@blezgo/api-sdk 0.1.0 → 0.1.2

package/dist/apikeys/generated.d.ts

@@ -0,0 +1,2053 @@
+/**
+ * This file was auto-generated by openapi-typescript.
+ * Do not make direct changes to the file.
+ */
+export interface paths {
+    "/v1/api-keys": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Api Keys
+         * @description **List API keys for the organization.**
+         *
+         *     **Purpose**: Retrieve all API keys with optional filtering and pagination.
+         *
+         *     **Query Parameters**:
+         *     - environment: Filter by environment (development, test, live)
+         *     - key_type: Filter by type (public, secret, restricted, webhook)
+         *     - status: Filter by status (active, rotating, revoked)
+         *     - page: Page number (default: 1)
+         *     - page_size: Items per page (default: 50, max: 100)
+         *
+         *     **Example Request**:
+         *     ```
+         *     GET /v1/api-keys?environment=live&key_type=public&page=1&page_size=20
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "keys": [
+         *                 {
+         *                     "api_client_id": "apicli_abc123...",
+         *                     "masked_key": "pk_live_***xyz",
+         *                     "client_name": "Production Frontend",
+         *                     "key_type": "public",
+         *                     "environment": "live",
+         *                     "status": "active",
+         *                     "created_at": "2026-02-01T00:00:00Z"
+         *                 }
+         *             ],
+         *             "total": 45,
+         *             "page": 1,
+         *             "page_size": 20
+         *         }
+         *     }
+         *     ```
+         *
+         *     **Performance**:
+         *     - Target: < 50ms (with proper indexing)
+         *     - Cached for 30 seconds
+         *
+         *     **Authentication**: Required (api_keys.read.all permission)
+         *     **Rate Limit**: 300 requests per minute per user
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 400: Invalid query parameters
+         *     - 401: Unauthorized
+         *     - 403: Forbidden
+         *     - 500: Server error
+         */
+        get: operations["listApiKeys"];
+        put?: never;
+        /**
+         * Create Api Key
+         * @description **Create a new API key.**
+         *
+         *     **Purpose**: Generate a secure API key for programmatic access to the platform.
+         *
+         *     **Flow**:
+         *     1. Validate request data (key_type, environment, rate limits)
+         *     2. Generate cryptographically secure random key
+         *     3. Hash key with SHA-256 + per-key salt
+         *     4. Encrypt key for optional display (AES-256)
+         *     5. Store in database with metadata
+         *     6. Create audit log entry
+         *     7. Return key details with plaintext key (shown ONCE)
+         *
+         *     **Example Request**:
+         *     ```json
+         *     POST /v1/api-keys
+         *     {
+         *         "client_name": "Production Frontend",
+         *         "key_type": "public",
+         *         "environment": "live",
+         *         "scopes": ["orders:read", "products:read"],
+         *         "rate_limit_per_minute": 100,
+         *         "allowed_ips": ["203.0.113.0/24"],
+         *         "expires_at": "2027-12-31T23:59:59Z"
+         *     }
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "api_client_id": "apicli_abc123...",
+         *             "plaintext_key": "pk_live_xyz789...",
+         *             "masked_key": "pk_live_***9xyz",
+         *             "key_type": "public",
+         *             "environment": "live",
+         *             "warning": "⚠️ STORE THIS KEY SECURELY - It will not be shown again"
+         *         }
+         *     }
+         *     ```
+         *
+         *     **Performance**:
+         *     - Target: < 50ms (generation + hash + encrypt + DB + audit)
+         *
+         *     **Authentication**: Required (api_keys.create.all permission)
+         *     **Rate Limit**: 100 requests per hour per user
+         *
+         *     **Response Codes**:
+         *     - 201: API key created successfully
+         *     - 400: Invalid request (validation errors)
+         *     - 401: Unauthorized (missing/invalid credentials)
+         *     - 403: Forbidden (insufficient permissions)
+         *     - 500: Server error
+         */
+        post: operations["createApiKey"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/batch": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create Api Key Batch
+         * @description **Create multiple related API keys from a context template.**
+         *
+         *     **Purpose**: Generate a complete key set for products requiring multiple key types
+         *     (e.g., payment gateway: public key, secret key, webhook secret).
+         *
+         *     **Flow**:
+         *     1. Load context template for product type
+         *     2. Generate key for each context (public_key, secret_key, etc.)
+         *     3. Group keys under single key_set_id
+         *     4. Return all keys with plaintext values (shown ONCE)
+         *
+         *     **Example Request**:
+         *     ```json
+         *     POST /v1/api-keys/batch
+         *     {
+         *         "product_type": "payment_gateway",
+         *         "environment": "live",
+         *         "client_name": "Stripe Integration",
+         *         "scopes": ["payments:write"],
+         *         "rate_limit_per_minute": 200
+         *     }
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "key_set_id": "keyset_abc123...",
+         *             "product_type": "payment_gateway",
+         *             "keys": {
+         *                 "public_key": {
+         *                     "api_client_id": "apicli_pk123...",
+         *                     "plaintext_key": "pk_live_...",
+         *                     "masked_key": "pk_live_***xyz"
+         *                 },
+         *                 "secret_key": {
+         *                     "api_client_id": "apicli_sk123...",
+         *                     "plaintext_key": "sk_live_...",
+         *                     "masked_key": "sk_live_***xyz"
+         *                 },
+         *                 "webhook_secret": {
+         *                     "api_client_id": "apicli_wsk123...",
+         *                     "plaintext_key": "wsk_...",
+         *                     "masked_key": "wsk_***xyz"
+         *                 }
+         *             }
+         *         }
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (api_keys.create.all permission)
+         *     **Rate Limit**: 50 requests per hour per user
+         *
+         *     **Response Codes**:
+         *     - 201: Key set created successfully
+         *     - 400: Invalid product_type or validation errors
+         *     - 401: Unauthorized
+         *     - 403: Forbidden
+         *     - 404: Context template not found
+         *     - 500: Server error
+         */
+        post: operations["createApiKeyBatch"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/{api_client_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Api Key
+         * @description **Get API key details by ID.**
+         *
+         *     **Purpose**: Retrieve detailed information about a specific API key.
+         *
+         *     **Example Request**:
+         *     ```
+         *     GET /v1/api-keys/apicli_abc123...
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "api_client_id": "apicli_abc123...",
+         *             "masked_key": "pk_live_***xyz",
+         *             "client_name": "Production Frontend",
+         *             "key_type": "public",
+         *             "environment": "live",
+         *             "scopes": ["orders:read", "products:read"],
+         *             "rate_limit_per_minute": 100,
+         *             "usage_count": 15234,
+         *             "last_used_at": "2026-02-05T10:30:00Z",
+         *             "created_at": "2026-01-01T00:00:00Z"
+         *         }
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (api_keys.read.all permission)
+         *     **Rate Limit**: 600 requests per minute per user
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 404: API key not found
+         *     - 401: Unauthorized
+         *     - 403: Forbidden
+         *     - 500: Server error
+         */
+        get: operations["getApiKey"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update Api Key
+         * @description **Update API key metadata.**
+         *
+         *     **Purpose**: Modify API key configuration (name, scopes, rate limits, etc.).
+         *
+         *     **Note**: Cannot update key value or key_type. Use rotation endpoint for key changes.
+         *
+         *     **Example Request**:
+         *     ```json
+         *     PUT /v1/api-keys/apicli_abc123...
+         *     {
+         *         "client_name": "Updated Frontend",
+         *         "scopes": ["orders:read", "orders:write"],
+         *         "rate_limit_per_minute": 200
+         *     }
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "api_client_id": "apicli_abc123...",
+         *             "client_name": "Updated Frontend",
+         *             "scopes": ["orders:read", "orders:write"],
+         *             "rate_limit_per_minute": 200
+         *         },
+         *         "message": "API key updated successfully"
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (api_keys.update.all permission)
+         *     **Rate Limit**: 200 requests per minute per user
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 400: Invalid update data
+         *     - 404: API key not found
+         *     - 401: Unauthorized
+         *     - 403: Forbidden
+         *     - 500: Server error
+         */
+        patch: operations["updateApiKey"];
+        trace?: never;
+    };
+    "/v1/api-keys/{api_client_id}/revocations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Revoke Api Key
+         * @description **Revoke API key (soft delete).**
+         *
+         *     **Purpose**: Permanently disable an API key. Cannot be undone.
+         *
+         *     **Flow**:
+         *     1. Mark key as revoked (is_active = false)
+         *     2. Store revocation reason
+         *     3. Invalidate cache
+         *     4. Create audit log entry
+         *     5. Key immediately stops working
+         *
+         *     **Example Request**:
+         *     ```json
+         *     DELETE /v1/api-keys/apicli_abc123...
+         *     {
+         *         "reason": "Security incident - potential key exposure"
+         *     }
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "api_client_id": "apicli_abc123...",
+         *             "status": "revoked",
+         *             "revoked_at": "2026-02-05T12:00:00Z",
+         *             "revoked_reason": "Security incident - potential key exposure"
+         *         },
+         *         "message": "API key revoked successfully"
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (api_keys.delete.all permission)
+         *     **Rate Limit**: 100 requests per hour per user
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 400: Missing reason
+         *     - 404: API key not found
+         *     - 401: Unauthorized
+         *     - 403: Forbidden
+         *     - 500: Server error
+         */
+        post: operations["revokeApiKey"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/{api_client_id}/rotations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Rotate Api Key
+         * @description **Rotate API key with grace period.**
+         *
+         *     **Purpose**: Generate new key while keeping old key valid for transition period.
+         *
+         *     **Flow**:
+         *     1. Generate new key (same configuration)
+         *     2. Mark old key as 'rotating' (still valid)
+         *     3. Set grace period (default: 30 days)
+         *     4. Old key auto-revokes after grace period
+         *     5. Return both keys
+         *
+         *     **Example Request**:
+         *     ```json
+         *     POST /v1/api-keys/apicli_abc123.../rotate
+         *     {
+         *         "grace_period_days": 30,
+         *         "reason": "Scheduled security rotation"
+         *     }
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "old_key": {
+         *                 "api_client_id": "apicli_old123...",
+         *                 "masked_key": "pk_live_***old",
+         *                 "status": "rotating",
+         *                 "revoked_at": "2026-03-07T00:00:00Z"
+         *             },
+         *             "new_key": {
+         *                 "api_client_id": "apicli_new456...",
+         *                 "plaintext_key": "pk_live_new789...",
+         *                 "masked_key": "pk_live_***new",
+         *                 "status": "active",
+         *                 "warning": "⚠️ STORE THIS KEY SECURELY"
+         *             },
+         *             "grace_period_days": 30,
+         *             "grace_period_ends_at": "2026-03-07T00:00:00Z"
+         *         }
+         *     }
+         *     ```
+         *
+         *     **Grace Period**:
+         *     - Old key remains valid during grace period
+         *     - New key active immediately
+         *     - After grace period: old key auto-revoked
+         *     - Update your applications before grace period expires
+         *
+         *     **Performance**:
+         *     - Target: < 100ms (new key generation + DB updates + cache invalidation)
+         *
+         *     **Authentication**: Required (api_keys.rotate.all permission)
+         *     **Rate Limit**: 50 requests per hour per user
+         *
+         *     **Response Codes**:
+         *     - 200: Rotation successful
+         *     - 400: Invalid request (e.g., key already revoked)
+         *     - 404: API key not found
+         *     - 401: Unauthorized
+         *     - 403: Forbidden
+         *     - 500: Server error
+         */
+        post: operations["rotateApiKey"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-key-sets/{key_set_id}/rotations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Rotate Api Key Set
+         * @description **Rotate all keys in a key set.**
+         *
+         *     **Purpose**: Rotate multiple related keys simultaneously (e.g., payment gateway keys).
+         *
+         *     **Flow**:
+         *     1. Get all keys in set
+         *     2. Rotate each key (generate new + mark old as rotating)
+         *     3. Same grace period for all keys
+         *     4. Return all old and new keys
+         *
+         *     **Example Request**:
+         *     ```json
+         *     POST /v1/api-keys/sets/keyset_abc123.../rotate
+         *     {
+         *         "grace_period_days": 30,
+         *         "reason": "Compliance requirement"
+         *     }
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "key_set_id": "keyset_abc123...",
+         *             "rotations": {
+         *                 "public_key": {
+         *                     "old_key": {...},
+         *                     "new_key": {...}
+         *                 },
+         *                 "secret_key": {
+         *                     "old_key": {...},
+         *                     "new_key": {...}
+         *                 },
+         *                 "webhook_secret": {
+         *                     "old_key": {...},
+         *                     "new_key": {...}
+         *                 }
+         *             },
+         *             "grace_period_days": 30,
+         *             "grace_period_ends_at": "2026-03-07T00:00:00Z"
+         *         }
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (api_keys.rotate.all permission)
+         *     **Rate Limit**: 20 requests per hour per user
+         *
+         *     **Response Codes**:
+         *     - 200: Set rotated successfully
+         *     - 400: Invalid request
+         *     - 404: Key set not found
+         *     - 401: Unauthorized
+         *     - 403: Forbidden
+         *     - 500: Server error
+         */
+        post: operations["rotateApiKeySet"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/validations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Validate Api Key
+         * @description **Validate API key and return metadata.**
+         *
+         *     **Purpose**: High-performance validation for authentication middleware.
+         *
+         *     **Flow**:
+         *     1. Check two-tier cache (L1: memory, L2: Redis)
+         *     2. If cache miss: Query database and verify hash
+         *     3. Apply filters (IP, geo, expiry, revocation)
+         *     4. Cache valid result
+         *     5. Return key metadata or error
+         *
+         *     **Example Request**:
+         *     ```
+         *     POST /v1/api-keys/validate
+         *     Headers:
+         *         X-Api-Key: pk_live_abc123xyz789...
+         *         X-Forwarded-For: 203.0.113.45
+         *         X-Country-Code: US
+         *         Origin: https://example.com
+         *     ```
+         *
+         *     **Example Response (Valid)**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "valid": true,
+         *             "api_key_id": 456,
+         *             "api_client_id": "apicli_20260205abc123",
+         *             "org_id": 123,
+         *             "user_id": 789,
+         *             "key_type": "payment_gateway",
+         *             "environment": "live",
+         *             "scopes": ["payment.read", "payment.create"],
+         *             "rate_limit_per_minute": 60,
+         *             "rate_limit_per_hour": 1000,
+         *             "rate_limit_per_day": 10000,
+         *             "metadata": {
+         *                 "gateway": "stripe",
+         *                 "account_id": "acct_abc123"
+         *             }
+         *         },
+         *         "message": "API key validated successfully",
+         *         "message_code": "api_suc_apikey_004"
+         *     }
+         *     ```
+         *
+         *     **Example Response (Invalid)**:
+         *     ```json
+         *     {
+         *         "success": false,
+         *         "data": {
+         *             "valid": false,
+         *             "error_code": "EXPIRED",
+         *             "error_message": "API key has expired"
+         *         },
+         *         "message": "API key validation failed",
+         *         "message_code": "api_err_apikey_401"
+         *     }
+         *     ```
+         *
+         *     **Performance**:
+         *     - Cache hit (L1): < 1ms
+         *     - Cache hit (L2): < 2ms
+         *     - Cache miss + DB: < 10ms
+         *
+         *     **Validation Checks**:
+         *     1. Key format (prefix, environment, length)
+         *     2. Hash verification (SHA-256 + salt)
+         *     3. Status (active, not revoked)
+         *     4. Expiration (if set)
+         *     5. IP whitelist (if configured)
+         *     6. Geo blocking (if configured)
+         *     7. CORS origin (if configured)
+         *
+         *     **Error Codes**:
+         *     - INVALID_FORMAT: Key format is invalid
+         *     - NOT_FOUND: Key does not exist
+         *     - EXPIRED: Key has expired
+         *     - REVOKED: Key has been revoked
+         *     - IP_BLOCKED: IP address not allowed
+         *     - GEO_BLOCKED: Country blocked
+         *     - ORIGIN_BLOCKED: Origin not allowed
+         *     - INTERNAL_ERROR: Validation failed
+         *
+         *     **Response Codes**:
+         *     - 200: Validation completed (check data.valid for result)
+         *     - 429: Rate limit exceeded
+         *     - 500: Server error
+         */
+        post: operations["validateApiKey"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/{api_client_id}/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Api Key Status
+         * @description **Get API key status without full validation.**
+         *
+         *     **Purpose**: Quick status check without applying filters (IP, geo, etc.).
+         *
+         *     **Flow**:
+         *     1. Query database for API key
+         *     2. Return status information
+         *     3. No validation or filtering applied
+         *
+         *     **Example Request**:
+         *     ```
+         *     GET /v1/api-keys/apicli_20260205abc123/validation-status
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "api_client_id": "apicli_20260205abc123",
+         *             "status": "active",
+         *             "key_type": "payment_gateway",
+         *             "environment": "live",
+         *             "created_at": "2026-02-05T10:00:00Z",
+         *             "expires_at": "2027-02-05T10:00:00Z",
+         *             "last_used_at": "2026-02-05T14:30:00Z",
+         *             "is_expired": false,
+         *             "is_revoked": false,
+         *             "days_until_expiry": 365
+         *         },
+         *         "message": "API key status retrieved",
+         *         "message_code": "api_suc_apikey_005"
+         *     }
+         *     ```
+         *
+         *     **Use Cases**:
+         *     - Health checks
+         *     - Monitoring dashboards
+         *     - Key lifecycle tracking
+         *     - Expiration alerts
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 404: Key not found
+         *     - 500: Server error
+         */
+        get: operations["getApiKeyStatus"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/{api_client_id}/stats": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Api Key Stats
+         * @description **Get usage statistics for an API key.**
+         *
+         *     **Purpose**: Analyze API key usage patterns, success rates, and performance.
+         *
+         *     **Flow**:
+         *     1. Validate API key exists
+         *     2. Query usage logs for specified time period
+         *     3. Calculate aggregations (total requests, success rate, latency)
+         *     4. Group by time, geo, endpoint, status
+         *
+         *     **Example Request**:
+         *     ```
+         *     GET /v1/api-keys/apicli_20260205abc123/stats?days=30
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "api_client_id": "apicli_20260205abc123",
+         *             "period": {
+         *                 "start": "2026-01-06T00:00:00Z",
+         *                 "end": "2026-02-05T23:59:59Z",
+         *                 "days": 30
+         *             },
+         *             "summary": {
+         *                 "total_requests": 125000,
+         *                 "successful_requests": 123500,
+         *                 "failed_requests": 1500,
+         *                 "success_rate": 98.8,
+         *                 "avg_latency_ms": 45,
+         *                 "total_data_transferred_bytes": 52428800
+         *             },
+         *             "rate_limits": {
+         *                 "per_minute": {
+         *                     "limit": 60,
+         *                     "peak_usage": 58,
+         *                     "avg_usage": 42,
+         *                     "throttled_count": 3
+         *                 },
+         *                 "per_hour": {
+         *                     "limit": 1000,
+         *                     "peak_usage": 950,
+         *                     "avg_usage": 680
+         *                 },
+         *                 "per_day": {
+         *                     "limit": 10000,
+         *                     "peak_usage": 9500,
+         *                     "avg_usage": 7200
+         *                 }
+         *             },
+         *             "geo_distribution": [
+         *                 {"country": "US", "requests": 80000, "percentage": 64.0},
+         *                 {"country": "GB", "requests": 25000, "percentage": 20.0},
+         *                 {"country": "CA", "requests": 20000, "percentage": 16.0}
+         *             ],
+         *             "top_errors": [
+         *                 {"error_code": "RATE_LIMIT_EXCEEDED", "count": 1200, "percentage": 80.0},
+         *                 {"error_code": "INVALID_SCOPE", "count": 200, "percentage": 13.3},
+         *                 {"error_code": "EXPIRED", "count": 100, "percentage": 6.7}
+         *             ],
+         *             "daily_trend": [
+         *                 {"date": "2026-01-06", "requests": 4200, "success_rate": 99.1},
+         *                 {"date": "2026-01-07", "requests": 4100, "success_rate": 98.9},
+         *                 "..."
+         *             ]
+         *         },
+         *         "message": "API key statistics retrieved successfully",
+         *         "message_code": "api_suc_apikey_006"
+         *     }
+         *     ```
+         *
+         *     **Use Cases**:
+         *     - Monitor API key health
+         *     - Detect unusual patterns
+         *     - Capacity planning
+         *     - Rate limit optimization
+         *     - Geo-based restrictions
+         *
+         *     **Performance**:
+         *     - Target: < 500ms for 30-day analysis
+         *     - Indexed by: api_key_id, timestamp, status
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 403: Permission denied
+         *     - 404: API key not found
+         *     - 500: Server error
+         */
+        get: operations["getApiKeyStats"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/stats/admin": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Organization Stats
+         * @description **Get organization-wide API key statistics.**
+         *
+         *     **Purpose**: High-level overview of all API key usage across organization.
+         *
+         *     **Example Request**:
+         *     ```
+         *     GET /v1/api-keys/stats/organization?days=30
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "org_id": 123,
+         *             "period": {
+         *                 "start": "2026-01-06T00:00:00Z",
+         *                 "end": "2026-02-05T23:59:59Z",
+         *                 "days": 30
+         *             },
+         *             "summary": {
+         *                 "total_keys": 25,
+         *                 "active_keys": 20,
+         *                 "rotating_keys": 3,
+         *                 "revoked_keys": 2,
+         *                 "total_requests": 500000,
+         *                 "success_rate": 98.5
+         *             },
+         *             "by_key_type": [
+         *                 {"key_type": "payment_gateway", "count": 10, "requests": 300000},
+         *                 {"key_type": "oauth_client", "count": 8, "requests": 150000},
+         *                 {"key_type": "saas_provider", "count": 7, "requests": 50000}
+         *             ],
+         *             "by_environment": [
+         *                 {"environment": "live", "count": 15, "requests": 400000},
+         *                 {"environment": "test", "count": 10, "requests": 100000}
+         *             ],
+         *             "top_keys_by_usage": [
+         *                 {"api_client_id": "apicli_xxx", "requests": 100000, "key_type": "payment_gateway"},
+         *                 {"api_client_id": "apicli_yyy", "requests": 80000, "key_type": "oauth_client"}
+         *             ]
+         *         },
+         *         "message": "Organization statistics retrieved successfully",
+         *         "message_code": "api_suc_apikey_007"
+         *     }
+         *     ```
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 403: Permission denied
+         *     - 500: Server error
+         */
+        get: operations["listApiKeyStats"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/{api_client_id}/health": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Api Key Health
+         * @description **Get API key health score and recommendations.**
+         *
+         *     **Purpose**: Quick health check with actionable recommendations.
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "api_client_id": "apicli_20260205abc123",
+         *             "health_score": 85,
+         *             "status": "healthy",
+         *             "checks": {
+         *                 "active": {"passed": true, "message": "Key is active"},
+         *                 "not_expired": {"passed": true, "message": "Key not expired"},
+         *                 "not_revoked": {"passed": true, "message": "Key not revoked"},
+         *                 "expiring_soon": {"passed": false, "message": "Key expires in 15 days"},
+         *                 "success_rate": {"passed": true, "value": 98.5, "threshold": 95.0}
+         *             },
+         *             "recommendations": [
+         *                 "Consider rotating this key soon (expires in 15 days)",
+         *                 "Success rate is healthy (98.5%)"
+         *             ],
+         *             "next_actions": [
+         *                 {
+         *                     "action": "rotate_key",
+         *                     "priority": "medium",
+         *                     "reason": "Key expiring soon",
+         *                     "deadline": "2026-02-20T00:00:00Z"
+         *                 }
+         *             ]
+         *         },
+         *         "message": "API key health check completed",
+         *         "message_code": "api_suc_apikey_008"
+         *     }
+         *     ```
+         *
+         *     **Health Score Calculation**:
+         *     - Active status: 20 points
+         *     - Not expired: 20 points
+         *     - Not revoked: 20 points
+         *     - Success rate > 95%: 20 points
+         *     - Not expiring soon (> 30 days): 20 points
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 404: Key not found
+         *     - 500: Server error
+         */
+        get: operations["getApiKeyHealth"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/{api_client_id}/audit-logs": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Api Key Audit Logs
+         * @description **Get audit trail for a specific API key.**
+         *
+         *     **Purpose**: Retrieve complete audit history for an API key including all lifecycle events.
+         *
+         *     **Flow**:
+         *     1. Validate API key exists and belongs to organization
+         *     2. Retrieve audit logs from database with pagination
+         *     3. Return chronological audit trail with actor and metadata
+         *
+         *     **Example Request**:
+         *     ```
+         *     GET /v1/api-keys/apicli_20260205abc123/audit-logs?skip=0&limit=50
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "api_client_id": "apicli_20260205abc123",
+         *             "total_events": 15,
+         *             "logs": [
+         *                 {
+         *                     "id": 1,
+         *                     "action": "created",
+         *                     "actor_type": "user",
+         *                     "actor_id": "usr_abc123",
+         *                     "ip_address": "203.0.113.45",
+         *                     "user_agent": "Mozilla/5.0...",
+         *                     "changes": {
+         *                         "key_type": "payment_gateway",
+         *                         "environment": "live"
+         *                     },
+         *                     "created_at": "2026-02-05T10:00:00Z",
+         *                     "log_hash": "abc123..."
+         *                 },
+         *                 {
+         *                     "id": 2,
+         *                     "action": "updated",
+         *                     "actor_type": "user",
+         *                     "actor_id": "usr_abc123",
+         *                     "changes": {
+         *                         "client_name": {
+         *                             "old": "Test Key",
+         *                             "new": "Production Key"
+         *                         }
+         *                     },
+         *                     "created_at": "2026-02-05T12:00:00Z"
+         *                 }
+         *             ]
+         *         },
+         *         "message": "Audit logs retrieved successfully",
+         *         "message_code": "api_suc_apikey_001"
+         *     }
+         *     ```
+         *
+         *     **Performance**:
+         *     - Target: < 50ms for 100 logs
+         *     - Indexed by api_key_id, org_id, created_at
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 403: Permission denied (not your organization's key)
+         *     - 404: API key not found
+         *     - 500: Server error
+         */
+        get: operations["listApiKeyAuditLogs"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/audit-logs": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Org Audit Logs
+         * @description **Get organization-wide audit logs for all API keys.**
+         *
+         *     **Purpose**: Retrieve consolidated audit trail across all API keys in the organization.
+         *
+         *     **Flow**:
+         *     1. Query audit logs for organization with optional action filter
+         *     2. Return chronological audit trail with pagination
+         *     3. Include API key identifiers for each event
+         *
+         *     **Example Request**:
+         *     ```
+         *     GET /v1/api-keys/audit-logs?action=revoked&skip=0&limit=50
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "org_id": 123,
+         *             "total_events": 250,
+         *             "filter": {
+         *                 "action": "revoked"
+         *             },
+         *             "logs": [
+         *                 {
+         *                     "id": 1,
+         *                     "api_key_id": 456,
+         *                     "api_client_id": "apicli_20260205abc123",
+         *                     "action": "revoked",
+         *                     "actor_type": "user",
+         *                     "actor_id": "usr_abc123",
+         *                     "reason": "Security compromise - rotating keys",
+         *                     "created_at": "2026-02-05T14:30:00Z"
+         *                 }
+         *             ]
+         *         },
+         *         "message": "Organization audit logs retrieved successfully",
+         *         "message_code": "api_suc_apikey_002"
+         *     }
+         *     ```
+         *
+         *     **Use Cases**:
+         *     - Compliance reporting
+         *     - Security incident investigation
+         *     - Activity monitoring
+         *     - Anomaly detection
+         *
+         *     **Performance**:
+         *     - Target: < 100ms for 100 logs
+         *     - Indexed by org_id, action, created_at
+         *
+         *     **Response Codes**:
+         *     - 200: Success
+         *     - 403: Permission denied (requires api_keys.audit.all)
+         *     - 500: Server error
+         */
+        get: operations["listOrgAuditLogs"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/api-keys/audit-logs/{log_id}/integrity-checks": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Check Audit Log Integrity
+         * @description **Verify audit log integrity (tamper detection).**
+         *
+         *     **Purpose**: Cryptographically verify that an audit log entry has not been tampered with.
+         *
+         *     **Flow**:
+         *     1. Retrieve audit log from database
+         *     2. Recompute SHA-256 hash from log data
+         *     3. Compare with stored log_hash
+         *     4. Return verification result
+         *
+         *     **Example Request**:
+         *     ```
+         *     POST /v1/api-keys/audit-logs/123/verify
+         *     ```
+         *
+         *     **Example Response**:
+         *     ```json
+         *     {
+         *         "success": true,
+         *         "data": {
+         *             "log_id": 123,
+         *             "verified": true,
+         *             "message": "Log integrity verified - no tampering detected",
+         *             "log_hash": "abc123...",
+         *             "verification_timestamp": "2026-02-05T15:00:00Z"
+         *         },
+         *         "message": "Audit log verification completed",
+         *         "message_code": "api_suc_apikey_003"
+         *     }
+         *     ```
+         *
+         *     **Security**:
+         *     - Uses SHA-256 hash of log data
+         *     - Includes: api_key_id, action, actor_type, actor_id, timestamp, changes
+         *     - Tamper-evident: Any modification invalidates hash
+         *
+         *     **Use Cases**:
+         *     - Compliance audits
+         *     - Forensic investigations
+         *     - Security certifications
+         *     - Legal evidence
+         *
+         *     **Response Codes**:
+         *     - 200: Success (verified=true/false in response)
+         *     - 404: Log not found
+         *     - 403: Permission denied
+         *     - 500: Server error
+         */
+        post: operations["checkAuditLogIntegrity"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+}
+export type webhooks = Record<string, never>;
+export interface components {
+    schemas: {
+        /**
+         * KeyType
+         * @description API key types
+         * @enum {string}
+         */
+        KeyType: "public" | "secret" | "restricted" | "webhook" | "mobile";
+        /**
+         * APIKeyRevokeRequest
+         * @description Request schema for revoking an API key.
+         *
+         *     Immediate revocation (no grace period).
+         */
+        APIKeyRevokeRequest: {
+            /**
+             * Reason
+             * @description Reason for revocation (required for audit)
+             */
+            reason: string;
+        };
+        /**
+         * APIKeyRotateRequest
+         * @description Request schema for rotating an API key.
+         *
+         *     Creates new key, marks old as rotating, provides grace period.
+         */
+        APIKeyRotateRequest: {
+            /**
+             * Grace Period Days
+             * @description Days to keep old key valid (default: 30)
+             * @default 30
+             */
+            grace_period_days: number | null;
+            /**
+             * Reason
+             * @description Reason for rotation (audit trail)
+             */
+            reason?: string | null;
+        };
+        /** ValidationError */
+        ValidationError: {
+            /** Location */
+            loc: (string | number)[];
+            /** Message */
+            msg: string;
+            /** Error Type */
+            type: string;
+        };
+        /**
+         * APIKeyUpdateRequest
+         * @description Request schema for updating API key metadata.
+         *
+         *     Note: Cannot update key_hash, key_type, or environment.
+         *     Use rotation for key changes.
+         */
+        APIKeyUpdateRequest: {
+            /**
+             * Client Name
+             * @description Update client name
+             */
+            client_name?: string | null;
+            /**
+             * Scopes
+             * @description Update scopes
+             */
+            scopes?: string[] | null;
+            /**
+             * Allowed Ips
+             * @description Update allowed IPs
+             */
+            allowed_ips?: string[] | null;
+            /** Allowed Countries */
+            allowed_countries?: string[] | null;
+            /** Blocked Countries */
+            blocked_countries?: string[] | null;
+            /** Allowed Origins */
+            allowed_origins?: string[] | null;
+            /** Rate Limit Per Minute */
+            rate_limit_per_minute?: number | null;
+            /** Rate Limit Per Hour */
+            rate_limit_per_hour?: number | null;
+            /** Rate Limit Per Day */
+            rate_limit_per_day?: number | null;
+            /** Expires At */
+            expires_at?: string | null;
+            /** Webhook Url */
+            webhook_url?: string | null;
+            /** Webhook Secret */
+            webhook_secret?: string | null;
+            /** Webhook Events */
+            webhook_events?: string[] | null;
+            /** Client Metadata */
+            client_metadata?: {
+                [key: string]: unknown;
+            } | null;
+        };
+        /**
+         * APIKeyBatchCreateRequest
+         * @description Request schema for creating multiple API keys from a context template.
+         *
+         *     Used for products requiring multiple key types (e.g., payment gateway).
+         */
+        APIKeyBatchCreateRequest: {
+            /**
+             * Product Type
+             * @description Product type: payment_gateway, oauth_app, saas_provider
+             */
+            product_type: string;
+            /** @description Environment for all keys */
+            environment: components["schemas"]["Environment"];
+            /**
+             * Client Name
+             * @description Base name for key set
+             */
+            client_name: string;
+            /** Scopes */
+            scopes?: string[] | null;
+            /** Allowed Ips */
+            allowed_ips?: string[] | null;
+            /** Allowed Countries */
+            allowed_countries?: string[] | null;
+            /**
+             * Rate Limit Per Minute
+             * @default 60
+             */
+            rate_limit_per_minute: number | null;
+            /** Expires At */
+            expires_at?: string | null;
+            /** Client Metadata */
+            client_metadata?: {
+                [key: string]: unknown;
+            } | null;
+        };
+        /**
+         * Environment
+         * @description API key environments
+         * @enum {string}
+         */
+        Environment: "development" | "test" | "live";
+        /** HTTPValidationError */
+        HTTPValidationError: {
+            /** Detail */
+            detail?: components["schemas"]["ValidationError"][];
+        };
+        /**
+         * APIKeyCreateRequest
+         * @description Request schema for creating a new API key.
+         *
+         *     Example:
+         *     {
+         *         "client_name": "Production Frontend",
+         *         "key_type": "public",
+         *         "environment": "live",
+         *         "scopes": ["orders:read", "products:read"],
+         *         "rate_limit_per_minute": 100,
+         *         "allowed_ips": ["203.0.113.0/24"],
+         *         "expires_at": "2027-12-31T23:59:59Z"
+         *     }
+         */
+        APIKeyCreateRequest: {
+            /**
+             * Client Name
+             * @description Human-readable name for this API key
+             */
+            client_name: string;
+            /** @description Key type: public, secret, restricted, webhook */
+            key_type: components["schemas"]["KeyType"];
+            /** @description Environment: development, test, live */
+            environment: components["schemas"]["Environment"];
+            /**
+             * Context
+             * @description Context within key set (e.g., public_key, webhook_secret)
+             */
+            context?: string | null;
+            /**
+             * Key Set Id
+             * @description Groups related keys (e.g., payment gateway keys)
+             */
+            key_set_id?: string | null;
+            /**
+             * Tenant Domain Id
+             * @description Domain-specific key (optional)
+             */
+            tenant_domain_id?: number | null;
+            /**
+             * Scopes
+             * @description OAuth 2.0 scopes: ['orders:read', 'payments:write']
+             */
+            scopes?: string[] | null;
+            /**
+             * Allowed Ips
+             * @description Allowed IP addresses/CIDRs: ['203.0.113.0/24']
+             */
+            allowed_ips?: string[] | null;
+            /**
+             * Allowed Countries
+             * @description Allowed country codes: ['US', 'CA', 'GB']
+             */
+            allowed_countries?: string[] | null;
+            /**
+             * Blocked Countries
+             * @description Blocked country codes: ['KP', 'IR']
+             */
+            blocked_countries?: string[] | null;
+            /**
+             * Allowed Origins
+             * @description CORS origins: ['https://example.com']
+             */
+            allowed_origins?: string[] | null;
+            /**
+             * Rate Limit Per Minute
+             * @description Requests per minute (default: 60)
+             * @default 60
+             */
+            rate_limit_per_minute: number | null;
+            /**
+             * Rate Limit Per Hour
+             * @description Requests per hour (default: 3600)
+             * @default 3600
+             */
+            rate_limit_per_hour: number | null;
+            /**
+             * Rate Limit Per Day
+             * @description Requests per day (default: 100000)
+             * @default 100000
+             */
+            rate_limit_per_day: number | null;
+            /**
+             * Expires At
+             * @description Optional expiration timestamp (NULL = never expires)
+             */
+            expires_at?: string | null;
+            /**
+             * Webhook Url
+             * @description Webhook endpoint URL
+             */
+            webhook_url?: string | null;
+            /**
+             * Webhook Secret
+             * @description Webhook signature secret
+             */
+            webhook_secret?: string | null;
+            /**
+             * Webhook Events
+             * @description Events to send: ['order.created', 'payment.succeeded']
+             */
+            webhook_events?: string[] | null;
+            /**
+             * Client Metadata
+             * @description Custom metadata
+             */
+            client_metadata?: {
+                [key: string]: unknown;
+            } | null;
+        };
+    };
+    responses: never;
+    parameters: never;
+    requestBodies: never;
+    headers: never;
+    pathItems: never;
+}
+export type $defs = Record<string, never>;
+export interface operations {
+    listApiKeys: {
+        parameters: {
+            query?: {
+                /** @description Filter by environment */
+                environment?: string;
+                /** @description Filter by key type */
+                key_type?: string;
+                /** @description Filter by status */
+                status?: string;
+                /** @description Page number (1-based) */
+                page?: number;
+                /** @description Items per page (1–100, default 50) */
+                limit?: number;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    createApiKey: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["APIKeyCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    createApiKeyBatch: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["APIKeyBatchCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    getApiKey: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                api_client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    updateApiKey: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                api_client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["APIKeyUpdateRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    revokeApiKey: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                api_client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["APIKeyRevokeRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    rotateApiKey: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                api_client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["APIKeyRotateRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    rotateApiKeySet: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                key_set_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["APIKeyRotateRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    validateApiKey: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description API key to validate */
+                "X-Api-Key": string;
+                /** @description Client IP address */
+                "x-forwarded-for"?: string | null;
+                /** @description Client country code */
+                "x-country-code"?: string | null;
+                /** @description Request origin (for CORS) */
+                origin?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    getApiKeyStatus: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                api_client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    getApiKeyStats: {
+        parameters: {
+            query?: {
+                /** @description Number of days to analyze (1-90) */
+                days?: number;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                /** @description External API client ID */
+                api_client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    listApiKeyStats: {
+        parameters: {
+            query?: {
+                /** @description Scope filter (e.g. organization) */
+                scope?: string | null;
+                /** @description Number of days to analyze */
+                days?: number;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    getApiKeyHealth: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                /** @description External API client ID */
+                api_client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    listApiKeyAuditLogs: {
+        parameters: {
+            query?: {
+                /** @description Page number (1-based) */
+                page?: number;
+                /** @description Items per page (1–500, default 50) */
+                limit?: number;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                /** @description External API client ID (apicli_xxx) */
+                api_client_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    listOrgAuditLogs: {
+        parameters: {
+            query?: {
+                /** @description Filter by action (created, updated, rotated, revoked, expired) */
+                action?: string | null;
+                /** @description Page number (1-based) */
+                page?: number;
+                /** @description Items per page (1–500, default 50) */
+                limit?: number;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+    checkAuditLogIntegrity: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path: {
+                /** @description Audit log ID */
+                log_id: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation Error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HTTPValidationError"];
+                };
+            };
+        };
+    };
+}
+//# sourceMappingURL=generated.d.ts.map