@wevion/cli 1.0.2602 → 1.0.2609

package/openapi.json

@@ -15049,6 +15049,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -15085,6 +15086,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -15111,6 +15113,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -15369,6 +15372,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -15395,6 +15399,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -90979,6 +90984,15 @@
             "in": "query",
             "name": "cursor",
             "required": false
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "query",
+            "name": "workspace_id",
+            "required": false
           }
         ],
         "security": [
@@ -91007,6 +91021,8 @@
                         "required": [
                           "id",
                           "owner_id",
+                          "organization_id",
+                          "workspace_id",
                           "type",
                           "amount",
                           "balance_after",
@@ -91025,6 +91041,28 @@
                             "format": "uuid",
                             "type": "string"
                           },
+                          "organization_id": {
+                            "anyOf": [
+                              {
+                                "format": "uuid",
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "workspace_id": {
+                            "anyOf": [
+                              {
+                                "format": "uuid",
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
                           "type": {
                             "type": "string"
                           },
@@ -108903,6 +108941,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -108914,7 +108955,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
                 }
               }
             }
@@ -108935,6 +108991,59 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -109029,6 +109138,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -110000,6 +110112,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -110084,6 +110199,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -110106,6 +110224,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -110192,6 +110313,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -110407,6 +110531,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -110418,7 +110545,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
                 }
               }
             }
@@ -110439,6 +110581,59 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -111243,6 +111438,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -112075,6 +112273,42 @@
               }
             }
           },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "error": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "error": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
           "413": {
             "description": "Payload too large",
             "content": {
@@ -112587,6 +112821,24 @@
                 }
               }
             }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "error": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
           }
         }
       }
@@ -116358,6 +116610,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116390,6 +116645,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116412,6 +116670,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116434,6 +116695,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116456,6 +116720,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116542,6 +116809,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116574,6 +116844,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116596,6 +116869,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116618,6 +116894,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -116640,6 +116919,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -117013,7 +117295,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
                 }
               }
             }
@@ -117042,6 +117339,56 @@
                 }
               }
             }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
           }
         }
       }
@@ -117603,6 +117950,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -117687,6 +118037,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -117709,6 +118062,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -118357,6 +118713,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -118368,7 +118727,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
                 }
               }
             }
@@ -118389,6 +118763,59 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "code": {
+                      "type": "string"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -119071,6 +119498,9 @@
                     },
                     "error": {
                       "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
                     }
                   }
                 }
@@ -134739,6 +135169,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "id",
@@ -134836,6 +135267,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -134862,6 +135294,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -134888,6 +135321,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -134914,6 +135348,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -134941,11 +135376,11 @@
     "/api/v1/jobs": {
       "get": {
         "operationId": "listJobs",
-        "summary": "List jobs for the authenticated user",
+        "summary": "List jobs visible to the authenticated user",
         "tags": [
           "jobs"
         ],
-        "description": "Returns a paginated list of async jobs for the current user. Supports filtering by job_type and status.",
+        "description": "Returns a paginated list of async jobs owned by the current user or scoped to teams the user can access. Supports filtering by job_type and status.",
         "parameters": [
           {
             "schema": {
@@ -135023,6 +135458,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "items",
@@ -135032,6 +135468,7 @@
                     "items": {
                       "type": "array",
                       "items": {
+                        "additionalProperties": false,
                         "type": "object",
                         "required": [
                           "id",
@@ -135143,6 +135580,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -135169,6 +135607,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -135367,6 +135806,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "items",
@@ -135377,6 +135817,7 @@
                     "items": {
                       "type": "array",
                       "items": {
+                        "additionalProperties": false,
                         "type": "object",
                         "required": [
                           "id",
@@ -135471,6 +135912,7 @@
                       "type": "integer"
                     },
                     "counts": {
+                      "additionalProperties": false,
                       "type": "object",
                       "required": [
                         "PENDING",
@@ -135503,6 +135945,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -135529,6 +135972,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -135572,6 +136016,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "items"
@@ -135593,6 +136038,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -135619,6 +136065,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -142679,6 +143126,7 @@
               "application/json": {
                 "schema": {
                   "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -156744,14 +157192,14 @@
         }
       }
     },
-    "/api/v1/rbac/legal-entities": {
+    "/api/v1/rbac/access-groups": {
       "get": {
-        "operationId": "getApiV1RbacLegalEntities",
-        "summary": "List legal entities accessible to the current user",
+        "operationId": "getApiV1RbacAccessGroups",
+        "summary": "List access groups",
         "tags": [
           "rbac"
         ],
-        "description": "Returns legal entities visible to the authenticated user, optionally filtered by workspace id and scoped through RBAC access.",
+        "description": "Lists product Teams (access groups) visible to the caller. Organization owners/admins see all groups in their organization; members see groups they belong to.",
         "parameters": [
           {
             "schema": {
@@ -156759,7 +157207,7 @@
               "type": "string"
             },
             "in": "query",
-            "name": "workspace_id",
+            "name": "organization_id",
             "required": false
           }
         ],
@@ -156774,6 +157222,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "items"
@@ -156782,18 +157231,15 @@
                     "items": {
                       "type": "array",
                       "items": {
+                        "additionalProperties": false,
                         "type": "object",
                         "required": [
                           "id",
-                          "workspace_id",
-                          "legal_name",
-                          "vat_number",
-                          "billing_email",
-                          "billing_address",
-                          "billing_city",
-                          "billing_zip",
-                          "billing_country",
-                          "stripe_customer_id",
+                          "organization_id",
+                          "name",
+                          "slug",
+                          "member_count",
+                          "workspace_count",
                           "created_at",
                           "updated_at"
                         ],
@@ -156802,82 +157248,2315 @@
                             "format": "uuid",
                             "type": "string"
                           },
-                          "workspace_id": {
+                          "organization_id": {
                             "format": "uuid",
                             "type": "string"
                           },
-                          "legal_name": {
+                          "name": {
                             "type": "string"
                           },
-                          "vat_number": {
-                            "anyOf": [
-                              {
-                                "type": "string"
-                              },
-                              {
-                                "type": "null"
-                              }
-                            ]
-                          },
-                          "billing_email": {
-                            "anyOf": [
-                              {
-                                "type": "string"
-                              },
-                              {
-                                "type": "null"
-                              }
-                            ]
-                          },
-                          "billing_address": {
-                            "anyOf": [
-                              {
-                                "type": "string"
-                              },
-                              {
-                                "type": "null"
-                              }
-                            ]
-                          },
-                          "billing_city": {
-                            "anyOf": [
-                              {
-                                "type": "string"
-                              },
-                              {
-                                "type": "null"
-                              }
-                            ]
-                          },
-                          "billing_zip": {
-                            "anyOf": [
-                              {
-                                "type": "string"
-                              },
-                              {
-                                "type": "null"
-                              }
-                            ]
+                          "slug": {
+                            "type": "string"
                           },
-                          "billing_country": {
-                            "anyOf": [
-                              {
-                                "type": "string"
-                              },
-                              {
-                                "type": "null"
-                              }
-                            ]
+                          "member_count": {
+                            "type": "number"
                           },
-                          "stripe_customer_id": {
-                            "anyOf": [
-                              {
-                                "type": "string"
-                              },
-                              {
-                                "type": "null"
-                              }
-                            ]
+                          "workspace_count": {
+                            "type": "number"
+                          },
+                          "created_at": {
+                            "format": "date-time",
+                            "type": "string"
+                          },
+                          "updated_at": {
+                            "format": "date-time",
+                            "type": "string"
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      },
+      "post": {
+        "operationId": "postApiV1RbacAccessGroups",
+        "summary": "Create an access group",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Creates a product Team under an organization. The caller must hold owner/admin-level access on the organization.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "additionalProperties": false,
+                "type": "object",
+                "required": [
+                  "organization_id",
+                  "name"
+                ],
+                "properties": {
+                  "organization_id": {
+                    "format": "uuid",
+                    "type": "string"
+                  },
+                  "name": {
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "type": "string"
+                  },
+                  "slug": {
+                    "minLength": 1,
+                    "maxLength": 100,
+                    "pattern": "^[a-z0-9-]+$",
+                    "type": "string"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": "Resource created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "id",
+                    "organization_id",
+                    "name",
+                    "slug",
+                    "member_count",
+                    "workspace_count",
+                    "created_at",
+                    "updated_at"
+                  ],
+                  "properties": {
+                    "id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "organization_id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "name": {
+                      "type": "string"
+                    },
+                    "slug": {
+                      "type": "string"
+                    },
+                    "member_count": {
+                      "type": "number"
+                    },
+                    "workspace_count": {
+                      "type": "number"
+                    },
+                    "created_at": {
+                      "format": "date-time",
+                      "type": "string"
+                    },
+                    "updated_at": {
+                      "format": "date-time",
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid request - schema validation failed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Conflict - resource state prevents the operation",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/rbac/access-groups/{id}": {
+      "patch": {
+        "operationId": "patchApiV1RbacAccessGroupsById",
+        "summary": "Update an access group",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Updates a product Team name or slug. The caller must hold owner/admin-level access on the organization.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "additionalProperties": false,
+                "type": "object",
+                "properties": {
+                  "name": {
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "type": "string"
+                  },
+                  "slug": {
+                    "minLength": 1,
+                    "maxLength": 100,
+                    "pattern": "^[a-z0-9-]+$",
+                    "type": "string"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "id",
+                    "organization_id",
+                    "name",
+                    "slug",
+                    "member_count",
+                    "workspace_count",
+                    "created_at",
+                    "updated_at"
+                  ],
+                  "properties": {
+                    "id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "organization_id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "name": {
+                      "type": "string"
+                    },
+                    "slug": {
+                      "type": "string"
+                    },
+                    "member_count": {
+                      "type": "number"
+                    },
+                    "workspace_count": {
+                      "type": "number"
+                    },
+                    "created_at": {
+                      "format": "date-time",
+                      "type": "string"
+                    },
+                    "updated_at": {
+                      "format": "date-time",
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid request - schema validation failed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Conflict - resource state prevents the operation",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      },
+      "delete": {
+        "operationId": "deleteApiV1RbacAccessGroupsById",
+        "summary": "Soft-delete an access group",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Soft-deletes a product Team and its active memberships/workspace grants. The caller must hold owner/admin-level access on the organization.",
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "message"
+                  ],
+                  "properties": {
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/rbac/access-groups/{id}/members": {
+      "get": {
+        "operationId": "getApiV1RbacAccessGroupsByIdMembers",
+        "summary": "List access group members",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Lists members of a product Team. Organization owners/admins and members of the group can read this list.",
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "items"
+                  ],
+                  "properties": {
+                    "items": {
+                      "type": "array",
+                      "items": {
+                        "additionalProperties": false,
+                        "type": "object",
+                        "required": [
+                          "id",
+                          "access_group_id",
+                          "user_id",
+                          "role",
+                          "user_email",
+                          "user_name",
+                          "created_at"
+                        ],
+                        "properties": {
+                          "id": {
+                            "format": "uuid",
+                            "type": "string"
+                          },
+                          "access_group_id": {
+                            "format": "uuid",
+                            "type": "string"
+                          },
+                          "user_id": {
+                            "format": "uuid",
+                            "type": "string"
+                          },
+                          "role": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "lead"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "member"
+                                ]
+                              }
+                            ]
+                          },
+                          "user_email": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "user_name": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "created_at": {
+                            "format": "date-time",
+                            "type": "string"
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      },
+      "post": {
+        "operationId": "postApiV1RbacAccessGroupsByIdMembers",
+        "summary": "Add an access group member",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Adds an existing organization member to a product Team. Organization owners/admins can add leads or members; team leads can add regular members only.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "additionalProperties": false,
+                "type": "object",
+                "required": [
+                  "user_id"
+                ],
+                "properties": {
+                  "user_id": {
+                    "format": "uuid",
+                    "type": "string"
+                  },
+                  "role": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "lead"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "member"
+                        ]
+                      }
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        },
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "201": {
+            "description": "Resource created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "id",
+                    "access_group_id",
+                    "user_id",
+                    "role",
+                    "user_email",
+                    "user_name",
+                    "created_at"
+                  ],
+                  "properties": {
+                    "id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "access_group_id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "user_id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "role": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "lead"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "member"
+                          ]
+                        }
+                      ]
+                    },
+                    "user_email": {
+                      "anyOf": [
+                        {
+                          "type": "string"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ]
+                    },
+                    "user_name": {
+                      "anyOf": [
+                        {
+                          "type": "string"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ]
+                    },
+                    "created_at": {
+                      "format": "date-time",
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid request - schema validation failed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Conflict - resource state prevents the operation",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/rbac/access-groups/{id}/members/{membership_id}": {
+      "patch": {
+        "operationId": "patchApiV1RbacAccessGroupsByIdMembersByMembershipId",
+        "summary": "Update an access group member role",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Changes a product Team member between lead and member. Only organization owners/admins can appoint or demote team leads.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "additionalProperties": false,
+                "type": "object",
+                "required": [
+                  "role"
+                ],
+                "properties": {
+                  "role": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "lead"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "member"
+                        ]
+                      }
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        },
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "membership_id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "id",
+                    "access_group_id",
+                    "user_id",
+                    "role",
+                    "user_email",
+                    "user_name",
+                    "created_at"
+                  ],
+                  "properties": {
+                    "id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "access_group_id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "user_id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "role": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "lead"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "member"
+                          ]
+                        }
+                      ]
+                    },
+                    "user_email": {
+                      "anyOf": [
+                        {
+                          "type": "string"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ]
+                    },
+                    "user_name": {
+                      "anyOf": [
+                        {
+                          "type": "string"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ]
+                    },
+                    "created_at": {
+                      "format": "date-time",
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid request - schema validation failed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      },
+      "delete": {
+        "operationId": "deleteApiV1RbacAccessGroupsByIdMembersByMembershipId",
+        "summary": "Remove an access group member",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Removes a member from a product Team. Organization owners/admins can remove any member; team leads can remove regular members only.",
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "membership_id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "message"
+                  ],
+                  "properties": {
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/rbac/access-groups/{id}/workspaces": {
+      "get": {
+        "operationId": "getApiV1RbacAccessGroupsByIdWorkspaces",
+        "summary": "List access group workspace grants",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Lists Workspace grants assigned to a product Team. Organization owners/admins and members of the group can read this list.",
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "items"
+                  ],
+                  "properties": {
+                    "items": {
+                      "type": "array",
+                      "items": {
+                        "additionalProperties": false,
+                        "type": "object",
+                        "required": [
+                          "id",
+                          "access_group_id",
+                          "workspace_id",
+                          "workspace_name",
+                          "role",
+                          "created_at"
+                        ],
+                        "properties": {
+                          "id": {
+                            "format": "uuid",
+                            "type": "string"
+                          },
+                          "access_group_id": {
+                            "format": "uuid",
+                            "type": "string"
+                          },
+                          "workspace_id": {
+                            "format": "uuid",
+                            "type": "string"
+                          },
+                          "workspace_name": {
+                            "type": "string"
+                          },
+                          "role": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "manager"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "mediabuyer"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "finance"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "viewer"
+                                ]
+                              }
+                            ]
+                          },
+                          "created_at": {
+                            "format": "date-time",
+                            "type": "string"
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/rbac/access-groups/{id}/workspaces/{workspace_id}": {
+      "put": {
+        "operationId": "putApiV1RbacAccessGroupsByIdWorkspacesByWorkspaceId",
+        "summary": "Grant a workspace to an access group",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Creates or updates the role a product Team has on a Workspace. Only organization owners/admins can manage workspace grants.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "additionalProperties": false,
+                "type": "object",
+                "required": [
+                  "role"
+                ],
+                "properties": {
+                  "role": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "manager"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "mediabuyer"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "finance"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "viewer"
+                        ]
+                      }
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        },
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "workspace_id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "id",
+                    "access_group_id",
+                    "workspace_id",
+                    "workspace_name",
+                    "role",
+                    "created_at"
+                  ],
+                  "properties": {
+                    "id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "access_group_id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "workspace_id": {
+                      "format": "uuid",
+                      "type": "string"
+                    },
+                    "workspace_name": {
+                      "type": "string"
+                    },
+                    "role": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "manager"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "mediabuyer"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "finance"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "viewer"
+                          ]
+                        }
+                      ]
+                    },
+                    "created_at": {
+                      "format": "date-time",
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid request - schema validation failed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      },
+      "delete": {
+        "operationId": "deleteApiV1RbacAccessGroupsByIdWorkspacesByWorkspaceId",
+        "summary": "Revoke an access group workspace grant",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Revokes a product Team grant from a Workspace. Only organization owners/admins can manage workspace grants.",
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "id",
+            "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "path",
+            "name": "workspace_id",
+            "required": true
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "message"
+                  ],
+                  "properties": {
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized - missing or invalid bearer token",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal server error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/v1/rbac/legal-entities": {
+      "get": {
+        "operationId": "getApiV1RbacLegalEntities",
+        "summary": "List legal entities accessible to the current user",
+        "tags": [
+          "rbac"
+        ],
+        "description": "Returns legal entities visible to the authenticated user, optionally filtered by workspace id and scoped through RBAC access.",
+        "parameters": [
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "query",
+            "name": "workspace_id",
+            "required": false
+          }
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Successful response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "items"
+                  ],
+                  "properties": {
+                    "items": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "required": [
+                          "id",
+                          "workspace_id",
+                          "legal_name",
+                          "vat_number",
+                          "billing_email",
+                          "billing_address",
+                          "billing_city",
+                          "billing_zip",
+                          "billing_country",
+                          "stripe_customer_id",
+                          "created_at",
+                          "updated_at"
+                        ],
+                        "properties": {
+                          "id": {
+                            "format": "uuid",
+                            "type": "string"
+                          },
+                          "workspace_id": {
+                            "format": "uuid",
+                            "type": "string"
+                          },
+                          "legal_name": {
+                            "type": "string"
+                          },
+                          "vat_number": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "billing_email": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "billing_address": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "billing_city": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "billing_zip": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "billing_country": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
+                          },
+                          "stripe_customer_id": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              },
+                              {
+                                "type": "null"
+                              }
+                            ]
                           },
                           "created_at": {
                             "format": "date-time",
@@ -161545,7 +164224,28 @@
         "tags": [
           "rbac"
         ],
-        "description": "Soft-deletes a workspace after validating the caller has owner-level or higher access to its organization scope.",
+        "description": "Soft-deletes a workspace after exact name confirmation, owner-level or higher workspace access, and active campaign guard rails.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "additionalProperties": false,
+                "type": "object",
+                "required": [
+                  "confirmation_name"
+                ],
+                "properties": {
+                  "confirmation_name": {
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "type": "string"
+                  }
+                }
+              }
+            }
+          }
+        },
         "parameters": [
           {
             "schema": {
@@ -161581,6 +164281,32 @@
               }
             }
           },
+          "400": {
+            "description": "Invalid request - schema validation failed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
           "401": {
             "description": "Unauthorized - missing or invalid bearer token",
             "content": {
@@ -161617,8 +164343,34 @@
               }
             }
           },
-          "404": {
-            "description": "Resource not found",
+          "404": {
+            "description": "Resource not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Conflict - resource state prevents the operation",
             "content": {
               "application/json": {
                 "schema": {
@@ -161626,7 +164378,10 @@
                   "required": [
                     "statusCode",
                     "error",
-                    "message"
+                    "message",
+                    "code",
+                    "active_campaign_count",
+                    "active_publish_job_count"
                   ],
                   "properties": {
                     "statusCode": {
@@ -161637,6 +164392,15 @@
                     },
                     "message": {
                       "type": "string"
+                    },
+                    "code": {
+                      "type": "string"
+                    },
+                    "active_campaign_count": {
+                      "type": "number"
+                    },
+                    "active_publish_job_count": {
+                      "type": "number"
                     }
                   }
                 }
@@ -166120,7 +168884,7 @@
         "tags": [
           "reports"
         ],
-        "description": "Re-enqueues a previously failed report export using its original payload (stored on the enqueued worker_run_event). Only the original owner can retry. Returns the new worker_run as the canonical async-job envelope.",
+        "description": "Re-enqueues a previously failed report export using its original payload (stored on the enqueued worker_run_event). Team-stamped runs follow current workspace access; legacy runs without a team stamp remain original-owner only. Returns the new worker_run as the canonical async-job envelope.",
         "parameters": [
           {
             "schema": {
@@ -166280,7 +169044,7 @@
         "tags": [
           "reports"
         ],
-        "description": "Returns the current job status and, when COMPLETED, a freshly signed S3 download URL with its `expires_at` timestamp (~7 days). The URL is regenerated on demand from the stored S3 key, so completed runs remain re-downloadable for the lifetime of the underlying object.",
+        "description": "Returns the current job status and, when COMPLETED, a freshly signed S3 download URL with its `expires_at` timestamp (~7 days). Access follows the current workspace for team-stamped runs; legacy runs without a team stamp remain original-owner only. The URL is regenerated on demand from the stored S3 key, so completed runs remain re-downloadable for the lifetime of the underlying object.",
         "parameters": [
           {
             "schema": {
@@ -166413,11 +169177,11 @@
     "/api/v1/reports/exports": {
       "get": {
         "operationId": "listReportExports",
-        "summary": "List the current user's last N report exports",
+        "summary": "List recent report exports visible in the current workspace scope",
         "tags": [
           "reports"
         ],
-        "description": "Persistent history of the authenticated user's recent PDF/CSV report exports, ordered newest first. Reads worker_run rows joined on the enqueued worker_run_event metadata so the Download Center UI can re-hydrate after a page refresh without losing track of completed exports whose presigned URLs have already expired.",
+        "description": "Persistent history of recent PDF/CSV report exports visible to the authenticated caller, ordered newest first. Team-stamped runs follow current workspace access; legacy runs without a team stamp remain original-owner only. Reads worker_run rows joined on the enqueued worker_run_event metadata so the Download Center UI can re-hydrate after a page refresh without losing track of completed exports whose presigned URLs have already expired.",
         "parameters": [
           {
             "schema": {
@@ -166854,7 +169618,7 @@
         "tags": [
           "reports"
         ],
-        "description": "Creates a recurring report schedule stamped with the destination workspace (x-team-id header, active team scope, or the caller’s primary team as fallback). The cron loop picks it up at the configured cadence (daily/weekly/monthly + hour_utc) and enqueues GENERATE_SCHEDULED_REPORT jobs that email the artifact to the configured recipients. Optional `template_id` must reference a template visible in the same workspace scope.",
+        "description": "Creates a recurring report schedule stamped with the explicit destination workspace/team resolved by x-team-id or the active team/workspace scope. Requests without a resolvable destination fail with 400 SCOPE_TEAM_REQUIRED; there is no silent primary-team fallback. The cron loop picks it up at the configured cadence (daily/weekly/monthly + hour_utc) and enqueues GENERATE_SCHEDULED_REPORT jobs that email the artifact to the configured recipients. Optional `template_id` must reference a template visible in the destination team scope.",
         "requestBody": {
           "required": true,
           "content": {
@@ -167179,15 +169943,47 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "type": "object",
-                  "required": [
-                    "error"
-                  ],
-                  "properties": {
-                    "error": {
-                      "type": "string"
+                  "anyOf": [
+                    {
+                      "additionalProperties": false,
+                      "type": "object",
+                      "required": [
+                        "error"
+                      ],
+                      "properties": {
+                        "error": {
+                          "type": "string"
+                        }
+                      }
+                    },
+                    {
+                      "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                      "additionalProperties": false,
+                      "type": "object",
+                      "required": [
+                        "statusCode",
+                        "error",
+                        "message"
+                      ],
+                      "properties": {
+                        "statusCode": {
+                          "type": "number"
+                        },
+                        "error": {
+                          "type": "string"
+                        },
+                        "message": {
+                          "type": "string"
+                        },
+                        "code": {
+                          "type": "string",
+                          "enum": [
+                            "SCOPE_TEAM_REQUIRED"
+                          ]
+                        }
+                      }
                     }
-                  }
+                  ]
                 }
               }
             }
@@ -167202,6 +169998,52 @@
               }
             }
           },
+          "402": {
+            "description": "Response 402",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message",
+                    "code",
+                    "resource",
+                    "current",
+                    "max"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    },
+                    "code": {
+                      "type": "string"
+                    },
+                    "resource": {
+                      "type": "string",
+                      "enum": [
+                        "scheduled_report"
+                      ]
+                    },
+                    "current": {
+                      "type": "number"
+                    },
+                    "max": {
+                      "type": "number"
+                    }
+                  }
+                }
+              }
+            }
+          },
           "403": {
             "description": "Forbidden - caller lacks the required role/permission",
             "content": {
@@ -167655,6 +170497,16 @@
             "in": "path",
             "name": "id",
             "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "header",
+            "name": "x-team-id",
+            "required": false,
+            "description": "Destination workspace team id."
           }
         ],
         "security": [
@@ -167839,15 +170691,46 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "type": "object",
-                  "required": [
-                    "error"
-                  ],
-                  "properties": {
-                    "error": {
-                      "type": "string"
+                  "anyOf": [
+                    {
+                      "type": "object",
+                      "required": [
+                        "error"
+                      ],
+                      "properties": {
+                        "error": {
+                          "type": "string"
+                        }
+                      }
+                    },
+                    {
+                      "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                      "additionalProperties": false,
+                      "type": "object",
+                      "required": [
+                        "statusCode",
+                        "error",
+                        "message"
+                      ],
+                      "properties": {
+                        "statusCode": {
+                          "type": "number"
+                        },
+                        "error": {
+                          "type": "string"
+                        },
+                        "message": {
+                          "type": "string"
+                        },
+                        "code": {
+                          "type": "string",
+                          "enum": [
+                            "SCOPE_TEAM_REQUIRED"
+                          ]
+                        }
+                      }
                     }
-                  }
+                  ]
                 }
               }
             }
@@ -167862,6 +170745,24 @@
               }
             }
           },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "error": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
           "404": {
             "description": "Resource not found",
             "content": {
@@ -167916,6 +170817,16 @@
             "in": "path",
             "name": "id",
             "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "header",
+            "name": "x-team-id",
+            "required": false,
+            "description": "Destination workspace team id."
           }
         ],
         "security": [
@@ -167930,6 +170841,40 @@
           "204": {
             "description": "No content"
           },
+          "400": {
+            "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    },
+                    "code": {
+                      "type": "string",
+                      "enum": [
+                        "SCOPE_TEAM_REQUIRED"
+                      ]
+                    }
+                  }
+                }
+              }
+            }
+          },
           "401": {
             "description": "Unauthorized - missing or invalid bearer token",
             "content": {
@@ -167940,6 +170885,24 @@
               }
             }
           },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "error"
+                  ],
+                  "properties": {
+                    "error": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
           "404": {
             "description": "Resource not found",
             "content": {
@@ -167996,6 +170959,16 @@
             "in": "path",
             "name": "id",
             "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "header",
+            "name": "x-team-id",
+            "required": false,
+            "description": "Destination workspace team id."
           }
         ],
         "security": [
@@ -168334,7 +171307,7 @@
         "tags": [
           "reports"
         ],
-        "description": "Creates a reusable report template stamped with the destination workspace (x-team-id header, active team scope, or the caller’s primary team as fallback). The optional `definition` block configures metrics, columns, group_by, period preset, output format, and whether charts are included.",
+        "description": "Creates a reusable report template stamped with the explicit destination workspace/team resolved by x-team-id or the active team/workspace scope. Requests without a resolvable destination fail with 400 SCOPE_TEAM_REQUIRED; there is no silent primary-team fallback. The optional `definition` block configures metrics, columns, group_by, period preset, output format, and whether charts are included.",
         "requestBody": {
           "required": true,
           "content": {
@@ -168646,10 +171619,11 @@
             }
           },
           "400": {
-            "description": "Invalid request - schema validation failed",
+            "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
             "content": {
               "application/json": {
                 "schema": {
+                  "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
                   "additionalProperties": false,
                   "type": "object",
                   "required": [
@@ -168668,7 +171642,10 @@
                       "type": "string"
                     },
                     "code": {
-                      "type": "string"
+                      "type": "string",
+                      "enum": [
+                        "SCOPE_TEAM_REQUIRED"
+                      ]
                     }
                   }
                 }
@@ -169154,6 +172131,16 @@
             "in": "path",
             "name": "id",
             "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "header",
+            "name": "x-team-id",
+            "required": false,
+            "description": "Destination workspace team id."
           }
         ],
         "security": [
@@ -169320,6 +172307,40 @@
               }
             }
           },
+          "400": {
+            "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    },
+                    "code": {
+                      "type": "string",
+                      "enum": [
+                        "SCOPE_TEAM_REQUIRED"
+                      ]
+                    }
+                  }
+                }
+              }
+            }
+          },
           "401": {
             "description": "Unauthorized - missing or invalid bearer token",
             "content": {
@@ -169330,6 +172351,36 @@
               }
             }
           },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    },
+                    "code": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
           "404": {
             "description": "Resource not found",
             "content": {
@@ -169384,6 +172435,16 @@
             "in": "path",
             "name": "id",
             "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "header",
+            "name": "x-team-id",
+            "required": false,
+            "description": "Destination workspace team id."
           }
         ],
         "security": [
@@ -169398,6 +172459,40 @@
           "204": {
             "description": "No content"
           },
+          "400": {
+            "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    },
+                    "code": {
+                      "type": "string",
+                      "enum": [
+                        "SCOPE_TEAM_REQUIRED"
+                      ]
+                    }
+                  }
+                }
+              }
+            }
+          },
           "401": {
             "description": "Unauthorized - missing or invalid bearer token",
             "content": {
@@ -169408,6 +172503,36 @@
               }
             }
           },
+          "403": {
+            "description": "Forbidden - caller lacks the required role/permission",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "additionalProperties": false,
+                  "type": "object",
+                  "required": [
+                    "statusCode",
+                    "error",
+                    "message"
+                  ],
+                  "properties": {
+                    "statusCode": {
+                      "type": "number"
+                    },
+                    "error": {
+                      "type": "string"
+                    },
+                    "message": {
+                      "type": "string"
+                    },
+                    "code": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            }
+          },
           "404": {
             "description": "Resource not found",
             "content": {
@@ -169464,6 +172589,16 @@
             "in": "path",
             "name": "id",
             "required": true
+          },
+          {
+            "schema": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "in": "header",
+            "name": "x-team-id",
+            "required": false,
+            "description": "Destination workspace team id."
           }
         ],
         "security": [
@@ -235454,6 +238589,15 @@
         ],
         "description": "Redirects the user to the Meta login page for authentication. Uses the authenticated user session. The destination workspace team is signed into the OAuth state (active team scope, else primary team).",
         "parameters": [
+          {
+            "schema": {
+              "type": "boolean"
+            },
+            "in": "query",
+            "name": "confirm_move",
+            "required": false,
+            "description": "Confirm moving Meta ad accounts already assigned to another workspace of the organization into the active workspace. Without confirmation, the OAuth callback redirects with code=ACCOUNT_ALREADY_ASSIGNED."
+          },
           {
             "schema": {
               "format": "uuid",
@@ -235480,6 +238624,7 @@
               "application/json": {
                 "schema": {
                   "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -235529,6 +238674,15 @@
         ],
         "description": "Returns the Meta OAuth login URL for the current user session. The destination workspace team (x-team-id header or active team scope) is signed into the OAuth state; requests without an explicit team get 400 SCOPE_TEAM_REQUIRED.",
         "parameters": [
+          {
+            "schema": {
+              "type": "boolean"
+            },
+            "in": "query",
+            "name": "confirm_move",
+            "required": false,
+            "description": "Confirm moving Meta ad accounts already assigned to another workspace of the organization into the active workspace. Without confirmation, the OAuth callback redirects with code=ACCOUNT_ALREADY_ASSIGNED."
+          },
           {
             "schema": {
               "format": "uuid",
@@ -235551,6 +238705,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "url"
@@ -235570,6 +238725,7 @@
               "application/json": {
                 "schema": {
                   "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -235642,6 +238798,7 @@
               "application/json": {
                 "schema": {
                   "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -235675,6 +238832,7 @@
               "application/json": {
                 "schema": {
                   "description": "Unauthorized — a valid session is required.",
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -235706,7 +238864,7 @@
         "tags": [
           "meta"
         ],
-        "description": "Handles the OAuth callback from Meta. Exchanges code for long-lived token and stores it.",
+        "description": "Handles the OAuth callback from Meta. Exchanges code for a long-lived token, stores it, checks discovered ad accounts for cross-workspace assignment conflicts, and starts post-login sync. If an account is already assigned to another workspace of the organization, the browser is redirected with code=ACCOUNT_ALREADY_ASSIGNED unless the signed OAuth state carried confirm_move=true.",
         "parameters": [
           {
             "schema": {
@@ -235750,6 +238908,7 @@
             "content": {
               "application/json": {
                 "schema": {
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -236711,6 +239870,7 @@
               "application/json": {
                 "schema": {
                   "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -237421,6 +240581,15 @@
         ],
         "description": "Generates a signed Snapchat OAuth authorization URL for the authenticated user. The destination workspace team (x-team-id header or active team scope) is signed into the OAuth state; requests without an explicit team get 400 SCOPE_TEAM_REQUIRED.",
         "parameters": [
+          {
+            "schema": {
+              "type": "boolean"
+            },
+            "in": "query",
+            "name": "confirm_move",
+            "required": false,
+            "description": "Confirm moving Snapchat ad accounts already assigned to another workspace of the organization into the active workspace. Without confirmation, the OAuth callback reports ACCOUNT_ALREADY_ASSIGNED."
+          },
           {
             "schema": {
               "format": "uuid",
@@ -237464,6 +240633,7 @@
               "application/json": {
                 "schema": {
                   "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -237496,20 +240666,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "additionalProperties": true,
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
-                    "error"
+                    "error",
+                    "message",
+                    "statusCode"
                   ],
                   "properties": {
                     "error": {
                       "type": "string"
                     },
-                    "statusCode": {
-                      "type": "integer"
-                    },
                     "message": {
                       "type": "string"
+                    },
+                    "statusCode": {
+                      "type": "integer"
                     }
                   }
                 }
@@ -237521,20 +240693,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "additionalProperties": true,
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
-                    "error"
+                    "error",
+                    "message",
+                    "statusCode"
                   ],
                   "properties": {
                     "error": {
                       "type": "string"
                     },
-                    "statusCode": {
-                      "type": "integer"
-                    },
                     "message": {
                       "type": "string"
+                    },
+                    "statusCode": {
+                      "type": "integer"
                     }
                   }
                 }
@@ -237546,20 +240720,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "additionalProperties": true,
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
-                    "error"
+                    "error",
+                    "message",
+                    "statusCode"
                   ],
                   "properties": {
                     "error": {
                       "type": "string"
                     },
-                    "statusCode": {
-                      "type": "integer"
-                    },
                     "message": {
                       "type": "string"
+                    },
+                    "statusCode": {
+                      "type": "integer"
                     }
                   }
                 }
@@ -237578,6 +240754,15 @@
         ],
         "description": "Compatibility endpoint that returns the same signed Snapchat OAuth authorization URL. Requires an explicit destination team (x-team-id header or active team scope); 400 SCOPE_TEAM_REQUIRED otherwise.",
         "parameters": [
+          {
+            "schema": {
+              "type": "boolean"
+            },
+            "in": "query",
+            "name": "confirm_move",
+            "required": false,
+            "description": "Confirm moving Snapchat ad accounts already assigned to another workspace of the organization into the active workspace. Without confirmation, the OAuth callback reports ACCOUNT_ALREADY_ASSIGNED."
+          },
           {
             "schema": {
               "format": "uuid",
@@ -237621,6 +240806,7 @@
               "application/json": {
                 "schema": {
                   "description": "Explicit destination workspace required: send the x-team-id header or activate a team scope for this operation.",
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
                     "statusCode",
@@ -237653,20 +240839,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "additionalProperties": true,
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
-                    "error"
+                    "error",
+                    "message",
+                    "statusCode"
                   ],
                   "properties": {
                     "error": {
                       "type": "string"
                     },
-                    "statusCode": {
-                      "type": "integer"
-                    },
                     "message": {
                       "type": "string"
+                    },
+                    "statusCode": {
+                      "type": "integer"
                     }
                   }
                 }
@@ -237678,20 +240866,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "additionalProperties": true,
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
-                    "error"
+                    "error",
+                    "message",
+                    "statusCode"
                   ],
                   "properties": {
                     "error": {
                       "type": "string"
                     },
-                    "statusCode": {
-                      "type": "integer"
-                    },
                     "message": {
                       "type": "string"
+                    },
+                    "statusCode": {
+                      "type": "integer"
                     }
                   }
                 }
@@ -237703,20 +240893,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "additionalProperties": true,
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
-                    "error"
+                    "error",
+                    "message",
+                    "statusCode"
                   ],
                   "properties": {
                     "error": {
                       "type": "string"
                     },
-                    "statusCode": {
-                      "type": "integer"
-                    },
                     "message": {
                       "type": "string"
+                    },
+                    "statusCode": {
+                      "type": "integer"
                     }
                   }
                 }
@@ -237733,7 +240925,33 @@
         "tags": [
           "snapchat"
         ],
-        "description": "Consumes the Snapchat OAuth callback, stores refreshed tokens, dispatches account sync, and returns the popup-closing HTML response.",
+        "description": "Consumes the Snapchat OAuth callback, stores refreshed tokens, dispatches account sync, and returns the popup-closing HTML response. If discovered ad accounts belong to another workspace of the organization, the callback reports ACCOUNT_ALREADY_ASSIGNED unless the signed OAuth state carried confirm_move=true.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "query",
+            "name": "code",
+            "required": false
+          },
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "query",
+            "name": "state",
+            "required": false
+          },
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "query",
+            "name": "error",
+            "required": false
+          }
+        ],
         "responses": {
           "200": {
             "description": "Small HTML page that closes the OAuth popup after success or provider callback failure.",
@@ -237761,20 +240979,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "additionalProperties": true,
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
-                    "error"
+                    "error",
+                    "message",
+                    "statusCode"
                   ],
                   "properties": {
                     "error": {
                       "type": "string"
                     },
-                    "statusCode": {
-                      "type": "integer"
-                    },
                     "message": {
                       "type": "string"
+                    },
+                    "statusCode": {
+                      "type": "integer"
                     }
                   }
                 }
@@ -237786,20 +241006,22 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "additionalProperties": true,
+                  "additionalProperties": false,
                   "type": "object",
                   "required": [
-                    "error"
+                    "error",
+                    "message",
+                    "statusCode"
                   ],
                   "properties": {
                     "error": {
                       "type": "string"
                     },
-                    "statusCode": {
-                      "type": "integer"
-                    },
                     "message": {
                       "type": "string"
+                    },
+                    "statusCode": {
+                      "type": "integer"
                     }
                   }
                 }