@cloudpdf/contract 3.0.0-next.1 → 3.0.0-next.2

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "CloudPDF Engine API",
-    "version": "3.0.0-next.1",
+    "version": "3.0.0-next.2",
     "description": "The backend-callable surface of the CloudPDF document engine: deployment and tenant administration plus the document operations (reads, annotations, forms, page operations, redaction, download). Interactive viewing goes through the CloudPDF viewer SDKs, whose session protocol is deliberately not part of this API. Generated from the @cloudpdf/contract operation registry — do not edit by hand.",
     "license": {
       "name": "Apache-2.0",
@@ -15,6 +15,7 @@
         "operationId": "deployment.licenseStatus",
         "x-fern-sdk-group-name": ["deployment"],
         "x-fern-sdk-method-name": "licenseStatus",
+        "x-docs-title": "License status",
         "summary": "License decision plus usage-reporting and meter snapshots for this deployment.",
         "security": [
           {
@@ -51,6 +52,7 @@
         "operationId": "doc.head",
         "x-fern-sdk-group-name": ["doc"],
         "x-fern-sdk-method-name": "head",
+        "x-docs-title": "Open document",
         "summary": "Open a document and return its head (versions, page count, security).",
         "security": [
           {
@@ -121,6 +123,7 @@
         "operationId": "doc.annotations.list",
         "x-fern-sdk-group-name": ["doc", "annotations"],
         "x-fern-sdk-method-name": "list",
+        "x-docs-title": "List annotations",
         "summary": "One page's annotations at the current layer version.",
         "security": [
           {
@@ -207,6 +210,7 @@
         "operationId": "doc.annotations.create",
         "x-fern-sdk-group-name": ["doc", "annotations"],
         "x-fern-sdk-method-name": "create",
+        "x-docs-title": "Create annotation",
         "summary": "Create an annotation on a page.",
         "description": "Doc JWTs may instead carry collab scopes (annotations:create:self, …) that refine per-annotation authorship rules; the API token is exempt from both.",
         "security": [
@@ -316,6 +320,7 @@
         "operationId": "doc.annotations.update",
         "x-fern-sdk-group-name": ["doc", "annotations"],
         "x-fern-sdk-method-name": "update",
+        "x-docs-title": "Update annotation",
         "summary": "Update one annotation by key.",
         "security": [
           {
@@ -431,6 +436,7 @@
         "operationId": "doc.annotations.delete",
         "x-fern-sdk-group-name": ["doc", "annotations"],
         "x-fern-sdk-method-name": "delete",
+        "x-docs-title": "Delete annotation",
         "summary": "Delete one annotation by key.",
         "security": [
           {
@@ -528,6 +534,7 @@
         "operationId": "doc.download",
         "x-fern-sdk-group-name": ["doc"],
         "x-fern-sdk-method-name": "download",
+        "x-docs-title": "Download PDF",
         "summary": "Download the layer's current PDF (base plus layer edits).",
         "security": [
           {
@@ -608,6 +615,7 @@
         "operationId": "doc.forms.get",
         "x-fern-sdk-group-name": ["doc", "forms"],
         "x-fern-sdk-method-name": "get",
+        "x-docs-title": "Get form snapshot",
         "summary": "Reconciled form snapshot: fields, widgets, values.",
         "security": [
           {
@@ -687,6 +695,7 @@
         "operationId": "doc.forms.exportData",
         "x-fern-sdk-group-name": ["doc", "forms"],
         "x-fern-sdk-method-name": "exportData",
+        "x-docs-title": "Export form data",
         "summary": "Export form data as FDF or XFDF.",
         "security": [
           {
@@ -780,6 +789,7 @@
         "operationId": "doc.forms.importData",
         "x-fern-sdk-group-name": ["doc", "forms"],
         "x-fern-sdk-method-name": "importData",
+        "x-docs-title": "Import form data",
         "summary": "Import form data (FDF/XFDF), filling matching fields.",
         "security": [
           {
@@ -879,6 +889,7 @@
         "operationId": "doc.forms.reset",
         "x-fern-sdk-group-name": ["doc", "forms"],
         "x-fern-sdk-method-name": "reset",
+        "x-docs-title": "Reset form field",
         "summary": "Reset one form field to its default value.",
         "security": [
           {
@@ -967,6 +978,7 @@
         "operationId": "doc.forms.setValue",
         "x-fern-sdk-group-name": ["doc", "forms"],
         "x-fern-sdk-method-name": "setValue",
+        "x-docs-title": "Set form value",
         "summary": "Set one form field's value.",
         "security": [
           {
@@ -1075,6 +1087,7 @@
         "operationId": "doc.manifest",
         "x-fern-sdk-group-name": ["doc"],
         "x-fern-sdk-method-name": "manifest",
+        "x-docs-title": "Get manifest",
         "summary": "Full layer manifest at the layer's current version.",
         "security": [
           {
@@ -1154,6 +1167,7 @@
         "operationId": "doc.metadata.get",
         "x-fern-sdk-group-name": ["doc", "metadata"],
         "x-fern-sdk-method-name": "get",
+        "x-docs-title": "Get metadata",
         "summary": "Document metadata (PDF info dictionary view) for a layer.",
         "security": [
           {
@@ -1233,6 +1247,7 @@
         "operationId": "doc.pages.delete",
         "x-fern-sdk-group-name": ["doc", "pages"],
         "x-fern-sdk-method-name": "delete",
+        "x-docs-title": "Delete pages",
         "summary": "Delete pages.",
         "security": [
           {
@@ -1332,6 +1347,7 @@
         "operationId": "doc.pages.flatten",
         "x-fern-sdk-group-name": ["doc", "pages"],
         "x-fern-sdk-method-name": "flatten",
+        "x-docs-title": "Flatten pages",
         "summary": "Flatten annotations and form fields into page content.",
         "security": [
           {
@@ -1431,6 +1447,7 @@
         "operationId": "doc.pages.move",
         "x-fern-sdk-group-name": ["doc", "pages"],
         "x-fern-sdk-method-name": "move",
+        "x-docs-title": "Move pages",
         "summary": "Reorder pages.",
         "security": [
           {
@@ -1530,6 +1547,7 @@
         "operationId": "doc.pages.rotate",
         "x-fern-sdk-group-name": ["doc", "pages"],
         "x-fern-sdk-method-name": "rotate",
+        "x-docs-title": "Rotate pages",
         "summary": "Set absolute rotation on pages.",
         "security": [
           {
@@ -1629,6 +1647,7 @@
         "operationId": "doc.redactions.apply",
         "x-fern-sdk-group-name": ["doc", "redactions"],
         "x-fern-sdk-method-name": "apply",
+        "x-docs-title": "Apply redactions",
         "summary": "Apply pending redactions, permanently removing content.",
         "security": [
           {
@@ -1728,6 +1747,7 @@
         "operationId": "doc.render",
         "x-fern-sdk-group-name": ["doc"],
         "x-fern-sdk-method-name": "render",
+        "x-docs-title": "Render page",
         "summary": "Render one page as an image at the current layer version.",
         "description": "Render parameters (viewport, format) pass as flat dotted query keys, e.g. `?viewport.kind=width&viewport.width=800`; the full grammar is documented with the viewer.",
         "security": [
@@ -1818,6 +1838,7 @@
         "operationId": "doc.text",
         "x-fern-sdk-group-name": ["doc"],
         "x-fern-sdk-method-name": "text",
+        "x-docs-title": "Extract page text",
         "summary": "Extracted text content for one page.",
         "security": [
           {
@@ -1901,11 +1922,106 @@
         }
       }
     },
+    "/v1/share-sessions": {
+      "post": {
+        "operationId": "shares.exchange",
+        "x-fern-sdk-group-name": ["shares"],
+        "x-fern-sdk-method-name": "exchange",
+        "x-docs-title": "Exchange share token",
+        "summary": "Trade a public share token for a short-lived document session JWT.",
+        "description": "Unauthenticated, but requires a browser Origin header, checked against the grant allowlist. Unknown, revoked, and disabled tokens are indistinguishable (404). Passphrase-protected grants return 422 SharePasswordRequired until `password` is supplied. Mounted only when the deployment can sign (HS256 mode).",
+        "security": [],
+        "x-required-scope": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SharesExchangeRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesExchange200Response"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesExchange400Response"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesExchange403Response"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesExchange404Response"
+                }
+              }
+            }
+          },
+          "410": {
+            "description": "Gone",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesExchange410Response"
+                }
+              }
+            }
+          },
+          "422": {
+            "description": "Unprocessable",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesExchange422Response"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/v1/tenants": {
       "post": {
         "operationId": "tenants.create",
         "x-fern-sdk-group-name": ["tenants"],
         "x-fern-sdk-method-name": "create",
+        "x-docs-title": "Create tenant",
         "summary": "Create a tenant, or confirm it already exists — ensure-style, idempotent.",
         "security": [
           {
@@ -1960,6 +2076,7 @@
         "operationId": "tenants.list",
         "x-fern-sdk-group-name": ["tenants"],
         "x-fern-sdk-method-name": "list",
+        "x-docs-title": "List tenants",
         "summary": "List tenants, newest first, cursor-paginated.",
         "security": [
           {
@@ -2028,6 +2145,7 @@
         "operationId": "tenants.get",
         "x-fern-sdk-group-name": ["tenants"],
         "x-fern-sdk-method-name": "get",
+        "x-docs-title": "Get tenant",
         "summary": "Fetch one tenant record.",
         "security": [
           {
@@ -2083,6 +2201,7 @@
         "operationId": "tenants.delete",
         "x-fern-sdk-group-name": ["tenants"],
         "x-fern-sdk-method-name": "delete",
+        "x-docs-title": "Delete tenant",
         "summary": "Delete a tenant and everything under it.",
         "description": "Destroys the tenant and everything in its namespace — documents, layers, stored bytes, audit history. Irreversible.",
         "security": [
@@ -2134,6 +2253,7 @@
         "operationId": "documents.list",
         "x-fern-sdk-group-name": ["documents"],
         "x-fern-sdk-method-name": "list",
+        "x-docs-title": "List documents",
         "summary": "List documents in the tenant, newest first, cursor-paginated.",
         "security": [
           {
@@ -2223,6 +2343,7 @@
         "operationId": "documents.get",
         "x-fern-sdk-group-name": ["documents"],
         "x-fern-sdk-method-name": "get",
+        "x-docs-title": "Get document",
         "summary": "Fetch one document record.",
         "security": [
           {
@@ -2300,6 +2421,7 @@
         "operationId": "documents.delete",
         "x-fern-sdk-group-name": ["documents"],
         "x-fern-sdk-method-name": "delete",
+        "x-docs-title": "Delete document",
         "summary": "Delete a document and its stored artifacts.",
         "security": [
           {
@@ -2372,6 +2494,7 @@
         "operationId": "documents.commit",
         "x-fern-sdk-group-name": ["documents"],
         "x-fern-sdk-method-name": "commit",
+        "x-docs-title": "Commit upload",
         "summary": "Finish an upload: verify the SHA-256 and promote the document to ready.",
         "security": [
           {
@@ -2461,6 +2584,7 @@
         "operationId": "documents.download",
         "x-fern-sdk-group-name": ["documents"],
         "x-fern-sdk-method-name": "download",
+        "x-docs-title": "Download document",
         "summary": "Download the stored base PDF bytes.",
         "security": [
           {
@@ -2541,6 +2665,7 @@
         "operationId": "documents.thumbnail",
         "x-fern-sdk-group-name": ["documents"],
         "x-fern-sdk-method-name": "thumbnail",
+        "x-docs-title": "Get thumbnail",
         "summary": "Fetch the warmed dashboard-tile render for a document.",
         "security": [
           {
@@ -2612,12 +2737,14 @@
         }
       }
     },
-    "/v1/tenants/{tenantId}/documents/{id}/upload-direct": {
+    "/v1/tenants/{tenantId}/documents/{id}/upload-proxy": {
       "post": {
-        "operationId": "documents.uploadDirect",
+        "operationId": "documents.uploadProxy",
         "x-fern-sdk-group-name": ["documents"],
-        "x-fern-sdk-method-name": "uploadDirect",
-        "summary": "Upload the PDF bytes through the origin instead of a presigned URL.",
+        "x-fern-sdk-method-name": "uploadProxy",
+        "x-docs-title": "Upload document through the origin",
+        "summary": "Upload a bounded PDF through the API when the initialized transfer kind is proxy.",
+        "description": "This bounded origin-mediated fallback must only be used after documents.init returns upload.kind=proxy. Auto mode prefers a presigned object-store PUT whenever available.",
         "security": [
           {
             "apiToken": []
@@ -2650,18 +2777,6 @@
         "requestBody": {
           "required": true,
           "content": {
-            "application/pdf": {
-              "schema": {
-                "type": "string",
-                "format": "binary"
-              }
-            },
-            "application/octet-stream": {
-              "schema": {
-                "type": "string",
-                "format": "binary"
-              }
-            },
             "multipart/form-data": {
               "schema": {
                 "type": "object",
@@ -2682,7 +2797,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/DocumentsUploadDirect200Response"
+                  "$ref": "#/components/schemas/DocumentsUploadProxy200Response"
                 }
               }
             }
@@ -2692,7 +2807,17 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/DocumentsUploadDirect400Response"
+                  "$ref": "#/components/schemas/DocumentsUploadProxy400Response"
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Conflict",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DocumentsUploadProxy409Response"
                 }
               }
             }
@@ -2715,6 +2840,7 @@
         "operationId": "documents.init",
         "x-fern-sdk-group-name": ["documents"],
         "x-fern-sdk-method-name": "init",
+        "x-docs-title": "Initialize upload",
         "summary": "Begin an upload: create (or resume/dedupe) a pending document and issue upload access.",
         "security": [
           {
@@ -2780,13 +2906,65 @@
         }
       }
     },
-    "/v1/tenants/{tenantId}/tokens": {
+    "/v1/tenants/{tenantId}/resume": {
       "post": {
-        "operationId": "tokens.issue",
-        "x-fern-sdk-group-name": ["tokens"],
-        "x-fern-sdk-method-name": "issue",
-        "summary": "Mint a delegated JWT: a doc token, or (API token only) a tenant token.",
-        "description": "kind \"tenant\" requires the API token — authority mints only downward. Mounted only when the deployment can sign (HS256 mode); asymmetric deployments mint with their own private key.",
+        "operationId": "tenants.resume",
+        "x-fern-sdk-group-name": ["tenants"],
+        "x-fern-sdk-method-name": "resume",
+        "x-docs-title": "Resume tenant",
+        "summary": "Lift a suspension; credentials for the tenant verify again.",
+        "security": [
+          {
+            "apiToken": []
+          }
+        ],
+        "x-required-scope": [],
+        "parameters": [
+          {
+            "name": "tenantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "No content"
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TenantsResumeResponse"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/tenants/{tenantId}/shares": {
+      "post": {
+        "operationId": "shares.create",
+        "x-fern-sdk-group-name": ["shares"],
+        "x-fern-sdk-method-name": "create",
+        "x-docs-title": "Create share",
+        "summary": "Create a standing share grant for one document — the no-backend embed credential.",
+        "description": "The returned share id IS the public share token. Mounted only when the deployment can sign (HS256 mode) — exchange mints session JWTs, so grants exist only where minting does.",
         "security": [
           {
             "apiToken": []
@@ -2795,7 +2973,7 @@
             "tenantToken": []
           }
         ],
-        "x-required-scope": ["tokens.issue-doc"],
+        "x-required-scope": ["shares.manage"],
         "parameters": [
           {
             "name": "tenantId",
@@ -2812,7 +2990,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/TokensIssueRequest"
+                "$ref": "#/components/schemas/SharesCreateRequest"
               }
             }
           }
@@ -2823,7 +3001,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TokensIssue200Response"
+                  "$ref": "#/components/schemas/SharesCreate200Response"
                 }
               }
             }
@@ -2833,7 +3011,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TokensIssue400Response"
+                  "$ref": "#/components/schemas/SharesCreate400Response"
                 }
               }
             }
@@ -2843,7 +3021,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TokensIssue403Response"
+                  "$ref": "#/components/schemas/SharesCreate403Response"
                 }
               }
             }
@@ -2853,7 +3031,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TokensIssue404Response"
+                  "$ref": "#/components/schemas/SharesCreate404Response"
                 }
               }
             }
@@ -2869,15 +3047,13 @@
             }
           }
         }
-      }
-    },
-    "/v1/tenants/{tenantId}/tokens/{jti}/revoke": {
-      "post": {
-        "operationId": "tokens.revoke",
-        "x-fern-sdk-group-name": ["tokens"],
-        "x-fern-sdk-method-name": "revoke",
-        "summary": "Revoke a token by jti; live sessions drop on their next heartbeat.",
-        "description": "Mounted only when the deployment enables token revocation.",
+      },
+      "get": {
+        "operationId": "shares.list",
+        "x-fern-sdk-group-name": ["shares"],
+        "x-fern-sdk-method-name": "list",
+        "x-docs-title": "List shares",
+        "summary": "List share grants in the tenant, newest first, cursor-paginated.",
         "security": [
           {
             "apiToken": []
@@ -2886,7 +3062,7 @@
             "tenantToken": []
           }
         ],
-        "x-required-scope": ["tokens.revoke"],
+        "x-required-scope": ["shares.manage"],
         "parameters": [
           {
             "name": "tenantId",
@@ -2898,36 +3074,52 @@
             }
           },
           {
-            "name": "jti",
-            "in": "path",
-            "required": true,
+            "name": "limit",
+            "in": "query",
+            "required": false,
+            "schema": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 200,
+              "default": 100
+            }
+          },
+          {
+            "name": "cursor",
+            "in": "query",
+            "required": false,
             "schema": {
               "type": "string",
-              "minLength": 1,
-              "maxLength": 256
+              "minLength": 1
+            }
+          },
+          {
+            "name": "docId",
+            "in": "query",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
             }
           }
         ],
-        "requestBody": {
-          "required": false,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/TokensRevokeRequest"
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesList200Response"
+                }
               }
             }
-          }
-        },
-        "responses": {
-          "204": {
-            "description": "No content"
           },
           "400": {
             "description": "Bad request",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TokensRevokeResponse"
+                  "$ref": "#/components/schemas/SharesList400Response"
                 }
               }
             }
@@ -2944,136 +3136,1771 @@
           }
         }
       }
-    }
-  },
-  "components": {
-    "securitySchemes": {
-      "apiToken": {
-        "type": "http",
-        "scheme": "bearer",
-        "description": "The deployment's static root credential (CLOUDPDF_API_AUTH_TOKENS), valid on every surface."
-      },
-      "tenantToken": {
-        "type": "http",
-        "scheme": "bearer",
-        "bearerFormat": "JWT",
-        "description": "Delegated tenant JWT, valid only under its own /v1/tenants/{tenantId}/ subtree — the path tenant must equal the token's tenant_id. Doc-scoped viewer tokens are rejected on every admin route."
-      },
-      "docToken": {
-        "type": "http",
-        "scheme": "bearer",
-        "bearerFormat": "JWT",
-        "description": "Doc-scoped JWT, valid only on the /v1/docs/{docId} subtree it names, gated by the capability scopes it carries (each operation's x-required-capability)."
-      }
     },
-    "schemas": {
-      "AdminErrorPayload": {
-        "type": "object",
-        "properties": {
-          "error": {
-            "type": "object",
-            "properties": {
-              "code": {
-                "type": "string"
-              },
-              "message": {
-                "type": "string"
-              }
-            },
-            "required": ["code", "message"],
-            "additionalProperties": false
+    "/v1/tenants/{tenantId}/shares/{shareId}": {
+      "get": {
+        "operationId": "shares.get",
+        "x-fern-sdk-group-name": ["shares"],
+        "x-fern-sdk-method-name": "get",
+        "x-docs-title": "Get share",
+        "summary": "Fetch one share grant.",
+        "security": [
+          {
+            "apiToken": []
+          },
+          {
+            "tenantToken": []
           }
-        },
-        "required": ["error"],
+        ],
+        "x-required-scope": ["shares.manage"],
+        "parameters": [
+          {
+            "name": "tenantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          },
+          {
+            "name": "shareId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^shr_[A-Za-z0-9_-]{24}$"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesGet200Response"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesGet404Response"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      },
+      "patch": {
+        "operationId": "shares.update",
+        "x-fern-sdk-group-name": ["shares"],
+        "x-fern-sdk-method-name": "update",
+        "x-docs-title": "Update share",
+        "summary": "Edit a grant in place — every embedded copy of the token follows the row.",
+        "security": [
+          {
+            "apiToken": []
+          },
+          {
+            "tenantToken": []
+          }
+        ],
+        "x-required-scope": ["shares.manage"],
+        "parameters": [
+          {
+            "name": "tenantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          },
+          {
+            "name": "shareId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^shr_[A-Za-z0-9_-]{24}$"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SharesUpdateRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesUpdate200Response"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesUpdate400Response"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesUpdate404Response"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      },
+      "delete": {
+        "operationId": "shares.delete",
+        "x-fern-sdk-group-name": ["shares"],
+        "x-fern-sdk-method-name": "delete",
+        "x-docs-title": "Revoke share",
+        "summary": "Delete a grant; exchange stops immediately, live sessions lapse at their exp.",
+        "security": [
+          {
+            "apiToken": []
+          },
+          {
+            "tenantToken": []
+          }
+        ],
+        "x-required-scope": ["shares.manage"],
+        "parameters": [
+          {
+            "name": "tenantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          },
+          {
+            "name": "shareId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^shr_[A-Za-z0-9_-]{24}$"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "No content"
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SharesDeleteResponse"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/tenants/{tenantId}/suspend": {
+      "post": {
+        "operationId": "tenants.suspend",
+        "x-fern-sdk-group-name": ["tenants"],
+        "x-fern-sdk-method-name": "suspend",
+        "x-docs-title": "Suspend tenant",
+        "summary": "Fail the tenant closed: refuse every tenant JWT, doc JWT, and share exchange.",
+        "description": "Instantly reversible with resume. The API token is exempt, so a suspended tenant can still be inspected, exported, resumed, or deleted.",
+        "security": [
+          {
+            "apiToken": []
+          }
+        ],
+        "x-required-scope": [],
+        "parameters": [
+          {
+            "name": "tenantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/TenantsSuspendRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "204": {
+            "description": "No content"
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TenantsSuspendResponse"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/tenants/{tenantId}/tokens": {
+      "post": {
+        "operationId": "tokens.issue",
+        "x-fern-sdk-group-name": ["tokens"],
+        "x-fern-sdk-method-name": "issue",
+        "x-docs-title": "Issue token",
+        "summary": "Mint a delegated JWT: a doc token, or (API token only) a tenant token.",
+        "description": "kind \"tenant\" requires the API token — authority mints only downward. Mounted only when the deployment can sign (HS256 mode); asymmetric deployments mint with their own private key.",
+        "security": [
+          {
+            "apiToken": []
+          },
+          {
+            "tenantToken": []
+          }
+        ],
+        "x-required-scope": ["tokens.issue-doc"],
+        "parameters": [
+          {
+            "name": "tenantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/TokensIssueRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TokensIssue200Response"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TokensIssue400Response"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TokensIssue403Response"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TokensIssue404Response"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/tenants/{tenantId}/tokens/{jti}/revoke": {
+      "post": {
+        "operationId": "tokens.revoke",
+        "x-fern-sdk-group-name": ["tokens"],
+        "x-fern-sdk-method-name": "revoke",
+        "x-docs-title": "Revoke token",
+        "summary": "Revoke a token by jti; live sessions drop on their next heartbeat.",
+        "description": "Mounted only when the deployment enables token revocation.",
+        "security": [
+          {
+            "apiToken": []
+          },
+          {
+            "tenantToken": []
+          }
+        ],
+        "x-required-scope": ["tokens.revoke"],
+        "parameters": [
+          {
+            "name": "tenantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          },
+          {
+            "name": "jti",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 256
+            }
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/TokensRevokeRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "204": {
+            "description": "No content"
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TokensRevokeResponse"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/tenants/{tenantId}/usage": {
+      "get": {
+        "operationId": "tenants.usage",
+        "x-fern-sdk-group-name": ["tenants"],
+        "x-fern-sdk-method-name": "usage",
+        "x-docs-title": "Tenant usage",
+        "summary": "Per-tenant usage facts (views, uploads, stored bytes) for one UTC month.",
+        "description": "Facts only — no limits or billing state. Views count share exchanges plus authorized /v1/access grants, deduplicated across the two.",
+        "security": [
+          {
+            "apiToken": []
+          },
+          {
+            "tenantToken": []
+          }
+        ],
+        "x-required-scope": ["docs.read"],
+        "parameters": [
+          {
+            "name": "tenantId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_-]+$"
+            }
+          },
+          {
+            "name": "period",
+            "in": "query",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "pattern": "^\\d{4}-(0[1-9]|1[0-2])$"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TenantsUsage200Response"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TenantsUsage400Response"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TenantsUsage404Response"
+                }
+              }
+            }
+          },
+          "default": {
+            "description": "Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AdminErrorPayload"
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "x-docs-groups": {
+    "deployment": {
+      "title": "Deployment"
+    },
+    "tenants": {
+      "title": "Tenants"
+    },
+    "documents": {
+      "title": "Tenant documents"
+    },
+    "tokens": {
+      "title": "Tokens"
+    },
+    "shares": {
+      "title": "Shares"
+    },
+    "doc": {
+      "title": "Document operations",
+      "slug": "document-operations"
+    },
+    "doc.annotations": {
+      "title": "Annotations"
+    },
+    "doc.forms": {
+      "title": "Forms"
+    },
+    "doc.metadata": {
+      "title": "Metadata"
+    },
+    "doc.pages": {
+      "title": "Pages"
+    },
+    "doc.redactions": {
+      "title": "Redactions"
+    }
+  },
+  "components": {
+    "securitySchemes": {
+      "apiToken": {
+        "type": "http",
+        "scheme": "bearer",
+        "x-docs-title": "API token",
+        "description": "The deployment's static root credential (CLOUDPDF_API_AUTH_TOKENS), valid on every surface."
+      },
+      "tenantToken": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "JWT",
+        "x-docs-title": "Tenant token",
+        "description": "Delegated tenant JWT, valid only under its own /v1/tenants/{tenantId}/ subtree — the path tenant must equal the token's tenant_id. Doc-scoped viewer tokens are rejected on every admin route."
+      },
+      "docToken": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "JWT",
+        "x-docs-title": "Document token",
+        "description": "Doc-scoped JWT, valid only on the /v1/docs/{docId} subtree it names, gated by the capability scopes it carries (each operation's x-required-capability)."
+      }
+    },
+    "schemas": {
+      "AdminErrorPayload": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "EngineErrorPayload": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "enum": ["EngineError"]
+          },
+          "code": {
+            "type": "string",
+            "enum": [
+              "Unknown",
+              "InvalidArg",
+              "DocNotOpen",
+              "DocOpenFailed",
+              "DocPasswordRequired",
+              "DocPasswordIncorrect",
+              "Aborted",
+              "Network",
+              "Unauthenticated",
+              "Forbidden",
+              "NotFound",
+              "WireFormat",
+              "RuntimeUnavailable",
+              "InvalidReference",
+              "WeakAnnotationSessionConflict",
+              "LayerVersionConflict",
+              "NotImplemented",
+              "MalformedPdf"
+            ]
+          },
+          "message": {
+            "type": "string"
+          },
+          "details": {
+            "type": "object",
+            "additionalProperties": {}
+          }
+        },
+        "required": ["name", "code", "message"],
+        "additionalProperties": false
+      },
+      "TenantsCreateRequest": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9_-]+$"
+          },
+          "name": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256
+          }
+        },
+        "required": ["id"],
+        "additionalProperties": false
+      },
+      "TenantsCreate200Response": {
+        "type": "object",
+        "properties": {
+          "tenant": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "name": {
+                "type": "string"
+              },
+              "autoProvisioned": {
+                "type": "boolean"
+              },
+              "status": {
+                "type": "string",
+                "enum": ["active", "suspended"]
+              },
+              "createdAt": {
+                "type": "number"
+              }
+            },
+            "required": ["id", "name", "autoProvisioned", "createdAt"],
+            "additionalProperties": false
+          },
+          "created": {
+            "type": "boolean"
+          }
+        },
+        "required": ["tenant", "created"],
+        "additionalProperties": false
+      },
+      "TenantsCreate400Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "TenantsList200Response": {
+        "type": "object",
+        "properties": {
+          "tenants": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "name": {
+                  "type": "string"
+                },
+                "autoProvisioned": {
+                  "type": "boolean"
+                },
+                "status": {
+                  "type": "string",
+                  "enum": ["active", "suspended"]
+                },
+                "createdAt": {
+                  "type": "number"
+                }
+              },
+              "required": ["id", "name", "autoProvisioned", "createdAt"],
+              "additionalProperties": false
+            }
+          },
+          "nextCursor": {
+            "type": "string",
+            "nullable": true
+          }
+        },
+        "required": ["tenants"],
+        "additionalProperties": false
+      },
+      "TenantsList400Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "TenantsGet200Response": {
+        "type": "object",
+        "properties": {
+          "tenant": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "name": {
+                "type": "string"
+              },
+              "autoProvisioned": {
+                "type": "boolean"
+              },
+              "status": {
+                "type": "string",
+                "enum": ["active", "suspended"]
+              },
+              "createdAt": {
+                "type": "number"
+              }
+            },
+            "required": ["id", "name", "autoProvisioned", "createdAt"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["tenant"],
+        "additionalProperties": false
+      },
+      "TenantsGet404Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "TenantsDeleteResponse": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsInitRequest": {
+        "type": "object",
+        "properties": {
+          "contentLength": {
+            "type": "number",
+            "minimum": 1
+          },
+          "contentSha256": {
+            "type": "string",
+            "pattern": "^[0-9a-f]{64}$"
+          },
+          "metadata": {
+            "type": "object",
+            "additionalProperties": {}
+          },
+          "idempotencyKey": {
+            "type": "string"
+          },
+          "dedupMode": {
+            "type": "string",
+            "enum": ["always-create", "reuse-existing"]
+          },
+          "docId": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9_-]+$"
+          },
+          "uploadTtlSec": {
+            "type": "number",
+            "minimum": 60,
+            "maximum": 3600
+          },
+          "uploadPreference": {
+            "type": "string",
+            "enum": ["auto", "presigned", "proxy"]
+          }
+        },
+        "required": ["contentLength", "contentSha256"],
+        "additionalProperties": false
+      },
+      "DocumentsInit200Response": {
+        "anyOf": [
+          {
+            "type": "object",
+            "properties": {
+              "tag": {
+                "type": "string",
+                "enum": ["created"]
+              },
+              "document": {
+                "type": "object",
+                "properties": {
+                  "id": {
+                    "type": "string"
+                  },
+                  "tenantId": {
+                    "type": "string"
+                  },
+                  "state": {
+                    "type": "string",
+                    "enum": ["pending", "ready", "failed", "deleting"]
+                  },
+                  "baseSha": {
+                    "type": "string",
+                    "nullable": true
+                  },
+                  "storageSizeBytes": {
+                    "type": "number",
+                    "nullable": true
+                  },
+                  "metadata": {
+                    "type": "object",
+                    "additionalProperties": {},
+                    "nullable": true
+                  },
+                  "idempotencyKey": {
+                    "type": "string",
+                    "nullable": true
+                  },
+                  "failureReason": {
+                    "type": "string",
+                    "nullable": true
+                  },
+                  "thumbnailState": {
+                    "type": "string",
+                    "enum": ["pending", "ready", "locked", "failed"]
+                  },
+                  "thumbnailUrl": {
+                    "type": "string",
+                    "nullable": true
+                  },
+                  "createdAt": {
+                    "type": "number"
+                  },
+                  "updatedAt": {
+                    "type": "number"
+                  },
+                  "createdBy": {
+                    "type": "string",
+                    "nullable": true
+                  }
+                },
+                "required": [
+                  "id",
+                  "tenantId",
+                  "state",
+                  "baseSha",
+                  "storageSizeBytes",
+                  "metadata",
+                  "idempotencyKey",
+                  "failureReason",
+                  "createdAt",
+                  "updatedAt",
+                  "createdBy"
+                ],
+                "additionalProperties": false
+              },
+              "upload": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "enum": ["presigned"]
+                      },
+                      "presigned": {
+                        "type": "object",
+                        "properties": {
+                          "url": {
+                            "type": "string"
+                          },
+                          "headers": {
+                            "type": "object",
+                            "additionalProperties": {
+                              "type": "string"
+                            }
+                          },
+                          "method": {
+                            "type": "string",
+                            "enum": ["PUT"]
+                          },
+                          "expiresAt": {
+                            "type": "number"
+                          }
+                        },
+                        "required": ["url", "headers", "method", "expiresAt"],
+                        "additionalProperties": false
+                      },
+                      "key": {
+                        "type": "string"
+                      }
+                    },
+                    "required": ["kind", "presigned", "key"],
+                    "additionalProperties": false
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "kind": {
+                        "type": "string",
+                        "enum": ["proxy"]
+                      },
+                      "url": {
+                        "type": "string"
+                      },
+                      "key": {
+                        "type": "string"
+                      }
+                    },
+                    "required": ["kind", "url", "key"],
+                    "additionalProperties": false
+                  }
+                ]
+              }
+            },
+            "required": ["tag", "document", "upload"],
+            "additionalProperties": false
+          },
+          {
+            "type": "object",
+            "properties": {
+              "tag": {
+                "type": "string",
+                "enum": ["resumed"]
+              },
+              "document": {
+                "$ref": "#/components/schemas/DocumentsInit200Response/anyOf/0/properties/document"
+              },
+              "upload": {
+                "$ref": "#/components/schemas/DocumentsInit200Response/anyOf/0/properties/upload"
+              }
+            },
+            "required": ["tag", "document", "upload"],
+            "additionalProperties": false
+          },
+          {
+            "type": "object",
+            "properties": {
+              "tag": {
+                "type": "string",
+                "enum": ["deduped"]
+              },
+              "document": {
+                "$ref": "#/components/schemas/DocumentsInit200Response/anyOf/0/properties/document"
+              }
+            },
+            "required": ["tag", "document"],
+            "additionalProperties": false
+          }
+        ]
+      },
+      "DocumentsInit400Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsCommitRequest": {
+        "type": "object",
+        "properties": {
+          "sha256": {
+            "type": "string",
+            "pattern": "^[0-9a-f]{64}$"
+          }
+        },
+        "required": ["sha256"],
+        "additionalProperties": false
+      },
+      "DocumentsCommit200Response": {
+        "type": "object",
+        "properties": {
+          "document": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "tenantId": {
+                "type": "string"
+              },
+              "state": {
+                "type": "string",
+                "enum": ["pending", "ready", "failed", "deleting"]
+              },
+              "baseSha": {
+                "type": "string",
+                "nullable": true
+              },
+              "storageSizeBytes": {
+                "type": "number",
+                "nullable": true
+              },
+              "metadata": {
+                "type": "object",
+                "additionalProperties": {},
+                "nullable": true
+              },
+              "idempotencyKey": {
+                "type": "string",
+                "nullable": true
+              },
+              "failureReason": {
+                "type": "string",
+                "nullable": true
+              },
+              "thumbnailState": {
+                "type": "string",
+                "enum": ["pending", "ready", "locked", "failed"]
+              },
+              "thumbnailUrl": {
+                "type": "string",
+                "nullable": true
+              },
+              "createdAt": {
+                "type": "number"
+              },
+              "updatedAt": {
+                "type": "number"
+              },
+              "createdBy": {
+                "type": "string",
+                "nullable": true
+              }
+            },
+            "required": [
+              "id",
+              "tenantId",
+              "state",
+              "baseSha",
+              "storageSizeBytes",
+              "metadata",
+              "idempotencyKey",
+              "failureReason",
+              "createdAt",
+              "updatedAt",
+              "createdBy"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "required": ["document"],
+        "additionalProperties": false
+      },
+      "DocumentsCommit400Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsCommit404Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsUploadProxy200Response": {
+        "type": "object",
+        "properties": {
+          "sha256": {
+            "type": "string",
+            "pattern": "^[0-9a-f]{64}$"
+          }
+        },
+        "required": ["sha256"],
+        "additionalProperties": false
+      },
+      "DocumentsUploadProxy400Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsUploadProxy409Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsList200Response": {
+        "type": "object",
+        "properties": {
+          "documents": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string"
+                },
+                "tenantId": {
+                  "type": "string"
+                },
+                "state": {
+                  "type": "string",
+                  "enum": ["pending", "ready", "failed", "deleting"]
+                },
+                "baseSha": {
+                  "type": "string",
+                  "nullable": true
+                },
+                "storageSizeBytes": {
+                  "type": "number",
+                  "nullable": true
+                },
+                "metadata": {
+                  "type": "object",
+                  "additionalProperties": {},
+                  "nullable": true
+                },
+                "idempotencyKey": {
+                  "type": "string",
+                  "nullable": true
+                },
+                "failureReason": {
+                  "type": "string",
+                  "nullable": true
+                },
+                "thumbnailState": {
+                  "type": "string",
+                  "enum": ["pending", "ready", "locked", "failed"]
+                },
+                "thumbnailUrl": {
+                  "type": "string",
+                  "nullable": true
+                },
+                "createdAt": {
+                  "type": "number"
+                },
+                "updatedAt": {
+                  "type": "number"
+                },
+                "createdBy": {
+                  "type": "string",
+                  "nullable": true
+                }
+              },
+              "required": [
+                "id",
+                "tenantId",
+                "state",
+                "baseSha",
+                "storageSizeBytes",
+                "metadata",
+                "idempotencyKey",
+                "failureReason",
+                "createdAt",
+                "updatedAt",
+                "createdBy"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "nextCursor": {
+            "type": "string",
+            "nullable": true
+          }
+        },
+        "required": ["documents"],
+        "additionalProperties": false
+      },
+      "DocumentsList400Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsGet200Response": {
+        "type": "object",
+        "properties": {
+          "document": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "tenantId": {
+                "type": "string"
+              },
+              "state": {
+                "type": "string",
+                "enum": ["pending", "ready", "failed", "deleting"]
+              },
+              "baseSha": {
+                "type": "string",
+                "nullable": true
+              },
+              "storageSizeBytes": {
+                "type": "number",
+                "nullable": true
+              },
+              "metadata": {
+                "type": "object",
+                "additionalProperties": {},
+                "nullable": true
+              },
+              "idempotencyKey": {
+                "type": "string",
+                "nullable": true
+              },
+              "failureReason": {
+                "type": "string",
+                "nullable": true
+              },
+              "thumbnailState": {
+                "type": "string",
+                "enum": ["pending", "ready", "locked", "failed"]
+              },
+              "thumbnailUrl": {
+                "type": "string",
+                "nullable": true
+              },
+              "createdAt": {
+                "type": "number"
+              },
+              "updatedAt": {
+                "type": "number"
+              },
+              "createdBy": {
+                "type": "string",
+                "nullable": true
+              }
+            },
+            "required": [
+              "id",
+              "tenantId",
+              "state",
+              "baseSha",
+              "storageSizeBytes",
+              "metadata",
+              "idempotencyKey",
+              "failureReason",
+              "createdAt",
+              "updatedAt",
+              "createdBy"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "required": ["document"],
+        "additionalProperties": false
+      },
+      "DocumentsGet403Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsGet404Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsDownload403Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsDownload404Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsDelete403Response": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
         "additionalProperties": false
       },
-      "EngineErrorPayload": {
+      "DocumentsDelete404Response": {
         "type": "object",
         "properties": {
-          "name": {
-            "type": "string",
-            "enum": ["EngineError"]
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DocumentsThumbnailResponse": {
+        "type": "object",
+        "properties": {
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              },
+              "state": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message", "state"],
+            "additionalProperties": false
+          }
+        },
+        "required": ["error"],
+        "additionalProperties": false
+      },
+      "DeploymentLicenseStatusResponse": {
+        "type": "object",
+        "properties": {
+          "license": {},
+          "reporting": {
+            "nullable": true
           },
-          "code": {
-            "type": "string",
-            "enum": [
-              "Unknown",
-              "InvalidArg",
-              "DocNotOpen",
-              "DocOpenFailed",
-              "DocPasswordRequired",
-              "DocPasswordIncorrect",
-              "Aborted",
-              "Network",
-              "Unauthenticated",
-              "Forbidden",
-              "NotFound",
-              "WireFormat",
-              "RuntimeUnavailable",
-              "InvalidReference",
-              "WeakAnnotationSessionConflict",
-              "LayerVersionConflict",
-              "NotImplemented",
-              "MalformedPdf"
-            ]
+          "usage": {
+            "nullable": true
+          }
+        },
+        "additionalProperties": false
+      },
+      "TokensIssueRequest": {
+        "anyOf": [
+          {
+            "type": "object",
+            "properties": {
+              "kind": {
+                "type": "string",
+                "enum": ["doc"]
+              },
+              "sub": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256
+              },
+              "docId": {
+                "type": "string",
+                "pattern": "^[A-Za-z0-9_-]+$"
+              },
+              "layerName": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256
+              },
+              "scope": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1,
+                  "maxLength": 128
+                },
+                "minItems": 1,
+                "maxItems": 64
+              },
+              "userId": {
+                "type": "string",
+                "maxLength": 256
+              },
+              "displayName": {
+                "type": "string",
+                "maxLength": 256
+              },
+              "groupId": {
+                "type": "string",
+                "maxLength": 256
+              },
+              "groups": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "maxLength": 256
+                },
+                "maxItems": 64
+              },
+              "origins": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "maxLength": 262,
+                  "pattern": "^https?:\\/\\/(\\*\\.)?[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*(:\\d{1,5})?$"
+                },
+                "minItems": 1,
+                "maxItems": 32
+              },
+              "expiresIn": {
+                "type": "integer",
+                "minimum": 60,
+                "maximum": 7776000
+              }
+            },
+            "required": ["kind", "sub", "docId", "scope", "expiresIn"],
+            "additionalProperties": false
           },
-          "message": {
+          {
+            "type": "object",
+            "properties": {
+              "kind": {
+                "type": "string",
+                "enum": ["tenant"]
+              },
+              "sub": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256
+              },
+              "scope": {
+                "type": "array",
+                "items": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "enum": ["*"]
+                    },
+                    {
+                      "type": "string",
+                      "enum": [
+                        "docs.create",
+                        "docs.read",
+                        "docs.delete",
+                        "tokens.issue-doc",
+                        "tokens.revoke",
+                        "shares.manage"
+                      ]
+                    }
+                  ]
+                },
+                "minItems": 1,
+                "maxItems": 16
+              },
+              "expiresIn": {
+                "type": "integer",
+                "minimum": 60,
+                "maximum": 7776000
+              }
+            },
+            "required": ["kind", "sub", "scope", "expiresIn"],
+            "additionalProperties": false
+          }
+        ]
+      },
+      "TokensIssue200Response": {
+        "type": "object",
+        "properties": {
+          "token": {
             "type": "string"
           },
-          "details": {
-            "type": "object",
-            "additionalProperties": {}
+          "jti": {
+            "type": "string"
+          },
+          "expiresAt": {
+            "type": "number"
           }
         },
-        "required": ["name", "code", "message"],
+        "required": ["token", "jti", "expiresAt"],
         "additionalProperties": false
       },
-      "TenantsCreateRequest": {
+      "TokensIssue400Response": {
         "type": "object",
         "properties": {
-          "id": {
-            "type": "string",
-            "pattern": "^[A-Za-z0-9_-]+$"
-          },
-          "name": {
-            "type": "string",
-            "minLength": 1,
-            "maxLength": 256
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
           }
         },
-        "required": ["id"],
+        "required": ["error"],
         "additionalProperties": false
       },
-      "TenantsCreate200Response": {
+      "TokensIssue403Response": {
         "type": "object",
         "properties": {
-          "tenant": {
+          "error": {
             "type": "object",
             "properties": {
-              "id": {
+              "code": {
                 "type": "string"
               },
-              "name": {
+              "message": {
                 "type": "string"
-              },
-              "autoProvisioned": {
-                "type": "boolean"
-              },
-              "createdAt": {
-                "type": "number"
               }
             },
-            "required": ["id", "name", "autoProvisioned", "createdAt"],
+            "required": ["code", "message"],
             "additionalProperties": false
-          },
-          "created": {
-            "type": "boolean"
           }
         },
-        "required": ["tenant", "created"],
+        "required": ["error"],
         "additionalProperties": false
       },
-      "TenantsCreate400Response": {
+      "TokensIssue404Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3093,40 +4920,22 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "TenantsList200Response": {
+      "TokensRevokeRequest": {
         "type": "object",
         "properties": {
-          "tenants": {
-            "type": "array",
-            "items": {
-              "type": "object",
-              "properties": {
-                "id": {
-                  "type": "string"
-                },
-                "name": {
-                  "type": "string"
-                },
-                "autoProvisioned": {
-                  "type": "boolean"
-                },
-                "createdAt": {
-                  "type": "number"
-                }
-              },
-              "required": ["id", "name", "autoProvisioned", "createdAt"],
-              "additionalProperties": false
-            }
-          },
-          "nextCursor": {
+          "reason": {
             "type": "string",
-            "nullable": true
+            "maxLength": 1024
+          },
+          "expiresAtSeconds": {
+            "type": "integer",
+            "exclusiveMinimum": true,
+            "minimum": 0
           }
         },
-        "required": ["tenants"],
         "additionalProperties": false
       },
-      "TenantsList400Response": {
+      "TokensRevokeResponse": {
         "type": "object",
         "properties": {
           "error": {
@@ -3146,33 +4955,39 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "TenantsGet200Response": {
+      "TenantsUsage200Response": {
         "type": "object",
         "properties": {
-          "tenant": {
+          "tenantId": {
+            "type": "string"
+          },
+          "periodStart": {
+            "type": "string"
+          },
+          "periodEnd": {
+            "type": "string"
+          },
+          "metrics": {
             "type": "object",
             "properties": {
-              "id": {
-                "type": "string"
-              },
-              "name": {
-                "type": "string"
+              "pdf.views": {
+                "type": "number"
               },
-              "autoProvisioned": {
-                "type": "boolean"
+              "pdf.uploads": {
+                "type": "number"
               },
-              "createdAt": {
+              "storage.bytes": {
                 "type": "number"
               }
             },
-            "required": ["id", "name", "autoProvisioned", "createdAt"],
+            "required": ["pdf.views", "pdf.uploads", "storage.bytes"],
             "additionalProperties": false
           }
         },
-        "required": ["tenant"],
+        "required": ["tenantId", "periodStart", "periodEnd", "metrics"],
         "additionalProperties": false
       },
-      "TenantsGet404Response": {
+      "TenantsUsage400Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3192,7 +5007,7 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "TenantsDeleteResponse": {
+      "TenantsUsage404Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3212,214 +5027,37 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsInitRequest": {
+      "TenantsSuspendRequest": {
         "type": "object",
         "properties": {
-          "contentLength": {
-            "type": "number",
-            "minimum": 1
-          },
-          "contentSha256": {
-            "type": "string",
-            "pattern": "^[0-9a-f]{64}$"
-          },
-          "metadata": {
-            "type": "object",
-            "additionalProperties": {}
-          },
-          "idempotencyKey": {
-            "type": "string"
-          },
-          "dedupMode": {
-            "type": "string",
-            "enum": ["always-create", "reuse-existing"]
-          },
-          "docId": {
+          "reason": {
             "type": "string",
-            "pattern": "^[A-Za-z0-9_-]+$"
-          },
-          "uploadTtlSec": {
-            "type": "number",
-            "minimum": 60,
-            "maximum": 3600
+            "maxLength": 1024
           }
         },
-        "required": ["contentLength", "contentSha256"],
         "additionalProperties": false
       },
-      "DocumentsInit200Response": {
-        "anyOf": [
-          {
-            "type": "object",
-            "properties": {
-              "tag": {
-                "type": "string",
-                "enum": ["created"]
-              },
-              "document": {
-                "type": "object",
-                "properties": {
-                  "id": {
-                    "type": "string"
-                  },
-                  "tenantId": {
-                    "type": "string"
-                  },
-                  "state": {
-                    "type": "string",
-                    "enum": ["pending", "ready", "failed", "deleting"]
-                  },
-                  "baseSha": {
-                    "type": "string",
-                    "nullable": true
-                  },
-                  "storageSizeBytes": {
-                    "type": "number",
-                    "nullable": true
-                  },
-                  "metadata": {
-                    "type": "object",
-                    "additionalProperties": {},
-                    "nullable": true
-                  },
-                  "idempotencyKey": {
-                    "type": "string",
-                    "nullable": true
-                  },
-                  "failureReason": {
-                    "type": "string",
-                    "nullable": true
-                  },
-                  "thumbnailState": {
-                    "type": "string",
-                    "enum": ["pending", "ready", "locked", "failed"]
-                  },
-                  "thumbnailUrl": {
-                    "type": "string",
-                    "nullable": true
-                  },
-                  "createdAt": {
-                    "type": "number"
-                  },
-                  "updatedAt": {
-                    "type": "number"
-                  },
-                  "createdBy": {
-                    "type": "string",
-                    "nullable": true
-                  }
-                },
-                "required": [
-                  "id",
-                  "tenantId",
-                  "state",
-                  "baseSha",
-                  "storageSizeBytes",
-                  "metadata",
-                  "idempotencyKey",
-                  "failureReason",
-                  "createdAt",
-                  "updatedAt",
-                  "createdBy"
-                ],
-                "additionalProperties": false
-              },
-              "upload": {
-                "anyOf": [
-                  {
-                    "type": "object",
-                    "properties": {
-                      "kind": {
-                        "type": "string",
-                        "enum": ["presigned"]
-                      },
-                      "presigned": {
-                        "type": "object",
-                        "properties": {
-                          "url": {
-                            "type": "string"
-                          },
-                          "headers": {
-                            "type": "object",
-                            "additionalProperties": {
-                              "type": "string"
-                            }
-                          },
-                          "method": {
-                            "type": "string",
-                            "enum": ["PUT"]
-                          },
-                          "expiresAt": {
-                            "type": "number"
-                          }
-                        },
-                        "required": ["url", "headers", "method", "expiresAt"],
-                        "additionalProperties": false
-                      },
-                      "key": {
-                        "type": "string"
-                      }
-                    },
-                    "required": ["kind", "presigned", "key"],
-                    "additionalProperties": false
-                  },
-                  {
-                    "type": "object",
-                    "properties": {
-                      "kind": {
-                        "type": "string",
-                        "enum": ["direct"]
-                      },
-                      "url": {
-                        "type": "string"
-                      },
-                      "key": {
-                        "type": "string"
-                      }
-                    },
-                    "required": ["kind", "url", "key"],
-                    "additionalProperties": false
-                  }
-                ]
-              }
-            },
-            "required": ["tag", "document", "upload"],
-            "additionalProperties": false
-          },
-          {
-            "type": "object",
-            "properties": {
-              "tag": {
-                "type": "string",
-                "enum": ["resumed"]
-              },
-              "document": {
-                "$ref": "#/components/schemas/DocumentsInit200Response/anyOf/0/properties/document"
-              },
-              "upload": {
-                "$ref": "#/components/schemas/DocumentsInit200Response/anyOf/0/properties/upload"
-              }
-            },
-            "required": ["tag", "document", "upload"],
-            "additionalProperties": false
-          },
-          {
+      "TenantsSuspendResponse": {
+        "type": "object",
+        "properties": {
+          "error": {
             "type": "object",
             "properties": {
-              "tag": {
-                "type": "string",
-                "enum": ["deduped"]
-              },
-              "document": {
-                "$ref": "#/components/schemas/DocumentsInit200Response/anyOf/0/properties/document"
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
               }
             },
-            "required": ["tag", "document"],
+            "required": ["code", "message"],
             "additionalProperties": false
           }
-        ]
+        },
+        "required": ["error"],
+        "additionalProperties": false
       },
-      "DocumentsInit400Response": {
+      "TenantsResumeResponse": {
         "type": "object",
         "properties": {
           "error": {
@@ -3439,21 +5077,61 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsCommitRequest": {
+      "SharesCreateRequest": {
         "type": "object",
         "properties": {
-          "sha256": {
+          "docId": {
             "type": "string",
-            "pattern": "^[0-9a-f]{64}$"
+            "pattern": "^[A-Za-z0-9_-]+$"
+          },
+          "layerName": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256
+          },
+          "scope": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 128
+            },
+            "minItems": 1,
+            "maxItems": 64
+          },
+          "origins": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "maxLength": 262,
+              "pattern": "^https?:\\/\\/(\\*\\.)?[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*(:\\d{1,5})?$"
+            },
+            "minItems": 1,
+            "maxItems": 32
+          },
+          "password": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1024
+          },
+          "sessionTtlSeconds": {
+            "type": "integer",
+            "minimum": 60,
+            "maximum": 3600
+          },
+          "expiresAt": {
+            "type": "integer",
+            "exclusiveMinimum": true,
+            "minimum": 0
           }
         },
-        "required": ["sha256"],
+        "required": ["docId", "scope"],
         "additionalProperties": false
       },
-      "DocumentsCommit200Response": {
+      "SharesCreate200Response": {
         "type": "object",
         "properties": {
-          "document": {
+          "share": {
             "type": "object",
             "properties": {
               "id": {
@@ -3462,70 +5140,79 @@
               "tenantId": {
                 "type": "string"
               },
-              "state": {
-                "type": "string",
-                "enum": ["pending", "ready", "failed", "deleting"]
+              "docId": {
+                "type": "string"
               },
-              "baseSha": {
-                "type": "string",
-                "nullable": true
+              "layerName": {
+                "type": "string"
               },
-              "storageSizeBytes": {
-                "type": "number",
-                "nullable": true
+              "scope": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
               },
-              "metadata": {
-                "type": "object",
-                "additionalProperties": {},
+              "origins": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
                 "nullable": true
               },
-              "idempotencyKey": {
-                "type": "string",
-                "nullable": true
+              "passwordProtected": {
+                "type": "boolean"
               },
-              "failureReason": {
-                "type": "string",
+              "sessionTtlSeconds": {
+                "type": "number"
+              },
+              "disabled": {
+                "type": "boolean"
+              },
+              "expiresAt": {
+                "type": "number",
                 "nullable": true
               },
-              "thumbnailState": {
-                "type": "string",
-                "enum": ["pending", "ready", "locked", "failed"]
+              "exchangeCount": {
+                "type": "number"
               },
-              "thumbnailUrl": {
-                "type": "string",
+              "lastExchangedAt": {
+                "type": "number",
                 "nullable": true
               },
+              "createdBy": {
+                "type": "string"
+              },
               "createdAt": {
                 "type": "number"
               },
               "updatedAt": {
                 "type": "number"
-              },
-              "createdBy": {
-                "type": "string",
-                "nullable": true
               }
             },
             "required": [
               "id",
               "tenantId",
-              "state",
-              "baseSha",
-              "storageSizeBytes",
-              "metadata",
-              "idempotencyKey",
-              "failureReason",
+              "docId",
+              "layerName",
+              "scope",
+              "origins",
+              "passwordProtected",
+              "sessionTtlSeconds",
+              "disabled",
+              "expiresAt",
+              "exchangeCount",
+              "lastExchangedAt",
+              "createdBy",
               "createdAt",
-              "updatedAt",
-              "createdBy"
+              "updatedAt"
             ],
             "additionalProperties": false
           }
         },
-        "required": ["document"],
+        "required": ["share"],
         "additionalProperties": false
       },
-      "DocumentsCommit400Response": {
+      "SharesCreate400Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3545,7 +5232,7 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsCommit404Response": {
+      "SharesCreate403Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3565,18 +5252,7 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsUploadDirect200Response": {
-        "type": "object",
-        "properties": {
-          "sha256": {
-            "type": "string",
-            "pattern": "^[0-9a-f]{64}$"
-          }
-        },
-        "required": ["sha256"],
-        "additionalProperties": false
-      },
-      "DocumentsUploadDirect400Response": {
+      "SharesCreate404Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3596,10 +5272,10 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsList200Response": {
+      "SharesList200Response": {
         "type": "object",
         "properties": {
-          "documents": {
+          "shares": {
             "type": "array",
             "items": {
               "type": "object",
@@ -3610,62 +5286,71 @@
                 "tenantId": {
                   "type": "string"
                 },
-                "state": {
-                  "type": "string",
-                  "enum": ["pending", "ready", "failed", "deleting"]
+                "docId": {
+                  "type": "string"
                 },
-                "baseSha": {
-                  "type": "string",
-                  "nullable": true
+                "layerName": {
+                  "type": "string"
                 },
-                "storageSizeBytes": {
-                  "type": "number",
-                  "nullable": true
+                "scope": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
                 },
-                "metadata": {
-                  "type": "object",
-                  "additionalProperties": {},
+                "origins": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
                   "nullable": true
                 },
-                "idempotencyKey": {
-                  "type": "string",
-                  "nullable": true
+                "passwordProtected": {
+                  "type": "boolean"
                 },
-                "failureReason": {
-                  "type": "string",
+                "sessionTtlSeconds": {
+                  "type": "number"
+                },
+                "disabled": {
+                  "type": "boolean"
+                },
+                "expiresAt": {
+                  "type": "number",
                   "nullable": true
                 },
-                "thumbnailState": {
-                  "type": "string",
-                  "enum": ["pending", "ready", "locked", "failed"]
+                "exchangeCount": {
+                  "type": "number"
                 },
-                "thumbnailUrl": {
-                  "type": "string",
+                "lastExchangedAt": {
+                  "type": "number",
                   "nullable": true
                 },
+                "createdBy": {
+                  "type": "string"
+                },
                 "createdAt": {
                   "type": "number"
                 },
                 "updatedAt": {
                   "type": "number"
-                },
-                "createdBy": {
-                  "type": "string",
-                  "nullable": true
                 }
               },
               "required": [
                 "id",
                 "tenantId",
-                "state",
-                "baseSha",
-                "storageSizeBytes",
-                "metadata",
-                "idempotencyKey",
-                "failureReason",
+                "docId",
+                "layerName",
+                "scope",
+                "origins",
+                "passwordProtected",
+                "sessionTtlSeconds",
+                "disabled",
+                "expiresAt",
+                "exchangeCount",
+                "lastExchangedAt",
+                "createdBy",
                 "createdAt",
-                "updatedAt",
-                "createdBy"
+                "updatedAt"
               ],
               "additionalProperties": false
             }
@@ -3675,10 +5360,10 @@
             "nullable": true
           }
         },
-        "required": ["documents"],
+        "required": ["shares"],
         "additionalProperties": false
       },
-      "DocumentsList400Response": {
+      "SharesList400Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3698,10 +5383,10 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsGet200Response": {
+      "SharesGet200Response": {
         "type": "object",
         "properties": {
-          "document": {
+          "share": {
             "type": "object",
             "properties": {
               "id": {
@@ -3710,90 +5395,79 @@
               "tenantId": {
                 "type": "string"
               },
-              "state": {
-                "type": "string",
-                "enum": ["pending", "ready", "failed", "deleting"]
+              "docId": {
+                "type": "string"
               },
-              "baseSha": {
-                "type": "string",
-                "nullable": true
+              "layerName": {
+                "type": "string"
               },
-              "storageSizeBytes": {
-                "type": "number",
-                "nullable": true
+              "scope": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
               },
-              "metadata": {
-                "type": "object",
-                "additionalProperties": {},
+              "origins": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
                 "nullable": true
               },
-              "idempotencyKey": {
-                "type": "string",
-                "nullable": true
+              "passwordProtected": {
+                "type": "boolean"
               },
-              "failureReason": {
-                "type": "string",
+              "sessionTtlSeconds": {
+                "type": "number"
+              },
+              "disabled": {
+                "type": "boolean"
+              },
+              "expiresAt": {
+                "type": "number",
                 "nullable": true
               },
-              "thumbnailState": {
-                "type": "string",
-                "enum": ["pending", "ready", "locked", "failed"]
+              "exchangeCount": {
+                "type": "number"
               },
-              "thumbnailUrl": {
-                "type": "string",
+              "lastExchangedAt": {
+                "type": "number",
                 "nullable": true
               },
+              "createdBy": {
+                "type": "string"
+              },
               "createdAt": {
                 "type": "number"
               },
               "updatedAt": {
                 "type": "number"
-              },
-              "createdBy": {
-                "type": "string",
-                "nullable": true
               }
             },
             "required": [
-              "id",
-              "tenantId",
-              "state",
-              "baseSha",
-              "storageSizeBytes",
-              "metadata",
-              "idempotencyKey",
-              "failureReason",
-              "createdAt",
-              "updatedAt",
-              "createdBy"
-            ],
-            "additionalProperties": false
-          }
-        },
-        "required": ["document"],
-        "additionalProperties": false
-      },
-      "DocumentsGet403Response": {
-        "type": "object",
-        "properties": {
-          "error": {
-            "type": "object",
-            "properties": {
-              "code": {
-                "type": "string"
-              },
-              "message": {
-                "type": "string"
-              }
-            },
-            "required": ["code", "message"],
+              "id",
+              "tenantId",
+              "docId",
+              "layerName",
+              "scope",
+              "origins",
+              "passwordProtected",
+              "sessionTtlSeconds",
+              "disabled",
+              "expiresAt",
+              "exchangeCount",
+              "lastExchangedAt",
+              "createdBy",
+              "createdAt",
+              "updatedAt"
+            ],
             "additionalProperties": false
           }
         },
-        "required": ["error"],
+        "required": ["share"],
         "additionalProperties": false
       },
-      "DocumentsGet404Response": {
+      "SharesGet404Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3813,47 +5487,138 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsDownload403Response": {
+      "SharesUpdateRequest": {
         "type": "object",
         "properties": {
-          "error": {
-            "type": "object",
-            "properties": {
-              "code": {
-                "type": "string"
-              },
-              "message": {
-                "type": "string"
-              }
+          "scope": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 128
             },
-            "required": ["code", "message"],
-            "additionalProperties": false
+            "minItems": 1,
+            "maxItems": 64
+          },
+          "origins": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "maxLength": 262,
+              "pattern": "^https?:\\/\\/(\\*\\.)?[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*(:\\d{1,5})?$"
+            },
+            "minItems": 1,
+            "maxItems": 32,
+            "nullable": true
+          },
+          "password": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1024,
+            "nullable": true
+          },
+          "sessionTtlSeconds": {
+            "type": "integer",
+            "minimum": 60,
+            "maximum": 3600
+          },
+          "disabled": {
+            "type": "boolean"
+          },
+          "expiresAt": {
+            "type": "integer",
+            "exclusiveMinimum": true,
+            "minimum": 0,
+            "nullable": true
           }
         },
-        "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsDownload404Response": {
+      "SharesUpdate200Response": {
         "type": "object",
         "properties": {
-          "error": {
+          "share": {
             "type": "object",
             "properties": {
-              "code": {
+              "id": {
                 "type": "string"
               },
-              "message": {
+              "tenantId": {
+                "type": "string"
+              },
+              "docId": {
+                "type": "string"
+              },
+              "layerName": {
+                "type": "string"
+              },
+              "scope": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "origins": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "nullable": true
+              },
+              "passwordProtected": {
+                "type": "boolean"
+              },
+              "sessionTtlSeconds": {
+                "type": "number"
+              },
+              "disabled": {
+                "type": "boolean"
+              },
+              "expiresAt": {
+                "type": "number",
+                "nullable": true
+              },
+              "exchangeCount": {
+                "type": "number"
+              },
+              "lastExchangedAt": {
+                "type": "number",
+                "nullable": true
+              },
+              "createdBy": {
                 "type": "string"
+              },
+              "createdAt": {
+                "type": "number"
+              },
+              "updatedAt": {
+                "type": "number"
               }
             },
-            "required": ["code", "message"],
+            "required": [
+              "id",
+              "tenantId",
+              "docId",
+              "layerName",
+              "scope",
+              "origins",
+              "passwordProtected",
+              "sessionTtlSeconds",
+              "disabled",
+              "expiresAt",
+              "exchangeCount",
+              "lastExchangedAt",
+              "createdBy",
+              "createdAt",
+              "updatedAt"
+            ],
             "additionalProperties": false
           }
         },
-        "required": ["error"],
+        "required": ["share"],
         "additionalProperties": false
       },
-      "DocumentsDelete403Response": {
+      "SharesUpdate400Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3873,7 +5638,7 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsDelete404Response": {
+      "SharesUpdate404Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -3893,7 +5658,7 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "DocumentsThumbnailResponse": {
+      "SharesDeleteResponse": {
         "type": "object",
         "properties": {
           "error": {
@@ -3904,156 +5669,51 @@
               },
               "message": {
                 "type": "string"
-              },
-              "state": {
-                "type": "string"
               }
             },
-            "required": ["code", "message", "state"],
+            "required": ["code", "message"],
             "additionalProperties": false
           }
         },
         "required": ["error"],
         "additionalProperties": false
       },
-      "DeploymentLicenseStatusResponse": {
+      "SharesExchangeRequest": {
         "type": "object",
         "properties": {
-          "license": {},
-          "reporting": {
-            "nullable": true
+          "shareToken": {
+            "type": "string",
+            "pattern": "^shr_[A-Za-z0-9_-]{24}$"
           },
-          "usage": {
-            "nullable": true
+          "password": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1024
           }
         },
+        "required": ["shareToken"],
         "additionalProperties": false
       },
-      "TokensIssueRequest": {
-        "anyOf": [
-          {
-            "type": "object",
-            "properties": {
-              "kind": {
-                "type": "string",
-                "enum": ["doc"]
-              },
-              "sub": {
-                "type": "string",
-                "minLength": 1,
-                "maxLength": 256
-              },
-              "docId": {
-                "type": "string",
-                "pattern": "^[A-Za-z0-9_-]+$"
-              },
-              "layerName": {
-                "type": "string",
-                "minLength": 1,
-                "maxLength": 256
-              },
-              "scope": {
-                "type": "array",
-                "items": {
-                  "type": "string",
-                  "minLength": 1,
-                  "maxLength": 128
-                },
-                "minItems": 1,
-                "maxItems": 64
-              },
-              "userId": {
-                "type": "string",
-                "maxLength": 256
-              },
-              "displayName": {
-                "type": "string",
-                "maxLength": 256
-              },
-              "groupId": {
-                "type": "string",
-                "maxLength": 256
-              },
-              "groups": {
-                "type": "array",
-                "items": {
-                  "type": "string",
-                  "maxLength": 256
-                },
-                "maxItems": 64
-              },
-              "expiresIn": {
-                "type": "integer",
-                "minimum": 60,
-                "maximum": 7776000
-              }
-            },
-            "required": ["kind", "sub", "docId", "scope", "expiresIn"],
-            "additionalProperties": false
-          },
-          {
-            "type": "object",
-            "properties": {
-              "kind": {
-                "type": "string",
-                "enum": ["tenant"]
-              },
-              "sub": {
-                "type": "string",
-                "minLength": 1,
-                "maxLength": 256
-              },
-              "scope": {
-                "type": "array",
-                "items": {
-                  "anyOf": [
-                    {
-                      "type": "string",
-                      "enum": ["*"]
-                    },
-                    {
-                      "type": "string",
-                      "enum": [
-                        "docs.create",
-                        "docs.read",
-                        "docs.delete",
-                        "tokens.issue-doc",
-                        "tokens.revoke"
-                      ]
-                    }
-                  ]
-                },
-                "minItems": 1,
-                "maxItems": 16
-              },
-              "expiresIn": {
-                "type": "integer",
-                "minimum": 60,
-                "maximum": 7776000
-              }
-            },
-            "required": ["kind", "sub", "scope", "expiresIn"],
-            "additionalProperties": false
-          }
-        ]
-      },
-      "TokensIssue200Response": {
+      "SharesExchange200Response": {
         "type": "object",
         "properties": {
           "token": {
             "type": "string"
           },
-          "jti": {
+          "docId": {
+            "type": "string"
+          },
+          "layerName": {
             "type": "string"
           },
           "expiresAt": {
             "type": "number"
           }
         },
-        "required": ["token", "jti", "expiresAt"],
+        "required": ["token", "docId", "layerName", "expiresAt"],
         "additionalProperties": false
       },
-      "TokensIssue400Response": {
+      "SharesExchange400Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -4073,7 +5733,7 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "TokensIssue403Response": {
+      "SharesExchange403Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -4093,7 +5753,7 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "TokensIssue404Response": {
+      "SharesExchange404Response": {
         "type": "object",
         "properties": {
           "error": {
@@ -4113,22 +5773,27 @@
         "required": ["error"],
         "additionalProperties": false
       },
-      "TokensRevokeRequest": {
+      "SharesExchange410Response": {
         "type": "object",
         "properties": {
-          "reason": {
-            "type": "string",
-            "maxLength": 1024
-          },
-          "expiresAtSeconds": {
-            "type": "integer",
-            "exclusiveMinimum": true,
-            "minimum": 0
+          "error": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string"
+              },
+              "message": {
+                "type": "string"
+              }
+            },
+            "required": ["code", "message"],
+            "additionalProperties": false
           }
         },
+        "required": ["error"],
         "additionalProperties": false
       },
-      "TokensRevokeResponse": {
+      "SharesExchange422Response": {
         "type": "object",
         "properties": {
           "error": {