@blezgo/api-sdk 0.1.1 → 0.1.3

package/dist/role/generated.d.ts

@@ -1107,6 +1107,104 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/permissions/groups": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Permission Groups
+         * @description List all permission groups ordered by sort_order.
+         *
+         *     Permission groups are named bundles (e.g. `application_config`) that cover
+         *     a set of fine-grained resources. Assigning a group to a user implies access
+         *     to every resource inside it for the same action and scope.
+         *
+         *     Use `GET /v1/permissions/groups/{group_name}` to expand a group and see
+         *     individual resources with their allowed actions.
+         *
+         *     **Example response**:
+         *     ```json
+         *     {
+         *       "groups": [
+         *         {
+         *           "name": "application_config",
+         *           "label": "Application Configuration",
+         *           "description": "Payment credentials, social logins, channel settings, and system config",
+         *           "sort_order": 1,
+         *           "resource_count": 11
+         *         }
+         *       ]
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (JWT Bearer)
+         *     **Permission**: `role.view.all`
+         *     **Response codes**: 200 OK, 401 Unauthorized, 403 Forbidden
+         */
+        get: operations["listPermissionGroups"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/permissions/groups/{group_name}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Permission Group
+         * @description Get all resources and their allowed actions for a permission group.
+         *
+         *     Used by the admin UI "expand" view — when an admin wants to assign individual
+         *     permissions instead of the whole group, this endpoint provides the full list
+         *     of fine-grained resources and actions, including which are dangerous.
+         *
+         *     **Example response** for `application_config`:
+         *     ```json
+         *     {
+         *       "group": {
+         *         "name": "application_config",
+         *         "label": "Application Configuration",
+         *         "description": "...",
+         *         "sort_order": 1,
+         *         "resource_count": 11,
+         *         "permission_count": 34,
+         *         "resources": [
+         *           {
+         *             "key": "payment_method",
+         *             "label": "Payment Method",
+         *             "actions": [
+         *               {"key": "view",   "label": "View",   "permission_string": "payment_method.view.all",   "dangerous": false},
+         *               {"key": "delete", "label": "Delete", "permission_string": "payment_method.delete.all", "dangerous": true}
+         *             ]
+         *           }
+         *         ]
+         *       }
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (JWT Bearer)
+         *     **Permission**: `role.view.all`
+         *     **Response codes**: 200 OK, 401 Unauthorized, 403 Forbidden, 404 Not Found
+         */
+        get: operations["getPermissionGroup"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/roles": {
         parameters: {
             query?: never;
@@ -1147,65 +1245,12 @@ export interface paths {
 export type webhooks = Record<string, never>;
 export interface components {
     schemas: {
-        /**
-         * @example {
-         *       "status": "success",
-         *       "message": "Operation successful",
-         *       "message_code": "api_suc_20001",
-         *       "data": {},
-         *       "metadata": {
-         *         "timestamp": "2026-03-26T10:00:00.000Z",
-         *         "requestId": "07e22004-cb60-4dfc-bc9c-b6f99664dca1",
-         *         "traceId": "a9f1204c-bb82-41de-b234-7c3a9e120000",
-         *         "version": "v1",
-         *         "executionTime": 42,
-         *         "language": "en-US"
-         *       }
-         *     }
-         */
-        StandardResponse: {
-            /** @example success */
-            status?: string;
-            data?: Record<string, never> | null;
-            /** @example Operation successful */
-            message?: string | null;
-            /** @example api_suc_20001 */
-            message_code?: string | null;
-            metadata?: Record<string, never> | null;
-            error?: components["schemas"]["ErrorResponse"];
-        };
         InvalidParam: {
             /** @example items[0].quantity */
             field?: string;
             /** @example Input should be greater than or equal to 1 */
             error?: string;
         };
-        /**
-         * QuotaUpdateRequest
-         * @description Request model for updating a quota.
-         * @example {
-         *       "max_limit": 500,
-         *       "reason": "Increased quota due to plan upgrade to enterprise"
-         *     }
-         */
-        QuotaUpdateRequest: {
-            /**
-             * Max Limit
-             * @description Updated maximum limit
-             */
-            max_limit?: number | null;
-            /**
-             * Reset Period
-             * @description Updated reset period
-             */
-            reset_period?: string | null;
-            /**
-             * Reason
-             * @description Reason for update (for audit log)
-             * @example Increased quota for plan upgrade
-             */
-            reason?: string | null;
-        };
         /**
          * UserPermissionOverrideRequest
          * @description Request model for granting permission override to a user.
@@ -1263,85 +1308,6 @@ export interface components {
              */
             expires_at?: string | null;
         };
-        /**
-         * AssignAccessLayerRequest
-         * @description Request model for assigning access layer to role.
-         * @example {
-         *       "access_layer_id": "acl_xyz789",
-         *       "reason": "Upgrading role permissions for sales team"
-         *     }
-         */
-        AssignAccessLayerRequest: {
-            /**
-             * Access Layer Id
-             * @description Access layer external ID (acl_xxx)
-             * @example acl_xyz789
-             */
-            access_layer_id: string;
-            /**
-             * Reason
-             * @description Reason for assignment (for audit log)
-             * @example Upgrading role permissions
-             */
-            reason?: string | null;
-        };
-        /**
-         * RoleCreateRequest
-         * @description Request model for creating a custom role.
-         * @example {
-         *       "access_layer_id": "acl_abc123def",
-         *       "description": "Manages sales team and customer relationships",
-         *       "display_order": 10,
-         *       "is_default": false,
-         *       "reason": "Creating role for new sales department",
-         *       "role_code": "sales_manager",
-         *       "role_name": "Sales Manager"
-         *     }
-         */
-        RoleCreateRequest: {
-            /**
-             * Role Code
-             * @description Machine-readable role code (e.g., 'sales_manager')
-             * @example sales_manager
-             */
-            role_code: string;
-            /**
-             * Role Name
-             * @description Human-readable role name (e.g., 'Sales Manager')
-             * @example Sales Manager
-             */
-            role_name: string;
-            /**
-             * Access Layer Id
-             * @description Access layer external ID to assign (acl_xxx)
-             * @example acl_abc123def
-             */
-            access_layer_id: string;
-            /**
-             * Description
-             * @description Role description
-             * @example Manages sales team and customer relationships
-             */
-            description?: string | null;
-            /**
-             * Is Default
-             * @description Whether this is the default role for new users
-             * @default false
-             */
-            is_default: boolean;
-            /**
-             * Display Order
-             * @description Display order for UI (lower = higher priority)
-             * @default 100
-             */
-            display_order: number;
-            /**
-             * Reason
-             * @description Reason for creating role (for audit log)
-             * @example Creating role for new sales department
-             */
-            reason?: string | null;
-        };
         /**
          * QuotaCreateRequest
          * @description Request model for creating a resource quota.
@@ -1385,76 +1351,6 @@ export interface components {
              */
             reason?: string | null;
         };
-        ErrorResponse: {
-            /** @example about:blank */
-            type?: string;
-            /** @example GENERIC_ERROR */
-            code?: string;
-            /** @example Client Error */
-            title?: string;
-            /** @example 400 */
-            status?: number;
-            /** @example An error occurred */
-            detail?: string;
-            /** @example /v1/cart/items */
-            instance?: string;
-            extensions?: components["schemas"]["Extensions"];
-        };
-        Extensions: {
-            /** @example GENERIC_ERROR */
-            message_code?: string;
-            /** @example [] */
-            invalid_params?: components["schemas"]["InvalidParam"][];
-            extra_data?: Record<string, never> | null;
-            /** @example Detailed debug information */
-            debug?: string | null;
-        };
-        /**
-         * RoleUpdateRequest
-         * @description Request model for updating a role.
-         * @example {
-         *       "description": "Updated role with extended permissions",
-         *       "reason": "Promoting role to senior level",
-         *       "role_name": "Senior Sales Manager"
-         *     }
-         */
-        RoleUpdateRequest: {
-            /**
-             * Role Code
-             * @description Machine-readable role code
-             */
-            role_code?: string | null;
-            /**
-             * Role Name
-             * @description Human-readable role name
-             */
-            role_name?: string | null;
-            /**
-             * Access Layer Id
-             * @description Access layer external ID
-             */
-            access_layer_id?: string | null;
-            /**
-             * Description
-             * @description Role description
-             */
-            description?: string | null;
-            /**
-             * Is Default
-             * @description Whether this is the default role
-             */
-            is_default?: boolean | null;
-            /**
-             * Display Order
-             * @description Display order
-             */
-            display_order?: number | null;
-            /**
-             * Reason
-             * @description Reason for update (for audit log)
-             */
-            reason?: string | null;
-        };
         /**
          * AccessLayerUpdateRequest
          * @description Request model for updating an access layer.
@@ -1499,146 +1395,752 @@ export interface components {
                 [key: string]: {
                     [key: string]: string[];
                 };
-            } | null;
-            /**
-             * Reason
-             * @description Reason for update (for audit log)
-             * @example Adding new permissions for sales team
-             */
-            reason?: string | null;
-        };
-        /**
-         * AccessLayerCreateRequest
-         * @description Request model for creating an access layer.
-         * @example {
-         *       "description": "Permissions for sales team members",
-         *       "layer_code": "sales_access",
-         *       "layer_name": "Sales Team Access",
-         *       "permissions": {
-         *         "course": {
-         *           "create": [
-         *             "own"
-         *           ],
-         *           "edit": [
-         *             "own"
-         *           ],
-         *           "view": [
-         *             "all"
-         *           ]
-         *         },
-         *         "order": {
-         *           "edit": [
-         *             "own"
-         *           ],
-         *           "view": [
-         *             "all"
-         *           ]
-         *         },
-         *         "user": {
-         *           "view": [
-         *             "all"
-         *           ]
-         *         }
-         *       }
-         *     }
-         */
-        AccessLayerCreateRequest: {
-            /**
-             * Layer Code
-             * @description Machine-readable layer code (e.g., 'sales_access')
-             * @example sales_access
-             */
-            layer_code: string;
-            /**
-             * Layer Name
-             * @description Human-readable layer name (e.g., 'Sales Team Access')
-             * @example Sales Team Access
-             */
-            layer_name: string;
-            /**
-             * Description
-             * @description Access layer description
-             * @example Permissions for sales team members
-             */
-            description?: string | null;
-            /**
-             * Permissions
-             * @description Permissions structure (resource -> action -> scopes)
-             * @example {
-             *       "course": {
-             *         "create": [
-             *           "own"
-             *         ],
-             *         "edit": [
-             *           "own"
-             *         ],
-             *         "view": [
-             *           "all"
-             *         ]
-             *       },
-             *       "order": {
-             *         "view": [
-             *           "all"
-             *         ]
-             *       }
-             *     }
-             */
-            permissions: {
-                [key: string]: {
-                    [key: string]: string[];
+            } | null;
+            /**
+             * Reason
+             * @description Reason for update (for audit log)
+             * @example Adding new permissions for sales team
+             */
+            reason?: string | null;
+        };
+        Extensions: {
+            /** @example GENERIC_ERROR */
+            message_code?: string;
+            /** @example [] */
+            invalid_params?: components["schemas"]["InvalidParam"][];
+            extra_data?: Record<string, never> | null;
+            /** @example Detailed debug information */
+            debug?: string | null;
+        };
+        ErrorResponse: {
+            /** @example about:blank */
+            type?: string;
+            /** @example GENERIC_ERROR */
+            code?: string;
+            /** @example Client Error */
+            title?: string;
+            /** @example 400 */
+            status?: number;
+            /** @example An error occurred */
+            detail?: string;
+            /** @example /v1/cart/items */
+            instance?: string;
+            extensions?: components["schemas"]["Extensions"];
+        };
+        /**
+         * QuotaUpdateRequest
+         * @description Request model for updating a quota.
+         * @example {
+         *       "max_limit": 500,
+         *       "reason": "Increased quota due to plan upgrade to enterprise"
+         *     }
+         */
+        app__schemas__rbac__quota_schemas__QuotaUpdateRequest: {
+            /**
+             * Max Limit
+             * @description Updated maximum limit
+             */
+            max_limit?: number | null;
+            /**
+             * Reset Period
+             * @description Updated reset period
+             */
+            reset_period?: string | null;
+            /**
+             * Reason
+             * @description Reason for update (for audit log)
+             * @example Increased quota for plan upgrade
+             */
+            reason?: string | null;
+        };
+        /**
+         * AccessLayerCreateRequest
+         * @description Request model for creating an access layer.
+         * @example {
+         *       "description": "Permissions for sales team members",
+         *       "layer_code": "sales_access",
+         *       "layer_name": "Sales Team Access",
+         *       "permissions": {
+         *         "course": {
+         *           "create": [
+         *             "own"
+         *           ],
+         *           "edit": [
+         *             "own"
+         *           ],
+         *           "view": [
+         *             "all"
+         *           ]
+         *         },
+         *         "order": {
+         *           "edit": [
+         *             "own"
+         *           ],
+         *           "view": [
+         *             "all"
+         *           ]
+         *         },
+         *         "user": {
+         *           "view": [
+         *             "all"
+         *           ]
+         *         }
+         *       }
+         *     }
+         */
+        AccessLayerCreateRequest: {
+            /**
+             * Layer Code
+             * @description Machine-readable layer code (e.g., 'sales_access')
+             * @example sales_access
+             */
+            layer_code: string;
+            /**
+             * Layer Name
+             * @description Human-readable layer name (e.g., 'Sales Team Access')
+             * @example Sales Team Access
+             */
+            layer_name: string;
+            /**
+             * Description
+             * @description Access layer description
+             * @example Permissions for sales team members
+             */
+            description?: string | null;
+            /**
+             * Permissions
+             * @description Permissions structure (resource -> action -> scopes)
+             * @example {
+             *       "course": {
+             *         "create": [
+             *           "own"
+             *         ],
+             *         "edit": [
+             *           "own"
+             *         ],
+             *         "view": [
+             *           "all"
+             *         ]
+             *       },
+             *       "order": {
+             *         "view": [
+             *           "all"
+             *         ]
+             *       }
+             *     }
+             */
+            permissions: {
+                [key: string]: {
+                    [key: string]: string[];
+                };
+            };
+        };
+        /**
+         * @example {
+         *       "status": "success",
+         *       "message": "Operation successful",
+         *       "message_code": "api_suc_20001",
+         *       "data": {},
+         *       "metadata": {
+         *         "timestamp": "2026-03-26T10:00:00.000Z",
+         *         "requestId": "07e22004-cb60-4dfc-bc9c-b6f99664dca1",
+         *         "traceId": "a9f1204c-bb82-41de-b234-7c3a9e120000",
+         *         "version": "v1",
+         *         "executionTime": 42,
+         *         "language": "en-US"
+         *       }
+         *     }
+         */
+        StandardResponse: {
+            /** @example success */
+            status?: string;
+            data?: Record<string, never> | null;
+            /** @example Operation successful */
+            message?: string | null;
+            /** @example api_suc_20001 */
+            message_code?: string | null;
+            metadata?: Record<string, never> | null;
+            error?: components["schemas"]["ErrorResponse"];
+        };
+        /**
+         * AccessLayerCloneRequest
+         * @description Request model for cloning an access layer.
+         * @example {
+         *       "description": "Cloned from sales access with reduced permissions",
+         *       "new_layer_code": "junior_sales_access",
+         *       "new_layer_name": "Junior Sales Team Access"
+         *     }
+         */
+        AccessLayerCloneRequest: {
+            /**
+             * New Layer Code
+             * @description New layer code for cloned layer
+             * @example junior_sales_access
+             */
+            new_layer_code: string;
+            /**
+             * New Layer Name
+             * @description New layer name for cloned layer
+             * @example Junior Sales Team Access
+             */
+            new_layer_name: string;
+            /**
+             * Description
+             * @description Description for cloned layer
+             * @example Cloned from sales access with reduced permissions
+             */
+            description?: string | null;
+        };
+        /**
+         * AssignAccessLayerRequest
+         * @description Request model for assigning access layer to role.
+         * @example {
+         *       "access_layer_id": "acl_xyz789",
+         *       "reason": "Upgrading role permissions for sales team"
+         *     }
+         */
+        AssignAccessLayerRequest: {
+            /**
+             * Access Layer Id
+             * @description Access layer external ID (acl_xxx)
+             * @example acl_xyz789
+             */
+            access_layer_id: string;
+            /**
+             * Reason
+             * @description Reason for assignment (for audit log)
+             * @example Upgrading role permissions
+             */
+            reason?: string | null;
+        };
+        /**
+         * RoleCreateRequest
+         * @description Request model for creating a custom role.
+         * @example {
+         *       "access_layer_id": "acl_abc123def",
+         *       "description": "Manages sales team and customer relationships",
+         *       "display_order": 10,
+         *       "is_default": false,
+         *       "reason": "Creating role for new sales department",
+         *       "role_code": "sales_manager",
+         *       "role_name": "Sales Manager"
+         *     }
+         */
+        RoleCreateRequest: {
+            /**
+             * Role Code
+             * @description Machine-readable role code (e.g., 'sales_manager')
+             * @example sales_manager
+             */
+            role_code: string;
+            /**
+             * Role Name
+             * @description Human-readable role name (e.g., 'Sales Manager')
+             * @example Sales Manager
+             */
+            role_name: string;
+            /**
+             * Access Layer Id
+             * @description Access layer external ID to assign (acl_xxx)
+             * @example acl_abc123def
+             */
+            access_layer_id: string;
+            /**
+             * Description
+             * @description Role description
+             * @example Manages sales team and customer relationships
+             */
+            description?: string | null;
+            /**
+             * Is Default
+             * @description Whether this is the default role for new users
+             * @default false
+             */
+            is_default: boolean;
+            /**
+             * Display Order
+             * @description Display order for UI (lower = higher priority)
+             * @default 100
+             */
+            display_order: number;
+            /**
+             * Reason
+             * @description Reason for creating role (for audit log)
+             * @example Creating role for new sales department
+             */
+            reason?: string | null;
+        };
+        /**
+         * RoleUpdateRequest
+         * @description Request model for updating a role.
+         * @example {
+         *       "description": "Updated role with extended permissions",
+         *       "reason": "Promoting role to senior level",
+         *       "role_name": "Senior Sales Manager"
+         *     }
+         */
+        RoleUpdateRequest: {
+            /**
+             * Role Code
+             * @description Machine-readable role code
+             */
+            role_code?: string | null;
+            /**
+             * Role Name
+             * @description Human-readable role name
+             */
+            role_name?: string | null;
+            /**
+             * Access Layer Id
+             * @description Access layer external ID
+             */
+            access_layer_id?: string | null;
+            /**
+             * Description
+             * @description Role description
+             */
+            description?: string | null;
+            /**
+             * Is Default
+             * @description Whether this is the default role
+             */
+            is_default?: boolean | null;
+            /**
+             * Display Order
+             * @description Display order
+             */
+            display_order?: number | null;
+            /**
+             * Reason
+             * @description Reason for update (for audit log)
+             */
+            reason?: string | null;
+        };
+    };
+    responses: never;
+    parameters: never;
+    requestBodies: never;
+    headers: never;
+    pathItems: never;
+}
+export type $defs = Record<string, never>;
+export interface operations {
+    adminListRoles: {
+        parameters: {
+            query?: {
+                /** @description Include platform roles (admin, teacher, student) */
+                include_platform?: boolean;
+                /** @description Only return active roles */
+                active_only?: boolean;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "An error occurred",
+                     *       "message_code": "GENERIC_ERROR",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/client-error",
+                     *         "code": "GENERIC_ERROR",
+                     *         "title": "Client Error",
+                     *         "status": 400,
+                     *         "detail": "An error occurred",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "GENERIC_ERROR",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "One or more input fields are invalid",
+                     *       "message_code": "INVALID_INPUT",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/invalid-input",
+                     *         "code": "INVALID_INPUT",
+                     *         "title": "Invalid Input",
+                     *         "status": 422,
+                     *         "detail": "One or more input fields are invalid",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "INVALID_INPUT",
+                     *           "invalid_params": [
+                     *             {
+                     *               "field": "items[0].quantity",
+                     *               "error": "Input should be greater than or equal to 1"
+                     *             }
+                     *           ]
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "Too many requests",
+                     *       "message_code": "RATE_LIMIT_EXCEEDED",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/rate-limit-exceeded",
+                     *         "code": "RATE_LIMIT_EXCEEDED",
+                     *         "title": "Rate Limit Exceeded",
+                     *         "status": 429,
+                     *         "detail": "Too many requests",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "RATE_LIMIT_EXCEEDED",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "An unexpected error occurred",
+                     *       "message_code": "SERVER_ERROR",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/server-error",
+                     *         "code": "SERVER_ERROR",
+                     *         "title": "Server Error",
+                     *         "status": 500,
+                     *         "detail": "An unexpected error occurred",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "SERVER_ERROR",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+        };
+    };
+    adminCreateRole: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["RoleCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "An error occurred",
+                     *       "message_code": "GENERIC_ERROR",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/client-error",
+                     *         "code": "GENERIC_ERROR",
+                     *         "title": "Client Error",
+                     *         "status": 400,
+                     *         "detail": "An error occurred",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "GENERIC_ERROR",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "One or more input fields are invalid",
+                     *       "message_code": "INVALID_INPUT",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/invalid-input",
+                     *         "code": "INVALID_INPUT",
+                     *         "title": "Invalid Input",
+                     *         "status": 422,
+                     *         "detail": "One or more input fields are invalid",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "INVALID_INPUT",
+                     *           "invalid_params": [
+                     *             {
+                     *               "field": "items[0].quantity",
+                     *               "error": "Input should be greater than or equal to 1"
+                     *             }
+                     *           ]
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "Too many requests",
+                     *       "message_code": "RATE_LIMIT_EXCEEDED",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/rate-limit-exceeded",
+                     *         "code": "RATE_LIMIT_EXCEEDED",
+                     *         "title": "Rate Limit Exceeded",
+                     *         "status": 429,
+                     *         "detail": "Too many requests",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "RATE_LIMIT_EXCEEDED",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "An unexpected error occurred",
+                     *       "message_code": "SERVER_ERROR",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/server-error",
+                     *         "code": "SERVER_ERROR",
+                     *         "title": "Server Error",
+                     *         "status": 500,
+                     *         "detail": "An unexpected error occurred",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "SERVER_ERROR",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
                 };
             };
-        };
-        /**
-         * AccessLayerCloneRequest
-         * @description Request model for cloning an access layer.
-         * @example {
-         *       "description": "Cloned from sales access with reduced permissions",
-         *       "new_layer_code": "junior_sales_access",
-         *       "new_layer_name": "Junior Sales Team Access"
-         *     }
-         */
-        AccessLayerCloneRequest: {
-            /**
-             * New Layer Code
-             * @description New layer code for cloned layer
-             * @example junior_sales_access
-             */
-            new_layer_code: string;
-            /**
-             * New Layer Name
-             * @description New layer name for cloned layer
-             * @example Junior Sales Team Access
-             */
-            new_layer_name: string;
-            /**
-             * Description
-             * @description Description for cloned layer
-             * @example Cloned from sales access with reduced permissions
-             */
-            description?: string | null;
         };
     };
-    responses: never;
-    parameters: never;
-    requestBodies: never;
-    headers: never;
-    pathItems: never;
-}
-export type $defs = Record<string, never>;
-export interface operations {
-    adminListRoles: {
+    adminGetRole: {
         parameters: {
-            query?: {
-                /** @description Include platform roles (admin, teacher, student) */
-                include_platform?: boolean;
-                /** @description Only return active roles */
-                active_only?: boolean;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
+            path: {
+                role_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
@@ -1831,23 +2333,24 @@ export interface operations {
             };
         };
     };
-    adminCreateRole: {
+    adminDeleteRole: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Reason for deletion */
+                reason?: string | null;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["RoleCreateRequest"];
+            path: {
+                role_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -2034,7 +2537,7 @@ export interface operations {
             };
         };
     };
-    adminGetRole: {
+    adminUpdateRole: {
         parameters: {
             query?: never;
             header?: {
@@ -2045,7 +2548,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["RoleUpdateRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -2235,12 +2742,9 @@ export interface operations {
             };
         };
     };
-    adminDeleteRole: {
-        parameters: {
-            query?: {
-                /** @description Reason for deletion */
-                reason?: string | null;
-            };
+    adminUpdateRoleAccessLayer: {
+        parameters: {
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
@@ -2249,7 +2753,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AssignAccessLayerRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -2439,22 +2947,21 @@ export interface operations {
             };
         };
     };
-    adminUpdateRole: {
+    adminListAccessLayers: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Include platform access layers */
+                include_platform?: boolean;
+                /** @description Only return active layers */
+                active_only?: boolean;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                role_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["RoleUpdateRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
             200: {
@@ -2644,25 +3151,23 @@ export interface operations {
             };
         };
     };
-    adminUpdateRoleAccessLayer: {
+    adminCreateAccessLayer: {
         parameters: {
             query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                role_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["AssignAccessLayerRequest"];
+                "application/json": components["schemas"]["AccessLayerCreateRequest"];
             };
         };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -2849,18 +3354,15 @@ export interface operations {
             };
         };
     };
-    adminListAccessLayers: {
+    adminGetAccessLayer: {
         parameters: {
-            query?: {
-                /** @description Include platform access layers */
-                include_platform?: boolean;
-                /** @description Only return active layers */
-                active_only?: boolean;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
+            path: {
+                layer_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
@@ -3053,23 +3555,24 @@ export interface operations {
             };
         };
     };
-    adminCreateAccessLayer: {
+    adminDeleteAccessLayer: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Reason for deletion */
+                reason?: string | null;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["AccessLayerCreateRequest"];
+            path: {
+                layer_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -3256,7 +3759,7 @@ export interface operations {
             };
         };
     };
-    adminGetAccessLayer: {
+    adminUpdateAccessLayer: {
         parameters: {
             query?: never;
             header?: {
@@ -3267,7 +3770,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AccessLayerUpdateRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -3457,12 +3964,9 @@ export interface operations {
             };
         };
     };
-    adminDeleteAccessLayer: {
+    adminCreateAccessLayerClone: {
         parameters: {
-            query?: {
-                /** @description Reason for deletion */
-                reason?: string | null;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
@@ -3471,10 +3975,14 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AccessLayerCloneRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -3661,25 +4169,23 @@ export interface operations {
             };
         };
     };
-    adminUpdateAccessLayer: {
+    adminCreateUserPermissionOverride: {
         parameters: {
             query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                layer_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["AccessLayerUpdateRequest"];
+                "application/json": components["schemas"]["UserPermissionOverrideRequest"];
             };
         };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -3866,25 +4372,24 @@ export interface operations {
             };
         };
     };
-    adminCreateAccessLayerClone: {
+    adminListUserPermissionOverrides: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Include expired overrides */
+                include_expired?: boolean;
+            };
             header?: {
                 authorization?: string | null;
             };
             path: {
-                layer_id: string;
+                user_id: string;
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["AccessLayerCloneRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -4071,23 +4576,24 @@ export interface operations {
             };
         };
     };
-    adminCreateUserPermissionOverride: {
+    adminDeleteUserPermissionOverride: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Reason for revocation */
+                reason?: string | null;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["UserPermissionOverrideRequest"];
+            path: {
+                override_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -4274,18 +4780,16 @@ export interface operations {
             };
         };
     };
-    adminListUserPermissionOverrides: {
+    adminListQuotas: {
         parameters: {
             query?: {
-                /** @description Include expired overrides */
-                include_expired?: boolean;
+                /** @description Only return active quotas */
+                active_only?: boolean;
             };
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                user_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -4478,24 +4982,23 @@ export interface operations {
             };
         };
     };
-    adminDeleteUserPermissionOverride: {
+    adminCreateQuota: {
         parameters: {
-            query?: {
-                /** @description Reason for revocation */
-                reason?: string | null;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                override_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["QuotaCreateRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -4682,16 +5185,15 @@ export interface operations {
             };
         };
     };
-    adminListQuotas: {
+    adminGetQuota: {
         parameters: {
-            query?: {
-                /** @description Only return active quotas */
-                active_only?: boolean;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
+            path: {
+                quota_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
@@ -4884,23 +5386,25 @@ export interface operations {
             };
         };
     };
-    adminCreateQuota: {
+    adminUpdateQuota: {
         parameters: {
             query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
+            path: {
+                quota_id: string;
+            };
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["QuotaCreateRequest"];
+                "application/json": components["schemas"]["app__schemas__rbac__quota_schemas__QuotaUpdateRequest"];
             };
         };
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -5087,9 +5591,12 @@ export interface operations {
             };
         };
     };
-    adminGetQuota: {
+    adminCreateQuotaReset: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Reason for reset */
+                reason?: string | null;
+            };
             header?: {
                 authorization?: string | null;
             };
@@ -5288,22 +5795,33 @@ export interface operations {
             };
         };
     };
-    adminUpdateQuota: {
+    adminListAuditLogs: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Filter by entity type (role, access_layer, user_override, quota) */
+                entity_type?: string | null;
+                /** @description Filter by specific entity external ID (e.g., role_xxx, acl_xxx) — use with entity_type for full entity audit history */
+                entity_id?: string | null;
+                /** @description Filter by action (create, update, delete, assign, revoke, reset) */
+                action?: string | null;
+                /** @description Filter by user who performed action */
+                user_id?: number | null;
+                /** @description Filter from date (ISO 8601 format) */
+                start_date?: string | null;
+                /** @description Filter to date (ISO 8601 format) */
+                end_date?: string | null;
+                /** @description Page number (1-based) */
+                page?: number;
+                /** @description Items per page (1–500, default 50) */
+                limit?: number;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                quota_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["QuotaUpdateRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
             200: {
@@ -5493,17 +6011,14 @@ export interface operations {
             };
         };
     };
-    adminCreateQuotaReset: {
+    adminGetAuditLog: {
         parameters: {
-            query?: {
-                /** @description Reason for reset */
-                reason?: string | null;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
             path: {
-                quota_id: string;
+                log_id: string;
             };
             cookie?: never;
         };
@@ -5697,26 +6212,9 @@ export interface operations {
             };
         };
     };
-    adminListAuditLogs: {
+    listPermissionGroups: {
         parameters: {
-            query?: {
-                /** @description Filter by entity type (role, access_layer, user_override, quota) */
-                entity_type?: string | null;
-                /** @description Filter by specific entity external ID (e.g., role_xxx, acl_xxx) — use with entity_type for full entity audit history */
-                entity_id?: string | null;
-                /** @description Filter by action (create, update, delete, assign, revoke, reset) */
-                action?: string | null;
-                /** @description Filter by user who performed action */
-                user_id?: number | null;
-                /** @description Filter from date (ISO 8601 format) */
-                start_date?: string | null;
-                /** @description Filter to date (ISO 8601 format) */
-                end_date?: string | null;
-                /** @description Page number (1-based) */
-                page?: number;
-                /** @description Items per page (1–500, default 50) */
-                limit?: number;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
@@ -5913,14 +6411,14 @@ export interface operations {
             };
         };
     };
-    adminGetAuditLog: {
+    getPermissionGroup: {
         parameters: {
             query?: never;
             header?: {
                 authorization?: string | null;
             };
             path: {
-                log_id: string;
+                group_name: string;
             };
             cookie?: never;
         };