@iblai/iblai-api 4.305.0-core → 4.306.0-core

package/sdk_schema.yml

@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: ibl-data-manager
-  version: 4.305.0-core
+  version: 4.306.0-core
   description: API for iblai
 paths:
   /api/analytics/content/:
@@ -4752,6 +4752,1549 @@ paths:
           description: Not found - platform or course doesn't exist
         '500':
           description: Internal server error
+  /api/catalog/applications/platform/:
+    get:
+      operationId: catalog_applications_platform_retrieve
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: query
+        name: form_id
+        schema:
+          type: integer
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Own submissions
+    post:
+      operationId: catalog_applications_platform_create
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationDetail'
+          description: ''
+  /api/catalog/applications/platform/{submission_id}/:
+    get:
+      operationId: catalog_applications_platform_retrieve_2
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationDetail'
+          description: ''
+    patch:
+      operationId: catalog_applications_platform_partial_update
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationUpdate'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationUpdate'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationUpdate'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationUpdate'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationUpdate'
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationDetail'
+          description: ''
+  /api/catalog/applications/platform/{submission_id}/attachments/:
+    post:
+      operationId: catalog_applications_platform_attachments_create
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationAttachmentUpload'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationAttachmentUpload'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '201':
+          description: Attachment stored
+  /api/catalog/applications/platform/{submission_id}/attachments/{attachment_id}/:
+    delete:
+      operationId: catalog_applications_platform_attachments_destroy
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: path
+        name: attachment_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '204':
+          description: Attachment removed
+  /api/catalog/applications/platform/{submission_id}/submit/:
+    post:
+      operationId: catalog_applications_platform_submit_create
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationSubmit'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationSubmit'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationSubmit'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationSubmit'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationSubmit'
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationDetail'
+          description: ''
+  /api/catalog/applications/platform/{submission_id}/withdraw/:
+    post:
+      operationId: catalog_applications_platform_withdraw_create
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationDetail'
+          description: ''
+  /api/catalog/applications/platform/form/:
+    get:
+      operationId: catalog_applications_platform_form_retrieve
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: query
+        name: form_id
+        schema:
+          type: integer
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Active form
+  /api/catalog/applications/platform/forms/manage/:
+    get:
+      operationId: catalog_applications_platform_forms_manage_retrieve
+      description: |-
+        Wires RBAC into a DRF view.
+
+        Two responsibilities:
+
+        1. When RBAC is enabled, replace the view's `permission_classes` with
+           `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+           semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+           views that set `token_policies_enabled = True`).
+
+        2. Detect server-to-server (Django auth) callers via `is_service_account`.
+           Server-to-server tokens authenticate as Django auth users with no
+           relationship to a platform EdxUser. The convention is "we trust this
+           caller — bypass RBAC and serve the request."
+
+           Combine it with the RBAC-disabled check at the top of `initial()` so
+           the early exit skips all RBAC prep work:
+
+               if not ConfigFlags.rbac_enabled() or self.is_service_account:
+                   return
+
+           Use `is_service_account` at any other touch points where caller
+           identity matters (queryset ownership filters, owner attribution on
+           create, serializer context, etc.).
+      parameters:
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Forms for the platform
+    post:
+      operationId: catalog_applications_platform_forms_manage_create
+      description: |-
+        Wires RBAC into a DRF view.
+
+        Two responsibilities:
+
+        1. When RBAC is enabled, replace the view's `permission_classes` with
+           `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+           semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+           views that set `token_policies_enabled = True`).
+
+        2. Detect server-to-server (Django auth) callers via `is_service_account`.
+           Server-to-server tokens authenticate as Django auth users with no
+           relationship to a platform EdxUser. The convention is "we trust this
+           caller — bypass RBAC and serve the request."
+
+           Combine it with the RBAC-disabled check at the top of `initial()` so
+           the early exit skips all RBAC prep work:
+
+               if not ConfigFlags.rbac_enabled() or self.is_service_account:
+                   return
+
+           Use `is_service_account` at any other touch points where caller
+           identity matters (queryset ownership filters, owner attribution on
+           create, serializer context, etc.).
+      parameters:
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFormCreate'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFormCreate'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFormCreate'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFormCreate'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFormCreate'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationFormDetail'
+          description: ''
+  /api/catalog/applications/platform/forms/manage/{form_id}/:
+    get:
+      operationId: catalog_applications_platform_forms_manage_retrieve_2
+      description: |-
+        Wires RBAC into a DRF view.
+
+        Two responsibilities:
+
+        1. When RBAC is enabled, replace the view's `permission_classes` with
+           `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+           semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+           views that set `token_policies_enabled = True`).
+
+        2. Detect server-to-server (Django auth) callers via `is_service_account`.
+           Server-to-server tokens authenticate as Django auth users with no
+           relationship to a platform EdxUser. The convention is "we trust this
+           caller — bypass RBAC and serve the request."
+
+           Combine it with the RBAC-disabled check at the top of `initial()` so
+           the early exit skips all RBAC prep work:
+
+               if not ConfigFlags.rbac_enabled() or self.is_service_account:
+                   return
+
+           Use `is_service_account` at any other touch points where caller
+           identity matters (queryset ownership filters, owner attribution on
+           create, serializer context, etc.).
+      parameters:
+      - in: path
+        name: form_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationFormDetail'
+          description: ''
+    patch:
+      operationId: catalog_applications_platform_forms_manage_partial_update
+      description: |-
+        Wires RBAC into a DRF view.
+
+        Two responsibilities:
+
+        1. When RBAC is enabled, replace the view's `permission_classes` with
+           `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+           semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+           views that set `token_policies_enabled = True`).
+
+        2. Detect server-to-server (Django auth) callers via `is_service_account`.
+           Server-to-server tokens authenticate as Django auth users with no
+           relationship to a platform EdxUser. The convention is "we trust this
+           caller — bypass RBAC and serve the request."
+
+           Combine it with the RBAC-disabled check at the top of `initial()` so
+           the early exit skips all RBAC prep work:
+
+               if not ConfigFlags.rbac_enabled() or self.is_service_account:
+                   return
+
+           Use `is_service_account` at any other touch points where caller
+           identity matters (queryset ownership filters, owner attribution on
+           create, serializer context, etc.).
+      parameters:
+      - in: path
+        name: form_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationFormUpdate'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationFormUpdate'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationFormUpdate'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationFormUpdate'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationFormUpdate'
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationFormDetail'
+          description: ''
+  /api/catalog/applications/platform/manage/:
+    get:
+      operationId: catalog_applications_platform_manage_retrieve
+      description: |-
+        Wires RBAC into a DRF view.
+
+        Two responsibilities:
+
+        1. When RBAC is enabled, replace the view's `permission_classes` with
+           `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+           semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+           views that set `token_policies_enabled = True`).
+
+        2. Detect server-to-server (Django auth) callers via `is_service_account`.
+           Server-to-server tokens authenticate as Django auth users with no
+           relationship to a platform EdxUser. The convention is "we trust this
+           caller — bypass RBAC and serve the request."
+
+           Combine it with the RBAC-disabled check at the top of `initial()` so
+           the early exit skips all RBAC prep work:
+
+               if not ConfigFlags.rbac_enabled() or self.is_service_account:
+                   return
+
+           Use `is_service_account` at any other touch points where caller
+           identity matters (queryset ownership filters, owner attribution on
+           create, serializer context, etc.).
+      parameters:
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: search
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: status
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Submissions for the platform
+  /api/catalog/applications/platform/manage/{submission_id}/:
+    get:
+      operationId: catalog_applications_platform_manage_retrieve_2
+      description: |-
+        Wires RBAC into a DRF view.
+
+        Two responsibilities:
+
+        1. When RBAC is enabled, replace the view's `permission_classes` with
+           `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+           semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+           views that set `token_policies_enabled = True`).
+
+        2. Detect server-to-server (Django auth) callers via `is_service_account`.
+           Server-to-server tokens authenticate as Django auth users with no
+           relationship to a platform EdxUser. The convention is "we trust this
+           caller — bypass RBAC and serve the request."
+
+           Combine it with the RBAC-disabled check at the top of `initial()` so
+           the early exit skips all RBAC prep work:
+
+               if not ConfigFlags.rbac_enabled() or self.is_service_account:
+                   return
+
+           Use `is_service_account` at any other touch points where caller
+           identity matters (queryset ownership filters, owner attribution on
+           create, serializer context, etc.).
+      parameters:
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: search
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: status
+        schema:
+          type: string
+          minLength: 1
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Full submission detail
+  /api/catalog/applications/platform/manage/{submission_id}/attachments/{attachment_id}/download/:
+    get:
+      operationId: catalog_applications_platform_manage_attachments_download_retrieve
+      description: |-
+        Reviewer download: redirect to the storage's (signed, on S3) file URL.
+
+        Gated by ``IsDMAdmin | IsPlatformAdmin`` plus the RBAC verb check on the
+        attachment's own platform when RBAC is enabled.
+      parameters:
+      - in: path
+        name: attachment_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '302':
+          description: Redirect to the file URL
+  /api/catalog/applications/platform/manage/{submission_id}/candidates/{candidate_id}/invite/:
+    post:
+      operationId: catalog_applications_platform_manage_candidates_invite_create
+      description: |-
+        Re-run settlement provisioning for one accepted candidate: links them
+        if an account with their designated email now exists, or re-issues the
+        platform invitation if none is active. Covers the invite-missing state.
+      parameters:
+      - in: path
+        name: candidate_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Candidate after provisioning
+  /api/catalog/applications/platform/manage/{submission_id}/candidates/{candidate_id}/link/:
+    post:
+      operationId: catalog_applications_platform_manage_candidates_link_create
+      description: |-
+        Manually link an accepted candidate to an existing account (the
+        account-unlinked state: the family signed up outside invitation
+        redemption, or under a different email than designated).
+      parameters:
+      - in: path
+        name: candidate_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCandidateLink'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCandidateLink'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCandidateLink'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCandidateLink'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCandidateLink'
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Candidate linked
+  /api/catalog/applications/platform/manage/{submission_id}/course-assignments/:
+    get:
+      operationId: catalog_applications_platform_manage_course_assignments_retrieve
+      description: |-
+        Course assignments for a submission (#2134): list, and assign courses to
+        accepted candidates individually or in bulk. Each successful item issues a
+        CourseInvitation that the existing pipeline enrolls.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Assignments for the submission
+    post:
+      operationId: catalog_applications_platform_manage_course_assignments_create
+      description: |-
+        Course assignments for a submission (#2134): list, and assign courses to
+        accepted candidates individually or in bulk. Each successful item issues a
+        CourseInvitation that the existing pipeline enrolls.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCourseAssignment'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCourseAssignment'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCourseAssignment'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCourseAssignment'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCourseAssignment'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Per-item assignment results
+  /api/catalog/applications/platform/manage/{submission_id}/course-assignments/{assignment_id}/:
+    delete:
+      operationId: catalog_applications_platform_manage_course_assignments_destroy
+      description: |-
+        Remove one course assignment (§9.2 "enrollment changes after the school
+        year begins" — the record side).
+
+        Deactivates the assignment and cancels its invitation when the student has
+        not yet been enrolled through it. It never unenrolls an already-enrolled
+        student: platform admins un-enroll deliberately through the catalog
+        enrollment endpoints, not from an admissions record.
+      parameters:
+      - in: path
+        name: assignment_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '204':
+          description: Assignment removed
+  /api/catalog/applications/platform/manage/{submission_id}/fee/:
+    get:
+      operationId: catalog_applications_platform_manage_fee_retrieve
+      description: |-
+        Reviewer/admin view of a submission's application fee (#2132, §5).
+
+        GET returns the charge and its event history; POST records an out-of-band
+        payment or a waiver/refund/credit. Money collection through Stripe is a
+        later segment; this is the domain side.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Charge + events
+    post:
+      operationId: catalog_applications_platform_manage_fee_create
+      description: |-
+        Reviewer/admin view of a submission's application fee (#2132, §5).
+
+        GET returns the charge and its event history; POST records an out-of-band
+        payment or a waiver/refund/credit. Money collection through Stripe is a
+        later segment; this is the domain side.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFeeAction'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFeeAction'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFeeAction'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFeeAction'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationFeeAction'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Charge updated
+  /api/catalog/applications/platform/manage/{submission_id}/notes/:
+    get:
+      operationId: catalog_applications_platform_manage_notes_retrieve
+      description: |-
+        Internal reviewer notes on a submission (#2089, §6). Never surfaced on
+        applicant endpoints. GET lists (optional ``kind`` filter); POST adds one.
+      parameters:
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: search
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: status
+        schema:
+          type: string
+          minLength: 1
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Notes for the submission
+    post:
+      operationId: catalog_applications_platform_manage_notes_create
+      description: |-
+        Internal reviewer notes on a submission (#2089, §6). Never surfaced on
+        applicant endpoints. GET lists (optional ``kind`` filter); POST adds one.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationNote'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationNote'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationNote'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationNote'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationNote'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '201':
+          description: Note created
+  /api/catalog/applications/platform/manage/{submission_id}/notes/{note_id}/:
+    patch:
+      operationId: catalog_applications_platform_manage_notes_partial_update
+      description: Edit or remove a single internal reviewer note.
+      parameters:
+      - in: path
+        name: note_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationNote'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationNote'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationNote'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationNote'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationNote'
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Note updated
+    delete:
+      operationId: catalog_applications_platform_manage_notes_destroy
+      description: Edit or remove a single internal reviewer note.
+      parameters:
+      - in: path
+        name: note_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '204':
+          description: Note removed
+  /api/catalog/applications/platform/manage/{submission_id}/placements/:
+    get:
+      operationId: catalog_applications_platform_manage_placements_retrieve
+      description: |-
+        Placements for a submission (#2133): list, and assign a new placement
+        linking an accepted candidate to the placement mentor.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Placements for the submission
+    post:
+      operationId: catalog_applications_platform_manage_placements_create
+      description: |-
+        Placements for a submission (#2133): list, and assign a new placement
+        linking an accepted candidate to the placement mentor.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationPlacementCreate'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationPlacementCreate'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationPlacementCreate'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationPlacementCreate'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationPlacementCreate'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Per-item placement results
+  /api/catalog/applications/platform/manage/{submission_id}/placements/{placement_id}/:
+    patch:
+      operationId: catalog_applications_platform_manage_placements_partial_update
+      description: 'Advance a single placement: status, the agent''s result, admin
+        override.'
+      parameters:
+      - in: path
+        name: placement_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationPlacementUpdate'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationPlacementUpdate'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationPlacementUpdate'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationPlacementUpdate'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PatchedPlatformApplicationPlacementUpdate'
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Placement updated
+  /api/catalog/applications/platform/manage/{submission_id}/submit/:
+    post:
+      operationId: catalog_applications_platform_manage_submit_create
+      description: |-
+        Admin submit-with-exceptions (§2.1 "administratively waived"): push a
+        family's editable application to Submitted, recording a waiver for every
+        required item still missing and bypassing an unpaid fee gate (the charge
+        stays payable/waivable). Present-but-invalid answers still block (400).
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationAdminSubmit'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationAdminSubmit'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationAdminSubmit'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationAdminSubmit'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationAdminSubmit'
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Application submitted
+  /api/catalog/applications/platform/manage/{submission_id}/transition/:
+    post:
+      operationId: catalog_applications_platform_manage_transition_create
+      description: |-
+        Advance a submission or a single candidate through the review pipeline
+        (#2089, §5-6). A ``candidate_id`` scopes the action to one person; without
+        it the action applies to every candidate that can legally accept it. When
+        ``action`` is ``decline`` and ``block`` is set, the applicant is also added
+        to the platform ban-list (deny-with-block).
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationTransition'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationTransition'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationTransition'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationTransition'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationTransition'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Updated submission detail
+  /api/catalog/applications/platform/manage/{submission_id}/waivers/:
+    post:
+      operationId: catalog_applications_platform_manage_waivers_create
+      description: |-
+        Waive a required item on one application (§2.1 "administratively
+        waived"): POST excuses a missing required field so it no longer blocks
+        submission; DELETE reinstates it. Waivers excuse absence only — a
+        present-but-invalid answer still blocks. The fee is waived through its own
+        fee endpoint action, which also settles the money record.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationWaiver'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationWaiver'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationWaiver'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationWaiver'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationWaiver'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Waiver recorded
+    delete:
+      operationId: catalog_applications_platform_manage_waivers_destroy
+      description: |-
+        Waive a required item on one application (§2.1 "administratively
+        waived"): POST excuses a missing required field so it no longer blocks
+        submission; DELETE reinstates it. Waivers excuse absence only — a
+        present-but-invalid answer still blocks. The fee is waived through its own
+        fee endpoint action, which also settles the money record.
+      parameters:
+      - in: path
+        name: submission_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '204':
+          description: Waiver removed
+  /api/catalog/applications/platform/manage/blocks/:
+    get:
+      operationId: catalog_applications_platform_manage_blocks_retrieve
+      description: List the active application blocks (ban-list) for a platform.
+      parameters:
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: search
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: status
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Active blocks
+  /api/catalog/applications/platform/manage/blocks/{block_id}/:
+    delete:
+      operationId: catalog_applications_platform_manage_blocks_destroy
+      description: Lift a single active application block (unblock).
+      parameters:
+      - in: path
+        name: block_id
+        schema:
+          type: string
+          pattern: ^\d+$
+        required: true
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: search
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: status
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '204':
+          description: Block lifted
+  /api/catalog/applications/platform/manage/stats/:
+    get:
+      operationId: catalog_applications_platform_manage_stats_retrieve
+      description: |-
+        Wires RBAC into a DRF view.
+
+        Two responsibilities:
+
+        1. When RBAC is enabled, replace the view's `permission_classes` with
+           `RbacAuthGate` (the gate the RBAC layer assumes — `IsEdxAuthenticated`
+           semantics, plus opt-in acceptance of token-policies PlatformApiKeys for
+           views that set `token_policies_enabled = True`).
+
+        2. Detect server-to-server (Django auth) callers via `is_service_account`.
+           Server-to-server tokens authenticate as Django auth users with no
+           relationship to a platform EdxUser. The convention is "we trust this
+           caller — bypass RBAC and serve the request."
+
+           Combine it with the RBAC-disabled check at the top of `initial()` so
+           the early exit skips all RBAC prep work:
+
+               if not ConfigFlags.rbac_enabled() or self.is_service_account:
+                   return
+
+           Use `is_service_account` at any other touch points where caller
+           identity matters (queryset ownership filters, owner attribution on
+           create, serializer context, etc.).
+      parameters:
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: search
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: sort
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: status
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Per-status counts
+  /api/catalog/applications/platform/renew/:
+    post:
+      operationId: catalog_applications_platform_renew_create
+      description: |-
+        Start an annual re-enrollment (#2135): a normal draft create whose
+        responses are pre-filled from the caller's most recent approved submission
+        (current-schema fields only; signatures, consents, files, and fields the
+        form flags fresh are re-asked), linked to that prior submission. With no
+        prior approved submission this behaves as a plain create.
+      tags:
+      - catalog
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+          application/scim+json:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+          '*/*':
+            schema:
+              $ref: '#/components/schemas/PlatformApplicationCreate'
+        required: true
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlatformApplicationDetail'
+          description: ''
+  /api/catalog/applications/platform/status/:
+    get:
+      operationId: catalog_applications_platform_status_retrieve
+      description: |-
+        Authenticated applicants, including learners on AXD student tokens.
+
+        Prepends StudentTokenAuthentication like core UserPlatformSelfLinkView (it is
+        not in the DRF defaults, but learners self-applying use it). An anonymous
+        request returns 401, not 403: DRF's ``permission_denied`` raises
+        ``NotAuthenticated`` whenever no authenticator succeeded.
+      parameters:
+      - in: query
+        name: form_id
+        schema:
+          type: integer
+      - in: query
+        name: platform_key
+        schema:
+          type: string
+          minLength: 1
+      - in: query
+        name: platform_org
+        schema:
+          type: string
+          minLength: 1
+      tags:
+      - catalog
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: Gate state
   /api/catalog/conditionals/course/eligibility/:
     get:
       operationId: catalog_conditionals_course_eligibility_retrieve
@@ -20160,6 +21703,34 @@ paths:
           description: Permission denied - insufficient RBAC permissions
         '404':
           description: Policy not found
+  /api/core/rbac/resources/:
+    get:
+      operationId: core_rbac_resources_retrieve
+      description: |-
+        GET the resource tree node at `path`.
+
+        Platform comes from the request token (service accounts pass platform_key).
+      summary: Discover resources for policy building
+      parameters:
+      - in: query
+        name: path
+        schema:
+          type: string
+          default: /
+          minLength: 1
+        description: Discovery path, e.g. '/', '/mentors/', '/mentors/5/'.
+      tags:
+      - core
+      security:
+      - PlatformApiKeyAuthentication: []
+      responses:
+        '200':
+          description: An entity node (child collections) or a collection node (list_url
+            + search_qps + result_fields).
+        '400':
+          description: Invalid path or unknown platform
+        '403':
+          description: Missing resource-discovery access
   /api/core/rbac/roles/:
     get:
       operationId: core_rbac_roles_list
@@ -45920,6 +47491,14 @@ components:
         * `course_resource` - Course and Resource
         * `unit_resource` - Unit and Resource
         * `all` - Course, Unit, and Resource
+    KindEnum:
+      enum:
+      - general
+      - interview
+      type: string
+      description: |-
+        * `general` - general
+        * `interview` - interview
     LauncherViewPostRequest:
       type: object
       properties:
@@ -47065,6 +48644,7 @@ components:
             * `DEFAULT_TEMPLATE` - Default Template
             * `HUMAN_SUPPORT_NOTIFICATION` - Human Support Notification
             * `PATHWAY_ENROLLMENT_CONFIRMATION` - Pathway Enrollment Confirmation
+            * `PLATFORM_APPLICATION_DECISION` - Platform Application Decision
             * `PLATFORM_INVITATION` - Platform Invitation
             * `POLICY_ASSIGNMENT` - Policy Assignment
             * `PROACTIVE_LEARNER_NOTIFICATION` - Proactive Learner Notification
@@ -47085,7 +48665,7 @@ components:
             * `USER_NOTIF_USER_INACTIVITY` - User Notif User Inactivity
             * `USER_NOTIF_USER_REGISTRATION` - User Notif User Registration
           oneOf:
-          - $ref: '#/components/schemas/Type4b7Enum'
+          - $ref: '#/components/schemas/TypeB29Enum'
           - $ref: '#/components/schemas/NullEnum'
         name:
           type: string
@@ -47474,6 +49054,7 @@ components:
             * `DEFAULT_TEMPLATE` - Default Template
             * `HUMAN_SUPPORT_NOTIFICATION` - Human Support Notification
             * `PATHWAY_ENROLLMENT_CONFIRMATION` - Pathway Enrollment Confirmation
+            * `PLATFORM_APPLICATION_DECISION` - Platform Application Decision
             * `PLATFORM_INVITATION` - Platform Invitation
             * `POLICY_ASSIGNMENT` - Policy Assignment
             * `PROACTIVE_LEARNER_NOTIFICATION` - Proactive Learner Notification
@@ -47494,7 +49075,7 @@ components:
             * `USER_NOTIF_USER_INACTIVITY` - User Notif User Inactivity
             * `USER_NOTIF_USER_REGISTRATION` - User Notif User Registration
           oneOf:
-          - $ref: '#/components/schemas/Type4b7Enum'
+          - $ref: '#/components/schemas/TypeB29Enum'
           - $ref: '#/components/schemas/BlankEnum'
           - $ref: '#/components/schemas/NullEnum'
         name:
@@ -49497,6 +51078,7 @@ components:
             * `DEFAULT_TEMPLATE` - Default Template
             * `HUMAN_SUPPORT_NOTIFICATION` - Human Support Notification
             * `PATHWAY_ENROLLMENT_CONFIRMATION` - Pathway Enrollment Confirmation
+            * `PLATFORM_APPLICATION_DECISION` - Platform Application Decision
             * `PLATFORM_INVITATION` - Platform Invitation
             * `POLICY_ASSIGNMENT` - Policy Assignment
             * `PROACTIVE_LEARNER_NOTIFICATION` - Proactive Learner Notification
@@ -49517,7 +51099,7 @@ components:
             * `USER_NOTIF_USER_INACTIVITY` - User Notif User Inactivity
             * `USER_NOTIF_USER_REGISTRATION` - User Notif User Registration
           oneOf:
-          - $ref: '#/components/schemas/Type4b7Enum'
+          - $ref: '#/components/schemas/TypeB29Enum'
           - $ref: '#/components/schemas/NullEnum'
         name:
           type: string
@@ -50200,6 +51782,49 @@ components:
             type: integer
           writeOnly: true
           description: RbacGroup IDs to disassociate from this token (mode=token_policies)
+    PatchedPlatformApplicationFormUpdate:
+      type: object
+      description: Body for updating a platform's application form.
+      properties:
+        platform_key:
+          type: string
+        platform_org:
+          type: string
+        name:
+          type: string
+        schema: {}
+        config: {}
+        enabled:
+          type: boolean
+        is_default:
+          type: boolean
+    PatchedPlatformApplicationNote:
+      type: object
+      description: Body for adding/updating an internal reviewer note.
+      properties:
+        body:
+          type: string
+        kind:
+          $ref: '#/components/schemas/KindEnum'
+    PatchedPlatformApplicationPlacementUpdate:
+      type: object
+      description: |-
+        Body for advancing a placement: status, the agent's result, an admin
+        override, or a note. All optional; at least one must be present.
+      properties:
+        status:
+          $ref: '#/components/schemas/PlatformApplicationPlacementUpdateStatusEnum'
+        result: {}
+        override: {}
+        session_id:
+          type: string
+        note:
+          type: string
+    PatchedPlatformApplicationUpdate:
+      type: object
+      description: Body for updating a draft's responses.
+      properties:
+        responses: {}
     PatchedPlatformPublicImageAsset:
       type: object
       properties:
@@ -52634,6 +54259,267 @@ components:
           type: boolean
       required:
       - write
+    PlatformApplicationAdminSubmit:
+      type: object
+      description: Body for the admin submit-with-exceptions action.
+      properties:
+        note:
+          type: string
+    PlatformApplicationAttachmentUpload:
+      type: object
+      description: Multipart body for uploading an attachment against a file field.
+      properties:
+        field:
+          type: string
+        item_id:
+          type: string
+        file:
+          type: string
+          format: uri
+      required:
+      - field
+      - file
+    PlatformApplicationCandidateLink:
+      type: object
+      description: |-
+        Manually link an accepted candidate to an existing account; provide
+        one of user_id or email.
+      properties:
+        user_id:
+          type: integer
+        email:
+          type: string
+          format: email
+    PlatformApplicationCourseAssignment:
+      type: object
+      description: 'Body for assigning courses (#2134): one or many items in a single
+        call.'
+      properties:
+        assignments:
+          type: array
+          items:
+            $ref: '#/components/schemas/PlatformApplicationCourseAssignmentItem'
+      required:
+      - assignments
+    PlatformApplicationCourseAssignmentItem:
+      type: object
+      description: 'One course assignment: which candidate, which course, and the
+        dates.'
+      properties:
+        candidate_id:
+          type: integer
+        course_id:
+          type: string
+        started:
+          type: string
+          format: date-time
+        expired:
+          type: string
+          format: date-time
+        placement_id:
+          type: integer
+      required:
+      - candidate_id
+      - course_id
+    PlatformApplicationCreate:
+      type: object
+      description: Body for creating an application draft.
+      properties:
+        platform_key:
+          type: string
+        responses: {}
+        form_id:
+          type: integer
+      required:
+      - platform_key
+    PlatformApplicationDetail:
+      type: object
+      description: Minimal schema for a submission response object.
+      properties:
+        id:
+          type: integer
+        status:
+          type: string
+      required:
+      - id
+      - status
+    PlatformApplicationFeeAction:
+      type: object
+      description: Admin action on a submission's application fee.
+      properties:
+        action:
+          $ref: '#/components/schemas/PlatformApplicationFeeActionActionEnum'
+        amount:
+          type: string
+          format: decimal
+          pattern: ^-?\d{0,8}(?:\.\d{0,2})?$
+        method:
+          type: string
+        funding_source:
+          type: string
+        note:
+          type: string
+      required:
+      - action
+    PlatformApplicationFeeActionActionEnum:
+      enum:
+      - record_payment
+      - waive
+      - refund
+      - credit
+      type: string
+      description: |-
+        * `record_payment` - record_payment
+        * `waive` - waive
+        * `refund` - refund
+        * `credit` - credit
+    PlatformApplicationFormCreate:
+      type: object
+      description: Body for creating a platform's application form.
+      properties:
+        platform_key:
+          type: string
+        platform_org:
+          type: string
+        name:
+          type: string
+        schema: {}
+        config: {}
+        enabled:
+          type: boolean
+          default: false
+        is_default:
+          type: boolean
+      required:
+      - platform_key
+      - schema
+    PlatformApplicationFormDetail:
+      type: object
+      description: Minimal schema for a form response object.
+      properties:
+        id:
+          type: integer
+        name:
+          type: string
+        version:
+          type: integer
+        enabled:
+          type: boolean
+      required:
+      - enabled
+      - id
+      - name
+      - version
+    PlatformApplicationNote:
+      type: object
+      description: Body for adding/updating an internal reviewer note.
+      properties:
+        body:
+          type: string
+        kind:
+          $ref: '#/components/schemas/KindEnum'
+      required:
+      - body
+    PlatformApplicationPlacementCreate:
+      type: object
+      description: |-
+        Body for assigning placements (#2133): one or many in a single call
+        ("individually or in bulk", PDF §9.1).
+      properties:
+        placements:
+          type: array
+          items:
+            $ref: '#/components/schemas/PlatformApplicationPlacementItem'
+      required:
+      - placements
+    PlatformApplicationPlacementItem:
+      type: object
+      description: 'One placement assignment: which candidate, which mentor.'
+      properties:
+        candidate_id:
+          type: integer
+        mentor_unique_id:
+          type: string
+        mentor_label:
+          type: string
+        label:
+          type: string
+        session_id:
+          type: string
+        note:
+          type: string
+      required:
+      - candidate_id
+      - mentor_unique_id
+    PlatformApplicationPlacementUpdateStatusEnum:
+      enum:
+      - not_assigned
+      - assigned
+      - started
+      - completed
+      - reviewed
+      - confirmed
+      type: string
+      description: |-
+        * `not_assigned` - not_assigned
+        * `assigned` - assigned
+        * `started` - started
+        * `completed` - completed
+        * `reviewed` - reviewed
+        * `confirmed` - confirmed
+    PlatformApplicationSubmit:
+      type: object
+      description: Body for submitting an application.
+      properties:
+        responses: {}
+    PlatformApplicationTransition:
+      type: object
+      description: Body for a reviewer status transition (per-candidate or application-wide).
+      properties:
+        action:
+          $ref: '#/components/schemas/PlatformApplicationTransitionActionEnum'
+        candidate_id:
+          type: integer
+        message:
+          type: string
+        note:
+          type: string
+        block:
+          type: boolean
+          default: false
+      required:
+      - action
+    PlatformApplicationTransitionActionEnum:
+      enum:
+      - start_review
+      - request_info
+      - require_interview
+      - waitlist
+      - accept
+      - decline
+      type: string
+      description: |-
+        * `start_review` - start_review
+        * `request_info` - request_info
+        * `require_interview` - require_interview
+        * `waitlist` - waitlist
+        * `accept` - accept
+        * `decline` - decline
+    PlatformApplicationWaiver:
+      type: object
+      description: |-
+        Waive (POST) or reinstate (DELETE) one required field on an application
+        (§2.1 required items "complete or administratively waived").
+      properties:
+        section:
+          type: string
+        field:
+          type: string
+        reason:
+          type: string
+      required:
+      - field
+      - section
     PlatformConfigurationList:
       type: object
       description: Serializer for listing platform configurations
@@ -58697,7 +60583,7 @@ components:
         * `release` - Release Reserved Credits
         * `rollover` - Rollover Credits
         * `refund` - Refund Credits
-    Type4b7Enum:
+    TypeB29Enum:
       enum:
       - ACTIVITY_COURSE_MILESTONE
       - ACTIVITY_NEW_CONTENT
@@ -58715,6 +60601,7 @@ components:
       - DEFAULT_TEMPLATE
       - HUMAN_SUPPORT_NOTIFICATION
       - PATHWAY_ENROLLMENT_CONFIRMATION
+      - PLATFORM_APPLICATION_DECISION
       - PLATFORM_INVITATION
       - POLICY_ASSIGNMENT
       - PROACTIVE_LEARNER_NOTIFICATION
@@ -58752,6 +60639,7 @@ components:
         * `DEFAULT_TEMPLATE` - Default Template
         * `HUMAN_SUPPORT_NOTIFICATION` - Human Support Notification
         * `PATHWAY_ENROLLMENT_CONFIRMATION` - Pathway Enrollment Confirmation
+        * `PLATFORM_APPLICATION_DECISION` - Platform Application Decision
         * `PLATFORM_INVITATION` - Platform Invitation
         * `POLICY_ASSIGNMENT` - Policy Assignment
         * `PROACTIVE_LEARNER_NOTIFICATION` - Proactive Learner Notification