@opensoha/contracts 0.1.5 → 0.1.7

package/openapi/soha-api.json

@@ -57,6 +57,26 @@
       }
     },
     "parameters": {
+      "AccessRoleID": {
+        "in": "path",
+        "name": "accessRoleID",
+        "required": true,
+        "schema": {
+          "maxLength": 128,
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "AgentInstallTicket": {
+        "in": "path",
+        "name": "installTicket",
+        "required": true,
+        "schema": {
+          "maxLength": 1024,
+          "minLength": 16,
+          "type": "string"
+        }
+      },
       "AgentProviderRolloutAction": {
         "in": "path",
         "name": "rolloutAction",
@@ -167,6 +187,15 @@
           "type": "string"
         }
       },
+      "ClusterIDQuery": {
+        "in": "query",
+        "name": "clusterId",
+        "required": true,
+        "schema": {
+          "minLength": 1,
+          "type": "string"
+        }
+      },
       "ComputeActionID": {
         "in": "path",
         "name": "action",
@@ -263,6 +292,26 @@
           "type": "string"
         }
       },
+      "DashboardID": {
+        "in": "path",
+        "name": "dashboardID",
+        "required": true,
+        "schema": {
+          "maxLength": 128,
+          "minLength": 1,
+          "type": "string"
+        }
+      },
+      "DashboardPanelID": {
+        "in": "path",
+        "name": "panelID",
+        "required": true,
+        "schema": {
+          "maxLength": 128,
+          "minLength": 1,
+          "type": "string"
+        }
+      },
       "DataSourceID": {
         "in": "path",
         "name": "dataSourceID",
@@ -604,6 +653,15 @@
           "type": "string"
         }
       },
+      "RegistryConnectionID": {
+        "in": "path",
+        "name": "connectionID",
+        "required": true,
+        "schema": {
+          "minLength": 1,
+          "type": "string"
+        }
+      },
       "RelayState": {
         "in": "query",
         "name": "RelayState",
@@ -733,6 +791,16 @@
           "type": "string"
         }
       },
+      "SoftwarePackageID": {
+        "in": "path",
+        "name": "packageID",
+        "required": true,
+        "schema": {
+          "maxLength": 128,
+          "minLength": 1,
+          "type": "string"
+        }
+      },
       "SohaCacheModeHeader": {
         "description": "Optional relay cache behavior hint.",
         "in": "header",
@@ -871,6 +939,175 @@
       }
     },
     "schemas": {
+      "AccessRole": {
+        "additionalProperties": false,
+        "properties": {
+          "capabilities": {
+            "deprecated": true,
+            "description": "Legacy role-global action aliases retained only for migration.",
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "id": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "name": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "permissionKeys": {
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "scope": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "userCount": {
+            "minimum": 0,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "scope",
+          "capabilities",
+          "permissionKeys",
+          "userCount"
+        ],
+        "type": "object"
+      },
+      "AccessRoleDeleteResult": {
+        "additionalProperties": false,
+        "properties": {
+          "status": {
+            "const": "ok",
+            "type": "string"
+          }
+        },
+        "required": [
+          "status"
+        ],
+        "type": "object"
+      },
+      "AccessRoleEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/AccessRole"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "AccessRoleInput": {
+        "additionalProperties": false,
+        "properties": {
+          "capabilities": {
+            "deprecated": true,
+            "description": "Legacy role-global action aliases; new role editors must send an empty array.",
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "id": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "name": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "permissionKeys": {
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "scope": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "scope",
+          "permissionKeys"
+        ],
+        "type": "object"
+      },
+      "AccessRoleListEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "items": {
+            "items": {
+              "$ref": "#/components/schemas/AccessRole"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "items"
+        ],
+        "type": "object"
+      },
+      "AgentInstallation": {
+        "additionalProperties": false,
+        "properties": {
+          "clusterId": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "command": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "expiresAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "manifestUrl": {
+            "format": "uri",
+            "type": "string"
+          }
+        },
+        "required": [
+          "clusterId",
+          "manifestUrl",
+          "command",
+          "expiresAt"
+        ],
+        "type": "object"
+      },
+      "AgentInstallationEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/AgentInstallation"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
       "AgentProviderCatalog": {
         "additionalProperties": false,
         "properties": {
@@ -3802,6 +4039,11 @@
           "targetId": {
             "type": "string"
           },
+          "valuesContent": {
+            "description": "Complete Helm values YAML used when the selected target is a managed Helm release.",
+            "maxLength": 1048576,
+            "type": "string"
+          },
           "variables": {
             "additionalProperties": true,
             "type": "object"
@@ -4190,8 +4432,6 @@
         "required": [
           "name",
           "key",
-          "group",
-          "language",
           "enabled"
         ],
         "type": "object"
@@ -5179,6 +5419,157 @@
         ],
         "type": "object"
       },
+      "AuthorizationDecision": {
+        "additionalProperties": false,
+        "properties": {
+          "action": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "allowedActions": {
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "effectiveScope": {
+            "$ref": "#/components/schemas/AuthorizationEffectiveScope"
+          },
+          "permissionKey": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "policyVersion": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "reasonCode": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "resource": {
+            "$ref": "#/components/schemas/AuthorizationResource"
+          },
+          "status": {
+            "$ref": "#/components/schemas/AuthorizationDecisionStatus"
+          }
+        },
+        "required": [
+          "status",
+          "permissionKey",
+          "action",
+          "resource",
+          "reasonCode",
+          "policyVersion"
+        ],
+        "type": "object"
+      },
+      "AuthorizationDecisionStatus": {
+        "enum": [
+          "allow",
+          "deny",
+          "approval_required"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "AuthorizationDecisionStatusAllow",
+          "AuthorizationDecisionStatusDeny",
+          "AuthorizationDecisionStatusApprovalRequired"
+        ]
+      },
+      "AuthorizationEffectiveScope": {
+        "additionalProperties": false,
+        "properties": {
+          "clusterIds": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "labelSelector": {
+            "type": "string"
+          },
+          "namespaces": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "projectIds": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "resourceKinds": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "tenantIds": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "workspaceIds": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          }
+        },
+        "type": "object"
+      },
+      "AuthorizationResource": {
+        "additionalProperties": false,
+        "properties": {
+          "clusterId": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "labels": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "type": "object"
+          },
+          "namespace": {
+            "type": "string"
+          },
+          "owner": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "tenantId": {
+            "type": "string"
+          },
+          "type": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "workspaceId": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "type"
+        ],
+        "type": "object"
+      },
       "AuthProvider": {
         "additionalProperties": false,
         "properties": {
@@ -11212,6 +11603,181 @@
         ],
         "type": "object"
       },
+      "HelmImportedService": {
+        "additionalProperties": false,
+        "properties": {
+          "created": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "key": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "releaseName": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "key",
+          "name",
+          "releaseName",
+          "created"
+        ],
+        "type": "object"
+      },
+      "HelmImportedTarget": {
+        "additionalProperties": false,
+        "properties": {
+          "created": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "releaseName": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "releaseName",
+          "created"
+        ],
+        "type": "object"
+      },
+      "HelmReleaseImportInput": {
+        "additionalProperties": false,
+        "properties": {
+          "releaseName": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "releaseName"
+        ],
+        "type": "object"
+      },
+      "HelmReleaseImportRequest": {
+        "additionalProperties": false,
+        "properties": {
+          "applicationKey": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "applicationName": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "clusterId": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "environmentKey": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "environmentName": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "namespace": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "ownershipMode": {
+            "enum": [
+              "observe_only",
+              "managed"
+            ],
+            "type": "string"
+          },
+          "releases": {
+            "items": {
+              "$ref": "#/components/schemas/HelmReleaseImportInput"
+            },
+            "maxItems": 100,
+            "minItems": 1,
+            "type": "array",
+            "uniqueItems": true
+          }
+        },
+        "required": [
+          "clusterId",
+          "namespace",
+          "applicationKey",
+          "applicationName",
+          "environmentKey",
+          "environmentName",
+          "ownershipMode",
+          "releases"
+        ],
+        "type": "object"
+      },
+      "HelmReleaseImportResult": {
+        "additionalProperties": false,
+        "properties": {
+          "application": {
+            "$ref": "#/components/schemas/KubernetesImportEntityRef"
+          },
+          "applicationEnvironmentCreated": {
+            "type": "boolean"
+          },
+          "applicationEnvironmentId": {
+            "type": "string"
+          },
+          "environment": {
+            "$ref": "#/components/schemas/KubernetesImportEntityRef"
+          },
+          "ownershipMode": {
+            "enum": [
+              "observe_only",
+              "managed"
+            ],
+            "type": "string"
+          },
+          "services": {
+            "items": {
+              "$ref": "#/components/schemas/HelmImportedService"
+            },
+            "type": "array"
+          },
+          "targets": {
+            "items": {
+              "$ref": "#/components/schemas/HelmImportedTarget"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "application",
+          "environment",
+          "applicationEnvironmentId",
+          "applicationEnvironmentCreated",
+          "ownershipMode",
+          "services",
+          "targets"
+        ],
+        "type": "object"
+      },
+      "HelmReleaseImportResultEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/HelmReleaseImportResult"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
       "IdentityApplication": {
         "additionalProperties": false,
         "properties": {
@@ -13782,6 +14348,199 @@
         ],
         "type": "object"
       },
+      "KubernetesImportCandidate": {
+        "additionalProperties": false,
+        "properties": {
+          "clusterId": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "containers": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "desiredReplicas": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "labels": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "type": "object"
+          },
+          "namespace": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "readyReplicas": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "relatedResources": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesRelatedResource"
+            },
+            "type": "array"
+          },
+          "workloadKind": {
+            "enum": [
+              "Deployment",
+              "StatefulSet",
+              "DaemonSet"
+            ],
+            "type": "string"
+          },
+          "workloadName": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "clusterId",
+          "namespace",
+          "workloadKind",
+          "workloadName",
+          "desiredReplicas",
+          "readyReplicas",
+          "relatedResources"
+        ],
+        "type": "object"
+      },
+      "KubernetesImportCandidateListEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "items": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesImportCandidate"
+            },
+            "type": "array"
+          },
+          "truncated": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "items",
+          "truncated"
+        ],
+        "type": "object"
+      },
+      "KubernetesImportedService": {
+        "additionalProperties": false,
+        "properties": {
+          "created": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "key": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "workloadKind": {
+            "enum": [
+              "Deployment",
+              "StatefulSet",
+              "DaemonSet"
+            ],
+            "type": "string"
+          },
+          "workloadName": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "key",
+          "name",
+          "workloadKind",
+          "workloadName",
+          "created"
+        ],
+        "type": "object"
+      },
+      "KubernetesImportedTarget": {
+        "additionalProperties": false,
+        "properties": {
+          "created": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "workloadKind": {
+            "enum": [
+              "Deployment",
+              "StatefulSet",
+              "DaemonSet"
+            ],
+            "type": "string"
+          },
+          "workloadName": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "workloadKind",
+          "workloadName",
+          "created"
+        ],
+        "type": "object"
+      },
+      "KubernetesImportEntityRef": {
+        "additionalProperties": false,
+        "properties": {
+          "created": {
+            "type": "boolean"
+          },
+          "id": {
+            "type": "string"
+          },
+          "key": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "key",
+          "name",
+          "created"
+        ],
+        "type": "object"
+      },
+      "KubernetesRelatedResource": {
+        "additionalProperties": false,
+        "properties": {
+          "kind": {
+            "enum": [
+              "Service",
+              "Ingress",
+              "HorizontalPodAutoscaler"
+            ],
+            "type": "string"
+          },
+          "name": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "kind",
+          "name"
+        ],
+        "type": "object"
+      },
       "KubernetesResourceAction": {
         "enum": [
           "list",
@@ -14521,6 +15280,142 @@
         ],
         "type": "object"
       },
+      "KubernetesServiceImportRequest": {
+        "additionalProperties": false,
+        "properties": {
+          "applicationKey": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "applicationName": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "clusterId": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "environmentKey": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "environmentName": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "namespace": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "ownershipMode": {
+            "enum": [
+              "observe_only",
+              "managed"
+            ],
+            "type": "string"
+          },
+          "workloads": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesWorkloadImportInput"
+            },
+            "maxItems": 100,
+            "minItems": 1,
+            "type": "array",
+            "uniqueItems": true
+          }
+        },
+        "required": [
+          "clusterId",
+          "namespace",
+          "applicationKey",
+          "applicationName",
+          "environmentKey",
+          "environmentName",
+          "ownershipMode",
+          "workloads"
+        ],
+        "type": "object"
+      },
+      "KubernetesServiceImportResult": {
+        "additionalProperties": false,
+        "properties": {
+          "application": {
+            "$ref": "#/components/schemas/KubernetesImportEntityRef"
+          },
+          "applicationEnvironmentCreated": {
+            "type": "boolean"
+          },
+          "applicationEnvironmentId": {
+            "type": "string"
+          },
+          "environment": {
+            "$ref": "#/components/schemas/KubernetesImportEntityRef"
+          },
+          "ownershipMode": {
+            "enum": [
+              "observe_only",
+              "managed"
+            ],
+            "type": "string"
+          },
+          "services": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesImportedService"
+            },
+            "type": "array"
+          },
+          "targets": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesImportedTarget"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "application",
+          "environment",
+          "applicationEnvironmentId",
+          "applicationEnvironmentCreated",
+          "ownershipMode",
+          "services",
+          "targets"
+        ],
+        "type": "object"
+      },
+      "KubernetesServiceImportResultEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/KubernetesServiceImportResult"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "KubernetesWorkloadImportInput": {
+        "additionalProperties": false,
+        "properties": {
+          "workloadKind": {
+            "enum": [
+              "Deployment",
+              "StatefulSet",
+              "DaemonSet"
+            ],
+            "type": "string"
+          },
+          "workloadName": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "workloadKind",
+          "workloadName"
+        ],
+        "type": "object"
+      },
       "LLMCallLog": {
         "additionalProperties": false,
         "properties": {
@@ -19480,6 +20375,312 @@
         "description": "Native provider-compatible JSON. Unknown fields are preserved and responses are not wrapped in an OpenSoha envelope.",
         "type": "object"
       },
+      "ObservabilityDashboard": {
+        "additionalProperties": false,
+        "properties": {
+          "createdAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "dataSourceId": {
+            "maxLength": 200,
+            "type": "string"
+          },
+          "id": {
+            "maxLength": 128,
+            "minLength": 1,
+            "type": "string"
+          },
+          "name": {
+            "maxLength": 200,
+            "minLength": 1,
+            "type": "string"
+          },
+          "panels": {
+            "items": {
+              "$ref": "#/components/schemas/ObservabilityDashboardPanel"
+            },
+            "maxItems": 200,
+            "type": "array"
+          },
+          "source": {
+            "$ref": "#/components/schemas/ObservabilityDashboardSource"
+          },
+          "sourceSchemaVersion": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "tags": {
+            "items": {
+              "maxLength": 100,
+              "minLength": 1,
+              "type": "string"
+            },
+            "maxItems": 50,
+            "type": "array",
+            "uniqueItems": true
+          },
+          "updatedAt": {
+            "format": "date-time",
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "source",
+          "tags",
+          "panels",
+          "createdAt",
+          "updatedAt"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/ObservabilityDashboard"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardImportResult": {
+        "additionalProperties": false,
+        "properties": {
+          "dashboard": {
+            "$ref": "#/components/schemas/ObservabilityDashboard"
+          },
+          "importedPanelCount": {
+            "minimum": 1,
+            "type": "integer"
+          },
+          "skippedPanelCount": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "warnings": {
+            "items": {
+              "$ref": "#/components/schemas/ObservabilityDashboardImportWarning"
+            },
+            "maxItems": 500,
+            "type": "array"
+          }
+        },
+        "required": [
+          "dashboard",
+          "warnings",
+          "importedPanelCount",
+          "skippedPanelCount"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardImportResultEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/ObservabilityDashboardImportResult"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardImportWarning": {
+        "additionalProperties": false,
+        "properties": {
+          "code": {
+            "enum": [
+              "unsupported_panel_type",
+              "skipped_target",
+              "unsupported_variable",
+              "datasource_rebound",
+              "unsupported_feature"
+            ],
+            "type": "string"
+          },
+          "message": {
+            "maxLength": 500,
+            "minLength": 1,
+            "type": "string"
+          },
+          "panelId": {
+            "maxLength": 128,
+            "type": "string"
+          }
+        },
+        "required": [
+          "code",
+          "message"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardListEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "items": {
+            "items": {
+              "$ref": "#/components/schemas/ObservabilityDashboard"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "items"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardPanel": {
+        "additionalProperties": false,
+        "properties": {
+          "id": {
+            "maxLength": 128,
+            "minLength": 1,
+            "type": "string"
+          },
+          "layout": {
+            "$ref": "#/components/schemas/ObservabilityDashboardPanelLayout"
+          },
+          "markdown": {
+            "maxLength": 32768,
+            "type": "string"
+          },
+          "queryable": {
+            "type": "boolean"
+          },
+          "targets": {
+            "items": {
+              "$ref": "#/components/schemas/ObservabilityDashboardTarget"
+            },
+            "maxItems": 8,
+            "type": "array"
+          },
+          "title": {
+            "maxLength": 200,
+            "minLength": 1,
+            "type": "string"
+          },
+          "type": {
+            "$ref": "#/components/schemas/ObservabilityDashboardPanelType"
+          }
+        },
+        "required": [
+          "id",
+          "title",
+          "type",
+          "layout",
+          "targets",
+          "queryable"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardPanelLayout": {
+        "additionalProperties": false,
+        "properties": {
+          "h": {
+            "maximum": 100,
+            "minimum": 1,
+            "type": "integer"
+          },
+          "w": {
+            "maximum": 24,
+            "minimum": 1,
+            "type": "integer"
+          },
+          "x": {
+            "maximum": 23,
+            "minimum": 0,
+            "type": "integer"
+          },
+          "y": {
+            "minimum": 0,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "x",
+          "y",
+          "w",
+          "h"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardPanelQueryInput": {
+        "additionalProperties": false,
+        "properties": {
+          "stepSeconds": {
+            "default": 60,
+            "maximum": 3600,
+            "minimum": 1,
+            "type": "integer"
+          },
+          "timeFrom": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "timeTo": {
+            "format": "date-time",
+            "type": "string"
+          }
+        },
+        "required": [
+          "timeFrom",
+          "timeTo"
+        ],
+        "type": "object"
+      },
+      "ObservabilityDashboardPanelType": {
+        "enum": [
+          "timeseries",
+          "stat",
+          "text",
+          "row"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "ObservabilityDashboardPanelTypeTimeseries",
+          "ObservabilityDashboardPanelTypeStat",
+          "ObservabilityDashboardPanelTypeText",
+          "ObservabilityDashboardPanelTypeRow"
+        ]
+      },
+      "ObservabilityDashboardSource": {
+        "enum": [
+          "grafana"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "ObservabilityDashboardSourceGrafana"
+        ]
+      },
+      "ObservabilityDashboardTarget": {
+        "additionalProperties": false,
+        "properties": {
+          "expression": {
+            "maxLength": 8192,
+            "minLength": 1,
+            "type": "string"
+          },
+          "legend": {
+            "maxLength": 256,
+            "type": "string"
+          },
+          "refId": {
+            "maxLength": 16,
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "refId",
+          "expression"
+        ],
+        "type": "object"
+      },
       "ObservabilityDataSource": {
         "additionalProperties": false,
         "properties": {
@@ -19697,6 +20898,28 @@
           "ObservabilityDataSourceValidationStatusFailed"
         ]
       },
+      "ObservabilityGrafanaDashboardImportInput": {
+        "additionalProperties": false,
+        "properties": {
+          "dataSourceId": {
+            "description": "Enabled Soha Prometheus data source used by every imported queryable panel.",
+            "maxLength": 200,
+            "minLength": 1,
+            "type": "string"
+          },
+          "json": {
+            "description": "Grafana Classic dashboard JSON or a V1 resource whose spec contains the Classic dashboard model.",
+            "maxLength": 2097152,
+            "minLength": 2,
+            "type": "string"
+          }
+        },
+        "required": [
+          "json",
+          "dataSourceId"
+        ],
+        "type": "object"
+      },
       "ObservabilityLogDataSourceConfig": {
         "additionalProperties": false,
         "properties": {
@@ -19850,6 +21073,41 @@
         },
         "type": "object"
       },
+      "ObservabilityMetricDataSource": {
+        "additionalProperties": false,
+        "properties": {
+          "id": {
+            "maxLength": 200,
+            "minLength": 1,
+            "type": "string"
+          },
+          "name": {
+            "maxLength": 200,
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name"
+        ],
+        "type": "object"
+      },
+      "ObservabilityMetricDataSourceListEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "items": {
+            "items": {
+              "$ref": "#/components/schemas/ObservabilityMetricDataSource"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "items"
+        ],
+        "type": "object"
+      },
       "ObservabilityMetricKey": {
         "enum": [
           "cpu_usage",
@@ -20936,6 +22194,192 @@
         ],
         "type": "object"
       },
+      "PermissionApprovalPolicy": {
+        "enum": [
+          "never",
+          "eligible",
+          "required"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "PermissionApprovalPolicyNever",
+          "PermissionApprovalPolicyEligible",
+          "PermissionApprovalPolicyRequired"
+        ]
+      },
+      "PermissionCatalog": {
+        "additionalProperties": false,
+        "properties": {
+          "catalogVersion": {
+            "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$",
+            "type": "string"
+          },
+          "contentHash": {
+            "pattern": "^sha256:[a-f0-9]{64}$",
+            "type": "string"
+          },
+          "permissions": {
+            "items": {
+              "$ref": "#/components/schemas/PermissionDefinition"
+            },
+            "minItems": 1,
+            "type": "array"
+          },
+          "schemaVersion": {
+            "const": "authorization.opensoha.io/v1",
+            "type": "string"
+          }
+        },
+        "required": [
+          "schemaVersion",
+          "catalogVersion",
+          "contentHash",
+          "permissions"
+        ],
+        "type": "object"
+      },
+      "PermissionCatalogEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/PermissionCatalog"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "PermissionDefinition": {
+        "additionalProperties": false,
+        "properties": {
+          "action": {
+            "pattern": "^[a-z][a-z0-9_-]*$",
+            "type": "string"
+          },
+          "approvalPolicy": {
+            "$ref": "#/components/schemas/PermissionApprovalPolicy"
+          },
+          "assignable": {
+            "type": "boolean"
+          },
+          "displayName": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "domain": {
+            "pattern": "^[a-z][a-z0-9_-]*$",
+            "type": "string"
+          },
+          "key": {
+            "pattern": "^[a-z][a-z0-9_-]*(?:\\.[a-z][a-z0-9_-]*)+$",
+            "type": "string"
+          },
+          "legacyAliases": {
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "legacyCapabilities": {
+            "description": "Migration-only role-global action aliases accepted by this exact permission.",
+            "items": {
+              "pattern": "^[a-z][a-z0-9_-]*$",
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "replacedBy": {
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "type": "array",
+            "uniqueItems": true
+          },
+          "resource": {
+            "pattern": "^[a-z][a-z0-9_.-]*$",
+            "type": "string"
+          },
+          "riskLevel": {
+            "$ref": "#/components/schemas/PermissionRiskLevel"
+          },
+          "scopeKinds": {
+            "items": {
+              "$ref": "#/components/schemas/PermissionScopeKind"
+            },
+            "minItems": 1,
+            "type": "array",
+            "uniqueItems": true
+          },
+          "status": {
+            "$ref": "#/components/schemas/PermissionStatus"
+          }
+        },
+        "required": [
+          "key",
+          "domain",
+          "resource",
+          "action",
+          "displayName",
+          "riskLevel",
+          "scopeKinds",
+          "approvalPolicy",
+          "status",
+          "assignable"
+        ],
+        "type": "object"
+      },
+      "PermissionRiskLevel": {
+        "enum": [
+          "read",
+          "mutate",
+          "execute",
+          "high"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "PermissionRiskLevelRead",
+          "PermissionRiskLevelMutate",
+          "PermissionRiskLevelExecute",
+          "PermissionRiskLevelHigh"
+        ]
+      },
+      "PermissionScopeKind": {
+        "enum": [
+          "tenant",
+          "workspace",
+          "cluster",
+          "namespace",
+          "project",
+          "resource",
+          "owner"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "PermissionScopeKindTenant",
+          "PermissionScopeKindWorkspace",
+          "PermissionScopeKindCluster",
+          "PermissionScopeKindNamespace",
+          "PermissionScopeKindProject",
+          "PermissionScopeKindResource",
+          "PermissionScopeKindOwner"
+        ]
+      },
+      "PermissionStatus": {
+        "enum": [
+          "active",
+          "legacy"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "PermissionStatusActive",
+          "PermissionStatusLegacy"
+        ]
+      },
       "PersonalAccessToken": {
         "additionalProperties": false,
         "properties": {
@@ -22192,6 +23636,140 @@
         },
         "type": "object"
       },
+      "RegistryConnection": {
+        "additionalProperties": false,
+        "properties": {
+          "createdAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "endpoint": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "id": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "insecure": {
+            "type": "boolean"
+          },
+          "metadata": {
+            "$ref": "#/components/schemas/RegistryConnectionMetadata"
+          },
+          "name": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "namespace": {
+            "type": "string"
+          },
+          "registryType": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "updatedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "username": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "name",
+          "registryType",
+          "endpoint",
+          "insecure",
+          "metadata",
+          "createdAt",
+          "updatedAt"
+        ],
+        "type": "object"
+      },
+      "RegistryConnectionEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/RegistryConnection"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "RegistryConnectionInput": {
+        "additionalProperties": false,
+        "properties": {
+          "endpoint": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "insecure": {
+            "type": "boolean"
+          },
+          "name": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "namespace": {
+            "type": "string"
+          },
+          "registryType": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "secret": {
+            "type": "string",
+            "writeOnly": true
+          },
+          "username": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "registryType",
+          "endpoint"
+        ],
+        "type": "object"
+      },
+      "RegistryConnectionListEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "items": {
+            "items": {
+              "$ref": "#/components/schemas/RegistryConnection"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "items"
+        ],
+        "type": "object"
+      },
+      "RegistryConnectionMetadata": {
+        "additionalProperties": false,
+        "properties": {
+          "secretConfigured": {
+            "type": "boolean"
+          },
+          "secretStorage": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "secretConfigured",
+          "secretStorage"
+        ],
+        "type": "object"
+      },
       "ReleaseBundle": {
         "additionalProperties": false,
         "properties": {
@@ -24871,6 +26449,287 @@
         ],
         "type": "object"
       },
+      "SoftwarePackage": {
+        "additionalProperties": false,
+        "properties": {
+          "arch": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "category": {
+            "maxLength": 50,
+            "type": "string"
+          },
+          "createdAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "description": {
+            "maxLength": 500,
+            "type": "string"
+          },
+          "downloadPath": {
+            "pattern": "^/api/v1/software/packages/[^/]+/download$",
+            "type": "string"
+          },
+          "fileName": {
+            "maxLength": 255,
+            "minLength": 1,
+            "type": "string"
+          },
+          "id": {
+            "maxLength": 128,
+            "minLength": 1,
+            "type": "string"
+          },
+          "name": {
+            "maxLength": 100,
+            "minLength": 1,
+            "type": "string"
+          },
+          "platform": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "publisher": {
+            "maxLength": 100,
+            "minLength": 1,
+            "type": "string"
+          },
+          "sha256": {
+            "pattern": "^[0-9a-f]{64}$",
+            "type": "string"
+          },
+          "sizeBytes": {
+            "format": "int64",
+            "maximum": 4294967296,
+            "minimum": 1,
+            "type": "integer"
+          },
+          "softwareId": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "updatedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "version": {
+            "maxLength": 64,
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "softwareId",
+          "name",
+          "publisher",
+          "version",
+          "platform",
+          "arch",
+          "fileName",
+          "sizeBytes",
+          "sha256",
+          "downloadPath",
+          "createdAt",
+          "updatedAt"
+        ],
+        "type": "object"
+      },
+      "SoftwarePackageEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/SoftwarePackage"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "SoftwarePackageListEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "items": {
+            "items": {
+              "$ref": "#/components/schemas/SoftwarePackage"
+            },
+            "type": "array"
+          },
+          "nextCursor": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "items"
+        ],
+        "type": "object"
+      },
+      "SoftwarePackageUploadRequest": {
+        "additionalProperties": false,
+        "properties": {
+          "arch": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "category": {
+            "maxLength": 50,
+            "type": "string"
+          },
+          "description": {
+            "maxLength": 500,
+            "type": "string"
+          },
+          "file": {
+            "format": "binary",
+            "type": "string"
+          },
+          "name": {
+            "maxLength": 100,
+            "minLength": 1,
+            "type": "string"
+          },
+          "platform": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "publisher": {
+            "maxLength": 100,
+            "minLength": 1,
+            "type": "string"
+          },
+          "softwareId": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "version": {
+            "maxLength": 64,
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "softwareId",
+          "name",
+          "publisher",
+          "version",
+          "platform",
+          "arch",
+          "file"
+        ],
+        "type": "object"
+      },
+      "SoftwarePackageURLImportRequest": {
+        "additionalProperties": false,
+        "properties": {
+          "arch": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "category": {
+            "maxLength": 50,
+            "type": "string"
+          },
+          "description": {
+            "maxLength": 500,
+            "type": "string"
+          },
+          "fileName": {
+            "maxLength": 255,
+            "minLength": 1,
+            "type": "string"
+          },
+          "name": {
+            "maxLength": 100,
+            "minLength": 1,
+            "type": "string"
+          },
+          "platform": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "publisher": {
+            "maxLength": 100,
+            "minLength": 1,
+            "type": "string"
+          },
+          "softwareId": {
+            "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+            "type": "string"
+          },
+          "url": {
+            "format": "uri",
+            "maxLength": 2048,
+            "pattern": "^https://",
+            "type": "string"
+          },
+          "version": {
+            "maxLength": 64,
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "softwareId",
+          "name",
+          "publisher",
+          "version",
+          "platform",
+          "arch",
+          "url"
+        ],
+        "type": "object"
+      },
+      "SoftwareStorage": {
+        "additionalProperties": false,
+        "properties": {
+          "backend": {
+            "maxLength": 64,
+            "minLength": 1,
+            "type": "string"
+          },
+          "items": {
+            "items": {
+              "$ref": "#/components/schemas/SoftwarePackage"
+            },
+            "type": "array"
+          },
+          "nextCursor": {
+            "type": "string"
+          },
+          "objectCount": {
+            "format": "int64",
+            "minimum": 0,
+            "type": "integer"
+          },
+          "totalBytes": {
+            "format": "int64",
+            "minimum": 0,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "backend",
+          "objectCount",
+          "totalBytes",
+          "items"
+        ],
+        "type": "object"
+      },
+      "SoftwareStorageEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/SoftwareStorage"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
       "SourceBranch": {
         "additionalProperties": false,
         "properties": {
@@ -27035,6 +28894,11 @@
       }
     },
     "securitySchemes": {
+      "agentBearerAuth": {
+        "description": "Per-cluster Agent session token provisioned through the installation manifest.",
+        "scheme": "bearer",
+        "type": "http"
+      },
       "bearerAuth": {
         "bearerFormat": "JWT",
         "scheme": "bearer",
@@ -27056,7 +28920,7 @@
   "info": {
     "description": "Public OpenSoha core API contract. This first contract focuses on stable cross-repository boundaries: auth, health, runner-facing control-plane callbacks, AI Gateway, and MCP capability discovery.\n",
     "title": "Soha API",
-    "version": "0.1.5"
+    "version": "0.1.7"
   },
   "openapi": "3.1.0",
   "paths": {
@@ -27190,6 +29054,229 @@
         ]
       }
     },
+    "/access/permissions": {
+      "get": {
+        "operationId": "getPermissionCatalog",
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PermissionCatalogEnvelope"
+                }
+              }
+            },
+            "description": "Canonical permission definitions and compatibility metadata."
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Access"
+        ]
+      }
+    },
+    "/access/roles": {
+      "get": {
+        "operationId": "listAccessRoles",
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AccessRoleListEnvelope"
+                }
+              }
+            },
+            "description": "Access roles."
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Access"
+        ]
+      },
+      "post": {
+        "operationId": "createAccessRole",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/AccessRoleInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "201": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AccessRoleEnvelope"
+                }
+              }
+            },
+            "description": "Created access role."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Access"
+        ]
+      }
+    },
+    "/access/roles/{accessRoleID}": {
+      "delete": {
+        "operationId": "deleteAccessRole",
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AccessRoleDeleteResult"
+                }
+              }
+            },
+            "description": "Access role deleted."
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Access"
+        ]
+      },
+      "get": {
+        "operationId": "getAccessRole",
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AccessRoleEnvelope"
+                }
+              }
+            },
+            "description": "Access role detail."
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Access"
+        ]
+      },
+      "parameters": [
+        {
+          "$ref": "#/components/parameters/AccessRoleID"
+        }
+      ],
+      "put": {
+        "operationId": "updateAccessRole",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/AccessRoleInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AccessRoleEnvelope"
+                }
+              }
+            },
+            "description": "Updated access role."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Access"
+        ]
+      }
+    },
+    "/agent-sessions/connect": {
+      "get": {
+        "description": "Upgrades to the soha-agent-tunnel.v1 WebSocket subprotocol. The Agent initiates this connection and carries multiplexed HTTP and stream traffic over the resulting session.\n",
+        "operationId": "connectClusterAgentSession",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterIDQuery"
+          }
+        ],
+        "responses": {
+          "101": {
+            "description": "WebSocket session established."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "security": [
+          {
+            "agentBearerAuth": []
+          }
+        ],
+        "tags": [
+          "Platform"
+        ]
+      }
+    },
     "/ai-gateway/approval-requests": {
       "get": {
         "operationId": "listAIGatewayApprovalRequests",
@@ -33740,6 +35827,149 @@
         ]
       }
     },
+    "/application-environments/helm-release-imports": {
+      "post": {
+        "operationId": "importHelmReleases",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/HelmReleaseImportRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/HelmReleaseImportResultEnvelope"
+                }
+              }
+            },
+            "description": "Idempotent Helm release import result."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Delivery"
+        ]
+      }
+    },
+    "/application-environments/imports": {
+      "post": {
+        "operationId": "importKubernetesServices",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/KubernetesServiceImportRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesServiceImportResultEnvelope"
+                }
+              }
+            },
+            "description": "Idempotent Kubernetes service import result."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Delivery"
+        ]
+      }
+    },
+    "/application-environments/target-candidates": {
+      "get": {
+        "operationId": "listApplicationEnvironmentTargetCandidates",
+        "parameters": [
+          {
+            "in": "query",
+            "name": "clusterId",
+            "required": true,
+            "schema": {
+              "minLength": 1,
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "namespace",
+            "required": true,
+            "schema": {
+              "minLength": 1,
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "search",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "limit",
+            "required": false,
+            "schema": {
+              "default": 100,
+              "maximum": 200,
+              "minimum": 1,
+              "type": "integer"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesImportCandidateListEnvelope"
+                }
+              }
+            },
+            "description": "Discoverable Kubernetes workloads and their related resources."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Delivery"
+        ]
+      }
+    },
     "/applications": {
       "get": {
         "operationId": "listApplications",
@@ -34699,6 +36929,43 @@
         ]
       }
     },
+    "/clusters/{clusterID}/agent-installation": {
+      "post": {
+        "operationId": "createClusterAgentInstallation",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AgentInstallationEnvelope"
+                }
+              }
+            },
+            "description": "Short-lived Kubernetes manifest URL and kubectl command for installing the cluster Agent."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ]
+      }
+    },
     "/clusters/{clusterID}/logs/query": {
       "post": {
         "operationId": "queryClusterLogs",
@@ -39801,6 +42068,38 @@
         ]
       }
     },
+    "/kubernetes/agent-installations/{installTicket}/manifest.yaml": {
+      "get": {
+        "operationId": "downloadKubernetesAgentInstallationManifest",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/AgentInstallTicket"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/yaml": {
+                "schema": {
+                  "type": "string"
+                }
+              }
+            },
+            "description": "Complete Kubernetes Agent installation manifest. The download URL is short-lived."
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "410": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "security": [],
+        "tags": [
+          "Platform"
+        ]
+      }
+    },
     "/marketplace/index.json": {
       "get": {
         "operationId": "getPublicMarketplaceCatalog",
@@ -39876,6 +42175,178 @@
         ]
       }
     },
+    "/observability/dashboards": {
+      "get": {
+        "operationId": "listObservabilityDashboards",
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ObservabilityDashboardListEnvelope"
+                }
+              }
+            },
+            "description": "Dashboards visible to the current principal."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Observability"
+        ]
+      }
+    },
+    "/observability/dashboards/{dashboardID}": {
+      "delete": {
+        "operationId": "deleteObservabilityDashboard",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/DashboardID"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OperationStatus"
+                }
+              }
+            },
+            "description": "Dashboard deleted."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Observability"
+        ]
+      },
+      "get": {
+        "operationId": "getObservabilityDashboard",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/DashboardID"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ObservabilityDashboardEnvelope"
+                }
+              }
+            },
+            "description": "Dashboard detail including normalized panels and targets."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Observability"
+        ]
+      }
+    },
+    "/observability/dashboards/{dashboardID}/panels/{panelID}/query": {
+      "post": {
+        "operationId": "queryObservabilityDashboardPanel",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/DashboardID"
+          },
+          {
+            "$ref": "#/components/parameters/DashboardPanelID"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ObservabilityDashboardPanelQueryInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ObservabilityMetricQueryEnvelope"
+                }
+              }
+            },
+            "description": "Normalized metric series for the persisted dashboard panel targets."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Observability"
+        ]
+      }
+    },
+    "/observability/dashboards/imports": {
+      "post": {
+        "operationId": "importGrafanaDashboard",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ObservabilityGrafanaDashboardImportInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "201": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ObservabilityDashboardImportResultEnvelope"
+                }
+              }
+            },
+            "description": "Imported native dashboard and explicit compatibility warnings."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Observability"
+        ]
+      }
+    },
     "/observability/data-sources": {
       "get": {
         "operationId": "listObservabilityDataSources",
@@ -40011,6 +42482,29 @@
         ]
       }
     },
+    "/observability/metrics/data-sources": {
+      "get": {
+        "operationId": "listObservabilityMetricDataSources",
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ObservabilityMetricDataSourceListEnvelope"
+                }
+              }
+            },
+            "description": "Enabled Prometheus data sources available for metric dashboards."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Observability"
+        ]
+      }
+    },
     "/observability/metrics/query": {
       "post": {
         "operationId": "queryObservabilityMetrics",
@@ -40501,6 +42995,148 @@
         ]
       }
     },
+    "/registries": {
+      "get": {
+        "operationId": "listRegistryConnections",
+        "parameters": [
+          {
+            "in": "query",
+            "name": "limit",
+            "required": false,
+            "schema": {
+              "maximum": 200,
+              "minimum": 1,
+              "type": "integer"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RegistryConnectionListEnvelope"
+                }
+              }
+            },
+            "description": "Registry connections visible to the current principal."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Delivery"
+        ]
+      },
+      "post": {
+        "operationId": "createRegistryConnection",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RegistryConnectionInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "201": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RegistryConnectionEnvelope"
+                }
+              }
+            },
+            "description": "Created registry connection."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Delivery"
+        ]
+      }
+    },
+    "/registries/{connectionID}": {
+      "delete": {
+        "operationId": "deleteRegistryConnection",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/RegistryConnectionID"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OperationStatus"
+                }
+              }
+            },
+            "description": "Deleted registry connection."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Delivery"
+        ]
+      },
+      "put": {
+        "operationId": "updateRegistryConnection",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/RegistryConnectionID"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RegistryConnectionInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RegistryConnectionEnvelope"
+                }
+              }
+            },
+            "description": "Updated registry connection."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Delivery"
+        ]
+      }
+    },
     "/repositories": {
       "get": {
         "operationId": "listRepositories",
@@ -41473,6 +44109,271 @@
         ]
       }
     },
+    "/software/packages": {
+      "get": {
+        "operationId": "listSoftwarePackages",
+        "parameters": [
+          {
+            "in": "query",
+            "name": "platform",
+            "required": false,
+            "schema": {
+              "maxLength": 64,
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "arch",
+            "required": false,
+            "schema": {
+              "maxLength": 64,
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "cursor",
+            "required": false,
+            "schema": {
+              "maxLength": 256,
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "limit",
+            "required": false,
+            "schema": {
+              "maximum": 200,
+              "minimum": 1,
+              "type": "integer"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SoftwarePackageListEnvelope"
+                }
+              }
+            },
+            "description": "Software packages visible to the current principal."
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Software"
+        ]
+      },
+      "post": {
+        "operationId": "uploadSoftwarePackage",
+        "requestBody": {
+          "content": {
+            "multipart/form-data": {
+              "schema": {
+                "$ref": "#/components/schemas/SoftwarePackageUploadRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "201": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SoftwarePackageEnvelope"
+                }
+              }
+            },
+            "description": "Software package uploaded and published."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "413": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Software"
+        ]
+      }
+    },
+    "/software/packages/{packageID}": {
+      "delete": {
+        "operationId": "deleteSoftwarePackage",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/SoftwarePackageID"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Software package deleted."
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Software"
+        ]
+      }
+    },
+    "/software/packages/{packageID}/download": {
+      "get": {
+        "operationId": "downloadSoftwarePackage",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/SoftwarePackageID"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/octet-stream": {
+                "schema": {
+                  "format": "binary",
+                  "type": "string"
+                }
+              }
+            },
+            "description": "Software package binary."
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Software"
+        ]
+      }
+    },
+    "/software/packages/import": {
+      "post": {
+        "operationId": "importSoftwarePackage",
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SoftwarePackageURLImportRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "201": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SoftwarePackageEnvelope"
+                }
+              }
+            },
+            "description": "Software package downloaded from the source URL and published."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "413": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Software"
+        ]
+      }
+    },
+    "/software/storage": {
+      "get": {
+        "operationId": "getSoftwareStorage",
+        "parameters": [
+          {
+            "in": "query",
+            "name": "cursor",
+            "required": false,
+            "schema": {
+              "maxLength": 256,
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "limit",
+            "required": false,
+            "schema": {
+              "maximum": 200,
+              "minimum": 1,
+              "type": "integer"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SoftwareStorageEnvelope"
+                }
+              }
+            },
+            "description": "Managed software storage summary and object records."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "401": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Software"
+        ]
+      }
+    },
     "/source-connections": {
       "get": {
         "operationId": "listSourceConnections",
@@ -42344,6 +45245,12 @@
     {
       "name": "Plugins"
     },
+    {
+      "name": "Software"
+    },
+    {
+      "name": "Access"
+    },
     {
       "name": "Identity"
     },