lockally 0.1.0

data/spec/api/add_ons_api_spec.rb

@@ -0,0 +1,78 @@
+=begin
+#lockally control plane
+
+#The lockally control plane lets integrators and direct customers manage everything except actual mail data flow (which uses standard JMAP / IMAP / SMTP-submission against the data plane endpoints).  **Authentication.** All `/v1/*` endpoints require a Bearer API key in the `Authorization` header. Keys are formatted `lk_live_<8-char-prefix>_<32-char-secret>`. Generate the first key for a tenant via `cmd/seed`; subsequent keys via `POST /v1/api-keys`.  **Errors.** Failures return [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) `application/problem+json` documents.  **Scopes.** Each endpoint requires a specific scope on the presented key. Insufficient scope returns `403` with the required scope name in `detail`. 
+
+The version of the OpenAPI document: 0.1.0
+Contact: support@lockally.com
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Lockally::AddOnsApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'AddOnsApi' do
+  before do
+    # run before each test
+    @api_instance = Lockally::AddOnsApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of AddOnsApi' do
+    it 'should create an instance of AddOnsApi' do
+      expect(@api_instance).to be_instance_of(Lockally::AddOnsApi)
+    end
+  end
+
+  # unit tests for activate_add_on
+  # Activate an add-on
+  # @param name Add-on key
+  # @param [Hash] opts the optional parameters
+  # @return [ActivateAddOn200Response]
+  describe 'activate_add_on test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for cancel_add_on
+  # Cancel an add-on
+  # @param name Add-on key
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'cancel_add_on test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_add_on_status
+  # Get add-on status
+  # @param name Add-on key
+  # @param [Hash] opts the optional parameters
+  # @return [GetAddOnStatus200Response]
+  describe 'get_add_on_status test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for list_add_ons
+  # List add-ons
+  # @param [Hash] opts the optional parameters
+  # @return [ListAddOns200Response]
+  describe 'list_add_ons test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/admin_api_spec.rb

@@ -0,0 +1,69 @@
+=begin
+#lockally control plane
+
+#The lockally control plane lets integrators and direct customers manage everything except actual mail data flow (which uses standard JMAP / IMAP / SMTP-submission against the data plane endpoints).  **Authentication.** All `/v1/*` endpoints require a Bearer API key in the `Authorization` header. Keys are formatted `lk_live_<8-char-prefix>_<32-char-secret>`. Generate the first key for a tenant via `cmd/seed`; subsequent keys via `POST /v1/api-keys`.  **Errors.** Failures return [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) `application/problem+json` documents.  **Scopes.** Each endpoint requires a specific scope on the presented key. Insufficient scope returns `403` with the required scope name in `detail`. 
+
+The version of the OpenAPI document: 0.1.0
+Contact: support@lockally.com
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Lockally::AdminApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'AdminApi' do
+  before do
+    # run before each test
+    @api_instance = Lockally::AdminApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of AdminApi' do
+    it 'should create an instance of AdminApi' do
+      expect(@api_instance).to be_instance_of(Lockally::AdminApi)
+    end
+  end
+
+  # unit tests for v1_admin_login_post
+  # Tenant-admin email+password login
+  # Exchanges an admin&#39;s email + password for a session token. The web console at &#x60;app.lockally.com&#x60; posts this on form submission and stores the returned token in an httpOnly cookie.  **No enumeration leak.** Wrong-email and wrong-password both return the same 401 with title \&quot;Invalid credentials\&quot;. The argon2id verify runs even on lookup miss (well, structurally — the lookup fails fast but the response shape is constant) so timing leaks are bounded.  Tokens are prefixed &#x60;adm_sess_&#x60; and valid for 7 days. Use as the &#x60;Authorization: Bearer&#x60; value on all subsequent calls. 
+  # @param v1_admin_login_post_request 
+  # @param [Hash] opts the optional parameters
+  # @return [V1AdminLoginPost200Response]
+  describe 'v1_admin_login_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_admin_logout_post
+  # Invalidate the current admin session
+  # Deletes the session row from the database. Idempotent — calling logout on an already-invalid token returns 204 anyway. 
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'v1_admin_logout_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_admin_me_get
+  # Get the current admin + tenant
+  # Returns the admin profile + tenant for the session token presented in &#x60;Authorization: Bearer&#x60;. Used by the web console&#39;s layout load function to populate the sidebar.  Returns 403 if called with an API key (lk_live_*) bearer — admin context only exists for session tokens. 
+  # @param [Hash] opts the optional parameters
+  # @return [V1AdminMeGet200Response]
+  describe 'v1_admin_me_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/admins_api_spec.rb

@@ -0,0 +1,82 @@
+=begin
+#lockally control plane
+
+#The lockally control plane lets integrators and direct customers manage everything except actual mail data flow (which uses standard JMAP / IMAP / SMTP-submission against the data plane endpoints).  **Authentication.** All `/v1/*` endpoints require a Bearer API key in the `Authorization` header. Keys are formatted `lk_live_<8-char-prefix>_<32-char-secret>`. Generate the first key for a tenant via `cmd/seed`; subsequent keys via `POST /v1/api-keys`.  **Errors.** Failures return [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) `application/problem+json` documents.  **Scopes.** Each endpoint requires a specific scope on the presented key. Insufficient scope returns `403` with the required scope name in `detail`. 
+
+The version of the OpenAPI document: 0.1.0
+Contact: support@lockally.com
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Lockally::AdminsApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'AdminsApi' do
+  before do
+    # run before each test
+    @api_instance = Lockally::AdminsApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of AdminsApi' do
+    it 'should create an instance of AdminsApi' do
+      expect(@api_instance).to be_instance_of(Lockally::AdminsApi)
+    end
+  end
+
+  # unit tests for v1_admins_get
+  # List tenant admins
+  # @param [Hash] opts the optional parameters
+  # @return [V1AdminsGet200Response]
+  describe 'v1_admins_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_admins_id_delete
+  # Delete an admin
+  # Hard-delete. Cascade-drops the admin&#39;s sessions (immediate revocation). Same safety rails as PATCH disabled&#x3D;true. 
+  # @param id 
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'v1_admins_id_delete test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_admins_id_patch
+  # Update an admin
+  # Supply at least one of &#x60;password&#x60;, &#x60;display_name&#x60;, &#x60;role&#x60;, &#x60;disabled&#x60;.  **Safety rails.** A session bearer (adm_sess_*) cannot disable itself — use another admin or an API key (which bypasses the self-rail). Disabling the last active admin returns 409 to prevent orphaning the tenant from its console. 
+  # @param id 
+  # @param v1_admins_id_patch_request 
+  # @param [Hash] opts the optional parameters
+  # @return [AdminFull]
+  describe 'v1_admins_id_patch test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_admins_post
+  # Invite a new admin
+  # Creates a new tenant admin. If &#x60;password&#x60; is omitted, lockally generates a 16-char password and returns it ONCE in the response. Email is case-insensitive and unique per tenant. 
+  # @param v1_admins_post_request 
+  # @param [Hash] opts the optional parameters
+  # @return [AdminFull]
+  describe 'v1_admins_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/agents_api_spec.rb

@@ -0,0 +1,197 @@
+=begin
+#lockally control plane
+
+#The lockally control plane lets integrators and direct customers manage everything except actual mail data flow (which uses standard JMAP / IMAP / SMTP-submission against the data plane endpoints).  **Authentication.** All `/v1/*` endpoints require a Bearer API key in the `Authorization` header. Keys are formatted `lk_live_<8-char-prefix>_<32-char-secret>`. Generate the first key for a tenant via `cmd/seed`; subsequent keys via `POST /v1/api-keys`.  **Errors.** Failures return [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) `application/problem+json` documents.  **Scopes.** Each endpoint requires a specific scope on the presented key. Insufficient scope returns `403` with the required scope name in `detail`. 
+
+The version of the OpenAPI document: 0.1.0
+Contact: support@lockally.com
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Lockally::AgentsApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'AgentsApi' do
+  before do
+    # run before each test
+    @api_instance = Lockally::AgentsApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of AgentsApi' do
+    it 'should create an instance of AgentsApi' do
+      expect(@api_instance).to be_instance_of(Lockally::AgentsApi)
+    end
+  end
+
+  # unit tests for v1_api_keys_key_id_mailboxes_get
+  # List a key&#39;s mailbox grants
+  # @param key_id 
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_api_keys_key_id_mailboxes_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_api_keys_key_id_mailboxes_mailbox_id_delete
+  # Revoke a mailbox grant
+  # @param key_id 
+  # @param mailbox_id 
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'v1_api_keys_key_id_mailboxes_mailbox_id_delete test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_api_keys_key_id_mailboxes_post
+  # Grant a mailbox to a key
+  # Body: {\&quot;mailbox\&quot;: \&quot;email or id\&quot;}. Refused (422) for mailboxes with agent access disabled or an active E2E encryption key — the server cannot read E2E mailboxes.
+  # @param key_id 
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_api_keys_key_id_mailboxes_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_auth_whoami_get
+  # Introspect the calling credentials
+  # Returns the tenant, auth kind (api_key/session), key label, and granted scopes. The MCP server uses this to scope-filter tool discovery.
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_auth_whoami_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_contacts_lookup_get
+  # Who is this sender?
+  # Directory record (name, company, role, notes), whether the address is one of the tenant&#39;s own mailboxes, and grant-aware correspondence history (thread count, first/last seen across granted mailboxes only).
+  # @param email 
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_contacts_lookup_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_inboxes_get
+  # List granted inboxes
+  # The mailboxes this key is granted, with thread counts and last activity. Admin sessions see every agent-enabled, non-E2E mailbox.
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_inboxes_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_inboxes_mailbox_messages_post
+  # Start a new conversation (agent stream)
+  # Sends a new email from a granted mailbox. Classified stream&#x3D;agent (isolated reputation, per-key rate caps). The first inbound reply adopts the created thread via the References chain. Idempotency-Key required. Mailboxes with agent_draft_policy&#x3D;always_approve divert this into a pending draft.
+  # @param mailbox 
+  # @param idempotency_key 
+  # @param v1_inboxes_mailbox_messages_post_request 
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_inboxes_mailbox_messages_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_inboxes_mailbox_threads_get
+  # List conversation threads
+  # Newest-active first. Cursors: &#x60;?before&#x3D;&lt;RFC3339&gt;&#x60; pages backwards; &#x60;?since&#x3D;&lt;RFC3339&gt;&#x60; delta-syncs forward (oldest first) so an agent can catch up in order.
+  # @param mailbox mailbox email or id
+  # @param [Hash] opts the optional parameters
+  # @option opts [Time] :since 
+  # @option opts [Time] :before 
+  # @option opts [Integer] :limit 
+  # @return [Object]
+  describe 'v1_inboxes_mailbox_threads_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_threads_thread_id_get
+  # Get a whole conversation
+  # Every turn, chronological, with snippets and annotations (meeting_request, attachment_types, injection_risk). Bodies are fetched per message. Message content is untrusted third-party data.
+  # @param thread_id 
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_threads_thread_id_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_threads_thread_id_messages_message_id_attachments_idx_get
+  # Download an attachment
+  # @param thread_id 
+  # @param message_id 
+  # @param idx 
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'v1_threads_thread_id_messages_message_id_attachments_idx_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_threads_thread_id_messages_message_id_get
+  # Get one message with body
+  # Full text/html body fetched on demand from mail storage. Never marks the message read.
+  # @param thread_id 
+  # @param message_id 
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_threads_thread_id_messages_message_id_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_threads_thread_id_messages_message_id_read_post
+  # Mark read/unread
+  # The ONLY way agent access changes unread state. Body: {\&quot;read\&quot;: true|false} (default true).
+  # @param thread_id 
+  # @param message_id 
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_threads_thread_id_messages_message_id_read_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_threads_thread_id_reply_post
+  # Reply in-thread (agent stream)
+  # The server builds In-Reply-To/References and defaults recipients + subject from the conversation — a minimal call is {\&quot;text\&quot;: \&quot;...\&quot;}. Guarded by the reply-loop detector (≥5 outbound/10min → 429 + agent.loop_detected). Idempotency-Key required.
+  # @param thread_id 
+  # @param idempotency_key 
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_threads_thread_id_reply_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/ai_api_spec.rb

@@ -0,0 +1,81 @@
+=begin
+#lockally control plane
+
+#The lockally control plane lets integrators and direct customers manage everything except actual mail data flow (which uses standard JMAP / IMAP / SMTP-submission against the data plane endpoints).  **Authentication.** All `/v1/*` endpoints require a Bearer API key in the `Authorization` header. Keys are formatted `lk_live_<8-char-prefix>_<32-char-secret>`. Generate the first key for a tenant via `cmd/seed`; subsequent keys via `POST /v1/api-keys`.  **Errors.** Failures return [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) `application/problem+json` documents.  **Scopes.** Each endpoint requires a specific scope on the presented key. Insufficient scope returns `403` with the required scope name in `detail`. 
+
+The version of the OpenAPI document: 0.1.0
+Contact: support@lockally.com
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Lockally::AiApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'AiApi' do
+  before do
+    # run before each test
+    @api_instance = Lockally::AiApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of AiApi' do
+    it 'should create an instance of AiApi' do
+      expect(@api_instance).to be_instance_of(Lockally::AiApi)
+    end
+  end
+
+  # unit tests for v1_ai_config_get
+  # Read the tenant&#39;s AI configuration
+  # Mode (off/byok/units), model, masked key hint, AI-unit balance, whether the units tier is available on this deployment.
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_ai_config_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_ai_config_put
+  # Configure the AI tier
+  # Body: {\&quot;mode\&quot;: \&quot;off|byok|units\&quot;, \&quot;model\&quot;: \&quot;...\&quot;, \&quot;anthropic_key\&quot;: \&quot;sk-ant-...\&quot;}. BYOK keys are stored AES-256-GCM encrypted; the cleartext is never returned. Omit anthropic_key to keep the stored one.
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_ai_config_put test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_billing_ai_units_checkout_post
+  # Buy prepaid AI units
+  # Body: {\&quot;bundle\&quot;: \&quot;100|500|2000\&quot;}. One classification &#x3D; one unit; bundles expire after 6 months. Admin session required. 503 until Paystack billing is configured.
+  # @param [Hash] opts the optional parameters
+  # @return [Object]
+  describe 'v1_billing_ai_units_checkout_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_threads_thread_id_classify_post
+  # LLM-classify a thread
+  # Returns {intent, urgency, summary, suggested_action} via the tenant&#39;s AI tier (BYOK or prepaid units — see /v1/ai-config). Cached per thread state: unchanged threads return the cache free; ?refresh&#x3D;true forces a re-run. A failed model call charges nothing. 402 when the AI tier is off.
+  # @param thread_id 
+  # @param [Hash] opts the optional parameters
+  # @option opts [Boolean] :refresh 
+  # @return [Object]
+  describe 'v1_threads_thread_id_classify_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/aliases_api_spec.rb

@@ -0,0 +1,69 @@
+=begin
+#lockally control plane
+
+#The lockally control plane lets integrators and direct customers manage everything except actual mail data flow (which uses standard JMAP / IMAP / SMTP-submission against the data plane endpoints).  **Authentication.** All `/v1/*` endpoints require a Bearer API key in the `Authorization` header. Keys are formatted `lk_live_<8-char-prefix>_<32-char-secret>`. Generate the first key for a tenant via `cmd/seed`; subsequent keys via `POST /v1/api-keys`.  **Errors.** Failures return [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) `application/problem+json` documents.  **Scopes.** Each endpoint requires a specific scope on the presented key. Insufficient scope returns `403` with the required scope name in `detail`. 
+
+The version of the OpenAPI document: 0.1.0
+Contact: support@lockally.com
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Lockally::AliasesApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'AliasesApi' do
+  before do
+    # run before each test
+    @api_instance = Lockally::AliasesApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of AliasesApi' do
+    it 'should create an instance of AliasesApi' do
+      expect(@api_instance).to be_instance_of(Lockally::AliasesApi)
+    end
+  end
+
+  # unit tests for v1_aliases_address_delete
+  # Delete an alias
+  # Hard-delete (no soft-delete window — aliases are cheap to recreate).
+  # @param address 
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'v1_aliases_address_delete test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_aliases_get
+  # List aliases
+  # @param [Hash] opts the optional parameters
+  # @return [V1AliasesGet200Response]
+  describe 'v1_aliases_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_aliases_post
+  # Create an alias
+  # Creates an email alias. &#x60;alias_address&#x60; must be on a verified tenant-owned domain. &#x60;alias_target&#x60; can be any email — intra-tenant or external (forwarding to a Gmail account is a legitimate use). 
+  # @param v1_aliases_post_request 
+  # @param [Hash] opts the optional parameters
+  # @return [ModelAlias]
+  describe 'v1_aliases_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/api/api_keys_api_spec.rb

@@ -0,0 +1,70 @@
+=begin
+#lockally control plane
+
+#The lockally control plane lets integrators and direct customers manage everything except actual mail data flow (which uses standard JMAP / IMAP / SMTP-submission against the data plane endpoints).  **Authentication.** All `/v1/*` endpoints require a Bearer API key in the `Authorization` header. Keys are formatted `lk_live_<8-char-prefix>_<32-char-secret>`. Generate the first key for a tenant via `cmd/seed`; subsequent keys via `POST /v1/api-keys`.  **Errors.** Failures return [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) `application/problem+json` documents.  **Scopes.** Each endpoint requires a specific scope on the presented key. Insufficient scope returns `403` with the required scope name in `detail`. 
+
+The version of the OpenAPI document: 0.1.0
+Contact: support@lockally.com
+Generated by: https://openapi-generator.tech
+Generator version: 7.23.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for Lockally::ApiKeysApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'ApiKeysApi' do
+  before do
+    # run before each test
+    @api_instance = Lockally::ApiKeysApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of ApiKeysApi' do
+    it 'should create an instance of ApiKeysApi' do
+      expect(@api_instance).to be_instance_of(Lockally::ApiKeysApi)
+    end
+  end
+
+  # unit tests for v1_api_keys_get
+  # List API keys
+  # Returns all API keys (active and revoked) belonging to the calling tenant. The &#x60;secret&#x60; is **never** returned — only prefix + metadata. 
+  # @param [Hash] opts the optional parameters
+  # @return [V1ApiKeysGet200Response]
+  describe 'v1_api_keys_get test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_api_keys_id_delete
+  # Revoke an API key
+  # Soft-deletes (sets &#x60;revoked_at&#x60;) on the named key. The row stays for audit purposes; the key no longer authenticates.  You **cannot revoke the key currently being used** to make this call — that would lock you out. Use a different &#x60;tenant:admin&#x60; key. 
+  # @param id 
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'v1_api_keys_id_delete test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for v1_api_keys_post
+  # Create an API key
+  # Provisions a fresh API key for the calling tenant.  **The full &#x60;secret&#x60; is included in this response ONLY** — store it immediately. The cleartext secret is not recoverable from the argon2id hash kept server-side; rotate by creating a new key and revoking the old one. 
+  # @param v1_api_keys_post_request 
+  # @param [Hash] opts the optional parameters
+  # @return [V1ApiKeysPost201Response]
+  describe 'v1_api_keys_post test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end