@cloudfleet/sdk 0.0.1-9c683a8 → 0.0.1-9d04e01

package/dist/schemas.gen.js

@@ -2,6 +2,15 @@
 export const BillingContactSchema = {
     type: 'object',
     properties: {
+        type: {
+            type: 'string',
+            description: 'Type of the organization. `business` for legal entities, `personal` for individuals.',
+            example: 'business',
+            enum: [
+                'business',
+                'personal'
+            ]
+        },
         company: {
             type: 'string',
             maxLength: 120,
@@ -84,12 +93,17 @@ export const BillingContactSchema = {
                 'at_vat',
                 'au_abn',
                 'au_arn',
+                'aw_tin',
+                'az_tin',
                 'ba_tin',
                 'bb_tin',
+                'bd_bin',
                 'be_vat',
+                'bf_ifu',
                 'bg_uic',
                 'bg_vat',
                 'bh_vat',
+                'bj_ifu',
                 'bo_tin',
                 'br_cnpj',
                 'br_cpf',
@@ -105,9 +119,11 @@ export const BillingContactSchema = {
                 'ch_uid',
                 'ch_vat',
                 'cl_tin',
+                'cm_niu',
                 'cn_tin',
                 'co_nit',
                 'cr_tin',
+                'cv_nif',
                 'cy_vat',
                 'cz_vat',
                 'de_stn',
@@ -119,6 +135,7 @@ export const BillingContactSchema = {
                 'eg_tin',
                 'es_cif',
                 'es_vat',
+                'et_tin',
                 'eu_oss_vat',
                 'fi_vat',
                 'fr_vat',
@@ -141,11 +158,14 @@ export const BillingContactSchema = {
                 'jp_rn',
                 'jp_trn',
                 'ke_pin',
+                'kg_tin',
                 'kh_tin',
                 'kr_brn',
                 'kz_bin',
+                'la_tin',
                 'li_uid',
                 'li_vat',
+                'lk_vat',
                 'lt_vat',
                 'lu_vat',
                 'lv_vat',
@@ -207,6 +227,7 @@ export const BillingContactSchema = {
         }
     },
     required: [
+        'type',
         'email',
         'individual_name'
     ],
@@ -358,24 +379,8 @@ export const ChartSchema = {
         },
         status: {
             type: 'string',
-            description: 'Status of the chart deployment.',
-            example: 'active',
-            enum: [
-                'InstallSucceeded',
-                'InstallFailed',
-                'UpgradeSucceeded',
-                'UpgradeFailed',
-                'TestSucceeded',
-                'TestFailed',
-                'RollbackSucceeded',
-                'RollbackFailed',
-                'UninstallSucceeded',
-                'UninstallFailed',
-                'ArtifactFailed',
-                'DependencyNotReady',
-                'Progressing',
-                'SourceNotReady'
-            ]
+            description: 'Status of the chart deployment (Flux HelmRelease Ready condition reason, e.g. InstallSucceeded, UpgradeFailed, Progressing).',
+            example: 'InstallSucceeded'
         },
         version_current: {
             type: 'string',
@@ -446,22 +451,12 @@ export const ClusterCreateInputSchema = {
         tier: {
             type: 'string',
             description: 'Tier of the cluster.',
+            default: 'basic',
             example: 'pro',
             enum: [
                 'basic',
-                'pro'
-            ]
-        },
-        region: {
-            type: 'string',
-            description: 'Cloudfleet control plane region. One of "staging-1a", "northamerica-central-1", "europe-central-1a", "northamerica-central-1a". This field can not be updated after creation.',
-            default: 'staging-1a',
-            example: 'northamerica-central-1a',
-            enum: [
-                'staging-1a',
-                'northamerica-central-1',
-                'europe-central-1a',
-                'northamerica-central-1a'
+                'pro',
+                'enterprise'
             ]
         },
         version_channel: {
@@ -469,20 +464,105 @@ export const ClusterCreateInputSchema = {
             pattern: '^(x|X|0|[1-9]\\d*)\\.(x|X|0|[1-9]\\d*)\\.(x|X|0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$',
             description: 'Version of the kubernetes cluster.',
             default: '1.x.x-cfke.x',
-            example: '1.x.x-cfke.x',
+            example: '1.x.x-cfke.x'
+        },
+        release_channel: {
+            type: 'string',
+            description: 'Release channel for the cluster\'s control plane.',
+            default: 'rapid',
+            example: 'rapid',
             enum: [
-                '1.x.x-cfke.x',
-                '1.31.x-cfke.x',
-                '1.32.x-cfke.x',
-                '1.33.x-cfke.x'
+                'rapid',
+                'stable',
+                'extended'
             ]
+        },
+        features: {
+            type: 'object',
+            properties: {
+                gpu_sharing_strategy: {
+                    type: 'string',
+                    description: 'GPU sharing strategy.',
+                    default: 'none',
+                    example: 'none',
+                    enum: [
+                        'none',
+                        'mps',
+                        'time_slicing'
+                    ]
+                },
+                gpu_max_shared_clients_per_gpu: {
+                    type: 'integer',
+                    minimum: 2,
+                    maximum: 48,
+                    description: 'Maximum number of pods that may share a single GPU.',
+                    default: 4,
+                    example: 10
+                },
+                cilium_socket_lb_host_namespace_only: {
+                    type: 'boolean',
+                    description: 'Restrict Cilium socket load-balancing to the host namespace. Required for the Tailscale operator and Istio.',
+                    example: false
+                }
+            },
+            additionalProperties: false,
+            description: 'Cluster feature toggles.',
+            default: {
+                gpu_sharing_strategy: 'none',
+                gpu_max_shared_clients_per_gpu: 4,
+                cilium_socket_lb_host_namespace_only: false
+            }
+        },
+        region: {
+            type: 'string',
+            description: 'Cloudfleet control plane region. This field can not be updated after creation.',
+            example: 'europe-central-1a'
+        },
+        networking: {
+            type: 'object',
+            properties: {
+                pod_cidr: {
+                    type: 'string',
+                    description: 'CIDR block for pod IPs.',
+                    default: '10.244.0.0/16'
+                },
+                service_cidr: {
+                    type: 'string',
+                    description: 'CIDR block for service IPs.',
+                    default: '10.96.0.0/12'
+                },
+                dual_stack: {
+                    type: 'boolean',
+                    description: 'Enable IPv4+IPv6 dual-stack networking.'
+                },
+                pod_cidr_v6: {
+                    type: 'string',
+                    description: 'IPv6 pod CIDR. Requires dual_stack.',
+                    default: '2001:db8:1:2::/48'
+                },
+                service_cidr_v6: {
+                    type: 'string',
+                    description: 'IPv6 service CIDR. Requires dual_stack.',
+                    default: '2001:db8:1:1::/112'
+                }
+            },
+            additionalProperties: false,
+            description: 'Cluster networking configuration. Immutable after creation.',
+            default: {
+                pod_cidr: '10.244.0.0/16',
+                service_cidr: '10.96.0.0/12',
+                dual_stack: false,
+                pod_cidr_v6: '2001:db8:1:2::/48',
+                service_cidr_v6: '2001:db8:1:1::/112'
+            }
         }
     },
     required: [
         'name',
-        'tier'
+        'region'
     ],
-    additionalProperties: false
+    additionalProperties: false,
+    description: 'Mutable cluster configuration. Applied as a full overwrite: any omitted field is reset to its default rather than left unchanged.'
 };
 export const ClusterJoinInformationSchema = {
     type: 'object',
@@ -503,11 +583,21 @@ export const ClusterJoinInformationSchema = {
             description: 'Cluster DNS IP address. This is the IP address of the kube-dns service in the cluster.',
             example: '10.96.0.10'
         },
+        pod_cidr: {
+            type: 'string',
+            description: 'Pod CIDR for the cluster. Used to configure iptables rules on nodes to prevent Tailscale routing loops.',
+            example: '10.244.0.0/16'
+        },
         auth_key: {
             type: 'string',
             description: 'Authentication key for the cluster.',
             example: 'tskey-auth-kBV8wr1dk911CNTRL-...'
         },
+        login_server: {
+            type: 'string',
+            description: 'Coordination server the node registers against. Empty on data plane v1 clusters, where the node advertises its own tag instead. A non-empty value requires a client that declares the dataplane-v2 capability.',
+            example: 'https://415026b6-f00f-44f8-968d-fc6ef4d0fc6d.fabric.europe-central-1a.cfke.io'
+        },
         bootstrap_token: {
             type: 'string',
             description: 'Bootstrap token for the cluster.',
@@ -578,7 +668,9 @@ export const ClusterJoinInformationSchema = {
         'certificate_authority',
         'endpoint',
         'cluster_dns',
+        'pod_cidr',
         'auth_key',
+        'login_server',
         'bootstrap_token',
         'versions',
         'third_party_api_access_config'
@@ -599,24 +691,123 @@ export const ClusterSchema = {
         tier: {
             type: 'string',
             description: 'Tier of the cluster.',
+            default: 'basic',
             example: 'pro',
             enum: [
                 'basic',
-                'pro'
+                'pro',
+                'enterprise'
             ]
         },
-        region: {
+        version_channel: {
+            type: 'string',
+            pattern: '^(x|X|0|[1-9]\\d*)\\.(x|X|0|[1-9]\\d*)\\.(x|X|0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$',
+            description: 'Version of the kubernetes cluster.',
+            default: '1.x.x-cfke.x',
+            example: '1.x.x-cfke.x'
+        },
+        release_channel: {
             type: 'string',
-            description: 'Cloudfleet control plane region. One of "staging-1a", "northamerica-central-1", "europe-central-1a", "northamerica-central-1a". This field can not be updated after creation.',
-            default: 'staging-1a',
-            example: 'northamerica-central-1a',
+            description: 'Release channel for the cluster\'s control plane.',
+            default: 'rapid',
+            example: 'rapid',
             enum: [
-                'staging-1a',
-                'northamerica-central-1',
-                'europe-central-1a',
-                'northamerica-central-1a'
+                'rapid',
+                'stable',
+                'extended'
             ]
         },
+        features: {
+            type: 'object',
+            properties: {
+                gpu_sharing_strategy: {
+                    type: 'string',
+                    description: 'GPU sharing strategy.',
+                    default: 'none',
+                    example: 'none',
+                    enum: [
+                        'none',
+                        'mps',
+                        'time_slicing'
+                    ]
+                },
+                gpu_max_shared_clients_per_gpu: {
+                    type: 'integer',
+                    minimum: 2,
+                    maximum: 48,
+                    description: 'Maximum number of pods that may share a single GPU.',
+                    default: 4,
+                    example: 10
+                },
+                cilium_socket_lb_host_namespace_only: {
+                    type: 'boolean',
+                    description: 'Restrict Cilium socket load-balancing to the host namespace. Required for the Tailscale operator and Istio.',
+                    example: false
+                }
+            },
+            required: [
+                'gpu_sharing_strategy',
+                'gpu_max_shared_clients_per_gpu',
+                'cilium_socket_lb_host_namespace_only'
+            ],
+            additionalProperties: false,
+            description: 'Cluster feature toggles.',
+            default: {
+                gpu_sharing_strategy: 'none',
+                gpu_max_shared_clients_per_gpu: 4,
+                cilium_socket_lb_host_namespace_only: false
+            }
+        },
+        region: {
+            type: 'string',
+            description: 'Cloudfleet control plane region. This field can not be updated after creation.',
+            example: 'europe-central-1a'
+        },
+        networking: {
+            type: 'object',
+            properties: {
+                pod_cidr: {
+                    type: 'string',
+                    description: 'CIDR block for pod IPs.',
+                    default: '10.244.0.0/16'
+                },
+                service_cidr: {
+                    type: 'string',
+                    description: 'CIDR block for service IPs.',
+                    default: '10.96.0.0/12'
+                },
+                dual_stack: {
+                    type: 'boolean',
+                    description: 'Enable IPv4+IPv6 dual-stack networking.'
+                },
+                pod_cidr_v6: {
+                    type: 'string',
+                    description: 'IPv6 pod CIDR. Requires dual_stack.',
+                    default: '2001:db8:1:2::/48'
+                },
+                service_cidr_v6: {
+                    type: 'string',
+                    description: 'IPv6 service CIDR. Requires dual_stack.',
+                    default: '2001:db8:1:1::/112'
+                }
+            },
+            required: [
+                'pod_cidr',
+                'service_cidr',
+                'dual_stack',
+                'pod_cidr_v6',
+                'service_cidr_v6'
+            ],
+            additionalProperties: false,
+            description: 'Cluster networking configuration. Immutable after creation.',
+            default: {
+                pod_cidr: '10.244.0.0/16',
+                service_cidr: '10.96.0.0/12',
+                dual_stack: false,
+                pod_cidr_v6: '2001:db8:1:2::/48',
+                service_cidr_v6: '2001:db8:1:1::/112'
+            }
+        },
         id: {
             type: 'string',
             format: 'uuid',
@@ -625,16 +816,13 @@ export const ClusterSchema = {
         },
         status: {
             type: 'string',
-            description: 'Status of the cluster. When creating a new cluster, set to `active`. When deleting a clusters, set to `deleted`.',
-            example: 'active',
+            description: 'Status of the cluster.',
+            example: 'deployed',
             enum: [
-                'active',
-                'disabled',
-                'deleted',
                 'creating',
                 'deployed',
-                'failed',
-                'updating'
+                'updating',
+                'disabled'
             ]
         },
         endpoint: {
@@ -642,8 +830,24 @@ export const ClusterSchema = {
                 {
                     type: 'string',
                     format: 'uri',
-                    description: 'URL of the Kubernetes cluster control plane. This is the endpoint that kubectl uses to connect to the cluster.',
-                    example: 'https://2ae6557c-c61f-49c6-b4c1-a65473470a03.staging.cfke.cloudfleet.dev:6443'
+                    description: 'URL signed by a public CA of the Kubernetes cluster control plane. This is the endpoint that kubectl uses to connect to the cluster.',
+                    example: 'https://2ae6557c-c61f-49c6-b4c1-a65473470a03.staging.cfke.io'
+                },
+                {
+                    type: 'string',
+                    enum: [
+                        ''
+                    ]
+                }
+            ]
+        },
+        endpoint_public: {
+            anyOf: [
+                {
+                    type: 'string',
+                    format: 'uri',
+                    description: 'Deprecated alias of `endpoint`; retained for backward compatibility.',
+                    example: 'https://2ae6557c-c61f-49c6-b4c1-a65473470a03.staging.cfke.io'
                 },
                 {
                     type: 'string',
@@ -677,21 +881,22 @@ export const ClusterSchema = {
             type: 'boolean',
             description: 'Indicates if the cluster is ready to be used.',
             example: true
-        },
-        version_channel: {
-            type: 'string',
-            pattern: '^(x|X|0|[1-9]\\d*)\\.(x|X|0|[1-9]\\d*)\\.(x|X|0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$',
-            description: 'Version of the kubernetes cluster.',
-            example: '1.x.x-cfke.x'
         }
     },
     required: [
         'name',
         'tier',
+        'version_channel',
+        'release_channel',
+        'features',
+        'region',
+        'networking',
         'id',
-        'status'
+        'status',
+        'ready'
     ],
-    additionalProperties: false
+    additionalProperties: false,
+    description: 'Mutable cluster configuration. Applied as a full overwrite: any omitted field is reset to its default rather than left unchanged.'
 };
 export const ClusterUpdateInputSchema = {
     type: 'object',
@@ -707,23 +912,74 @@ export const ClusterUpdateInputSchema = {
         tier: {
             type: 'string',
             description: 'Tier of the cluster.',
+            default: 'basic',
             example: 'pro',
             enum: [
                 'basic',
-                'pro'
+                'pro',
+                'enterprise'
             ]
         },
         version_channel: {
             type: 'string',
             pattern: '^(x|X|0|[1-9]\\d*)\\.(x|X|0|[1-9]\\d*)\\.(x|X|0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$',
             description: 'Version of the kubernetes cluster.',
+            default: '1.x.x-cfke.x',
             example: '1.x.x-cfke.x'
+        },
+        release_channel: {
+            type: 'string',
+            description: 'Release channel for the cluster\'s control plane.',
+            default: 'rapid',
+            example: 'rapid',
+            enum: [
+                'rapid',
+                'stable',
+                'extended'
+            ]
+        },
+        features: {
+            type: 'object',
+            properties: {
+                gpu_sharing_strategy: {
+                    type: 'string',
+                    description: 'GPU sharing strategy.',
+                    default: 'none',
+                    example: 'none',
+                    enum: [
+                        'none',
+                        'mps',
+                        'time_slicing'
+                    ]
+                },
+                gpu_max_shared_clients_per_gpu: {
+                    type: 'integer',
+                    minimum: 2,
+                    maximum: 48,
+                    description: 'Maximum number of pods that may share a single GPU.',
+                    default: 4,
+                    example: 10
+                },
+                cilium_socket_lb_host_namespace_only: {
+                    type: 'boolean',
+                    description: 'Restrict Cilium socket load-balancing to the host namespace. Required for the Tailscale operator and Istio.',
+                    example: false
+                }
+            },
+            additionalProperties: false,
+            description: 'Cluster feature toggles.',
+            default: {
+                gpu_sharing_strategy: 'none',
+                gpu_max_shared_clients_per_gpu: 4,
+                cilium_socket_lb_host_namespace_only: false
+            }
         }
     },
     required: [
-        'tier'
+        'name'
     ],
-    additionalProperties: false
+    additionalProperties: false,
+    description: 'Mutable cluster configuration. Applied as a full overwrite: any omitted field is reset to its default rather than left unchanged.'
 };
 export const FleetCreateInputSchema = {
     type: 'object',
@@ -732,15 +988,12 @@ export const FleetCreateInputSchema = {
             type: 'object',
             properties: {
                 cpu: {
-                    type: 'number',
-                    format: 'float',
+                    type: 'integer',
                     minimum: 0,
-                    description: 'CPU limit in cores.'
+                    maximum: 100000,
+                    description: 'CPU limit in cores. Maximum 100,000.'
                 }
             },
-            required: [
-                'cpu'
-            ],
             additionalProperties: false,
             description: 'Limits define a set of bounds for provisioning capacity.'
         },
@@ -748,16 +1001,17 @@ export const FleetCreateInputSchema = {
             type: 'object',
             properties: {
                 enabled: {
-                    type: 'boolean',
-                    default: true
+                    type: 'boolean'
                 },
                 project: {
                     type: 'string',
-                    description: 'Project GCP Project id to deploy instances into'
+                    pattern: '^[a-z][a-z0-9-]{4,28}[a-z0-9]$',
+                    description: 'GCP project ID to deploy instances into. 6-30 chars, lowercase letters/digits/hyphens, must start with a letter and not end with a hyphen. Omit when GCP is disabled.',
+                    example: 'my-cloudfleet-project'
                 }
             },
             required: [
-                'project'
+                'enabled'
             ],
             additionalProperties: false
         },
@@ -765,16 +1019,18 @@ export const FleetCreateInputSchema = {
             type: 'object',
             properties: {
                 enabled: {
-                    type: 'boolean',
-                    default: true
+                    type: 'boolean'
                 },
                 apiKey: {
                     type: 'string',
-                    description: 'Hetzner Cloud API key with read / write access'
+                    maxLength: 64,
+                    minLength: 64,
+                    pattern: '^([A-Za-z0-9]{64}|\\*{64})$',
+                    description: 'Hetzner Cloud API token with read/write access (64 alphanumeric characters). Write-only: reads return a redacted placeholder, never the token. Omit the field, or send the placeholder back unchanged, to keep the existing key. Send a new value to rotate it.'
                 }
             },
             required: [
-                'apiKey'
+                'enabled'
             ],
             additionalProperties: false
         },
@@ -782,19 +1038,359 @@ export const FleetCreateInputSchema = {
             type: 'object',
             properties: {
                 enabled: {
-                    type: 'boolean',
-                    default: true
+                    type: 'boolean'
                 },
                 controllerRoleArn: {
                     type: 'string',
-                    description: 'ControllerRoleArn is the AWS IAM role that Karpenter uses to manage resources.'
+                    pattern: '^arn:aws(-[a-z]+)*:iam::\\d{12}:role\\/[\\w+=,.@/-]+$',
+                    description: 'AWS IAM role ARN that Karpenter uses to manage resources. Omit when AWS is disabled.',
+                    example: 'arn:aws:iam::123456789012:role/Cloudfleet'
                 }
             },
             required: [
-                'controllerRoleArn'
+                'enabled'
             ],
             additionalProperties: false
         },
+        constraints: {
+            type: 'object',
+            properties: {
+                'karpenter.sh/capacity-type': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'on-demand',
+                            'spot'
+                        ]
+                    },
+                    minItems: 1,
+                    description: 'Allowed values for `karpenter.sh/capacity-type`.',
+                    default: [
+                        'on-demand',
+                        'spot'
+                    ]
+                },
+                'kubernetes.io/arch': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'amd64',
+                            'arm64'
+                        ]
+                    },
+                    minItems: 1,
+                    description: 'Allowed values for `kubernetes.io/arch`.',
+                    default: [
+                        'amd64'
+                    ]
+                },
+                'cfke.io/instance-family': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'a1',
+                            'a2',
+                            'a3',
+                            'a4',
+                            'c1',
+                            'c2',
+                            'c2d',
+                            'c3',
+                            'c3d',
+                            'c4',
+                            'c4a',
+                            'c4d',
+                            'c5',
+                            'c5a',
+                            'c5ad',
+                            'c5d',
+                            'c5n',
+                            'c6a',
+                            'c6g',
+                            'c6gd',
+                            'c6gn',
+                            'c6i',
+                            'c6id',
+                            'c6in',
+                            'c7a',
+                            'c7g',
+                            'c7gd',
+                            'c7gn',
+                            'c7i',
+                            'c7i-flex',
+                            'c8g',
+                            'c8gd',
+                            'cax',
+                            'ccx',
+                            'cpx',
+                            'cx',
+                            'd2',
+                            'd3',
+                            'd3en',
+                            'dl1',
+                            'dl2q',
+                            'e2',
+                            'f1',
+                            'f2',
+                            'g1',
+                            'g2',
+                            'g4ad',
+                            'g4dn',
+                            'g5',
+                            'g5g',
+                            'g6',
+                            'g6e',
+                            'gr6',
+                            'h1',
+                            'h3',
+                            'hpc6a',
+                            'hpc6id',
+                            'hpc7a',
+                            'hpc7g',
+                            'i2',
+                            'i3',
+                            'i3en',
+                            'i4g',
+                            'i4i',
+                            'i7i',
+                            'i7ie',
+                            'i8g',
+                            'im4gn',
+                            'inf1',
+                            'inf2',
+                            'is4gen',
+                            'm1',
+                            'm2',
+                            'm3',
+                            'm4',
+                            'm5',
+                            'm5a',
+                            'm5ad',
+                            'm5d',
+                            'm5dn',
+                            'm5n',
+                            'm5zn',
+                            'm6a',
+                            'm6g',
+                            'm6gd',
+                            'm6i',
+                            'm6id',
+                            'm6idn',
+                            'm6in',
+                            'm7a',
+                            'm7g',
+                            'm7gd',
+                            'm7i',
+                            'm7i-flex',
+                            'm8g',
+                            'm8gd',
+                            'n1',
+                            'n2',
+                            'n2d',
+                            'n4',
+                            'p3',
+                            'p3dn',
+                            'p4d',
+                            'p4de',
+                            'p5',
+                            'p5e',
+                            'p5en',
+                            'p6-b200',
+                            'r3',
+                            'r4',
+                            'r5',
+                            'r5a',
+                            'r5ad',
+                            'r5b',
+                            'r5d',
+                            'r5dn',
+                            'r5n',
+                            'r6a',
+                            'r6g',
+                            'r6gd',
+                            'r6i',
+                            'r6id',
+                            'r6idn',
+                            'r6in',
+                            'r7a',
+                            'r7g',
+                            'r7gd',
+                            'r7i',
+                            'r7iz',
+                            'r8g',
+                            'r8gd',
+                            't2',
+                            't2a',
+                            't2d',
+                            't3',
+                            't3a',
+                            't4g',
+                            'trn1',
+                            'trn1n',
+                            'u-3tb1',
+                            'u-6tb1',
+                            'u7i-12tb',
+                            'u7i-6tb',
+                            'u7i-8tb',
+                            'u7in-16tb',
+                            'u7in-24tb',
+                            'u7in-32tb',
+                            'vt1',
+                            'x1',
+                            'x1e',
+                            'x2gd',
+                            'x2idn',
+                            'x2iedn',
+                            'x2iezn',
+                            'x4',
+                            'x8g',
+                            'z1d',
+                            'z3'
+                        ]
+                    },
+                    description: 'Allowed values for `cfke.io/instance-family`.',
+                    default: []
+                },
+                'topology.kubernetes.io/region': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'africa-south1',
+                            'ap-northeast-1',
+                            'ap-northeast-2',
+                            'ap-northeast-3',
+                            'ap-south-1',
+                            'ap-southeast-1',
+                            'ap-southeast-2',
+                            'ash',
+                            'asia-east1',
+                            'asia-east2',
+                            'asia-northeast1',
+                            'asia-northeast2',
+                            'asia-northeast3',
+                            'asia-south1',
+                            'asia-south2',
+                            'asia-southeast1',
+                            'asia-southeast2',
+                            'australia-southeast1',
+                            'australia-southeast2',
+                            'ca-central-1',
+                            'eu-central-1',
+                            'eu-central-2',
+                            'eu-north-1',
+                            'eu-west-1',
+                            'eu-west-2',
+                            'eu-west-3',
+                            'europe-central2',
+                            'europe-north1',
+                            'europe-southwest1',
+                            'europe-west1',
+                            'europe-west10',
+                            'europe-west12',
+                            'europe-west2',
+                            'europe-west3',
+                            'europe-west4',
+                            'europe-west6',
+                            'europe-west8',
+                            'europe-west9',
+                            'fsn1',
+                            'hel1',
+                            'hil',
+                            'me-central1',
+                            'me-central2',
+                            'me-west1',
+                            'nbg1',
+                            'northamerica-northeast1',
+                            'northamerica-northeast2',
+                            'sa-east-1',
+                            'sin',
+                            'southamerica-east1',
+                            'southamerica-west1',
+                            'us-central1',
+                            'us-east-1',
+                            'us-east-2',
+                            'us-east1',
+                            'us-east4',
+                            'us-east5',
+                            'us-south1',
+                            'us-west-1',
+                            'us-west-2',
+                            'us-west1',
+                            'us-west2',
+                            'us-west3',
+                            'us-west4'
+                        ]
+                    },
+                    description: 'Allowed values for `topology.kubernetes.io/region`.',
+                    default: []
+                }
+            },
+            additionalProperties: false,
+            description: 'Constraints define scheduling and provisioning requirements for the fleet. Each field restricts the values allowed for a given Kubernetes label key. Multiple constraints are ANDed together.',
+            default: {
+                'karpenter.sh/capacity-type': [
+                    'on-demand',
+                    'spot'
+                ],
+                'kubernetes.io/arch': [
+                    'amd64'
+                ],
+                'cfke.io/instance-family': [],
+                'topology.kubernetes.io/region': []
+            }
+        },
+        scalingProfile: {
+            type: 'string',
+            description: 'Controls scale-up / scale-down responsiveness. `aggressive` prioritizes cost-optimization. `conservative` prioritizes stability of the fleet. Full-overwrite: omit to reset to the default (`conservative`).',
+            default: 'conservative',
+            example: 'conservative',
+            enum: [
+                'aggressive',
+                'conservative'
+            ]
+        },
+        taints: {
+            type: 'array',
+            items: {
+                type: 'object',
+                properties: {
+                    key: {
+                        type: 'string',
+                        description: 'Taint key: a Kubernetes qualified name with an optional DNS subdomain prefix. Keys under `node.kubernetes.io`, `node.cloudprovider.kubernetes.io`, `node.cilium.io`, `karpenter.sh` and `cfke.io` (and their subdomains) are reserved.',
+                        example: 'dedicated'
+                    },
+                    value: {
+                        type: 'string',
+                        maxLength: 63,
+                        pattern: '^([A-Za-z0-9]([-A-Za-z0-9_.]*[A-Za-z0-9])?)?$',
+                        description: 'Taint value. Optional.',
+                        example: 'ci'
+                    },
+                    effect: {
+                        type: 'string',
+                        description: 'Taint effect.',
+                        example: 'NoSchedule',
+                        enum: [
+                            'NoSchedule',
+                            'PreferNoSchedule',
+                            'NoExecute'
+                        ]
+                    }
+                },
+                required: [
+                    'key',
+                    'effect'
+                ],
+                additionalProperties: false
+            },
+            maxItems: 50,
+            description: 'Taints applied to every node the fleet provisions, so only pods that tolerate them schedule there. Each key and effect pair may appear once. Full-overwrite: omit to remove all taints.',
+            default: []
+        },
         id: {
             type: 'string',
             maxLength: 63,
@@ -807,7 +1403,8 @@ export const FleetCreateInputSchema = {
     required: [
         'id'
     ],
-    additionalProperties: false
+    additionalProperties: false,
+    description: 'Mutable fleet configuration. Applied as a full overwrite: any omitted field is reset to its default rather than left unchanged.'
 };
 export const FleetSchema = {
     type: 'object',
@@ -816,15 +1413,12 @@ export const FleetSchema = {
             type: 'object',
             properties: {
                 cpu: {
-                    type: 'number',
-                    format: 'float',
+                    type: 'integer',
                     minimum: 0,
-                    description: 'CPU limit in cores.'
+                    maximum: 100000,
+                    description: 'CPU limit in cores. Maximum 100,000.'
                 }
             },
-            required: [
-                'cpu'
-            ],
             additionalProperties: false,
             description: 'Limits define a set of bounds for provisioning capacity.'
         },
@@ -832,16 +1426,17 @@ export const FleetSchema = {
             type: 'object',
             properties: {
                 enabled: {
-                    type: 'boolean',
-                    default: true
+                    type: 'boolean'
                 },
                 project: {
                     type: 'string',
-                    description: 'Project GCP Project id to deploy instances into'
+                    pattern: '^[a-z][a-z0-9-]{4,28}[a-z0-9]$',
+                    description: 'GCP project ID to deploy instances into. 6-30 chars, lowercase letters/digits/hyphens, must start with a letter and not end with a hyphen. Omit when GCP is disabled.',
+                    example: 'my-cloudfleet-project'
                 }
             },
             required: [
-                'project'
+                'enabled'
             ],
             additionalProperties: false
         },
@@ -849,16 +1444,16 @@ export const FleetSchema = {
             type: 'object',
             properties: {
                 enabled: {
-                    type: 'boolean',
-                    default: true
+                    type: 'boolean'
                 },
                 apiKey: {
                     type: 'string',
-                    description: 'Hetzner Cloud API key with read / write access'
+                    pattern: '^\\*{64}$',
+                    description: 'Redacted Hetzner API token. Returned as 64 asterisks when a token is configured; omitted otherwise. The real value is never echoed by the API.'
                 }
             },
             required: [
-                'apiKey'
+                'enabled'
             ],
             additionalProperties: false
         },
@@ -866,66 +1461,435 @@ export const FleetSchema = {
             type: 'object',
             properties: {
                 enabled: {
-                    type: 'boolean',
-                    default: true
+                    type: 'boolean'
                 },
                 controllerRoleArn: {
                     type: 'string',
-                    description: 'ControllerRoleArn is the AWS IAM role that Karpenter uses to manage resources.'
+                    pattern: '^arn:aws(-[a-z]+)*:iam::\\d{12}:role\\/[\\w+=,.@/-]+$',
+                    description: 'AWS IAM role ARN that Karpenter uses to manage resources. Omit when AWS is disabled.',
+                    example: 'arn:aws:iam::123456789012:role/Cloudfleet'
                 }
             },
             required: [
-                'controllerRoleArn'
+                'enabled'
             ],
             additionalProperties: false
         },
-        id: {
-            type: 'string',
-            maxLength: 63,
-            minLength: 1,
-            pattern: '^[a-z0-9]([-a-z0-9]*[a-z0-9])?$',
-            description: 'Unique identifier of the kubernetes fleet.',
-            example: 'new-clouds-fleet'
-        }
-    },
-    required: [
-        'id'
-    ],
-    additionalProperties: false
-};
-export const FleetUpdateInputSchema = {
-    type: 'object',
-    properties: {
-        limits: {
-            type: 'object',
-            properties: {
-                cpu: {
-                    type: 'number',
-                    format: 'float',
-                    minimum: 0,
-                    description: 'CPU limit in cores.'
-                }
-            },
-            required: [
-                'cpu'
-            ],
-            additionalProperties: false,
-            description: 'Limits define a set of bounds for provisioning capacity.'
-        },
-        gcp: {
+        constraints: {
             type: 'object',
             properties: {
-                enabled: {
-                    type: 'boolean',
-                    default: true
-                },
-                project: {
-                    type: 'string',
-                    description: 'Project GCP Project id to deploy instances into'
-                }
-            },
-            required: [
-                'project'
+                'karpenter.sh/capacity-type': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'on-demand',
+                            'spot'
+                        ]
+                    },
+                    minItems: 1,
+                    description: 'Allowed values for `karpenter.sh/capacity-type`.',
+                    default: [
+                        'on-demand',
+                        'spot'
+                    ]
+                },
+                'kubernetes.io/arch': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'amd64',
+                            'arm64'
+                        ]
+                    },
+                    minItems: 1,
+                    description: 'Allowed values for `kubernetes.io/arch`.',
+                    default: [
+                        'amd64'
+                    ]
+                },
+                'cfke.io/instance-family': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'a1',
+                            'a2',
+                            'a3',
+                            'a4',
+                            'c1',
+                            'c2',
+                            'c2d',
+                            'c3',
+                            'c3d',
+                            'c4',
+                            'c4a',
+                            'c4d',
+                            'c5',
+                            'c5a',
+                            'c5ad',
+                            'c5d',
+                            'c5n',
+                            'c6a',
+                            'c6g',
+                            'c6gd',
+                            'c6gn',
+                            'c6i',
+                            'c6id',
+                            'c6in',
+                            'c7a',
+                            'c7g',
+                            'c7gd',
+                            'c7gn',
+                            'c7i',
+                            'c7i-flex',
+                            'c8g',
+                            'c8gd',
+                            'cax',
+                            'ccx',
+                            'cpx',
+                            'cx',
+                            'd2',
+                            'd3',
+                            'd3en',
+                            'dl1',
+                            'dl2q',
+                            'e2',
+                            'f1',
+                            'f2',
+                            'g1',
+                            'g2',
+                            'g4ad',
+                            'g4dn',
+                            'g5',
+                            'g5g',
+                            'g6',
+                            'g6e',
+                            'gr6',
+                            'h1',
+                            'h3',
+                            'hpc6a',
+                            'hpc6id',
+                            'hpc7a',
+                            'hpc7g',
+                            'i2',
+                            'i3',
+                            'i3en',
+                            'i4g',
+                            'i4i',
+                            'i7i',
+                            'i7ie',
+                            'i8g',
+                            'im4gn',
+                            'inf1',
+                            'inf2',
+                            'is4gen',
+                            'm1',
+                            'm2',
+                            'm3',
+                            'm4',
+                            'm5',
+                            'm5a',
+                            'm5ad',
+                            'm5d',
+                            'm5dn',
+                            'm5n',
+                            'm5zn',
+                            'm6a',
+                            'm6g',
+                            'm6gd',
+                            'm6i',
+                            'm6id',
+                            'm6idn',
+                            'm6in',
+                            'm7a',
+                            'm7g',
+                            'm7gd',
+                            'm7i',
+                            'm7i-flex',
+                            'm8g',
+                            'm8gd',
+                            'n1',
+                            'n2',
+                            'n2d',
+                            'n4',
+                            'p3',
+                            'p3dn',
+                            'p4d',
+                            'p4de',
+                            'p5',
+                            'p5e',
+                            'p5en',
+                            'p6-b200',
+                            'r3',
+                            'r4',
+                            'r5',
+                            'r5a',
+                            'r5ad',
+                            'r5b',
+                            'r5d',
+                            'r5dn',
+                            'r5n',
+                            'r6a',
+                            'r6g',
+                            'r6gd',
+                            'r6i',
+                            'r6id',
+                            'r6idn',
+                            'r6in',
+                            'r7a',
+                            'r7g',
+                            'r7gd',
+                            'r7i',
+                            'r7iz',
+                            'r8g',
+                            'r8gd',
+                            't2',
+                            't2a',
+                            't2d',
+                            't3',
+                            't3a',
+                            't4g',
+                            'trn1',
+                            'trn1n',
+                            'u-3tb1',
+                            'u-6tb1',
+                            'u7i-12tb',
+                            'u7i-6tb',
+                            'u7i-8tb',
+                            'u7in-16tb',
+                            'u7in-24tb',
+                            'u7in-32tb',
+                            'vt1',
+                            'x1',
+                            'x1e',
+                            'x2gd',
+                            'x2idn',
+                            'x2iedn',
+                            'x2iezn',
+                            'x4',
+                            'x8g',
+                            'z1d',
+                            'z3'
+                        ]
+                    },
+                    description: 'Allowed values for `cfke.io/instance-family`.',
+                    default: []
+                },
+                'topology.kubernetes.io/region': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'africa-south1',
+                            'ap-northeast-1',
+                            'ap-northeast-2',
+                            'ap-northeast-3',
+                            'ap-south-1',
+                            'ap-southeast-1',
+                            'ap-southeast-2',
+                            'ash',
+                            'asia-east1',
+                            'asia-east2',
+                            'asia-northeast1',
+                            'asia-northeast2',
+                            'asia-northeast3',
+                            'asia-south1',
+                            'asia-south2',
+                            'asia-southeast1',
+                            'asia-southeast2',
+                            'australia-southeast1',
+                            'australia-southeast2',
+                            'ca-central-1',
+                            'eu-central-1',
+                            'eu-central-2',
+                            'eu-north-1',
+                            'eu-west-1',
+                            'eu-west-2',
+                            'eu-west-3',
+                            'europe-central2',
+                            'europe-north1',
+                            'europe-southwest1',
+                            'europe-west1',
+                            'europe-west10',
+                            'europe-west12',
+                            'europe-west2',
+                            'europe-west3',
+                            'europe-west4',
+                            'europe-west6',
+                            'europe-west8',
+                            'europe-west9',
+                            'fsn1',
+                            'hel1',
+                            'hil',
+                            'me-central1',
+                            'me-central2',
+                            'me-west1',
+                            'nbg1',
+                            'northamerica-northeast1',
+                            'northamerica-northeast2',
+                            'sa-east-1',
+                            'sin',
+                            'southamerica-east1',
+                            'southamerica-west1',
+                            'us-central1',
+                            'us-east-1',
+                            'us-east-2',
+                            'us-east1',
+                            'us-east4',
+                            'us-east5',
+                            'us-south1',
+                            'us-west-1',
+                            'us-west-2',
+                            'us-west1',
+                            'us-west2',
+                            'us-west3',
+                            'us-west4'
+                        ]
+                    },
+                    description: 'Allowed values for `topology.kubernetes.io/region`.',
+                    default: []
+                }
+            },
+            required: [
+                'karpenter.sh/capacity-type',
+                'kubernetes.io/arch'
+            ],
+            additionalProperties: false,
+            description: 'Constraints define scheduling and provisioning requirements for the fleet. Each field restricts the values allowed for a given Kubernetes label key. Multiple constraints are ANDed together.',
+            default: {
+                'karpenter.sh/capacity-type': [
+                    'on-demand',
+                    'spot'
+                ],
+                'kubernetes.io/arch': [
+                    'amd64'
+                ],
+                'cfke.io/instance-family': [],
+                'topology.kubernetes.io/region': []
+            }
+        },
+        scalingProfile: {
+            type: 'string',
+            description: 'Controls scale-up / scale-down responsiveness. `aggressive` prioritizes cost-optimization. `conservative` prioritizes stability of the fleet. Full-overwrite: omit to reset to the default (`conservative`).',
+            default: 'conservative',
+            example: 'conservative',
+            enum: [
+                'aggressive',
+                'conservative'
+            ]
+        },
+        taints: {
+            type: 'array',
+            items: {
+                type: 'object',
+                properties: {
+                    key: {
+                        type: 'string',
+                        description: 'Taint key: a Kubernetes qualified name with an optional DNS subdomain prefix. Keys under `node.kubernetes.io`, `node.cloudprovider.kubernetes.io`, `node.cilium.io`, `karpenter.sh` and `cfke.io` (and their subdomains) are reserved.',
+                        example: 'dedicated'
+                    },
+                    value: {
+                        type: 'string',
+                        maxLength: 63,
+                        pattern: '^([A-Za-z0-9]([-A-Za-z0-9_.]*[A-Za-z0-9])?)?$',
+                        description: 'Taint value. Optional.',
+                        example: 'ci'
+                    },
+                    effect: {
+                        type: 'string',
+                        description: 'Taint effect.',
+                        example: 'NoSchedule',
+                        enum: [
+                            'NoSchedule',
+                            'PreferNoSchedule',
+                            'NoExecute'
+                        ]
+                    }
+                },
+                required: [
+                    'key',
+                    'effect'
+                ],
+                additionalProperties: false
+            },
+            maxItems: 50,
+            description: 'Taints applied to every node the fleet provisions, so only pods that tolerate them schedule there. Each key and effect pair may appear once. Full-overwrite: omit to remove all taints.',
+            default: []
+        },
+        id: {
+            type: 'string',
+            maxLength: 63,
+            minLength: 1,
+            pattern: '^[a-z0-9]([-a-z0-9]*[a-z0-9])?$',
+            description: 'Unique identifier of the kubernetes fleet.',
+            example: 'new-clouds-fleet'
+        },
+        ready: {
+            type: 'boolean',
+            description: 'Indicates whether the fleet configuration is healthy.',
+            example: true
+        },
+        status_message: {
+            type: 'string',
+            description: 'Human-readable reason the fleet is not ready. Present only when `ready` is false.',
+            example: 'Invalid provider permissions.'
+        },
+        created_at: {
+            type: 'string',
+            description: 'Creation date and time of the fleet.',
+            example: '2024-09-12T09:11:27Z'
+        },
+        updated_at: {
+            type: 'string',
+            description: 'Date and time the fleet was last updated.',
+            example: '2024-09-12T09:11:27Z'
+        }
+    },
+    required: [
+        'constraints',
+        'scalingProfile',
+        'taints',
+        'id',
+        'ready',
+        'created_at',
+        'updated_at'
+    ],
+    additionalProperties: false,
+    description: 'Mutable fleet configuration. Applied as a full overwrite: any omitted field is reset to its default rather than left unchanged.'
+};
+export const FleetUpdateInputSchema = {
+    type: 'object',
+    properties: {
+        limits: {
+            type: 'object',
+            properties: {
+                cpu: {
+                    type: 'integer',
+                    minimum: 0,
+                    maximum: 100000,
+                    description: 'CPU limit in cores. Maximum 100,000.'
+                }
+            },
+            additionalProperties: false,
+            description: 'Limits define a set of bounds for provisioning capacity.'
+        },
+        gcp: {
+            type: 'object',
+            properties: {
+                enabled: {
+                    type: 'boolean'
+                },
+                project: {
+                    type: 'string',
+                    pattern: '^[a-z][a-z0-9-]{4,28}[a-z0-9]$',
+                    description: 'GCP project ID to deploy instances into. 6-30 chars, lowercase letters/digits/hyphens, must start with a letter and not end with a hyphen. Omit when GCP is disabled.',
+                    example: 'my-cloudfleet-project'
+                }
+            },
+            required: [
+                'enabled'
             ],
             additionalProperties: false
         },
@@ -933,16 +1897,18 @@ export const FleetUpdateInputSchema = {
             type: 'object',
             properties: {
                 enabled: {
-                    type: 'boolean',
-                    default: true
+                    type: 'boolean'
                 },
                 apiKey: {
                     type: 'string',
-                    description: 'Hetzner Cloud API key with read / write access'
+                    maxLength: 64,
+                    minLength: 64,
+                    pattern: '^([A-Za-z0-9]{64}|\\*{64})$',
+                    description: 'Hetzner Cloud API token with read/write access (64 alphanumeric characters). Write-only: reads return a redacted placeholder, never the token. Omit the field, or send the placeholder back unchanged, to keep the existing key. Send a new value to rotate it.'
                 }
             },
             required: [
-                'apiKey'
+                'enabled'
             ],
             additionalProperties: false
         },
@@ -950,20 +1916,386 @@ export const FleetUpdateInputSchema = {
             type: 'object',
             properties: {
                 enabled: {
-                    type: 'boolean',
-                    default: true
+                    type: 'boolean'
                 },
                 controllerRoleArn: {
                     type: 'string',
-                    description: 'ControllerRoleArn is the AWS IAM role that Karpenter uses to manage resources.'
+                    pattern: '^arn:aws(-[a-z]+)*:iam::\\d{12}:role\\/[\\w+=,.@/-]+$',
+                    description: 'AWS IAM role ARN that Karpenter uses to manage resources. Omit when AWS is disabled.',
+                    example: 'arn:aws:iam::123456789012:role/Cloudfleet'
                 }
             },
             required: [
-                'controllerRoleArn'
+                'enabled'
             ],
             additionalProperties: false
+        },
+        constraints: {
+            type: 'object',
+            properties: {
+                'karpenter.sh/capacity-type': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'on-demand',
+                            'spot'
+                        ]
+                    },
+                    minItems: 1,
+                    description: 'Allowed values for `karpenter.sh/capacity-type`.',
+                    default: [
+                        'on-demand',
+                        'spot'
+                    ]
+                },
+                'kubernetes.io/arch': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'amd64',
+                            'arm64'
+                        ]
+                    },
+                    minItems: 1,
+                    description: 'Allowed values for `kubernetes.io/arch`.',
+                    default: [
+                        'amd64'
+                    ]
+                },
+                'cfke.io/instance-family': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'a1',
+                            'a2',
+                            'a3',
+                            'a4',
+                            'c1',
+                            'c2',
+                            'c2d',
+                            'c3',
+                            'c3d',
+                            'c4',
+                            'c4a',
+                            'c4d',
+                            'c5',
+                            'c5a',
+                            'c5ad',
+                            'c5d',
+                            'c5n',
+                            'c6a',
+                            'c6g',
+                            'c6gd',
+                            'c6gn',
+                            'c6i',
+                            'c6id',
+                            'c6in',
+                            'c7a',
+                            'c7g',
+                            'c7gd',
+                            'c7gn',
+                            'c7i',
+                            'c7i-flex',
+                            'c8g',
+                            'c8gd',
+                            'cax',
+                            'ccx',
+                            'cpx',
+                            'cx',
+                            'd2',
+                            'd3',
+                            'd3en',
+                            'dl1',
+                            'dl2q',
+                            'e2',
+                            'f1',
+                            'f2',
+                            'g1',
+                            'g2',
+                            'g4ad',
+                            'g4dn',
+                            'g5',
+                            'g5g',
+                            'g6',
+                            'g6e',
+                            'gr6',
+                            'h1',
+                            'h3',
+                            'hpc6a',
+                            'hpc6id',
+                            'hpc7a',
+                            'hpc7g',
+                            'i2',
+                            'i3',
+                            'i3en',
+                            'i4g',
+                            'i4i',
+                            'i7i',
+                            'i7ie',
+                            'i8g',
+                            'im4gn',
+                            'inf1',
+                            'inf2',
+                            'is4gen',
+                            'm1',
+                            'm2',
+                            'm3',
+                            'm4',
+                            'm5',
+                            'm5a',
+                            'm5ad',
+                            'm5d',
+                            'm5dn',
+                            'm5n',
+                            'm5zn',
+                            'm6a',
+                            'm6g',
+                            'm6gd',
+                            'm6i',
+                            'm6id',
+                            'm6idn',
+                            'm6in',
+                            'm7a',
+                            'm7g',
+                            'm7gd',
+                            'm7i',
+                            'm7i-flex',
+                            'm8g',
+                            'm8gd',
+                            'n1',
+                            'n2',
+                            'n2d',
+                            'n4',
+                            'p3',
+                            'p3dn',
+                            'p4d',
+                            'p4de',
+                            'p5',
+                            'p5e',
+                            'p5en',
+                            'p6-b200',
+                            'r3',
+                            'r4',
+                            'r5',
+                            'r5a',
+                            'r5ad',
+                            'r5b',
+                            'r5d',
+                            'r5dn',
+                            'r5n',
+                            'r6a',
+                            'r6g',
+                            'r6gd',
+                            'r6i',
+                            'r6id',
+                            'r6idn',
+                            'r6in',
+                            'r7a',
+                            'r7g',
+                            'r7gd',
+                            'r7i',
+                            'r7iz',
+                            'r8g',
+                            'r8gd',
+                            't2',
+                            't2a',
+                            't2d',
+                            't3',
+                            't3a',
+                            't4g',
+                            'trn1',
+                            'trn1n',
+                            'u-3tb1',
+                            'u-6tb1',
+                            'u7i-12tb',
+                            'u7i-6tb',
+                            'u7i-8tb',
+                            'u7in-16tb',
+                            'u7in-24tb',
+                            'u7in-32tb',
+                            'vt1',
+                            'x1',
+                            'x1e',
+                            'x2gd',
+                            'x2idn',
+                            'x2iedn',
+                            'x2iezn',
+                            'x4',
+                            'x8g',
+                            'z1d',
+                            'z3'
+                        ]
+                    },
+                    description: 'Allowed values for `cfke.io/instance-family`.',
+                    default: []
+                },
+                'topology.kubernetes.io/region': {
+                    type: 'array',
+                    items: {
+                        type: 'string',
+                        enum: [
+                            'africa-south1',
+                            'ap-northeast-1',
+                            'ap-northeast-2',
+                            'ap-northeast-3',
+                            'ap-south-1',
+                            'ap-southeast-1',
+                            'ap-southeast-2',
+                            'ash',
+                            'asia-east1',
+                            'asia-east2',
+                            'asia-northeast1',
+                            'asia-northeast2',
+                            'asia-northeast3',
+                            'asia-south1',
+                            'asia-south2',
+                            'asia-southeast1',
+                            'asia-southeast2',
+                            'australia-southeast1',
+                            'australia-southeast2',
+                            'ca-central-1',
+                            'eu-central-1',
+                            'eu-central-2',
+                            'eu-north-1',
+                            'eu-west-1',
+                            'eu-west-2',
+                            'eu-west-3',
+                            'europe-central2',
+                            'europe-north1',
+                            'europe-southwest1',
+                            'europe-west1',
+                            'europe-west10',
+                            'europe-west12',
+                            'europe-west2',
+                            'europe-west3',
+                            'europe-west4',
+                            'europe-west6',
+                            'europe-west8',
+                            'europe-west9',
+                            'fsn1',
+                            'hel1',
+                            'hil',
+                            'me-central1',
+                            'me-central2',
+                            'me-west1',
+                            'nbg1',
+                            'northamerica-northeast1',
+                            'northamerica-northeast2',
+                            'sa-east-1',
+                            'sin',
+                            'southamerica-east1',
+                            'southamerica-west1',
+                            'us-central1',
+                            'us-east-1',
+                            'us-east-2',
+                            'us-east1',
+                            'us-east4',
+                            'us-east5',
+                            'us-south1',
+                            'us-west-1',
+                            'us-west-2',
+                            'us-west1',
+                            'us-west2',
+                            'us-west3',
+                            'us-west4'
+                        ]
+                    },
+                    description: 'Allowed values for `topology.kubernetes.io/region`.',
+                    default: []
+                }
+            },
+            additionalProperties: false,
+            description: 'Constraints define scheduling and provisioning requirements for the fleet. Each field restricts the values allowed for a given Kubernetes label key. Multiple constraints are ANDed together.',
+            default: {
+                'karpenter.sh/capacity-type': [
+                    'on-demand',
+                    'spot'
+                ],
+                'kubernetes.io/arch': [
+                    'amd64'
+                ],
+                'cfke.io/instance-family': [],
+                'topology.kubernetes.io/region': []
+            }
+        },
+        scalingProfile: {
+            type: 'string',
+            description: 'Controls scale-up / scale-down responsiveness. `aggressive` prioritizes cost-optimization. `conservative` prioritizes stability of the fleet. Full-overwrite: omit to reset to the default (`conservative`).',
+            default: 'conservative',
+            example: 'conservative',
+            enum: [
+                'aggressive',
+                'conservative'
+            ]
+        },
+        taints: {
+            type: 'array',
+            items: {
+                type: 'object',
+                properties: {
+                    key: {
+                        type: 'string',
+                        description: 'Taint key: a Kubernetes qualified name with an optional DNS subdomain prefix. Keys under `node.kubernetes.io`, `node.cloudprovider.kubernetes.io`, `node.cilium.io`, `karpenter.sh` and `cfke.io` (and their subdomains) are reserved.',
+                        example: 'dedicated'
+                    },
+                    value: {
+                        type: 'string',
+                        maxLength: 63,
+                        pattern: '^([A-Za-z0-9]([-A-Za-z0-9_.]*[A-Za-z0-9])?)?$',
+                        description: 'Taint value. Optional.',
+                        example: 'ci'
+                    },
+                    effect: {
+                        type: 'string',
+                        description: 'Taint effect.',
+                        example: 'NoSchedule',
+                        enum: [
+                            'NoSchedule',
+                            'PreferNoSchedule',
+                            'NoExecute'
+                        ]
+                    }
+                },
+                required: [
+                    'key',
+                    'effect'
+                ],
+                additionalProperties: false
+            },
+            maxItems: 50,
+            description: 'Taints applied to every node the fleet provisions, so only pods that tolerate them schedule there. Each key and effect pair may appear once. Full-overwrite: omit to remove all taints.',
+            default: []
+        }
+    },
+    additionalProperties: false,
+    description: 'Mutable fleet configuration. Applied as a full overwrite: any omitted field is reset to its default rather than left unchanged.'
+};
+export const InviteCreateInputSchema = {
+    type: 'object',
+    properties: {
+        email: {
+            type: 'string',
+            format: 'email',
+            description: 'Email address of the user to invite.',
+            example: 'email@example.com'
+        },
+        role: {
+            type: 'string',
+            description: 'Role the invited user will be assigned on redemption. Can be \'Administrator\' or \'User\'.',
+            default: 'User',
+            example: 'User',
+            enum: [
+                'Administrator',
+                'User'
+            ]
         }
     },
+    required: [
+        'email'
+    ],
     additionalProperties: false
 };
 export const InviteSchema = {
@@ -996,6 +2328,16 @@ export const InviteSchema = {
             type: 'string',
             description: 'Generated unique invite code.',
             example: '7kUZnH7nnKUFfvc4NK2KQF'
+        },
+        role: {
+            type: 'string',
+            description: 'Role the invited user will be assigned on redemption. Can be \'Administrator\' or \'User\'.',
+            default: 'User',
+            example: 'User',
+            enum: [
+                'Administrator',
+                'User'
+            ]
         }
     },
     required: [
@@ -1003,6 +2345,170 @@ export const InviteSchema = {
     ],
     additionalProperties: false
 };
+export const InvoicePaymentAttemptSchema = {
+    type: 'object',
+    properties: {
+        invoice_id: {
+            type: 'string',
+            description: 'Identifier of the invoice.',
+            example: 'in_1234567890xCrwxghOTj1234'
+        },
+        number: {
+            type: 'string',
+            nullable: true,
+            description: 'Invoice number. Null if the invoice has no number.',
+            example: 'CF-0042'
+        },
+        amount: {
+            type: 'number',
+            format: 'float',
+            description: 'Amount outstanding when the charge was attempted, in the smallest currency unit.',
+            example: 4200
+        },
+        currency: {
+            type: 'string',
+            description: 'Currency of the invoice.',
+            example: 'eur'
+        },
+        status: {
+            type: 'string',
+            description: 'Outcome for this invoice: `paid`, `processing` (accepted, not yet settled), `requires_action` (awaiting customer authentication), or `failed` (declined).',
+            example: 'paid',
+            enum: [
+                'paid',
+                'processing',
+                'requires_action',
+                'failed'
+            ]
+        },
+        client_secret: {
+            type: 'string',
+            nullable: true,
+            description: 'Client secret used to complete customer authentication. Set only when `status` is `requires_action`.',
+            example: 'pi_3MtwBwLkdIwHu7ix28a3tqPa_secret_YrKJUKribcBjcG8HVhfZluoGH'
+        },
+        failure_code: {
+            type: 'string',
+            nullable: true,
+            description: 'Decline code. Set only when `status` is `failed`.',
+            example: 'insufficient_funds'
+        },
+        failure_message: {
+            type: 'string',
+            nullable: true,
+            description: 'Explanation of the decline, suitable for display. Set only when `status` is `failed`.',
+            example: 'Your card has insufficient funds.'
+        }
+    },
+    required: [
+        'invoice_id',
+        'number',
+        'amount',
+        'currency',
+        'status',
+        'client_secret',
+        'failure_code',
+        'failure_message'
+    ],
+    additionalProperties: false
+};
+export const InvoicePaymentResultSchema = {
+    type: 'object',
+    properties: {
+        code: {
+            type: 'string',
+            description: 'Overall outcome: `paid` (nothing outstanding), `processing` (all accepted, not yet settled), `action_required` (one or more await customer authentication), `partially_paid`, `failed`, `nothing_due`, or `bank_transfer_due` (the organization pays by bank transfer; nothing was charged).',
+            example: 'partially_paid',
+            enum: [
+                'paid',
+                'processing',
+                'action_required',
+                'partially_paid',
+                'failed',
+                'nothing_due',
+                'bank_transfer_due'
+            ]
+        },
+        message: {
+            type: 'string',
+            description: 'Summary of the outcome, suitable for display.',
+            example: '1 of 2 open invoices was paid. Invoice CF-0043 was declined: Your card has insufficient funds.'
+        },
+        results: {
+            type: 'array',
+            items: {
+                type: 'object',
+                properties: {
+                    invoice_id: {
+                        type: 'string',
+                        description: 'Identifier of the invoice.',
+                        example: 'in_1234567890xCrwxghOTj1234'
+                    },
+                    number: {
+                        type: 'string',
+                        description: 'Invoice number. Null if the invoice has no number.',
+                        example: 'CF-0042'
+                    },
+                    amount: {
+                        type: 'number',
+                        format: 'float',
+                        description: 'Amount outstanding when the charge was attempted, in the smallest currency unit.',
+                        example: 4200
+                    },
+                    currency: {
+                        type: 'string',
+                        description: 'Currency of the invoice.',
+                        example: 'eur'
+                    },
+                    status: {
+                        type: 'string',
+                        description: 'Outcome for this invoice: `paid`, `processing` (accepted, not yet settled), `requires_action` (awaiting customer authentication), or `failed` (declined).',
+                        example: 'paid',
+                        enum: [
+                            'paid',
+                            'processing',
+                            'requires_action',
+                            'failed'
+                        ]
+                    },
+                    client_secret: {
+                        type: 'string',
+                        description: 'Client secret used to complete customer authentication. Set only when `status` is `requires_action`.',
+                        example: 'pi_3MtwBwLkdIwHu7ix28a3tqPa_secret_YrKJUKribcBjcG8HVhfZluoGH'
+                    },
+                    failure_code: {
+                        type: 'string',
+                        description: 'Decline code. Set only when `status` is `failed`.',
+                        example: 'insufficient_funds'
+                    },
+                    failure_message: {
+                        type: 'string',
+                        description: 'Explanation of the decline, suitable for display. Set only when `status` is `failed`.',
+                        example: 'Your card has insufficient funds.'
+                    }
+                },
+                required: [
+                    'invoice_id',
+                    'number',
+                    'amount',
+                    'currency',
+                    'status',
+                    'client_secret',
+                    'failure_code',
+                    'failure_message'
+                ],
+                additionalProperties: false
+            },
+            description: 'One entry per invoice charged, oldest first.'
+        }
+    },
+    required: [
+        'code',
+        'message',
+        'results'
+    ],
+    additionalProperties: false
+};
 export const InvoiceSchema = {
     type: 'object',
     properties: {
@@ -1216,6 +2722,15 @@ export const MarketplaceListingSchema = {
 export const OrganizationCreateInputSchema = {
     type: 'object',
     properties: {
+        type: {
+            type: 'string',
+            description: 'Type of the organization. `business` for legal entities, `personal` for individuals.',
+            example: 'business',
+            enum: [
+                'business',
+                'personal'
+            ]
+        },
         email: {
             type: 'string',
             format: 'email',
@@ -1224,11 +2739,13 @@ export const OrganizationCreateInputSchema = {
         },
         first_name: {
             type: 'string',
+            minLength: 1,
             description: 'First name of the billing contact person.',
             example: 'John'
         },
         last_name: {
             type: 'string',
+            minLength: 1,
             description: 'Last name of the billing contact person.',
             example: 'Doe'
         },
@@ -1247,6 +2764,7 @@ export const OrganizationCreateInputSchema = {
         }
     },
     required: [
+        'type',
         'email',
         'first_name',
         'last_name',
@@ -1255,6 +2773,20 @@ export const OrganizationCreateInputSchema = {
     ],
     additionalProperties: false
 };
+export const OrganizationCreateOutputSchema = {
+    type: 'object',
+    properties: {
+        id: {
+            type: 'string',
+            description: 'Unique identifier of the newly created organization. Generated by the API and safe to use for client-side tracking immediately.',
+            example: 'organization-id'
+        }
+    },
+    required: [
+        'id'
+    ],
+    additionalProperties: false
+};
 export const OrganizationSchema = {
     type: 'object',
     properties: {
@@ -1271,6 +2803,15 @@ export const OrganizationSchema = {
             description: 'Name of the legal entity. This name will be used in invoices. Use your first and last name for individual accounts.',
             example: 'ACME Corp.'
         },
+        type: {
+            type: 'string',
+            description: 'Type of the organization. `business` for legal entities, `personal` for individuals.',
+            example: 'business',
+            enum: [
+                'business',
+                'personal'
+            ]
+        },
         date_created: {
             type: 'string',
             format: 'date-time',
@@ -1302,6 +2843,17 @@ export const OrganizationSchema = {
                     description: 'Available number of Pro clusters that can be created.',
                     example: 999
                 },
+                enterprise_clusters_max: {
+                    type: 'integer',
+                    minimum: 0,
+                    description: 'Maximum number of Enterprise clusters that can be created.',
+                    example: 999
+                },
+                enterprise_clusters_available: {
+                    type: 'integer',
+                    description: 'Available number of Enterprise clusters that can be created.',
+                    example: 999
+                },
                 fleets_max: {
                     type: 'integer',
                     minimum: 0,
@@ -1321,7 +2873,7 @@ export const OrganizationSchema = {
                     type: 'array',
                     items: {
                         type: 'string',
-                        example: 'northamerica-central-1'
+                        example: 'northamerica-central-1a'
                     },
                     minItems: 1,
                     description: 'List of Cloudfleet control plane regions available for the organization.'
@@ -1363,6 +2915,8 @@ export const OrganizationSchema = {
                 'basic_clusters_available',
                 'pro_clusters_max',
                 'pro_clusters_available',
+                'enterprise_clusters_max',
+                'enterprise_clusters_available',
                 'fleets_max',
                 'cluster_tiers',
                 'regions',
@@ -1380,13 +2934,25 @@ export const OrganizationSchema = {
                 'closed',
                 'suspended'
             ]
+        },
+        verification: {
+            type: 'string',
+            description: 'Verification status of the organization, which determines the assigned quota. `none` when billing information is incomplete, `submitted` when billing information is complete but the organization is not yet verified, `verified` when the organization is verified.',
+            example: 'verified',
+            enum: [
+                'none',
+                'submitted',
+                'verified'
+            ]
         }
     },
     required: [
         'id',
+        'type',
         'date_created',
         'quota',
-        'status'
+        'status',
+        'verification'
     ],
     additionalProperties: false
 };
@@ -1395,28 +2961,23 @@ export const PaymentMethodSchema = {
     properties: {
         id: {
             type: 'string',
-            format: 'uuid',
-            description: 'Unique identifier of the organization. UUID v4 string in canonical form.',
-            example: 'e94d30ec-a2dd-4dcb-832c-ac2be144ba91'
-        },
-        setup: {
-            type: 'boolean',
-            description: 'Whether organization payment method was set up and ready to use for payments.',
-            example: true
+            description: 'Payment method identifier. Stripe payment method id for cards/SEPA; the constant `bank_transfer` for the invoice/bank-transfer method. Used to set as default or delete the payment method.',
+            example: 'pm_1MtwBwLkdIwHu7ix28a3tqPa'
         },
         type: {
             type: 'string',
-            nullable: true,
-            description: 'Payment method type type. Only `card` payments supported at the moment.',
+            description: 'Payment method type. `card`, `sepa_debit` for SEPA Direct Debit (business accounts only), or `bank_transfer` for paying invoices by bank transfer.',
             example: 'card',
             enum: [
-                'card'
+                'card',
+                'sepa_debit',
+                'bank_transfer'
             ]
         },
         last4: {
             type: 'string',
             nullable: true,
-            description: 'Last 4 digits of the payment card number.',
+            description: 'Last 4 digits of the payment card number, of the bank account (IBAN) for SEPA Direct Debit, or of the destination IBAN for bank transfer.',
             example: '4242'
         },
         exp_month: {
@@ -1424,42 +2985,56 @@ export const PaymentMethodSchema = {
             minimum: 1,
             maximum: 12,
             nullable: true,
-            description: 'Two-digit number representing the card\'s expiration month.',
-            example: '12'
+            description: 'Two-digit number representing the card\'s expiration month. Null for SEPA Direct Debit and bank transfer.',
+            example: 12
         },
         exp_year: {
             type: 'integer',
-            minimum: 2024,
             nullable: true,
-            description: 'Four-digit number representing the card\'s expiration year.',
-            example: '2028'
+            description: 'Four-digit number representing the card\'s expiration year. May be in the past for an expired card still on file. Null for SEPA Direct Debit and bank transfer.',
+            example: 2028
         },
         brand: {
             type: 'string',
             nullable: true,
-            description: 'Payment card brand. Can be `amex`, `diners`, `discover`, `eftpos_au`, `jcb`, `mastercard`, `unionpay`, `visa`, or `unknown`.',
-            example: 'visa',
-            enum: [
-                'amex',
-                'diners',
-                'discover',
-                'eftpos_au',
-                'jcb',
-                'mastercard',
-                'unionpay',
-                'visa',
-                'unknown'
-            ]
+            description: 'Payment card brand as reported by Stripe, e.g. `visa`, `mastercard`, `amex`, `cartes_bancaires`, or `unknown`. Null for SEPA Direct Debit and bank transfer.',
+            example: 'visa'
+        },
+        iban: {
+            type: 'string',
+            nullable: true,
+            description: 'Full destination IBAN to send bank transfers to. Set only for `bank_transfer`; null otherwise. This is Cloudfleet\'s virtual receiving account, shown in full so the customer can pay into it.',
+            example: 'DE11243015658023127510'
+        },
+        bic: {
+            type: 'string',
+            nullable: true,
+            description: 'BIC/SWIFT of the destination bank for bank transfers. Set only for `bank_transfer`; null otherwise.',
+            example: 'SOGEDEFFXXX'
+        },
+        account_holder_name: {
+            type: 'string',
+            nullable: true,
+            description: 'Account holder name of the destination bank account for bank transfers. Set only for `bank_transfer`; null otherwise.',
+            example: 'Cloudfleet GmbH'
+        },
+        is_default: {
+            type: 'boolean',
+            description: 'Whether this payment method is the default used for invoices and active subscriptions. Always false for `bank_transfer` (it cannot be a Stripe default payment method).',
+            example: true
         }
     },
     required: [
         'id',
-        'setup',
         'type',
         'last4',
         'exp_month',
         'exp_year',
-        'brand'
+        'brand',
+        'iban',
+        'bic',
+        'account_holder_name',
+        'is_default'
     ],
     additionalProperties: false
 };
@@ -1474,18 +3049,29 @@ export const PlatformQuotaSchema = {
         },
         basic_clusters_available: {
             type: 'integer',
-            description: 'Available number of Basic clusters that can be created.',
+            description: 'Available number of Basic clusters that can be created.',
+            example: 999
+        },
+        pro_clusters_max: {
+            type: 'integer',
+            minimum: 0,
+            description: 'Maximum number of Pro clusters that can be created.',
+            example: 999
+        },
+        pro_clusters_available: {
+            type: 'integer',
+            description: 'Available number of Pro clusters that can be created.',
             example: 999
         },
-        pro_clusters_max: {
+        enterprise_clusters_max: {
             type: 'integer',
             minimum: 0,
-            description: 'Maximum number of Pro clusters that can be created.',
+            description: 'Maximum number of Enterprise clusters that can be created.',
             example: 999
         },
-        pro_clusters_available: {
+        enterprise_clusters_available: {
             type: 'integer',
-            description: 'Available number of Pro clusters that can be created.',
+            description: 'Available number of Enterprise clusters that can be created.',
             example: 999
         },
         fleets_max: {
@@ -1507,7 +3093,7 @@ export const PlatformQuotaSchema = {
             type: 'array',
             items: {
                 type: 'string',
-                example: 'northamerica-central-1'
+                example: 'northamerica-central-1a'
             },
             minItems: 1,
             description: 'List of Cloudfleet control plane regions available for the organization.'
@@ -1549,6 +3135,8 @@ export const PlatformQuotaSchema = {
         'basic_clusters_available',
         'pro_clusters_max',
         'pro_clusters_available',
+        'enterprise_clusters_max',
+        'enterprise_clusters_available',
         'fleets_max',
         'cluster_tiers',
         'regions',
@@ -1822,6 +3410,415 @@ export const RegistryTagSchema = {
     ],
     additionalProperties: false
 };
+export const RoadmapItemCreateInputSchema = {
+    type: 'object',
+    properties: {
+        text: {
+            type: 'string',
+            maxLength: 500,
+            minLength: 1,
+            description: 'Your suggestion in one or two sentences. It is reviewed before it appears on the roadmap.',
+            example: 'Support for ARM nodes on Hetzner.'
+        }
+    },
+    required: [
+        'text'
+    ],
+    additionalProperties: false
+};
+export const RoadmapItemSchema = {
+    type: 'object',
+    properties: {
+        id: {
+            type: 'string',
+            description: 'Unique identifier of the roadmap item (Mongo ObjectId).',
+            example: '60c72b2f9f1b2c001f8e4d3a'
+        },
+        text: {
+            type: 'string',
+            description: 'Short description of the roadmap item.',
+            example: 'Support for ARM nodes on Hetzner.'
+        },
+        vote: {
+            type: 'integer',
+            nullable: true,
+            description: 'The caller\'s vote on this item: -1 (down), 1 (up), 2 (double up), or null if the caller has not voted.',
+            example: 1,
+            enum: [
+                -1,
+                1,
+                2
+            ]
+        }
+    },
+    required: [
+        'id',
+        'text',
+        'vote'
+    ],
+    additionalProperties: false
+};
+export const RoadmapVoteInputSchema = {
+    type: 'object',
+    properties: {
+        value: {
+            type: 'integer',
+            description: 'Vote value: -1 (down), 1 (up), or 2 (double up).',
+            example: 1,
+            enum: [
+                -1,
+                1,
+                2
+            ]
+        }
+    },
+    required: [
+        'value'
+    ],
+    additionalProperties: false
+};
+export const TicketAttachmentSchema = {
+    type: 'object',
+    properties: {
+        id: {
+            type: 'string',
+            description: 'Unique identifier of the attachment (Mongo ObjectId).',
+            example: '60c72b2f9f1b2c001f8e4d3c'
+        },
+        filename: {
+            type: 'string',
+            description: 'Original filename as uploaded.',
+            example: 'debug.log'
+        },
+        content_type: {
+            type: 'string',
+            description: 'MIME content type of the attachment.',
+            example: 'text/plain'
+        },
+        size: {
+            type: 'integer',
+            description: 'Size of the attachment in bytes.',
+            example: 12345
+        }
+    },
+    required: [
+        'id',
+        'filename',
+        'content_type',
+        'size'
+    ],
+    additionalProperties: false
+};
+export const TicketCreateInputSchema = {
+    type: 'object',
+    properties: {
+        category: {
+            type: 'string',
+            description: 'Ticket category. Drives auto-assignment and may carry a subcategory in `properties`.',
+            example: 'technical',
+            enum: [
+                'billing',
+                'technical',
+                'general'
+            ]
+        },
+        body: {
+            type: 'string',
+            maxLength: 50000,
+            minLength: 1,
+            pattern: '\\S',
+            description: 'Initial message body in markdown. There is no separate subject — the first message body is the description.',
+            example: 'My cluster cannot reach the registry. Logs attached.'
+        },
+        properties: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Free-form key/value bag set by the UI (e.g. `subcategory`, `cluster_id`, `cluster_name`, `region`).',
+            example: {
+                subcategory: 'cluster-question',
+                cluster_id: '60c72b2f9f1b2c001f8e4d3a'
+            }
+        },
+        grant_support_access: {
+            type: 'boolean',
+            description: 'Grant Cloudfleet support staff access to the organization\'s resources while the ticket is open. Access cannot be revoked; it ends when the ticket is closed.',
+            example: true
+        }
+    },
+    required: [
+        'category',
+        'body'
+    ],
+    additionalProperties: false
+};
+export const TicketMessageInputSchema = {
+    type: 'object',
+    properties: {
+        body: {
+            type: 'string',
+            maxLength: 50000,
+            minLength: 1,
+            pattern: '\\S',
+            description: 'Reply body in markdown.',
+            example: 'Thanks — that resolved it on my side.'
+        }
+    },
+    required: [
+        'body'
+    ],
+    additionalProperties: false
+};
+export const TicketMessageSchema = {
+    type: 'object',
+    properties: {
+        id: {
+            type: 'string',
+            description: 'Unique identifier of the message (Mongo ObjectId).',
+            example: '60c72b2f9f1b2c001f8e4d3b'
+        },
+        type: {
+            type: 'string',
+            description: 'Message type. Internal notes are filtered out of customer-facing responses.',
+            example: 'customer_reply',
+            enum: [
+                'customer_reply',
+                'agent_reply'
+            ]
+        },
+        body: {
+            type: 'string',
+            description: 'Message body in markdown.',
+            example: 'Thanks — that resolved it on my side.'
+        },
+        author_first_name: {
+            type: 'string',
+            nullable: true,
+            description: 'First name of the author. Null when not provided.',
+            example: 'Jane'
+        },
+        author_last_name: {
+            type: 'string',
+            nullable: true,
+            description: 'Last name of the author. Null when not provided.',
+            example: 'Doe'
+        },
+        attachments: {
+            type: 'array',
+            items: {
+                type: 'object',
+                properties: {
+                    id: {
+                        type: 'string',
+                        description: 'Unique identifier of the attachment (Mongo ObjectId).',
+                        example: '60c72b2f9f1b2c001f8e4d3c'
+                    },
+                    filename: {
+                        type: 'string',
+                        description: 'Original filename as uploaded.',
+                        example: 'debug.log'
+                    },
+                    content_type: {
+                        type: 'string',
+                        description: 'MIME content type of the attachment.',
+                        example: 'text/plain'
+                    },
+                    size: {
+                        type: 'integer',
+                        description: 'Size of the attachment in bytes.',
+                        example: 12345
+                    }
+                },
+                required: [
+                    'id',
+                    'filename',
+                    'content_type',
+                    'size'
+                ],
+                additionalProperties: false
+            },
+            description: 'Attachments associated with this message.',
+            example: []
+        },
+        date_created: {
+            type: 'string',
+            format: 'date-time',
+            description: 'Creation date of the message. ISO 8601 UTC.',
+            example: '2026-05-11T16:08:14.338Z'
+        }
+    },
+    required: [
+        'id',
+        'type',
+        'body',
+        'date_created'
+    ],
+    additionalProperties: false
+};
+export const TicketSchema = {
+    type: 'object',
+    properties: {
+        id: {
+            type: 'string',
+            description: 'Unique identifier of the ticket (Mongo ObjectId).',
+            example: '60c72b2f9f1b2c001f8e4d3a'
+        },
+        status: {
+            type: 'string',
+            description: 'Current state of the ticket.',
+            example: 'waiting_on_us',
+            enum: [
+                'waiting_on_us',
+                'waiting_on_user',
+                'closed'
+            ]
+        },
+        category: {
+            type: 'string',
+            description: 'Ticket category.',
+            example: 'technical',
+            enum: [
+                'billing',
+                'technical',
+                'general'
+            ]
+        },
+        summary: {
+            type: 'string',
+            description: 'First 128 characters of the initial message body, with markdown formatting and newlines stripped. Used for ticket list previews.',
+            example: 'My cluster cannot reach the registry. Logs attached.'
+        },
+        support_access_granted: {
+            type: 'boolean',
+            description: 'Whether Cloudfleet support staff currently have access to the organization\'s resources. True once access is granted and until the ticket is closed.',
+            example: true
+        },
+        support_access_granted_at: {
+            type: 'string',
+            format: 'date-time',
+            nullable: true,
+            description: 'When support access was granted. Null if it never was. Kept after the ticket is closed.',
+            example: '2026-05-11T16:08:14.338Z'
+        },
+        closed_at: {
+            type: 'string',
+            format: 'date-time',
+            nullable: true,
+            description: 'Closure timestamp. Null while the ticket is open.',
+            example: '2026-05-18T16:08:14.338Z'
+        },
+        date_created: {
+            type: 'string',
+            format: 'date-time',
+            description: 'Creation date of the ticket. ISO 8601 UTC.',
+            example: '2026-05-11T16:08:14.338Z'
+        },
+        date_updated: {
+            type: 'string',
+            format: 'date-time',
+            description: 'Last update date of the ticket. ISO 8601 UTC.',
+            example: '2026-05-11T16:08:14.338Z'
+        },
+        messages: {
+            type: 'array',
+            items: {
+                type: 'object',
+                properties: {
+                    id: {
+                        type: 'string',
+                        description: 'Unique identifier of the message (Mongo ObjectId).',
+                        example: '60c72b2f9f1b2c001f8e4d3b'
+                    },
+                    type: {
+                        type: 'string',
+                        description: 'Message type. Internal notes are filtered out of customer-facing responses.',
+                        example: 'customer_reply',
+                        enum: [
+                            'customer_reply',
+                            'agent_reply'
+                        ]
+                    },
+                    body: {
+                        type: 'string',
+                        description: 'Message body in markdown.',
+                        example: 'Thanks — that resolved it on my side.'
+                    },
+                    author_first_name: {
+                        type: 'string',
+                        description: 'First name of the author. Null when not provided.',
+                        example: 'Jane'
+                    },
+                    author_last_name: {
+                        type: 'string',
+                        description: 'Last name of the author. Null when not provided.',
+                        example: 'Doe'
+                    },
+                    attachments: {
+                        type: 'array',
+                        items: {
+                            type: 'object',
+                            properties: {
+                                id: {
+                                    type: 'string',
+                                    description: 'Unique identifier of the attachment (Mongo ObjectId).',
+                                    example: '60c72b2f9f1b2c001f8e4d3c'
+                                },
+                                filename: {
+                                    type: 'string',
+                                    description: 'Original filename as uploaded.',
+                                    example: 'debug.log'
+                                },
+                                content_type: {
+                                    type: 'string',
+                                    description: 'MIME content type of the attachment.',
+                                    example: 'text/plain'
+                                },
+                                size: {
+                                    type: 'integer',
+                                    description: 'Size of the attachment in bytes.',
+                                    example: 12345
+                                }
+                            },
+                            required: [
+                                'id',
+                                'filename',
+                                'content_type',
+                                'size'
+                            ],
+                            additionalProperties: false
+                        },
+                        description: 'Attachments associated with this message.',
+                        example: []
+                    },
+                    date_created: {
+                        type: 'string',
+                        format: 'date-time',
+                        description: 'Creation date of the message. ISO 8601 UTC.',
+                        example: '2026-05-11T16:08:14.338Z'
+                    }
+                },
+                required: [
+                    'id',
+                    'type',
+                    'body',
+                    'date_created'
+                ],
+                additionalProperties: false
+            },
+            description: 'Messages on the ticket in chronological order. Internal notes are excluded. Returned by the detail endpoint only.'
+        }
+    },
+    required: [
+        'id',
+        'status',
+        'category',
+        'summary',
+        'support_access_granted',
+        'support_access_granted_at',
+        'date_created',
+        'date_updated'
+    ],
+    additionalProperties: false
+};
 export const TokenCreateInputSchema = {
     type: 'object',
     properties: {
@@ -1932,12 +3929,21 @@ export const UsageFacetsSchema = {
         product: {
             type: 'array',
             items: {
-                type: 'string'
+                type: 'string',
+                enum: [
+                    'cfke_controlplane_basic',
+                    'cfke_controlplane_pro',
+                    'cfke_controlplane_enterprise',
+                    'cfke_connected_nodes_basic',
+                    'cfke_connected_nodes_pro',
+                    'cfke_connected_nodes_enterprise',
+                    'cfcr_storage'
+                ]
             },
             description: 'List of unique products',
             example: [
-                'cfke_controlplane',
-                'cfke_connected_nodes'
+                'cfke_controlplane_pro',
+                'cfke_connected_nodes_pro'
             ]
         }
     },
@@ -1964,7 +3970,16 @@ export const UsageResponseSchema = {
                     product: {
                         type: 'string',
                         description: 'The product the usage is associated with',
-                        example: 'cfke_controlplane'
+                        example: 'cfke_controlplane_pro',
+                        enum: [
+                            'cfke_controlplane_basic',
+                            'cfke_controlplane_pro',
+                            'cfke_controlplane_enterprise',
+                            'cfke_connected_nodes_basic',
+                            'cfke_connected_nodes_pro',
+                            'cfke_connected_nodes_enterprise',
+                            'cfcr_storage'
+                        ]
                     },
                     value: {
                         type: 'number',
@@ -2012,12 +4027,21 @@ export const UsageResponseSchema = {
                 product: {
                     type: 'array',
                     items: {
-                        type: 'string'
+                        type: 'string',
+                        enum: [
+                            'cfke_controlplane_basic',
+                            'cfke_controlplane_pro',
+                            'cfke_controlplane_enterprise',
+                            'cfke_connected_nodes_basic',
+                            'cfke_connected_nodes_pro',
+                            'cfke_connected_nodes_enterprise',
+                            'cfcr_storage'
+                        ]
                     },
                     description: 'List of unique products',
                     example: [
-                        'cfke_controlplane',
-                        'cfke_connected_nodes'
+                        'cfke_controlplane_pro',
+                        'cfke_connected_nodes_pro'
                     ]
                 }
             },
@@ -2047,7 +4071,16 @@ export const UsageSchema = {
         product: {
             type: 'string',
             description: 'The product the usage is associated with',
-            example: 'cfke_controlplane'
+            example: 'cfke_controlplane_pro',
+            enum: [
+                'cfke_controlplane_basic',
+                'cfke_controlplane_pro',
+                'cfke_controlplane_enterprise',
+                'cfke_connected_nodes_basic',
+                'cfke_connected_nodes_pro',
+                'cfke_connected_nodes_enterprise',
+                'cfcr_storage'
+            ]
         },
         value: {
             type: 'number',
@@ -2110,24 +4143,6 @@ export const UserCreateInputSchema = {
             type: 'string',
             minLength: 8,
             description: 'User password. Must be at least 8 characters long.'
-        },
-        status: {
-            type: 'string',
-            description: 'Status of the user. Can be `active` or `inactive`. Inactive users cannot log in or manage organization resources.',
-            example: 'active',
-            enum: [
-                'active',
-                'inactive'
-            ]
-        },
-        role: {
-            type: 'string',
-            description: 'User role. Can be \'Administrator\', \'User\'.',
-            example: 'User',
-            enum: [
-                'Administrator',
-                'User'
-            ]
         }
     },
     required: [