@runlot/api 0.1.0-rc.154 → 0.1.0-rc.156

package/dist/schema.d.ts

@@ -226,6 +226,15 @@ export interface paths {
          *     for one project, provider and attached host and lives ten minutes. Sends a 302
          *     to the provider with identity-only scopes (GitHub `read:user user:email`,
          *     Google `openid email profile` with PKCE).
+         *
+         *     For the `runlot` provider (docs/custom-sign-in.md §12.2) four optional
+         *     parameters are validated and kept on the start; an invalid one is dropped.
+         *     `idp=google|github` goes straight to that upstream when the project offers it,
+         *     `idp=password|passkey` opens the chooser in that mode, `prompt=none` issues a
+         *     grant with no page when the browser has a Runlot ID session and the person has
+         *     signed in to this project before, else returns `auth_error=login_required`.
+         *     Every failure returns to `error_next` (or `next`) on the app host with
+         *     `auth_error=<code>&auth_request=<id>`.
          */
         get: operations["appAuthStart"];
         put?: never;
@@ -260,6 +269,116 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/app-auth/choose/{id}/cancel": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Runlot sign-in: back to the app
+         * @description The chooser's "back to <app>" link. Consumes the start and returns to the app with
+         *     `auth_error=cancelled&auth_request=<id>`.
+         */
+        get: operations["appAuthChooseCancel"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/app-auth/choose/{id}/continue": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Runlot sign-in: continue as the remembered Runlot user
+         * @description One click for a browser holding the broker's Runlot ID cookie
+         *     (docs/custom-sign-in.md §12.7). Without a valid cookie the chooser is re-rendered.
+         */
+        post: operations["appAuthChooseContinue"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/app-auth/choose/{id}/passkey/options": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Runlot sign-in: passkey assertion options */
+        post: operations["appAuthPasskeyOptions"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/app-auth/choose/{id}/passkey": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Runlot sign-in: verify a passkey assertion */
+        post: operations["appAuthPasskeyVerify"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/app-auth/passkey/register/options": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Passkey offer: creation options */
+        post: operations["appAuthPasskeyRegisterOptions"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/app-auth/passkey/register": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Passkey offer: store the new passkey */
+        post: operations["appAuthPasskeyRegister"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/app-auth/choose/{id}/password": {
         parameters: {
             query?: never;
@@ -1059,6 +1178,109 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/orgs/{orgSlug}/projects/{projectName}/deployments/uploads": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Open an incremental deploy upload: list the bundle's files, learn which are missing
+         * @description The incremental form of `createDeployment` (docs/incremental-deploy-upload.md §1).
+         *     The body lists every entry the bundle tar would hold, **in tar order** — the server
+         *     does not re-sort it, so what it assembles at commit is what the client would have
+         *     tarred. A directory is `{ "path": "assets/", "type": "dir" }`.
+         *
+         *     The list is checked against the bundle limits (entry count, path rules, per-entry
+         *     and total size, the single `runlot.json`) and the org/licence/preview checks of
+         *     `createDeployment` run here, so a deploy that is going to be refused is refused
+         *     before any byte moves.
+         *
+         *     The answer names the sha256 hashes the server does not already hold for this
+         *     project (a preview uses its parent's). Upload those with `uploadDeploymentBlobs`,
+         *     then `commitDeploymentUpload`. A session lives for `expiresAt` (one hour).
+         *
+         *     An older control plane answers **404** here; a client falls back to the single
+         *     `createDeployment` POST.
+         */
+        post: operations["createDeploymentUpload"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/orgs/{orgSlug}/projects/{projectName}/deployments/uploads/{uploadId}/blobs": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+                uploadId: string;
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Upload a batch of file contents for an open upload session
+         * @description The body is a gzip tar of regular entries, each named by the lowercase sha256 hex
+         *     of its content. Clients keep each body at most 8 MiB of input; a single file larger
+         *     than that goes alone. Re-sending a blob is harmless, so a failed batch is retried
+         *     as a whole.
+         *
+         *     `400 blob_mismatch` — an entry's content does not hash to its name.
+         *     `400 blob_not_listed` — a hash the session's file list did not mention.
+         *     `404 upload_not_found` — no such session, or it expired.
+         */
+        post: operations["uploadDeploymentBlobs"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/orgs/{orgSlug}/projects/{projectName}/deployments/uploads/{uploadId}/commit": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+                uploadId: string;
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Assemble the uploaded files into the bundle and deploy it
+         * @description Assembles the gzip tar in the listed order and deploys it exactly as
+         *     `createDeployment` would; the 201 body is the same (`Deployment`, plus `preview` for
+         *     a preview session). Takes the same provenance headers.
+         *
+         *     **Idempotent per session**: committing a session that already produced a deployment
+         *     returns that deployment instead of making a new version, so a client retries a
+         *     commit that timed out at the edge.
+         *
+         *     `409 blobs_missing` — a listed blob is not held (it may have been swept between list
+         *     and commit); `details.missing` names them. Upload those and commit again.
+         *     `404 upload_not_found` — no such session, or it expired.
+         */
+        post: operations["commitDeploymentUpload"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/orgs/{orgSlug}/projects/{projectName}/deployments/{deploymentId}": {
         parameters: {
             query?: never;
@@ -2806,6 +3028,87 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/orgs/{orgSlug}/projects/{projectName}/auth/branding": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        /**
+         * The sign-in page branding, defaults filled
+         * @description `settings.brand` (docs/custom-sign-in.md §12.3) with every default written out, and
+         *     `effectiveMethods`, what the chooser draws now. Viewer or higher.
+         */
+        get: operations["getAuthBranding"];
+        /**
+         * Replace the sign-in page branding
+         * @description The whole brand object (absent fields are defaults). Refused fields answer 400
+         *     `invalid_branding` with `error.details.fields: [{path, message}]`. Member or higher.
+         */
+        put: operations["putAuthBranding"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/orgs/{orgSlug}/projects/{projectName}/auth/funnel": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        /**
+         * Sign-in funnel counters
+         * @description Daily counters kept by the broker (docs/custom-sign-in.md §9.4), oldest first, 90-day
+         *     retention. Events: `start` (key: idp, `chooser` or `silent`), `chooser_view`,
+         *     `method` (key: password|google|github|passkey|session), `success` (key: method),
+         *     `error` (key: auth_error code, or `passkey_failed`). No per-person data.
+         */
+        get: operations["getAuthFunnel"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/orgs/{orgSlug}/projects/{projectName}/auth/branding/preview": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        /**
+         * Render the chooser with draft branding
+         * @description The real chooser template with every link inert. Authenticated by the session bearer
+         *     or by `ticket` (from POST), so an `<iframe>` can load it; framable only by this
+         *     origin. `/v1/projects/{projectId}/auth/branding/preview` is the same by project id.
+         */
+        get: operations["previewAuthBranding"];
+        put?: never;
+        /** A ten-minute preview ticket */
+        post: operations["mintAuthBrandingPreviewTicket"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/orgs/{orgSlug}/projects/{projectName}/auth/providers/{provider}": {
         parameters: {
             query?: never;
@@ -4554,6 +4857,46 @@ export interface paths {
 export type webhooks = Record<string, never>;
 export interface components {
     schemas: {
+        /** @description docs/custom-sign-in.md §12.3. Every field optional; empty is the default. */
+        SignInBrand: {
+            name?: string;
+            /** @description http(s) URL */
+            logo?: string;
+            color?: string;
+            /** @description https URL */
+            logoDark?: string;
+            /** @enum {string} */
+            theme?: "light" | "dark" | "system";
+            /** @enum {string} */
+            layout?: "centered" | "split" | "minimal";
+            /** @enum {string} */
+            buttonShape?: "rounded" | "pill" | "square";
+            background?: {
+                /** @enum {string} */
+                kind?: "none" | "color" | "gradient" | "image";
+                /** @description #rrggbb | '#rrggbb,#rrggbb[,#rrggbb]' | https URL */
+                value?: string;
+            };
+            copy?: {
+                [key: string]: {
+                    title?: string;
+                    subtitle?: string;
+                    footer?: string;
+                };
+            };
+            links?: {
+                terms?: string;
+                privacy?: string;
+                support?: string;
+            };
+            /** @enum {string} */
+            defaultLang?: "ko" | "en" | "ja" | "";
+            methods?: ("password" | "google" | "github" | "passkey")[];
+        };
+        AuthBranding: {
+            brand: components["schemas"]["SignInBrand"];
+            effectiveMethods: string[];
+        };
         RepoRefs: {
             /**
              * @description The repository's current default branch. If this ever disagrees with
@@ -5216,6 +5559,28 @@ export interface components {
             email: boolean;
             auth: boolean;
         };
+        /**
+         * @description One entry of an incremental upload's file list. A regular file carries `sha256`
+         *     (lowercase hex) and `size`; a directory carries `type: dir` and a path ending in `/`.
+         */
+        DeploymentUploadEntry: {
+            path: string;
+            sha256?: string;
+            /** Format: int64 */
+            size?: number;
+            /**
+             * @default file
+             * @enum {string}
+             */
+            type: "file" | "dir";
+        };
+        DeploymentUpload: {
+            uploadId: string;
+            /** @description sha256 hashes the server does not hold yet. Upload these, then commit. */
+            missing: string[];
+            /** Format: date-time */
+            expiresAt: string;
+        };
         Deployment: {
             /** Format: uuid */
             deploymentId: string;
@@ -6880,6 +7245,11 @@ export interface components {
              * @description the balance (can be negative)
              */
             microCents: number;
+            /**
+             * Format: int64
+             * @description The part of the balance your running apps have set aside for calls in progress. It is still yours — what a call does not use returns to the balance. Zero when nothing is held
+             */
+            heldMicroCents?: number;
             /** Format: int64 */
             lowMicroCents?: number;
             /** Format: int64 */
@@ -8208,7 +8578,12 @@ export interface operations {
     };
     appAuthStart: {
         parameters: {
-            query?: never;
+            query?: {
+                idp?: "google" | "github" | "password" | "passkey";
+                login_hint?: string;
+                error_next?: string;
+                prompt?: "none";
+            };
             header?: never;
             path: {
                 id: string;
@@ -8269,7 +8644,7 @@ export interface operations {
             };
         };
     };
-    appAuthChoosePassword: {
+    appAuthChooseCancel: {
         parameters: {
             query?: never;
             header?: never;
@@ -8278,23 +8653,187 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/x-www-form-urlencoded": {
-                    email: string;
-                    password: string;
-                    /** @enum {string} */
-                    mode: "sign-in" | "sign-up";
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The chooser re-rendered with an error */
-            200: {
+            /** @description to the app host with auth_error=cancelled */
+            302: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
+                content?: never;
+            };
+            /** @description `sign_in_expired` */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    appAuthChooseContinue: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description the chooser (no session) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "text/html": string;
+                };
+            };
+            /** @description to the app host with a grant */
+            303: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    appAuthPasskeyOptions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description `{challengeId, publicKey}` — WebAuthn PublicKeyCredentialRequestOptions (discoverable) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": Record<string, never>;
+                };
+            };
+            404: components["responses"]["NotFound"];
+        };
+    };
+    appAuthPasskeyVerify: {
+        parameters: {
+            query: {
+                challenge: string;
+            };
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": Record<string, never>;
+            };
+        };
+        responses: {
+            /** @description `{redirect}` — the app URL carrying the grant */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": Record<string, never>;
+                };
+            };
+            /** @description `passkey_failed` */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    appAuthPasskeyRegisterOptions: {
+        parameters: {
+            query: {
+                ticket: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description `{publicKey}` — PublicKeyCredentialCreationOptions */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": Record<string, never>;
+                };
+            };
+            400: components["responses"]["BadRequest"];
+        };
+    };
+    appAuthPasskeyRegister: {
+        parameters: {
+            query: {
+                ticket: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": Record<string, never>;
+            };
+        };
+        responses: {
+            /** @description `{redirect}` */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": Record<string, never>;
+                };
+            };
+            400: components["responses"]["BadRequest"];
+        };
+    };
+    appAuthChoosePassword: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/x-www-form-urlencoded": {
+                    email: string;
+                    password: string;
+                    /** @enum {string} */
+                    mode: "sign-in" | "sign-up";
+                };
+            };
+        };
+        responses: {
+            /** @description The chooser re-rendered with an error */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
                     "text/html": string;
                 };
             };
@@ -9609,6 +10148,147 @@ export interface operations {
             };
         };
     };
+    createDeploymentUpload: {
+        parameters: {
+            query?: {
+                /** @description As on `createDeployment`. */
+                preview?: components["schemas"]["Slug"];
+                /** @description As on `createDeployment`. Ignored without `preview`. */
+                db?: "branch" | "shared" | "none";
+                /** @description As on `createDeployment`. */
+                from?: string;
+            };
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    files: components["schemas"]["DeploymentUploadEntry"][];
+                };
+            };
+        };
+        responses: {
+            /** @description The session, and the hashes still to upload */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DeploymentUpload"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+            /** @description `over_project_limit`, `project_disabled`, `preview_limit` — as on `createDeployment`. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description The listed bundle exceeds a limit */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    uploadDeploymentBlobs: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+                uploadId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/gzip": string;
+            };
+        };
+        responses: {
+            /** @description What this batch stored, and what the session still lacks */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        received: string[];
+                        missing: string[];
+                    };
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+            /** @description The batch or one of its entries exceeds a limit */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    commitDeploymentUpload: {
+        parameters: {
+            query?: never;
+            header?: {
+                "X-Runlot-Git-Commit"?: string;
+                "X-Runlot-Git-Message"?: string;
+                "X-Runlot-Git-Branch"?: string;
+                "X-Runlot-Git-Dirty"?: boolean;
+            };
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+                uploadId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The created deployment */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Deployment"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+            /** @description `blobs_missing`, or any 409 of `createDeployment`. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     getDeployment: {
         parameters: {
             query?: never;
@@ -12321,6 +13001,150 @@ export interface operations {
             404: components["responses"]["NotFound"];
         };
     };
+    getAuthBranding: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description `{brand, effectiveMethods}` */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AuthBranding"];
+                };
+            };
+            404: components["responses"]["NotFound"];
+        };
+    };
+    putAuthBranding: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SignInBrand"];
+            };
+        };
+        responses: {
+            /** @description `{brand, effectiveMethods}` */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AuthBranding"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            /** @description `not_granted` */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    getAuthFunnel: {
+        parameters: {
+            query?: {
+                days?: number;
+            };
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description `{days, rows: [{day, event, key, n}]}` */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": Record<string, never>;
+                };
+            };
+        };
+    };
+    previewAuthBranding: {
+        parameters: {
+            query?: {
+                ticket?: string;
+                lang?: "ko" | "en" | "ja";
+                theme?: "light" | "dark" | "system";
+                state?: string;
+                draft?: string;
+            };
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description HTML */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "text/html": string;
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            /** @description no session and no valid ticket */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    mintAuthBrandingPreviewTicket: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgSlug: components["parameters"]["OrgSlug"];
+                projectName: components["parameters"]["ProjectName"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description `{url, ticket, expiresAt}` */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": Record<string, never>;
+                };
+            };
+        };
+    };
     setAuthProvider: {
         parameters: {
             query?: never;