@blezgo/api-sdk 0.1.2 → 0.1.4

package/dist/role/generated.d.ts

@@ -1107,6 +1107,104 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/permissions/groups": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Permission Groups
+         * @description List all permission groups ordered by sort_order.
+         *
+         *     Permission groups are named bundles (e.g. `application_config`) that cover
+         *     a set of fine-grained resources. Assigning a group to a user implies access
+         *     to every resource inside it for the same action and scope.
+         *
+         *     Use `GET /v1/permissions/groups/{group_name}` to expand a group and see
+         *     individual resources with their allowed actions.
+         *
+         *     **Example response**:
+         *     ```json
+         *     {
+         *       "groups": [
+         *         {
+         *           "name": "application_config",
+         *           "label": "Application Configuration",
+         *           "description": "Payment credentials, social logins, channel settings, and system config",
+         *           "sort_order": 1,
+         *           "resource_count": 11
+         *         }
+         *       ]
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (JWT Bearer)
+         *     **Permission**: `role.view.all`
+         *     **Response codes**: 200 OK, 401 Unauthorized, 403 Forbidden
+         */
+        get: operations["listPermissionGroups"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/permissions/groups/{group_name}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Permission Group
+         * @description Get all resources and their allowed actions for a permission group.
+         *
+         *     Used by the admin UI "expand" view — when an admin wants to assign individual
+         *     permissions instead of the whole group, this endpoint provides the full list
+         *     of fine-grained resources and actions, including which are dangerous.
+         *
+         *     **Example response** for `application_config`:
+         *     ```json
+         *     {
+         *       "group": {
+         *         "name": "application_config",
+         *         "label": "Application Configuration",
+         *         "description": "...",
+         *         "sort_order": 1,
+         *         "resource_count": 11,
+         *         "permission_count": 34,
+         *         "resources": [
+         *           {
+         *             "key": "payment_method",
+         *             "label": "Payment Method",
+         *             "actions": [
+         *               {"key": "view",   "label": "View",   "permission_string": "payment_method.view.all",   "dangerous": false},
+         *               {"key": "delete", "label": "Delete", "permission_string": "payment_method.delete.all", "dangerous": true}
+         *             ]
+         *           }
+         *         ]
+         *       }
+         *     }
+         *     ```
+         *
+         *     **Authentication**: Required (JWT Bearer)
+         *     **Permission**: `role.view.all`
+         *     **Response codes**: 200 OK, 401 Unauthorized, 403 Forbidden, 404 Not Found
+         */
+        get: operations["getPermissionGroup"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/roles": {
         parameters: {
             query?: never;
@@ -1147,6 +1245,49 @@ export interface paths {
 export type webhooks = Record<string, never>;
 export interface components {
     schemas: {
+        /**
+         * QuotaCreateRequest
+         * @description Request model for creating a resource quota.
+         * @example {
+         *       "action_code": "create",
+         *       "max_limit": 100,
+         *       "reason": "Limiting course creation for starter plan organizations",
+         *       "reset_period": "monthly",
+         *       "resource_code": "course"
+         *     }
+         */
+        QuotaCreateRequest: {
+            /**
+             * Resource Code
+             * @description Resource code (e.g., 'course', 'user', 'order')
+             * @example course
+             */
+            resource_code: string;
+            /**
+             * Action Code
+             * @description Action code (e.g., 'create', 'process')
+             * @example create
+             */
+            action_code: string;
+            /**
+             * Max Limit
+             * @description Maximum allowed limit
+             * @example 100
+             */
+            max_limit: number;
+            /**
+             * Reset Period
+             * @description Reset period: 'hourly', 'daily', 'monthly', 'yearly', 'never'
+             * @example monthly
+             */
+            reset_period: string;
+            /**
+             * Reason
+             * @description Reason for creating quota (for audit log)
+             * @example Limiting course creation for starter plan
+             */
+            reason?: string | null;
+        };
         /**
          * QuotaUpdateRequest
          * @description Request model for updating a quota.
@@ -1155,7 +1296,7 @@ export interface components {
          *       "reason": "Increased quota due to plan upgrade to enterprise"
          *     }
          */
-        QuotaUpdateRequest: {
+        app__schemas__rbac__quota_schemas__QuotaUpdateRequest: {
             /**
              * Max Limit
              * @description Updated maximum limit
@@ -1173,40 +1314,83 @@ export interface components {
              */
             reason?: string | null;
         };
+        InvalidParam: {
+            /** @example items[0].quantity */
+            field?: string;
+            /** @example Input should be greater than or equal to 1 */
+            error?: string;
+        };
         /**
-         * UserPermissionOverrideRequest
-         * @description Request model for granting permission override to a user.
+         * AccessLayerCreateRequest
+         * @description Request model for creating an access layer.
          * @example {
-         *       "expires_at": "2026-01-31T23:59:59Z",
-         *       "override_reason": "Temporary admin access for Q4 audit and cleanup",
+         *       "description": "Permissions for sales team members",
+         *       "layer_code": "sales_access",
+         *       "layer_name": "Sales Team Access",
          *       "permissions": {
          *         "course": {
-         *           "delete": [
+         *           "create": [
+         *             "own"
+         *           ],
+         *           "edit": [
+         *             "own"
+         *           ],
+         *           "view": [
          *             "all"
          *           ]
          *         },
-         *         "custom_module": {
-         *           "manage": [
+         *         "order": {
+         *           "edit": [
+         *             "own"
+         *           ],
+         *           "view": [
+         *             "all"
+         *           ]
+         *         },
+         *         "user": {
+         *           "view": [
          *             "all"
          *           ]
          *         }
-         *       },
-         *       "target_user_id": "usr_abc123xyz"
+         *       }
          *     }
          */
-        UserPermissionOverrideRequest: {
+        AccessLayerCreateRequest: {
             /**
-             * Target User Id
-             * @description User external ID to grant override permissions to (usr_xxx format)
-             * @example usr_abc123xyz
+             * Layer Code
+             * @description Machine-readable layer code (e.g., 'sales_access')
+             * @example sales_access
              */
-            target_user_id: string;
+            layer_code: string;
+            /**
+             * Layer Name
+             * @description Human-readable layer name (e.g., 'Sales Team Access')
+             * @example Sales Team Access
+             */
+            layer_name: string;
+            /**
+             * Description
+             * @description Access layer description
+             * @example Permissions for sales team members
+             */
+            description?: string | null;
             /**
              * Permissions
-             * @description Override permissions structure (resource -> action -> scopes)
+             * @description Permissions structure (resource -> action -> scopes)
              * @example {
              *       "course": {
-             *         "delete": [
+             *         "create": [
+             *           "own"
+             *         ],
+             *         "edit": [
+             *           "own"
+             *         ],
+             *         "view": [
+             *           "all"
+             *         ]
+             *       },
+             *       "order": {
+             *         "view": [
              *           "all"
              *         ]
              *       }
@@ -1217,18 +1401,63 @@ export interface components {
                     [key: string]: string[];
                 };
             };
+        };
+        /**
+         * RoleCreateRequest
+         * @description Request model for creating a custom role.
+         * @example {
+         *       "access_layer_id": "acl_abc123def",
+         *       "description": "Manages sales team and customer relationships",
+         *       "display_order": 10,
+         *       "is_default": false,
+         *       "reason": "Creating role for new sales department",
+         *       "role_code": "sales_manager",
+         *       "role_name": "Sales Manager"
+         *     }
+         */
+        RoleCreateRequest: {
             /**
-             * Override Reason
-             * @description Reason for granting override (for audit log)
-             * @example Temporary admin access for content cleanup project
+             * Role Code
+             * @description Machine-readable role code (e.g., 'sales_manager')
+             * @example sales_manager
              */
-            override_reason: string;
+            role_code: string;
             /**
-             * Expires At
-             * @description Expiration timestamp (ISO format). If not provided, override never expires
-             * @example 2026-01-31T23:59:59Z
+             * Role Name
+             * @description Human-readable role name (e.g., 'Sales Manager')
+             * @example Sales Manager
              */
-            expires_at?: string | null;
+            role_name: string;
+            /**
+             * Access Layer Id
+             * @description Access layer external ID to assign (acl_xxx)
+             * @example acl_abc123def
+             */
+            access_layer_id: string;
+            /**
+             * Description
+             * @description Role description
+             * @example Manages sales team and customer relationships
+             */
+            description?: string | null;
+            /**
+             * Is Default
+             * @description Whether this is the default role for new users
+             * @default false
+             */
+            is_default: boolean;
+            /**
+             * Display Order
+             * @description Display order for UI (lower = higher priority)
+             * @default 100
+             */
+            display_order: number;
+            /**
+             * Reason
+             * @description Reason for creating role (for audit log)
+             * @example Creating role for new sales department
+             */
+            reason?: string | null;
         };
         /**
          * AssignAccessLayerRequest
@@ -1253,45 +1482,138 @@ export interface components {
             reason?: string | null;
         };
         /**
-         * QuotaCreateRequest
-         * @description Request model for creating a resource quota.
          * @example {
-         *       "action_code": "create",
-         *       "max_limit": 100,
-         *       "reason": "Limiting course creation for starter plan organizations",
-         *       "reset_period": "monthly",
-         *       "resource_code": "course"
+         *       "status": "success",
+         *       "message": "Operation successful",
+         *       "message_code": "api_suc_20001",
+         *       "data": {},
+         *       "metadata": {
+         *         "timestamp": "2026-03-26T10:00:00.000Z",
+         *         "requestId": "07e22004-cb60-4dfc-bc9c-b6f99664dca1",
+         *         "traceId": "a9f1204c-bb82-41de-b234-7c3a9e120000",
+         *         "version": "v1",
+         *         "executionTime": 42,
+         *         "language": "en-US"
+         *       }
          *     }
          */
-        QuotaCreateRequest: {
-            /**
-             * Resource Code
-             * @description Resource code (e.g., 'course', 'user', 'order')
-             * @example course
-             */
-            resource_code: string;
-            /**
-             * Action Code
-             * @description Action code (e.g., 'create', 'process')
-             * @example create
+        StandardResponse: {
+            /** @example success */
+            status?: string;
+            data?: Record<string, never> | null;
+            /** @example Operation successful */
+            message?: string | null;
+            /** @example api_suc_20001 */
+            message_code?: string | null;
+            metadata?: Record<string, never> | null;
+            error?: components["schemas"]["ErrorResponse"];
+        };
+        /**
+         * UserPermissionOverrideRequest
+         * @description Request model for granting permission override to a user.
+         * @example {
+         *       "expires_at": "2026-01-31T23:59:59Z",
+         *       "override_reason": "Temporary admin access for Q4 audit and cleanup",
+         *       "permissions": {
+         *         "course": {
+         *           "delete": [
+         *             "all"
+         *           ]
+         *         },
+         *         "custom_module": {
+         *           "manage": [
+         *             "all"
+         *           ]
+         *         }
+         *       },
+         *       "target_user_id": "usr_abc123xyz"
+         *     }
+         */
+        UserPermissionOverrideRequest: {
+            /**
+             * Target User Id
+             * @description User external ID to grant override permissions to (usr_xxx format)
+             * @example usr_abc123xyz
              */
-            action_code: string;
+            target_user_id: string;
             /**
-             * Max Limit
-             * @description Maximum allowed limit
-             * @example 100
+             * Permissions
+             * @description Override permissions structure (resource -> action -> scopes)
+             * @example {
+             *       "course": {
+             *         "delete": [
+             *           "all"
+             *         ]
+             *       }
+             *     }
              */
-            max_limit: number;
+            permissions: {
+                [key: string]: {
+                    [key: string]: string[];
+                };
+            };
             /**
-             * Reset Period
-             * @description Reset period: 'hourly', 'daily', 'monthly', 'yearly', 'never'
-             * @example monthly
+             * Override Reason
+             * @description Reason for granting override (for audit log)
+             * @example Temporary admin access for content cleanup project
              */
-            reset_period: string;
+            override_reason: string;
+            /**
+             * Expires At
+             * @description Expiration timestamp (ISO format). If not provided, override never expires
+             * @example 2026-01-31T23:59:59Z
+             */
+            expires_at?: string | null;
+        };
+        /**
+         * AccessLayerUpdateRequest
+         * @description Request model for updating an access layer.
+         * @example {
+         *       "description": "Updated permissions for senior sales team",
+         *       "layer_name": "Senior Sales Team Access",
+         *       "permissions": {
+         *         "course": {
+         *           "create": [
+         *             "all"
+         *           ],
+         *           "delete": [
+         *             "own"
+         *           ],
+         *           "edit": [
+         *             "all"
+         *           ],
+         *           "view": [
+         *             "all"
+         *           ]
+         *         }
+         *       },
+         *       "reason": "Expanding permissions for senior team members"
+         *     }
+         */
+        AccessLayerUpdateRequest: {
+            /**
+             * Layer Name
+             * @description Human-readable layer name
+             */
+            layer_name?: string | null;
+            /**
+             * Description
+             * @description Access layer description
+             */
+            description?: string | null;
+            /**
+             * Permissions
+             * @description Updated permissions structure
+             */
+            permissions?: {
+                [key: string]: {
+                    [key: string]: string[];
+                };
+            } | null;
             /**
              * Reason
-             * @description Reason for creating quota (for audit log)
-             * @example Limiting course creation for starter plan
+             * @description Reason for update (for audit log)
+             * @example Adding new permissions for sales team
              */
             reason?: string | null;
         };
@@ -1341,42 +1663,6 @@ export interface components {
              */
             reason?: string | null;
         };
-        Extensions: {
-            /** @example GENERIC_ERROR */
-            message_code?: string;
-            /** @example [] */
-            invalid_params?: components["schemas"]["InvalidParam"][];
-            extra_data?: Record<string, never> | null;
-            /** @example Detailed debug information */
-            debug?: string | null;
-        };
-        /**
-         * @example {
-         *       "status": "success",
-         *       "message": "Operation successful",
-         *       "message_code": "api_suc_20001",
-         *       "data": {},
-         *       "metadata": {
-         *         "timestamp": "2026-03-26T10:00:00.000Z",
-         *         "requestId": "07e22004-cb60-4dfc-bc9c-b6f99664dca1",
-         *         "traceId": "a9f1204c-bb82-41de-b234-7c3a9e120000",
-         *         "version": "v1",
-         *         "executionTime": 42,
-         *         "language": "en-US"
-         *       }
-         *     }
-         */
-        StandardResponse: {
-            /** @example success */
-            status?: string;
-            data?: Record<string, never> | null;
-            /** @example Operation successful */
-            message?: string | null;
-            /** @example api_suc_20001 */
-            message_code?: string | null;
-            metadata?: Record<string, never> | null;
-            error?: components["schemas"]["ErrorResponse"];
-        };
         ErrorResponse: {
             /** @example about:blank */
             type?: string;
@@ -1392,11 +1678,14 @@ export interface components {
             instance?: string;
             extensions?: components["schemas"]["Extensions"];
         };
-        InvalidParam: {
-            /** @example items[0].quantity */
-            field?: string;
-            /** @example Input should be greater than or equal to 1 */
-            error?: string;
+        Extensions: {
+            /** @example GENERIC_ERROR */
+            message_code?: string;
+            /** @example [] */
+            invalid_params?: components["schemas"]["InvalidParam"][];
+            extra_data?: Record<string, never> | null;
+            /** @example Detailed debug information */
+            debug?: string | null;
         };
         /**
          * AccessLayerCloneRequest
@@ -1427,218 +1716,431 @@ export interface components {
              */
             description?: string | null;
         };
-        /**
-         * RoleCreateRequest
-         * @description Request model for creating a custom role.
-         * @example {
-         *       "access_layer_id": "acl_abc123def",
-         *       "description": "Manages sales team and customer relationships",
-         *       "display_order": 10,
-         *       "is_default": false,
-         *       "reason": "Creating role for new sales department",
-         *       "role_code": "sales_manager",
-         *       "role_name": "Sales Manager"
-         *     }
-         */
-        RoleCreateRequest: {
-            /**
-             * Role Code
-             * @description Machine-readable role code (e.g., 'sales_manager')
-             * @example sales_manager
-             */
-            role_code: string;
-            /**
-             * Role Name
-             * @description Human-readable role name (e.g., 'Sales Manager')
-             * @example Sales Manager
-             */
-            role_name: string;
-            /**
-             * Access Layer Id
-             * @description Access layer external ID to assign (acl_xxx)
-             * @example acl_abc123def
-             */
-            access_layer_id: string;
-            /**
-             * Description
-             * @description Role description
-             * @example Manages sales team and customer relationships
-             */
-            description?: string | null;
-            /**
-             * Is Default
-             * @description Whether this is the default role for new users
-             * @default false
-             */
-            is_default: boolean;
-            /**
-             * Display Order
-             * @description Display order for UI (lower = higher priority)
-             * @default 100
-             */
-            display_order: number;
-            /**
-             * Reason
-             * @description Reason for creating role (for audit log)
-             * @example Creating role for new sales department
-             */
-            reason?: string | null;
+    };
+    responses: never;
+    parameters: never;
+    requestBodies: never;
+    headers: never;
+    pathItems: never;
+}
+export type $defs = Record<string, never>;
+export interface operations {
+    adminListRoles: {
+        parameters: {
+            query?: {
+                /** @description Include platform roles (admin, teacher, student) */
+                include_platform?: boolean;
+                /** @description Only return active roles */
+                active_only?: boolean;
+            };
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
         };
-        /**
-         * AccessLayerCreateRequest
-         * @description Request model for creating an access layer.
-         * @example {
-         *       "description": "Permissions for sales team members",
-         *       "layer_code": "sales_access",
-         *       "layer_name": "Sales Team Access",
-         *       "permissions": {
-         *         "course": {
-         *           "create": [
-         *             "own"
-         *           ],
-         *           "edit": [
-         *             "own"
-         *           ],
-         *           "view": [
-         *             "all"
-         *           ]
-         *         },
-         *         "order": {
-         *           "edit": [
-         *             "own"
-         *           ],
-         *           "view": [
-         *             "all"
-         *           ]
-         *         },
-         *         "user": {
-         *           "view": [
-         *             "all"
-         *           ]
-         *         }
-         *       }
-         *     }
-         */
-        AccessLayerCreateRequest: {
-            /**
-             * Layer Code
-             * @description Machine-readable layer code (e.g., 'sales_access')
-             * @example sales_access
-             */
-            layer_code: string;
-            /**
-             * Layer Name
-             * @description Human-readable layer name (e.g., 'Sales Team Access')
-             * @example Sales Team Access
-             */
-            layer_name: string;
-            /**
-             * Description
-             * @description Access layer description
-             * @example Permissions for sales team members
-             */
-            description?: string | null;
-            /**
-             * Permissions
-             * @description Permissions structure (resource -> action -> scopes)
-             * @example {
-             *       "course": {
-             *         "create": [
-             *           "own"
-             *         ],
-             *         "edit": [
-             *           "own"
-             *         ],
-             *         "view": [
-             *           "all"
-             *         ]
-             *       },
-             *       "order": {
-             *         "view": [
-             *           "all"
-             *         ]
-             *       }
-             *     }
-             */
-            permissions: {
-                [key: string]: {
-                    [key: string]: string[];
+        requestBody?: never;
+        responses: {
+            /** @description Successful Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "An error occurred",
+                     *       "message_code": "GENERIC_ERROR",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/client-error",
+                     *         "code": "GENERIC_ERROR",
+                     *         "title": "Client Error",
+                     *         "status": 400,
+                     *         "detail": "An error occurred",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "GENERIC_ERROR",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "One or more input fields are invalid",
+                     *       "message_code": "INVALID_INPUT",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/invalid-input",
+                     *         "code": "INVALID_INPUT",
+                     *         "title": "Invalid Input",
+                     *         "status": 422,
+                     *         "detail": "One or more input fields are invalid",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "INVALID_INPUT",
+                     *           "invalid_params": [
+                     *             {
+                     *               "field": "items[0].quantity",
+                     *               "error": "Input should be greater than or equal to 1"
+                     *             }
+                     *           ]
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "Too many requests",
+                     *       "message_code": "RATE_LIMIT_EXCEEDED",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/rate-limit-exceeded",
+                     *         "code": "RATE_LIMIT_EXCEEDED",
+                     *         "title": "Rate Limit Exceeded",
+                     *         "status": 429,
+                     *         "detail": "Too many requests",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "RATE_LIMIT_EXCEEDED",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "An unexpected error occurred",
+                     *       "message_code": "SERVER_ERROR",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/server-error",
+                     *         "code": "SERVER_ERROR",
+                     *         "title": "Server Error",
+                     *         "status": 500,
+                     *         "detail": "An unexpected error occurred",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "SERVER_ERROR",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+        };
+    };
+    adminCreateRole: {
+        parameters: {
+            query?: never;
+            header?: {
+                authorization?: string | null;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["RoleCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description Successful Response */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "An error occurred",
+                     *       "message_code": "GENERIC_ERROR",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/client-error",
+                     *         "code": "GENERIC_ERROR",
+                     *         "title": "Client Error",
+                     *         "status": 400,
+                     *         "detail": "An error occurred",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "GENERIC_ERROR",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
                 };
             };
-        };
-        /**
-         * AccessLayerUpdateRequest
-         * @description Request model for updating an access layer.
-         * @example {
-         *       "description": "Updated permissions for senior sales team",
-         *       "layer_name": "Senior Sales Team Access",
-         *       "permissions": {
-         *         "course": {
-         *           "create": [
-         *             "all"
-         *           ],
-         *           "delete": [
-         *             "own"
-         *           ],
-         *           "edit": [
-         *             "all"
-         *           ],
-         *           "view": [
-         *             "all"
-         *           ]
-         *         }
-         *       },
-         *       "reason": "Expanding permissions for senior team members"
-         *     }
-         */
-        AccessLayerUpdateRequest: {
-            /**
-             * Layer Name
-             * @description Human-readable layer name
-             */
-            layer_name?: string | null;
-            /**
-             * Description
-             * @description Access layer description
-             */
-            description?: string | null;
-            /**
-             * Permissions
-             * @description Updated permissions structure
-             */
-            permissions?: {
-                [key: string]: {
-                    [key: string]: string[];
+            /** @description Unprocessable Entity */
+            422: {
+                headers: {
+                    [name: string]: unknown;
                 };
-            } | null;
-            /**
-             * Reason
-             * @description Reason for update (for audit log)
-             * @example Adding new permissions for sales team
-             */
-            reason?: string | null;
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "One or more input fields are invalid",
+                     *       "message_code": "INVALID_INPUT",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/invalid-input",
+                     *         "code": "INVALID_INPUT",
+                     *         "title": "Invalid Input",
+                     *         "status": 422,
+                     *         "detail": "One or more input fields are invalid",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "INVALID_INPUT",
+                     *           "invalid_params": [
+                     *             {
+                     *               "field": "items[0].quantity",
+                     *               "error": "Input should be greater than or equal to 1"
+                     *             }
+                     *           ]
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "Too many requests",
+                     *       "message_code": "RATE_LIMIT_EXCEEDED",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/rate-limit-exceeded",
+                     *         "code": "RATE_LIMIT_EXCEEDED",
+                     *         "title": "Rate Limit Exceeded",
+                     *         "status": 429,
+                     *         "detail": "Too many requests",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "RATE_LIMIT_EXCEEDED",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    /**
+                     * @example {
+                     *       "status": "error",
+                     *       "message": "An unexpected error occurred",
+                     *       "message_code": "SERVER_ERROR",
+                     *       "metadata": {
+                     *         "timestamp": "2025-08-05T18:38:57Z",
+                     *         "requestId": "uuid",
+                     *         "traceId": "uuid",
+                     *         "version": "v1",
+                     *         "executionTime": 0,
+                     *         "language": "en-US",
+                     *         "links": [
+                     *           {
+                     *             "rel": "self",
+                     *             "href": "/v1/cart/items",
+                     *             "method": "POST"
+                     *           }
+                     *         ]
+                     *       },
+                     *       "error": {
+                     *         "type": "https://{your-domain}/errors/server-error",
+                     *         "code": "SERVER_ERROR",
+                     *         "title": "Server Error",
+                     *         "status": 500,
+                     *         "detail": "An unexpected error occurred",
+                     *         "instance": "/v1/cart/items",
+                     *         "extensions": {
+                     *           "message_code": "SERVER_ERROR",
+                     *           "invalid_params": []
+                     *         }
+                     *       }
+                     *     }
+                     */
+                    "application/json": components["schemas"]["StandardResponse"];
+                };
+            };
         };
     };
-    responses: never;
-    parameters: never;
-    requestBodies: never;
-    headers: never;
-    pathItems: never;
-}
-export type $defs = Record<string, never>;
-export interface operations {
-    adminListRoles: {
+    adminGetRole: {
         parameters: {
-            query?: {
-                /** @description Include platform roles (admin, teacher, student) */
-                include_platform?: boolean;
-                /** @description Only return active roles */
-                active_only?: boolean;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
+            path: {
+                role_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
@@ -1831,23 +2333,24 @@ export interface operations {
             };
         };
     };
-    adminCreateRole: {
+    adminDeleteRole: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Reason for deletion */
+                reason?: string | null;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["RoleCreateRequest"];
+            path: {
+                role_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -2034,7 +2537,7 @@ export interface operations {
             };
         };
     };
-    adminGetRole: {
+    adminUpdateRole: {
         parameters: {
             query?: never;
             header?: {
@@ -2045,7 +2548,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["RoleUpdateRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -2235,12 +2742,9 @@ export interface operations {
             };
         };
     };
-    adminDeleteRole: {
-        parameters: {
-            query?: {
-                /** @description Reason for deletion */
-                reason?: string | null;
-            };
+    adminUpdateRoleAccessLayer: {
+        parameters: {
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
@@ -2249,7 +2753,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AssignAccessLayerRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -2439,22 +2947,21 @@ export interface operations {
             };
         };
     };
-    adminUpdateRole: {
+    adminListAccessLayers: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Include platform access layers */
+                include_platform?: boolean;
+                /** @description Only return active layers */
+                active_only?: boolean;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                role_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["RoleUpdateRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
             200: {
@@ -2644,25 +3151,23 @@ export interface operations {
             };
         };
     };
-    adminUpdateRoleAccessLayer: {
+    adminCreateAccessLayer: {
         parameters: {
             query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                role_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["AssignAccessLayerRequest"];
+                "application/json": components["schemas"]["AccessLayerCreateRequest"];
             };
         };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -2849,18 +3354,15 @@ export interface operations {
             };
         };
     };
-    adminListAccessLayers: {
+    adminGetAccessLayer: {
         parameters: {
-            query?: {
-                /** @description Include platform access layers */
-                include_platform?: boolean;
-                /** @description Only return active layers */
-                active_only?: boolean;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
+            path: {
+                layer_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
@@ -3053,23 +3555,24 @@ export interface operations {
             };
         };
     };
-    adminCreateAccessLayer: {
+    adminDeleteAccessLayer: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Reason for deletion */
+                reason?: string | null;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["AccessLayerCreateRequest"];
+            path: {
+                layer_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -3256,7 +3759,7 @@ export interface operations {
             };
         };
     };
-    adminGetAccessLayer: {
+    adminUpdateAccessLayer: {
         parameters: {
             query?: never;
             header?: {
@@ -3267,7 +3770,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AccessLayerUpdateRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
             200: {
@@ -3457,12 +3964,9 @@ export interface operations {
             };
         };
     };
-    adminDeleteAccessLayer: {
+    adminCreateAccessLayerClone: {
         parameters: {
-            query?: {
-                /** @description Reason for deletion */
-                reason?: string | null;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
@@ -3471,10 +3975,14 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AccessLayerCloneRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -3661,25 +4169,23 @@ export interface operations {
             };
         };
     };
-    adminUpdateAccessLayer: {
+    adminCreateUserPermissionOverride: {
         parameters: {
             query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                layer_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["AccessLayerUpdateRequest"];
+                "application/json": components["schemas"]["UserPermissionOverrideRequest"];
             };
         };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -3866,25 +4372,24 @@ export interface operations {
             };
         };
     };
-    adminCreateAccessLayerClone: {
+    adminListUserPermissionOverrides: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Include expired overrides */
+                include_expired?: boolean;
+            };
             header?: {
                 authorization?: string | null;
             };
             path: {
-                layer_id: string;
+                user_id: string;
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["AccessLayerCloneRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -4071,23 +4576,24 @@ export interface operations {
             };
         };
     };
-    adminCreateUserPermissionOverride: {
+    adminDeleteUserPermissionOverride: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Reason for revocation */
+                reason?: string | null;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["UserPermissionOverrideRequest"];
+            path: {
+                override_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -4274,18 +4780,16 @@ export interface operations {
             };
         };
     };
-    adminListUserPermissionOverrides: {
+    adminListQuotas: {
         parameters: {
             query?: {
-                /** @description Include expired overrides */
-                include_expired?: boolean;
+                /** @description Only return active quotas */
+                active_only?: boolean;
             };
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                user_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -4478,24 +4982,23 @@ export interface operations {
             };
         };
     };
-    adminDeleteUserPermissionOverride: {
+    adminCreateQuota: {
         parameters: {
-            query?: {
-                /** @description Reason for revocation */
-                reason?: string | null;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                override_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["QuotaCreateRequest"];
+            };
+        };
         responses: {
             /** @description Successful Response */
-            200: {
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -4682,16 +5185,15 @@ export interface operations {
             };
         };
     };
-    adminListQuotas: {
+    adminGetQuota: {
         parameters: {
-            query?: {
-                /** @description Only return active quotas */
-                active_only?: boolean;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
+            path: {
+                quota_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
@@ -4884,23 +5386,25 @@ export interface operations {
             };
         };
     };
-    adminCreateQuota: {
+    adminUpdateQuota: {
         parameters: {
             query?: never;
             header?: {
                 authorization?: string | null;
             };
-            path?: never;
+            path: {
+                quota_id: string;
+            };
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["QuotaCreateRequest"];
+                "application/json": components["schemas"]["app__schemas__rbac__quota_schemas__QuotaUpdateRequest"];
             };
         };
         responses: {
             /** @description Successful Response */
-            201: {
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -5087,9 +5591,12 @@ export interface operations {
             };
         };
     };
-    adminGetQuota: {
+    adminCreateQuotaReset: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Reason for reset */
+                reason?: string | null;
+            };
             header?: {
                 authorization?: string | null;
             };
@@ -5288,22 +5795,33 @@ export interface operations {
             };
         };
     };
-    adminUpdateQuota: {
+    adminListAuditLogs: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Filter by entity type (role, access_layer, user_override, quota) */
+                entity_type?: string | null;
+                /** @description Filter by specific entity external ID (e.g., role_xxx, acl_xxx) — use with entity_type for full entity audit history */
+                entity_id?: string | null;
+                /** @description Filter by action (create, update, delete, assign, revoke, reset) */
+                action?: string | null;
+                /** @description Filter by user who performed action */
+                user_id?: number | null;
+                /** @description Filter from date (ISO 8601 format) */
+                start_date?: string | null;
+                /** @description Filter to date (ISO 8601 format) */
+                end_date?: string | null;
+                /** @description Page number (1-based) */
+                page?: number;
+                /** @description Items per page (1–500, default 50) */
+                limit?: number;
+            };
             header?: {
                 authorization?: string | null;
             };
-            path: {
-                quota_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["QuotaUpdateRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description Successful Response */
             200: {
@@ -5493,17 +6011,14 @@ export interface operations {
             };
         };
     };
-    adminCreateQuotaReset: {
+    adminGetAuditLog: {
         parameters: {
-            query?: {
-                /** @description Reason for reset */
-                reason?: string | null;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
             path: {
-                quota_id: string;
+                log_id: string;
             };
             cookie?: never;
         };
@@ -5697,26 +6212,9 @@ export interface operations {
             };
         };
     };
-    adminListAuditLogs: {
+    listPermissionGroups: {
         parameters: {
-            query?: {
-                /** @description Filter by entity type (role, access_layer, user_override, quota) */
-                entity_type?: string | null;
-                /** @description Filter by specific entity external ID (e.g., role_xxx, acl_xxx) — use with entity_type for full entity audit history */
-                entity_id?: string | null;
-                /** @description Filter by action (create, update, delete, assign, revoke, reset) */
-                action?: string | null;
-                /** @description Filter by user who performed action */
-                user_id?: number | null;
-                /** @description Filter from date (ISO 8601 format) */
-                start_date?: string | null;
-                /** @description Filter to date (ISO 8601 format) */
-                end_date?: string | null;
-                /** @description Page number (1-based) */
-                page?: number;
-                /** @description Items per page (1–500, default 50) */
-                limit?: number;
-            };
+            query?: never;
             header?: {
                 authorization?: string | null;
             };
@@ -5913,14 +6411,14 @@ export interface operations {
             };
         };
     };
-    adminGetAuditLog: {
+    getPermissionGroup: {
         parameters: {
             query?: never;
             header?: {
                 authorization?: string | null;
             };
             path: {
-                log_id: string;
+                group_name: string;
             };
             cookie?: never;
         };