id
      - name
      - key_type
      - public_key_pem
      - algorithm
      - is_active
      - created_at
      properties:
        algorithm:
          type: string
        created_at:
          type: string
          format: date-time
        expires_at:
          type:
          - string
          - 'null'
          format: date-time
        fingerprint:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        is_active:
          type: boolean
        key_id:
          type:
          - string
          - 'null'
        key_type:
          type: string
        last_used_at:
          type:
          - string
          - 'null'
          format: date-time
        name:
          type: string
        public_key_pem:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        uid_email:
          type:
          - string
          - 'null'
        uid_name:
          type:
          - string
          - 'null'
    SourceConnectionRow:
      type: object
      required:
      - id
      - name
      - url
      - auth_type
      - credentials_enc
      - source_type
      - created_at
      properties:
        auth_type:
          type: string
        created_at:
          type: string
          format: date-time
        created_by:
          type:
          - string
          - 'null'
          format: uuid
        credentials_enc:
          type: array
          items:
            type: integer
            format: int32
            minimum: 0
        id:
          type: string
          format: uuid
        name:
          type: string
        source_type:
          type: string
        url:
          type: string
        verified_at:
          type:
          - string
          - 'null'
          format: date-time
    SourceRepository:
      type: object
      required:
      - key
      - type
      - package_type
      - url
      properties:
        description:
          type:
          - string
          - 'null'
        key:
          type: string
        package_type:
          type: string
        type:
          type: string
        url:
          type: string
    SsoProviderInfo:
      type: object
      required:
      - id
      - name
      - provider_type
      - login_url
      properties:
        id:
          type: string
          format: uuid
        login_url:
          type: string
        name:
          type: string
        provider_type:
          type: string
    StaleArtifact:
      type: object
      description: Artifact aging report entry.
      required:
      - artifact_id
      - repository_key
      - name
      - path
      - size_bytes
      - created_at
      - days_since_download
      - download_count
      properties:
        artifact_id:
          type: string
          format: uuid
        created_at:
          type: string
          format: date-time
        days_since_download:
          type: integer
          format: int64
        download_count:
          type: integer
          format: int64
        last_downloaded_at:
          type:
          - string
          - 'null'
          format: date-time
        name:
          type: string
        path:
          type: string
        repository_key:
          type: string
        size_bytes:
          type: integer
          format: int64
    StaleQuery:
      type: object
      properties:
        days:
          type:
          - integer
          - 'null'
          format: int32
        limit:
          type:
          - integer
          - 'null'
          format: int64
    StatsQuery:
      type: object
      required:
      - staging_repo_id
      properties:
        staging_repo_id:
          type: string
          format: uuid
    StatsResponse:
      type: object
      required:
      - staging_repo_id
      - counts
      properties:
        counts:
          type: array
          items:
            $ref: '#/components/schemas/StatusCount'
        staging_repo_id:
          type: string
          format: uuid
    StatusCount:
      type: object
      required:
      - status
      - count
      properties:
        count:
          type: integer
          format: int64
        status:
          type: string
    StorageGcRequest:
      type: object
      description: Request body for storage GC.
      properties:
        dry_run:
          type: boolean
          description: When true, report what would be deleted without actually deleting.
    StorageGcResult:
      type: object
      description: Result of a storage GC run.
      required:
      - dry_run
      - storage_keys_deleted
      - artifacts_removed
      - bytes_freed
      - errors
      properties:
        artifacts_removed:
          type: integer
          format: int64
        bytes_freed:
          type: integer
          format: int64
        dry_run:
          type: boolean
        errors:
          type: array
          items:
            type: string
        storage_keys_deleted:
          type: integer
          format: int64
    StorageSnapshot:
      type: object
      description: A single day's storage metrics snapshot.
      required:
      - snapshot_date
      - total_repositories
      - total_artifacts
      - total_storage_bytes
      - total_downloads
      - total_users
      properties:
        snapshot_date:
          type: string
          format: date
        total_artifacts:
          type: integer
          format: int64
        total_downloads:
          type: integer
          format: int64
        total_repositories:
          type: integer
          format: int64
        total_storage_bytes:
          type: integer
          format: int64
        total_users:
          type: integer
          format: int64
    SubmitCrashesRequest:
      type: object
      required:
      - ids
      properties:
        ids:
          type: array
          items:
            type: string
            format: uuid
    SubmitResponse:
      type: object
      required:
      - marked_submitted
      properties:
        marked_submitted:
          type: integer
          format: int64
          minimum: 0
    SuggestResponse:
      type: object
      required:
      - suggestions
      properties:
        suggestions:
          type: array
          items:
            type: string
    SuppressIssueRequest:
      type: object
      required:
      - reason
      properties:
        reason:
          type: string
    SuppressRequest:
      type: object
      required:
      - service_name
      - until
      properties:
        service_name:
          type: string
        until:
          type: string
          format: date-time
    SyncPolicyListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/SyncPolicyResponse'
        total:
          type: integer
          minimum: 0
    SyncPolicyResponse:
      type: object
      required:
      - id
      - name
      - description
      - enabled
      - repo_selector
      - peer_selector
      - replication_mode
      - priority
      - artifact_filter
      - precedence
      - created_at
      - updated_at
      properties:
        artifact_filter:
          type: object
        created_at:
          type: string
          format: date-time
        description:
          type: string
        enabled:
          type: boolean
        id:
          type: string
          format: uuid
        name:
          type: string
        peer_selector:
          type: object
        precedence:
          type: integer
          format: int32
        priority:
          type: integer
          format: int32
        replication_mode:
          type: string
        repo_selector:
          type: object
        updated_at:
          type: string
          format: date-time
    SyncTaskResponse:
      type: object
      required:
      - id
      - artifact_id
      - storage_key
      - artifact_size
      - priority
      properties:
        artifact_id:
          type: string
          format: uuid
        artifact_size:
          type: integer
          format: int64
        id:
          type: string
          format: uuid
        priority:
          type: integer
          format: int32
        storage_key:
          type: string
    SystemSettings:
      type: object
      required:
      - storage_backend
      - storage_path
      - allow_anonymous_download
      - max_upload_size_bytes
      - retention_days
      - audit_retention_days
      - backup_retention_count
      - edge_stale_threshold_minutes
      properties:
        allow_anonymous_download:
          type: boolean
        audit_retention_days:
          type: integer
          format: int32
        backup_retention_count:
          type: integer
          format: int32
        edge_stale_threshold_minutes:
          type: integer
          format: int32
        max_upload_size_bytes:
          type: integer
          format: int64
        retention_days:
          type: integer
          format: int32
        storage_backend:
          type: string
        storage_path:
          type: string
    SystemStats:
      type: object
      required:
      - total_repositories
      - total_artifacts
      - total_storage_bytes
      - total_downloads
      - total_users
      - active_peers
      - pending_sync_tasks
      properties:
        active_peers:
          type: integer
          format: int64
        pending_sync_tasks:
          type: integer
          format: int64
        total_artifacts:
          type: integer
          format: int64
        total_downloads:
          type: integer
          format: int64
        total_repositories:
          type: integer
          format: int64
        total_storage_bytes:
          type: integer
          format: int64
        total_users:
          type: integer
          format: int64
    TelemetrySettings:
      type: object
      description: Telemetry configuration.
      required:
      - enabled
      - review_before_send
      - scrub_level
      - include_logs
      properties:
        enabled:
          type: boolean
        include_logs:
          type: boolean
        review_before_send:
          type: boolean
        scrub_level:
          type: string
    TestFormatRequest:
      type: object
      description: Request for testing a format handler
      required:
      - path
      - content
      properties:
        base64:
          type: boolean
          description: Whether content is base64 encoded
        content:
          type: string
          description: Base64-encoded content to test, or raw string content
        path:
          type: string
          description: Path to simulate for the artifact
    TestFormatResponse:
      type: object
      description: Response from format handler test
      required:
      - valid
      properties:
        metadata:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/TestMetadata'
            description: Parsed metadata if parse_metadata succeeded
        parse_error:
          type:
          - string
          - 'null'
          description: Parse error message if any
        valid:
          type: boolean
          description: Whether validation passed
        validation_error:
          type:
          - string
          - 'null'
          description: Validation error message if any
    TestMetadata:
      type: object
      description: Metadata returned from testing
      required:
      - path
      - content_type
      - size_bytes
      properties:
        content_type:
          type: string
        path:
          type: string
        size_bytes:
          type: integer
          format: int64
          minimum: 0
        version:
          type:
          - string
          - 'null'
    TestWebhookResponse:
      type: object
      required:
      - success
      properties:
        error:
          type:
          - string
          - 'null'
        response_body:
          type:
          - string
          - 'null'
        status_code:
          type:
          - integer
          - 'null'
          format: int32
          minimum: 0
        success:
          type: boolean
    TicketResponse:
      type: object
      required:
      - ticket
      - expires_in
      properties:
        expires_in:
          type: integer
          format: int64
          minimum: 0
        ticket:
          type: string
    TogglePolicyPayload:
      type: object
      required:
      - enabled
      properties:
        enabled:
          type: boolean
    ToggleRequest:
      type: object
      required:
      - enabled
      properties:
        enabled:
          type: boolean
    TokenInfoResponse:
      type: object
      required:
      - id
      - name
      - token_prefix
      - scopes
      - created_at
      - is_expired
      - repository_ids
      properties:
        created_at:
          type: string
          format: date-time
        expires_at:
          type:
          - string
          - 'null'
          format: date-time
        id:
          type: string
          format: uuid
        is_expired:
          type: boolean
        last_used_at:
          type:
          - string
          - 'null'
          format: date-time
        name:
          type: string
        repo_selector:
          type:
          - object
          - 'null'
          description: Dynamic repository selector, if configured.
        repository_ids:
          type: array
          items:
            type: string
            format: uuid
          description: Explicit repository IDs this token is restricted to (from join table).
        scopes:
          type: array
          items:
            type: string
        token_prefix:
          type: string
    TokenListResponse:
      type: object
      required:
      - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/TokenInfoResponse'
    TotpCodeRequest:
      type: object
      required:
      - code
      properties:
        code:
          type: string
    TotpDisableRequest:
      type: object
      required:
      - password
      - code
      properties:
        code:
          type: string
        password:
          type: string
    TotpEnableResponse:
      type: object
      required:
      - backup_codes
      properties:
        backup_codes:
          type: array
          items:
            type: string
    TotpSetupResponse:
      type: object
      required:
      - secret
      - qr_code_url
      properties:
        qr_code_url:
          type: string
        secret:
          type: string
    TotpVerifyRequest:
      type: object
      required:
      - totp_token
      - code
      properties:
        code:
          type: string
        totp_token:
          type: string
    TransferSessionResponse:
      type: object
      required:
      - id
      - artifact_id
      - requesting_peer_id
      - total_size
      - chunk_size
      - total_chunks
      - completed_chunks
      - checksum_algo
      - artifact_checksum
      - status
      properties:
        artifact_checksum:
          type: string
        artifact_id:
          type: string
          format: uuid
        checksum_algo:
          type: string
        chunk_size:
          type: integer
          format: int32
        completed_chunks:
          type: integer
          format: int32
        id:
          type: string
          format: uuid
        requesting_peer_id:
          type: string
          format: uuid
        status:
          type: string
        total_chunks:
          type: integer
          format: int32
        total_size:
          type: integer
          format: int64
    TreeNodeResponse:
      type: object
      required:
      - id
      - name
      - path
      - type
      - has_children
      properties:
        children_count:
          type:
          - integer
          - 'null'
          format: int64
        created_at:
          type:
          - string
          - 'null'
        has_children:
          type: boolean
        id:
          type: string
        name:
          type: string
        path:
          type: string
        repository_key:
          type:
          - string
          - 'null'
        size_bytes:
          type:
          - integer
          - 'null'
          format: int64
        type:
          type: string
    TreeResponse:
      type: object
      required:
      - nodes
      properties:
        nodes:
          type: array
          items:
            $ref: '#/components/schemas/TreeNodeResponse'
    TriggerChecksRequest:
      type: object
      properties:
        artifact_id:
          type:
          - string
          - 'null'
          format: uuid
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
    TriggerChecksResponse:
      type: object
      required:
      - message
      - artifacts_queued
      properties:
        artifacts_queued:
          type: integer
          format: int32
          minimum: 0
        message:
          type: string
    TriggerScanRequest:
      type: object
      properties:
        artifact_id:
          type:
          - string
          - 'null'
          format: uuid
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
    TriggerScanResponse:
      type: object
      required:
      - message
      - artifacts_queued
      properties:
        artifacts_queued:
          type: integer
          format: int32
          minimum: 0
        message:
          type: string
    UninstallQuery:
      type: object
      description: Request for uninstalling a plugin
      properties:
        force:
          type:
          - boolean
          - 'null'
    UpdateAnalysisBody:
      type: object
      required:
      - project_uuid
      - component_uuid
      - vulnerability_uuid
      - state
      properties:
        component_uuid:
          type: string
        details:
          type:
          - string
          - 'null'
        justification:
          type:
          - string
          - 'null'
        project_uuid:
          type: string
        state:
          type: string
        suppressed:
          type: boolean
        vulnerability_uuid:
          type: string
    UpdateBuildRequest:
      type: object
      required:
      - status
      properties:
        finished_at:
          type:
          - string
          - 'null'
          format: date-time
        status:
          type: string
    UpdateChunkAvailabilityBody:
      type: object
      required:
      - chunk_bitmap
      - total_chunks
      properties:
        chunk_bitmap:
          type: array
          items:
            type: integer
            format: int32
            minimum: 0
        total_chunks:
          type: integer
          format: int32
    UpdateCveStatusRequest:
      type: object
      required:
      - status
      properties:
        reason:
          type:
          - string
          - 'null'
        status:
          type: string
    UpdateGateRequest:
      type: object
      properties:
        action:
          type:
          - string
          - 'null'
        description:
          type:
          - string
          - 'null'
        enforce_on_download:
          type:
          - boolean
          - 'null'
        enforce_on_promotion:
          type:
          - boolean
          - 'null'
        is_enabled:
          type:
          - boolean
          - 'null'
        max_critical_issues:
          type:
          - integer
          - 'null'
          format: int32
        max_high_issues:
          type:
          - integer
          - 'null'
          format: int32
        max_medium_issues:
          type:
          - integer
          - 'null'
          format: int32
        min_health_score:
          type:
          - integer
          - 'null'
          format: int32
        min_metadata_score:
          type:
          - integer
          - 'null'
          format: int32
        min_quality_score:
          type:
          - integer
          - 'null'
          format: int32
        min_security_score:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type:
          - string
          - 'null'
        required_checks:
          type:
          - array
          - 'null'
          items:
            type: string
    UpdateLdapConfigRequest:
      type: object
      properties:
        admin_group_dn:
          type:
          - string
          - 'null'
        bind_dn:
          type:
          - string
          - 'null'
        bind_password:
          type:
          - string
          - 'null'
        display_name_attribute:
          type:
          - string
          - 'null'
        email_attribute:
          type:
          - string
          - 'null'
        group_base_dn:
          type:
          - string
          - 'null'
        group_filter:
          type:
          - string
          - 'null'
        groups_attribute:
          type:
          - string
          - 'null'
        is_enabled:
          type:
          - boolean
          - 'null'
        name:
          type:
          - string
          - 'null'
        priority:
          type:
          - integer
          - 'null'
          format: int32
        server_url:
          type:
          - string
          - 'null'
        use_starttls:
          type:
          - boolean
          - 'null'
        user_base_dn:
          type:
          - string
          - 'null'
        user_filter:
          type:
          - string
          - 'null'
        username_attribute:
          type:
          - string
          - 'null'
    UpdateOidcConfigRequest:
      type: object
      properties:
        attribute_mapping:
          type:
          - object
          - 'null'
        auto_create_users:
          type:
          - boolean
          - 'null'
        client_id:
          type:
          - string
          - 'null'
        client_secret:
          type:
          - string
          - 'null'
        is_enabled:
          type:
          - boolean
          - 'null'
        issuer_url:
          type:
          - string
          - 'null'
        name:
          type:
          - string
          - 'null'
        scopes:
          type:
          - array
          - 'null'
          items:
            type: string
    UpdatePluginConfigRequest:
      type: object
      required:
      - config
      properties:
        config:
          type: object
    UpdatePolicyRequest:
      type: object
      required:
      - name
      - max_severity
      - block_unscanned
      - block_on_fail
      - is_enabled
      properties:
        block_on_fail:
          type: boolean
        block_unscanned:
          type: boolean
        is_enabled:
          type: boolean
        max_artifact_age_days:
          type:
          - integer
          - 'null'
          format: int32
        max_severity:
          type: string
        min_staging_hours:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type: string
        require_signature:
          type: boolean
    UpdateRepositoryRequest:
      type: object
      properties:
        description:
          type:
          - string
          - 'null'
        index_upstream_url:
          type:
          - string
          - 'null'
          description: 'Update the Cargo index upstream URL (stored in `repository_config`).

            When provided, upserts the `index_upstream_url` key for this repository.'
        is_public:
          type:
          - boolean
          - 'null'
        key:
          type:
          - string
          - 'null'
        name:
          type:
          - string
          - 'null'
        quota_bytes:
          type:
          - integer
          - 'null'
          format: int64
    UpdateRuleRequest:
      type: object
      properties:
        allowed_licenses:
          type:
          - array
          - 'null'
          items:
            type: string
        auto_promote:
          type:
          - boolean
          - 'null'
        is_enabled:
          type:
          - boolean
          - 'null'
        max_artifact_age_days:
          type:
          - integer
          - 'null'
          format: int32
        max_cve_severity:
          type:
          - string
          - 'null'
        min_health_score:
          type:
          - integer
          - 'null'
          format: int32
        min_staging_hours:
          type:
          - integer
          - 'null'
          format: int32
        name:
          type:
          - string
          - 'null'
        require_signature:
          type:
          - boolean
          - 'null'
    UpdateSamlConfigRequest:
      type: object
      properties:
        admin_group:
          type:
          - string
          - 'null'
        attribute_mapping:
          type:
          - object
          - 'null'
        certificate:
          type:
          - string
          - 'null'
        entity_id:
          type:
          - string
          - 'null'
        is_enabled:
          type:
          - boolean
          - 'null'
        name:
          type:
          - string
          - 'null'
        name_id_format:
          type:
          - string
          - 'null'
        require_signed_assertions:
          type:
          - boolean
          - 'null'
        sign_requests:
          type:
          - boolean
          - 'null'
        slo_url:
          type:
          - string
          - 'null'
        sp_entity_id:
          type:
          - string
          - 'null'
        sso_url:
          type:
          - string
          - 'null'
    UpdateServiceAccountRequest:
      type: object
      properties:
        display_name:
          type:
          - string
          - 'null'
        is_active:
          type:
          - boolean
          - 'null'
    UpdateSigningConfigPayload:
      type: object
      properties:
        require_signatures:
          type:
          - boolean
          - 'null'
        sign_metadata:
          type:
          - boolean
          - 'null'
        sign_packages:
          type:
          - boolean
          - 'null'
        signing_key_id:
          type:
          - string
          - 'null'
          format: uuid
    UpdateSyncPolicyPayload:
      type: object
      properties:
        artifact_filter:
          type: object
        description:
          type:
          - string
          - 'null'
        enabled:
          type:
          - boolean
          - 'null'
        name:
          type:
          - string
          - 'null'
        peer_selector:
          type: object
        precedence:
          type:
          - integer
          - 'null'
          format: int32
        priority:
          type:
          - integer
          - 'null'
          format: int32
        replication_mode:
          type:
          - string
          - 'null'
        repo_selector:
          type: object
    UpdateUserRequest:
      type: object
      properties:
        display_name:
          type:
          - string
          - 'null'
        email:
          type:
          - string
          - 'null'
        is_active:
          type:
          - boolean
          - 'null'
        is_admin:
          type:
          - boolean
          - 'null'
    UpdateVirtualMembersRequest:
      type: object
      required:
      - members
      properties:
        members:
          type: array
          items:
            $ref: '#/components/schemas/VirtualMemberPriority'
    UpsertLicensePolicyRequest:
      type: object
      required:
      - name
      - allowed_licenses
      - denied_licenses
      properties:
        action:
          type: string
        allow_unknown:
          type: boolean
        allowed_licenses:
          type: array
          items:
            type: string
        denied_licenses:
          type: array
          items:
            type: string
        description:
          type:
          - string
          - 'null'
        is_enabled:
          type: boolean
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
    UpsertScanConfigRequest:
      type: object
      description: Request to create or update a scan configuration.
      required:
      - scan_enabled
      - scan_on_upload
      - scan_on_proxy
      - block_on_policy_violation
      - severity_threshold
      properties:
        block_on_policy_violation:
          type: boolean
        scan_enabled:
          type: boolean
        scan_on_proxy:
          type: boolean
        scan_on_upload:
          type: boolean
        severity_threshold:
          type: string
    UpstreamAuthRequest:
      type: object
      required:
      - auth_type
      properties:
        auth_type:
          type: string
          description: 'Auth type: "basic", "bearer", or "none" to remove.'
        password:
          type:
          - string
          - 'null'
          description: Password (basic) or token (bearer). Write-only, never returned.
        username:
          type:
          - string
          - 'null'
          description: Username for basic auth.
    UserListResponse:
      type: object
      required:
      - items
      - pagination
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/AdminUserResponse'
        pagination:
          $ref: '#/components/schemas/Pagination'
    UserResponse:
      type: object
      required:
      - id
      - username
      - email
      - is_admin
      - totp_enabled
      properties:
        display_name:
          type:
          - string
          - 'null'
        email:
          type: string
        id:
          type: string
          format: uuid
        is_admin:
          type: boolean
        totp_enabled:
          type: boolean
        username:
          type: string
    VirtualMemberPriority:
      type: object
      required:
      - member_key
      - priority
      properties:
        member_key:
          type: string
        priority:
          type: integer
          format: int32
    VirtualMemberResponse:
      type: object
      required:
      - id
      - member_repo_id
      - member_repo_key
      - member_repo_name
      - member_repo_type
      - priority
      - created_at
      properties:
        created_at:
          type: string
          format: date-time
        id:
          type: string
          format: uuid
        member_repo_id:
          type: string
          format: uuid
        member_repo_key:
          type: string
        member_repo_name:
          type: string
        member_repo_type:
          type: string
        priority:
          type: integer
          format: int32
    VirtualMembersListResponse:
      type: object
      required:
      - members
      properties:
        members:
          type: array
          items:
            $ref: '#/components/schemas/VirtualMemberResponse'
    WasmPluginResponse:
      type: object
      description: WASM plugin response with extended fields
      required:
      - id
      - name
      - version
      - display_name
      - status
      - plugin_type
      - source_type
      - capabilities
      - resource_limits
      - installed_at
      - updated_at
      properties:
        author:
          type:
          - string
          - 'null'
        capabilities:
          type: object
        description:
          type:
          - string
          - 'null'
        display_name:
          type: string
        enabled_at:
          type:
          - string
          - 'null'
          format: date-time
        homepage:
          type:
          - string
          - 'null'
        id:
          type: string
          format: uuid
        installed_at:
          type: string
          format: date-time
        license:
          type:
          - string
          - 'null'
        name:
          type: string
        plugin_type:
          type: string
        resource_limits:
          type: object
        source_ref:
          type:
          - string
          - 'null'
        source_type:
          type: string
        source_url:
          type:
          - string
          - 'null'
        status:
          type: string
        updated_at:
          type: string
          format: date-time
        version:
          type: string
    WebhookEvent:
      type: string
      description: Webhook event types
      enum:
      - artifact_uploaded
      - artifact_deleted
      - repository_created
      - repository_deleted
      - user_created
      - user_deleted
      - build_started
      - build_completed
      - build_failed
    WebhookListResponse:
      type: object
      required:
      - items
      - total
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/WebhookResponse'
        total:
          type: integer
          format: int64
    WebhookResponse:
      type: object
      required:
      - id
      - name
      - url
      - events
      - is_enabled
      - created_at
      properties:
        created_at:
          type: string
          format: date-time
        events:
          type: array
          items:
            type: string
        headers:
          type:
          - object
          - 'null'
        id:
          type: string
          format: uuid
        is_enabled:
          type: boolean
        last_triggered_at:
          type:
          - string
          - 'null'
          format: date-time
        name:
          type: string
        repository_id:
          type:
          - string
          - 'null'
          format: uuid
        url:
          type: string
  securitySchemes:
    bearer_auth:
      type: http
      scheme: bearer
      bearerFormat: JWT
tags:
- name: auth
  description: Authentication and token management
- name: repositories
  description: Repository CRUD and artifact operations
- name: artifacts
  description: Standalone artifact access by ID
- name: users
  description: User management and API tokens
- name: groups
  description: User group management
- name: permissions
  description: RBAC permission management
- name: builds
  description: Build management and tracking
- name: packages
  description: Package discovery and version listing
- name: search
  description: Full-text search and filtering
- name: promotion
  description: Staging-to-release artifact promotion
- name: approval
  description: Promotion approval workflow
- name: security
  description: Security policies and scanning
- name: sbom
  description: Software Bill of Materials
- name: signing
  description: Signing key management
- name: plugins
  description: WASM plugin lifecycle
- name: webhooks
  description: Event webhook management
- name: peers
  description: Peer replication and sync
- name: admin
  description: System administration
- name: analytics
  description: Storage and download analytics
- name: lifecycle
  description: Retention policies and cleanup
- name: monitoring
  description: Health monitoring and alerts
- name: telemetry
  description: Crash reporting and telemetry
- name: sso
  description: Single sign-on configuration
- name: migration
  description: Data migration and import
- name: quality
  description: Artifact health scoring and quality gates
- name: service_accounts
  description: Service account management
- name: health
  description: Health and readiness checks
- name: repository-labels
  description: Repository label management
- name: peer-instance-labels
  description: Peer instance label management
- name: artifact-labels
  description: Artifact label management
- name: uploads
  description: Chunked/resumable file uploads