@workos/openapi-spec 0.3.0 → 0.5.0

package/{types.d.ts → dist/types.d.ts}

@@ -2607,6 +2607,178 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/vault/v1/keys/data-key": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create a data key
+         * @description Generate an isolated encryption key for local encryption operations.
+         */
+        post: operations["JumpWireWeb.KeyController.create_data_key"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vault/v1/keys/decrypt": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Decrypt a data key
+         * @description Decrypt a previously encrypted data key from WorkOS Vault.
+         */
+        post: operations["JumpWireWeb.KeyController.decrypt"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vault/v1/keys/rekey": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Re-encrypt a data key
+         * @description Decrypt an existing data key and re-encrypt it under a new key context.
+         */
+        post: operations["JumpWireWeb.KeyController.rekey"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vault/v1/kv": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List objects
+         * @description List all encrypted objects with cursor-based pagination.
+         */
+        get: operations["JumpWireWeb.DataVaultController.index"];
+        put?: never;
+        /**
+         * Create an object
+         * @description Encrypt and store a new key-value object.
+         */
+        post: operations["JumpWireWeb.DataVaultController.create"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vault/v1/kv/name/{name}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read an object by name
+         * @description Fetch and decrypt an object by its unique name.
+         */
+        get: operations["JumpWireWeb.DataVaultController.show_by_name"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vault/v1/kv/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read an object by ID
+         * @description Fetch and decrypt an object by its unique identifier.
+         */
+        get: operations["JumpWireWeb.DataVaultController.show_by_id"];
+        /**
+         * Update an object
+         * @description Update the value of an existing encrypted object.
+         */
+        put: operations["JumpWireWeb.DataVaultController.update"];
+        post?: never;
+        /**
+         * Delete an object
+         * @description Delete an encrypted object.
+         */
+        delete: operations["JumpWireWeb.DataVaultController.delete"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vault/v1/kv/{id}/metadata": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Describe an object
+         * @description Fetch metadata for an object without decrypting it.
+         */
+        get: operations["JumpWireWeb.DataVaultController.describe"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/vault/v1/kv/{id}/versions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List object versions
+         * @description Retrieve all versions for a specific object.
+         */
+        get: operations["JumpWireWeb.DataVaultController.versions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/webhook_endpoints": {
         parameters: {
             query?: never;
@@ -3460,6 +3632,12 @@ export interface components {
              *     ]
              */
             permissions?: string[];
+            /**
+             * Format: date-time
+             * @description The timestamp when the API key should expire. Must be a future timestamp. If omitted, the key does not expire.
+             * @example 2030-01-01T00:00:00.000Z
+             */
+            expires_at?: string;
         };
         OrganizationDomainDataDto: {
             /**
@@ -3760,6 +3938,12 @@ export interface components {
              *     ]
              */
             permissions?: string[];
+            /**
+             * Format: date-time
+             * @description The timestamp when the API key should expire. Must be a future timestamp. If omitted, the key does not expire.
+             * @example 2030-01-01T00:00:00.000Z
+             */
+            expires_at?: string;
         };
         CreateUserlandUserDto: {
             /**
@@ -3942,7 +4126,7 @@ export interface components {
              *       "dsync.user.created"
              *     ]
              */
-            events: ("authentication.email_verification_succeeded" | "authentication.magic_auth_failed" | "authentication.magic_auth_succeeded" | "authentication.mfa_succeeded" | "authentication.oauth_failed" | "authentication.oauth_succeeded" | "authentication.password_failed" | "authentication.password_succeeded" | "authentication.passkey_failed" | "authentication.passkey_succeeded" | "authentication.sso_failed" | "authentication.sso_started" | "authentication.sso_succeeded" | "authentication.sso_timed_out" | "authentication.radar_risk_detected" | "api_key.created" | "api_key.revoked" | "connection.activated" | "connection.deactivated" | "connection.saml_certificate_renewal_required" | "connection.saml_certificate_renewed" | "connection.deleted" | "dsync.activated" | "dsync.deleted" | "dsync.group.created" | "dsync.group.deleted" | "dsync.group.updated" | "dsync.group.user_added" | "dsync.group.user_removed" | "dsync.user.created" | "dsync.user.deleted" | "dsync.user.updated" | "email_verification.created" | "group.created" | "group.deleted" | "group.member_added" | "group.member_removed" | "group.updated" | "flag.created" | "flag.deleted" | "flag.updated" | "flag.rule_updated" | "invitation.accepted" | "invitation.created" | "invitation.resent" | "invitation.revoked" | "magic_auth.created" | "organization.created" | "organization.deleted" | "organization.updated" | "organization_domain.created" | "organization_domain.deleted" | "organization_domain.updated" | "organization_domain.verified" | "organization_domain.verification_failed" | "password_reset.created" | "password_reset.succeeded" | "user.created" | "user.updated" | "user.deleted" | "organization_membership.created" | "organization_membership.deleted" | "organization_membership.updated" | "role.created" | "role.deleted" | "role.updated" | "organization_role.created" | "organization_role.deleted" | "organization_role.updated" | "permission.created" | "permission.deleted" | "permission.updated" | "session.created" | "session.revoked" | "waitlist_user.approved" | "waitlist_user.created" | "waitlist_user.denied")[];
+            events: ("authentication.email_verification_succeeded" | "authentication.magic_auth_failed" | "authentication.magic_auth_succeeded" | "authentication.mfa_succeeded" | "authentication.oauth_failed" | "authentication.oauth_succeeded" | "authentication.password_failed" | "authentication.password_succeeded" | "authentication.passkey_failed" | "authentication.passkey_succeeded" | "authentication.sso_failed" | "authentication.sso_started" | "authentication.sso_succeeded" | "authentication.sso_timed_out" | "authentication.radar_risk_detected" | "api_key.created" | "api_key.revoked" | "connection.activated" | "connection.deactivated" | "connection.saml_certificate_renewal_required" | "connection.saml_certificate_renewed" | "connection.deleted" | "dsync.activated" | "dsync.deleted" | "dsync.group.created" | "dsync.group.deleted" | "dsync.group.updated" | "dsync.group.user_added" | "dsync.group.user_removed" | "dsync.user.created" | "dsync.user.deleted" | "dsync.user.updated" | "email_verification.created" | "group.created" | "group.deleted" | "group.member_added" | "group.member_removed" | "group.updated" | "flag.created" | "flag.deleted" | "flag.updated" | "flag.rule_updated" | "invitation.accepted" | "invitation.created" | "invitation.resent" | "invitation.revoked" | "magic_auth.created" | "organization.created" | "organization.deleted" | "organization.updated" | "organization_domain.created" | "organization_domain.deleted" | "organization_domain.updated" | "organization_domain.verified" | "organization_domain.verification_failed" | "password_reset.created" | "password_reset.succeeded" | "user.created" | "user.updated" | "user.deleted" | "organization_membership.created" | "organization_membership.deleted" | "organization_membership.updated" | "role.created" | "role.deleted" | "role.updated" | "organization_role.created" | "organization_role.deleted" | "organization_role.updated" | "permission.created" | "permission.deleted" | "permission.updated" | "pipes.connected_account.connected" | "pipes.connected_account.disconnected" | "pipes.connected_account.reauthorization_needed" | "session.created" | "session.revoked" | "waitlist_user.approved" | "waitlist_user.created" | "waitlist_user.denied")[];
         };
         UpdateWebhookEndpointDto: {
             /**
@@ -3963,7 +4147,7 @@ export interface components {
              *       "dsync.user.created"
              *     ]
              */
-            events?: ("authentication.email_verification_succeeded" | "authentication.magic_auth_failed" | "authentication.magic_auth_succeeded" | "authentication.mfa_succeeded" | "authentication.oauth_failed" | "authentication.oauth_succeeded" | "authentication.password_failed" | "authentication.password_succeeded" | "authentication.passkey_failed" | "authentication.passkey_succeeded" | "authentication.sso_failed" | "authentication.sso_started" | "authentication.sso_succeeded" | "authentication.sso_timed_out" | "authentication.radar_risk_detected" | "api_key.created" | "api_key.revoked" | "connection.activated" | "connection.deactivated" | "connection.saml_certificate_renewal_required" | "connection.saml_certificate_renewed" | "connection.deleted" | "dsync.activated" | "dsync.deleted" | "dsync.group.created" | "dsync.group.deleted" | "dsync.group.updated" | "dsync.group.user_added" | "dsync.group.user_removed" | "dsync.user.created" | "dsync.user.deleted" | "dsync.user.updated" | "email_verification.created" | "group.created" | "group.deleted" | "group.member_added" | "group.member_removed" | "group.updated" | "flag.created" | "flag.deleted" | "flag.updated" | "flag.rule_updated" | "invitation.accepted" | "invitation.created" | "invitation.resent" | "invitation.revoked" | "magic_auth.created" | "organization.created" | "organization.deleted" | "organization.updated" | "organization_domain.created" | "organization_domain.deleted" | "organization_domain.updated" | "organization_domain.verified" | "organization_domain.verification_failed" | "password_reset.created" | "password_reset.succeeded" | "user.created" | "user.updated" | "user.deleted" | "organization_membership.created" | "organization_membership.deleted" | "organization_membership.updated" | "role.created" | "role.deleted" | "role.updated" | "organization_role.created" | "organization_role.deleted" | "organization_role.updated" | "permission.created" | "permission.deleted" | "permission.updated" | "session.created" | "session.revoked" | "waitlist_user.approved" | "waitlist_user.created" | "waitlist_user.denied")[];
+            events?: ("authentication.email_verification_succeeded" | "authentication.magic_auth_failed" | "authentication.magic_auth_succeeded" | "authentication.mfa_succeeded" | "authentication.oauth_failed" | "authentication.oauth_succeeded" | "authentication.password_failed" | "authentication.password_succeeded" | "authentication.passkey_failed" | "authentication.passkey_succeeded" | "authentication.sso_failed" | "authentication.sso_started" | "authentication.sso_succeeded" | "authentication.sso_timed_out" | "authentication.radar_risk_detected" | "api_key.created" | "api_key.revoked" | "connection.activated" | "connection.deactivated" | "connection.saml_certificate_renewal_required" | "connection.saml_certificate_renewed" | "connection.deleted" | "dsync.activated" | "dsync.deleted" | "dsync.group.created" | "dsync.group.deleted" | "dsync.group.updated" | "dsync.group.user_added" | "dsync.group.user_removed" | "dsync.user.created" | "dsync.user.deleted" | "dsync.user.updated" | "email_verification.created" | "group.created" | "group.deleted" | "group.member_added" | "group.member_removed" | "group.updated" | "flag.created" | "flag.deleted" | "flag.updated" | "flag.rule_updated" | "invitation.accepted" | "invitation.created" | "invitation.resent" | "invitation.revoked" | "magic_auth.created" | "organization.created" | "organization.deleted" | "organization.updated" | "organization_domain.created" | "organization_domain.deleted" | "organization_domain.updated" | "organization_domain.verified" | "organization_domain.verification_failed" | "password_reset.created" | "password_reset.succeeded" | "user.created" | "user.updated" | "user.deleted" | "organization_membership.created" | "organization_membership.deleted" | "organization_membership.updated" | "role.created" | "role.deleted" | "role.updated" | "organization_role.created" | "organization_role.deleted" | "organization_role.updated" | "permission.created" | "permission.deleted" | "permission.updated" | "pipes.connected_account.connected" | "pipes.connected_account.disconnected" | "pipes.connected_account.reauthorization_needed" | "session.created" | "session.revoked" | "waitlist_user.approved" | "waitlist_user.created" | "waitlist_user.denied")[];
         };
         WidgetSessionTokenDto: {
             /**
@@ -4007,128 +4191,449 @@ export interface components {
              */
             grant_type: "authorization_code";
         };
-        ExternalAuthCompleteResponse: {
+        /**
+         * Actor
+         * @description The user or API key that performed an action.
+         */
+        Actor: {
             /**
-             * @description URI to redirect the user back to AuthKit to complete the OAuth flow.
-             * @example https://your-authkit-domain.workos.com/oauth/authorize/complete?state=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdGF0ZSI6InJhbmRvbV9zdGF0ZV9zdHJpbmciLCJpYXQiOjE3NDI2MDQ4NTN9.abc123def456ghi789
+             * @description Unique identifier of the actor.
+             * @example key_01K8ZYT4AWJ6XP0E0S8CTBHE3P
              */
-            redirect_uri: string;
-        };
-        ApiKey: {
+            id: string;
             /**
-             * @description Distinguishes the API Key object.
-             * @constant
+             * @description Display name of the actor.
+             * @example My API Key
              */
-            object: "api_key";
+            name: string;
+        };
+        /** CreateDataKeyRequest */
+        CreateDataKeyRequest: {
             /**
-             * @description Unique identifier of the API Key.
-             * @example api_key_01EHZNVPK3SFK441A1RGBFSHRT
+             * @description Map of values used to determine the encryption key.
+             * @example {
+             *       "organization_id": "org_01K8ZYT4AWJ6XP0E0S8CTBHE3P"
+             *     }
              */
-            id: string;
+            context: {
+                [key: string]: string;
+            };
+        };
+        /** CreateDataKeyResponse */
+        CreateDataKeyResponse: {
             /**
-             * @description The entity that owns the API Key.
+             * @description Map of values used to determine the encryption key.
              * @example {
-             *       "type": "organization",
-             *       "id": "org_01EHZNVPK3SFK441A1RGBFSHRT"
+             *       "organization_id": "org_01K8ZYT4AWJ6XP0E0S8CTBHE3P"
              *     }
              */
-            owner: {
-                /**
-                 * @description The type of the API Key owner.
-                 * @example organization
-                 * @constant
-                 */
-                type: "organization";
-                /**
-                 * @description Unique identifier of the API Key owner.
-                 * @example org_01EHZNVPK3SFK441A1RGBFSHRT
-                 */
-                id: string;
-            } | {
-                /**
-                 * @description The type of the API Key owner.
-                 * @example user
-                 * @constant
-                 */
-                type: "user";
-                /**
-                 * @description Unique identifier of the API Key owner.
-                 * @example user_01EHZNVPK3SFK441A1RGBFSHRT
-                 */
-                id: string;
-                /**
-                 * @description Unique identifier of the organization the API Key can access.
-                 * @example org_01EHZNVPK3SFK441A1RGBFSHRT
-                 */
-                organization_id: string;
+            context: {
+                [key: string]: string;
             };
             /**
-             * @description A descriptive name for the API Key.
-             * @example Production API Key
+             * @description Base64-encoded data encryption key.
+             * @example DR9idtey9MpMrA1VRFrz30HB1yNgL2PoHZyjAkFeWgg=
              */
-            name: string;
+            data_key: string;
             /**
-             * @description An obfuscated representation of the API Key value.
-             * @example sk_...3456
+             * @description Base64-encoded encrypted data key blob.
+             * @example V09TLkVLTS52MQBiZjUxY2NlYy03OGI0LTUyMDAtYjM4My0zNTczMGU3MWVmNjEBATEBJGJmNjVlMzI2LTQzYTAtNGIyMC04OGM0LTA3ZmYzZGU1NDM0YwF0YmY2NWUzMjYtNDNhMC00YjIwLTg4YzQtMDdmZjNkZTU0MzRj
              */
-            obfuscated_value: string;
+            encrypted_keys: string;
             /**
-             * Format: date-time
-             * @description Timestamp of when the API Key was last used.
-             * @example null
+             * @description Unique identifier for the generated data key.
+             * @example bf51ccec-78b4-5200-b383-35730e71ef61
              */
-            last_used_at: string | null;
+            id: string;
+        };
+        /** CreateObjectRequest */
+        CreateObjectRequest: {
             /**
-             * @description The permission slugs assigned to the API Key.
-             * @example [
-             *       "posts:read",
-             *       "posts:write"
-             *     ]
+             * @description Map of values used to determine the encryption key.
+             * @example {
+             *       "organization_id": "org_01K8ZYT4AWJ6XP0E0S8CTBHE3P"
+             *     }
              */
-            permissions: string[];
+            key_context: {
+                [key: string]: string;
+            };
             /**
-             * Format: date-time
-             * @description An ISO 8601 timestamp.
-             * @example 2026-01-15T12:00:00.000Z
+             * @description Unique name for the object.
+             * @example my-secret
              */
-            created_at: string;
+            name: string;
             /**
-             * Format: date-time
-             * @description An ISO 8601 timestamp.
-             * @example 2026-01-15T12:00:00.000Z
+             * @description Plaintext data to encrypt and store.
+             * @example s3cr3t-v4lu3
              */
-            updated_at: string;
+            value: string;
         };
-        ApiKeyValidationResponse: {
-            api_key: components["schemas"]["ApiKey"] | null;
+        /** DecryptRequest */
+        DecryptRequest: {
+            /**
+             * @description Base64-encoded encrypted data key to decrypt.
+             * @example V09TLkVLTS52MQBiZjUxY2NlYy03OGI0LTUyMDAtYjM4My0zNTczMGU3MWVmNjEBATEBJGJmNjVlMzI2LTQzYTAtNGIyMC04OGM0LTA3ZmYzZGU1NDM0YwF0YmY2NWUzMjYtNDNhMC00YjIwLTg4YzQtMDdmZjNkZTU0MzRj
+             */
+            keys: string;
         };
-        ConnectApplication: {
+        /** DecryptResponse */
+        DecryptResponse: {
             /**
-             * @description Distinguishes the connect application object.
-             * @example connect_application
-             * @constant
+             * @description Base64-encoded decrypted data key.
+             * @example DR9idtey9MpMrA1VRFrz30HB1yNgL2PoHZyjAkFeWgg=
              */
-            object: "connect_application";
+            data_key: string;
             /**
-             * @description The unique ID of the connect application.
-             * @example conn_app_01HXYZ123456789ABCDEFGHIJ
+             * @description Unique identifier of the decrypted data key.
+             * @example bf51ccec-78b4-5200-b383-35730e71ef61
              */
             id: string;
+        };
+        /** DeleteObjectResponse */
+        DeleteObjectResponse: {
             /**
-             * @description The client ID of the connect application.
-             * @example client_01HXYZ123456789ABCDEFGHIJ
+             * @description Name of the deleted object.
+             * @example my-secret
              */
-            client_id: string;
+            name: string;
             /**
-             * @description A description of the connect application.
-             * @example An application for managing user access
+             * @description Whether the deletion succeeded.
+             * @example true
              */
-            description: string | null;
+            success: boolean;
+        };
+        /**
+         * Error
+         * @description Error response body.
+         */
+        Error: {
             /**
-             * @description The name of the connect application.
-             * @example My Application
+             * @description A human-readable description of the error.
+             * @example Invalid request parameters.
              */
-            name: string;
+            error: string;
+        };
+        /**
+         * ListMetadata
+         * @description Cursor-based pagination metadata.
+         */
+        ListMetadata: {
+            /**
+             * @description Cursor for the next page of results.
+             * @example b21f3a8c-7e4d-4b1a-9c5e-2d8f6a7b3c4e
+             */
+            after?: string | null;
+            /**
+             * @description Cursor for the previous page of results.
+             * @example a10e2b7d-6c3f-4a2b-8d1e-3f9a5b8c7d6e
+             */
+            before?: string | null;
+        };
+        /**
+         * Object
+         * @description An encrypted object with its decrypted value and metadata.
+         */
+        Object: {
+            /**
+             * @description Unique identifier of the object.
+             * @example a1b2c3d4-e5f6-7890-abcd-ef1234567890
+             */
+            id: string;
+            metadata: components["schemas"]["ObjectMetadata"];
+            /**
+             * @description Unique name of the object.
+             * @example my-secret
+             */
+            name: string;
+            /**
+             * @description Decrypted plaintext value.
+             * @example s3cr3t-v4lu3
+             */
+            value: string;
+        };
+        /** ObjectListResponse */
+        ObjectListResponse: {
+            /** @description List of object summaries. */
+            data: components["schemas"]["ObjectSummary"][];
+            list_metadata: components["schemas"]["ListMetadata"];
+        };
+        /**
+         * ObjectMetadata
+         * @description Metadata for a stored encrypted object.
+         */
+        ObjectMetadata: {
+            /**
+             * @description Map of values used to determine the encryption key.
+             * @example {
+             *       "organization_id": "org_01K8ZYT4AWJ6XP0E0S8CTBHE3P"
+             *     }
+             */
+            context: {
+                [key: string]: string;
+            };
+            /**
+             * @description Environment the object belongs to.
+             * @example environment_01K8ZYT4AWJ6XP0E0S8CTBHE3P
+             */
+            environment_id: string;
+            /**
+             * @description Unique identifier of the object.
+             * @example a1b2c3d4-e5f6-7890-abcd-ef1234567890
+             */
+            id: string;
+            /**
+             * @description Encryption key identifier.
+             * @example bf65e326-43a0-4b20-88c4-07ff3de5434c
+             */
+            key_id: string;
+            /**
+             * Format: date-time
+             * @description Timestamp of the last update.
+             * @example 2024-06-15T10:30:00Z
+             */
+            updated_at: string;
+            updated_by: components["schemas"]["Actor"];
+            /**
+             * @description Current version identifier of the object.
+             * @example c3d4e5f6-7890-abcd-ef12-34567890abcd
+             */
+            version_id?: string | null;
+        };
+        /**
+         * ObjectSummary
+         * @description Summary of an encrypted object returned in list responses.
+         */
+        ObjectSummary: {
+            /**
+             * @description Unique identifier of the object.
+             * @example a1b2c3d4-e5f6-7890-abcd-ef1234567890
+             */
+            id: string;
+            /**
+             * @description Unique name of the object.
+             * @example my-secret
+             */
+            name: string;
+            /**
+             * Format: date-time
+             * @description Timestamp of the last update.
+             * @example 2024-06-15T10:30:00Z
+             */
+            updated_at?: string | null;
+        };
+        /**
+         * ObjectVersion
+         * @description A static snapshot of an encrypted object.
+         */
+        ObjectVersion: {
+            /**
+             * Format: date-time
+             * @description Timestamp when the version was created.
+             * @example 2024-06-15T10:30:00Z
+             */
+            created_at: string;
+            /**
+             * @description Whether this is the active version.
+             * @example true
+             */
+            current_version: boolean;
+            /**
+             * @description Hash of the object value.
+             * @example d41d8cd98f00b204e9800998ecf8427e
+             */
+            etag: string;
+            /**
+             * @description Unique identifier of the version.
+             * @example c3d4e5f6-7890-abcd-ef12-34567890abcd
+             */
+            id: string;
+            /**
+             * @description Number of bytes of stored data.
+             * @example 256
+             */
+            size: number;
+        };
+        /**
+         * ObjectWithoutValue
+         * @description An encrypted object's metadata (value excluded).
+         */
+        ObjectWithoutValue: {
+            /**
+             * @description Unique identifier of the object.
+             * @example a1b2c3d4-e5f6-7890-abcd-ef1234567890
+             */
+            id: string;
+            metadata: components["schemas"]["ObjectMetadata"];
+            /**
+             * @description Unique name of the object.
+             * @example my-secret
+             */
+            name: string;
+        };
+        /** RekeyRequest */
+        RekeyRequest: {
+            /**
+             * @description Map of values used to determine the new encryption key.
+             * @example {
+             *       "organization_id": "org_01K8ZYT4AWJ6XP0E0S8CTBHE3P"
+             *     }
+             */
+            context: {
+                [key: string]: string;
+            };
+            /**
+             * @description Base64-encoded encrypted data key blob to re-encrypt.
+             * @example V09TLkVLTS52MQBiZjUxY2NlYy03OGI0LTUyMDAtYjM4My0zNTczMGU3MWVmNjEBATEBJGJmNjVlMzI2LTQzYTAtNGIyMC04OGM0LTA3ZmYzZGU1NDM0YwF0YmY2NWUzMjYtNDNhMC00YjIwLTg4YzQtMDdmZjNkZTU0MzRj
+             */
+            encrypted_keys: string;
+        };
+        /** UpdateObjectRequest */
+        UpdateObjectRequest: {
+            /**
+             * @description New plaintext value.
+             * @example upd4t3d-v4lu3
+             */
+            value: string;
+            /**
+             * @description ID of the expected current version for optimistic locking.
+             * @example c3d4e5f6-7890-abcd-ef12-34567890abcd
+             */
+            version_check?: string | null;
+        };
+        /** VersionListResponse */
+        VersionListResponse: {
+            /** @description List of object versions. */
+            data: components["schemas"]["ObjectVersion"][];
+            list_metadata: components["schemas"]["ListMetadata"];
+        };
+        ExternalAuthCompleteResponse: {
+            /**
+             * @description URI to redirect the user back to AuthKit to complete the OAuth flow.
+             * @example https://your-authkit-domain.workos.com/oauth/authorize/complete?state=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdGF0ZSI6InJhbmRvbV9zdGF0ZV9zdHJpbmciLCJpYXQiOjE3NDI2MDQ4NTN9.abc123def456ghi789
+             */
+            redirect_uri: string;
+        };
+        ApiKey: {
+            /**
+             * @description Distinguishes the API Key object.
+             * @constant
+             */
+            object: "api_key";
+            /**
+             * @description Unique identifier of the API Key.
+             * @example api_key_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            id: string;
+            /**
+             * @description The entity that owns the API Key.
+             * @example {
+             *       "type": "organization",
+             *       "id": "org_01EHZNVPK3SFK441A1RGBFSHRT"
+             *     }
+             */
+            owner: {
+                /**
+                 * @description The type of the API Key owner.
+                 * @example organization
+                 * @constant
+                 */
+                type: "organization";
+                /**
+                 * @description Unique identifier of the API Key owner.
+                 * @example org_01EHZNVPK3SFK441A1RGBFSHRT
+                 */
+                id: string;
+            } | {
+                /**
+                 * @description The type of the API Key owner.
+                 * @example user
+                 * @constant
+                 */
+                type: "user";
+                /**
+                 * @description Unique identifier of the API Key owner.
+                 * @example user_01EHZNVPK3SFK441A1RGBFSHRT
+                 */
+                id: string;
+                /**
+                 * @description Unique identifier of the organization the API Key can access.
+                 * @example org_01EHZNVPK3SFK441A1RGBFSHRT
+                 */
+                organization_id: string;
+            };
+            /**
+             * @description A descriptive name for the API Key.
+             * @example Production API Key
+             */
+            name: string;
+            /**
+             * @description An obfuscated representation of the API Key value.
+             * @example sk_...3456
+             */
+            obfuscated_value: string;
+            /**
+             * Format: date-time
+             * @description Timestamp of when the API Key was last used.
+             * @example null
+             */
+            last_used_at: string | null;
+            /**
+             * Format: date-time
+             * @description Timestamp when the API Key expires. Null means the key does not expire.
+             * @example null
+             */
+            expires_at: string | null;
+            /**
+             * @description The permission slugs assigned to the API Key.
+             * @example [
+             *       "posts:read",
+             *       "posts:write"
+             *     ]
+             */
+            permissions: string[];
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            updated_at: string;
+        };
+        ApiKeyValidationResponse: {
+            api_key: components["schemas"]["ApiKey"] | null;
+        };
+        ConnectApplication: {
+            /**
+             * @description Distinguishes the connect application object.
+             * @example connect_application
+             * @constant
+             */
+            object: "connect_application";
+            /**
+             * @description The unique ID of the connect application.
+             * @example conn_app_01HXYZ123456789ABCDEFGHIJ
+             */
+            id: string;
+            /**
+             * @description The client ID of the connect application.
+             * @example client_01HXYZ123456789ABCDEFGHIJ
+             */
+            client_id: string;
+            /**
+             * @description A description of the connect application.
+             * @example An application for managing user access
+             */
+            description: string | null;
+            /**
+             * @description The name of the connect application.
+             * @example My Application
+             */
+            name: string;
             /**
              * @description The scopes available for this application.
              * @example [
@@ -4313,6 +4818,7 @@ export interface components {
              */
             secret_hint: string;
             /**
+             * Format: date-time
              * @description The timestamp when the client secret was last used, or null if never used.
              * @example null
              */
@@ -5903,44 +6409,103 @@ export interface components {
              */
             updated_at: string;
         };
-        /**
-         * @description The external key provider used for BYOK.
-         * @example AWS_KMS
-         * @enum {string}
-         */
-        VaultByokKeyProvider: "AWS_KMS" | "GCP_KMS" | "AZURE_KEY_VAULT";
-        WaitlistUser: {
+        PipesConnectedAccount: {
             /**
-             * @description Distinguishes the Waitlist User object.
+             * @description The connected account object.
+             * @example connected_account
              * @constant
              */
-            object: "waitlist_user";
+            object: "connected_account";
             /**
-             * @description The unique ID of the Waitlist User.
-             * @example wl_user_01E4ZCR3C56J083X43JQXF3JK5
+             * @description The unique ID of the connected account.
+             * @example data_installation_01EHZNVPK3SFK441A1RGBFSHRT
              */
             id: string;
             /**
-             * @description The email address of the Waitlist User.
-             * @example marcelina.davis@example.com
+             * @description The unique ID of the data integration.
+             * @example data_integration_01EHZNVPK3SFK441A1RGBFSHRT
              */
-            email: string;
+            data_integration_id: string;
             /**
-             * @description The state of the Waitlist User.
-             * @example pending
-             * @enum {string}
+             * @description The provider slug for this connected account.
+             * @example github
              */
-            state: "pending" | "approved" | "denied";
+            provider_slug: string;
             /**
-             * Format: date-time
-             * @description The timestamp when the Waitlist User was approved, or null if not yet approved.
-             * @example null
+             * @description The ID of the User the connected account belongs to.
+             * @example user_01EHZNVPK3SFK441A1RGBFSHRT
              */
-            approved_at: string | null;
+            user_id: string | null;
             /**
-             * Format: date-time
-             * @description An ISO 8601 timestamp.
-             * @example 2026-01-15T12:00:00.000Z
+             * @description The ID of the Organization the connected account belongs to.
+             * @example org_01EHWNCE74X7JSDV0X3SZ3KJNY
+             */
+            organization_id: string | null;
+            /**
+             * @description The OAuth scopes granted for this connected account.
+             * @example [
+             *       "repo",
+             *       "user:email"
+             *     ]
+             */
+            scopes: string[];
+            /**
+             * @description The state of the connected account.
+             * @example connected
+             * @enum {string}
+             */
+            state: "connected" | "needs_reauthorization";
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            updated_at: string;
+        };
+        /**
+         * @description The external key provider used for BYOK.
+         * @example AWS_KMS
+         * @enum {string}
+         */
+        VaultByokKeyProvider: "AWS_KMS" | "GCP_KMS" | "AZURE_KEY_VAULT";
+        WaitlistUser: {
+            /**
+             * @description Distinguishes the Waitlist User object.
+             * @constant
+             */
+            object: "waitlist_user";
+            /**
+             * @description The unique ID of the Waitlist User.
+             * @example wl_user_01E4ZCR3C56J083X43JQXF3JK5
+             */
+            id: string;
+            /**
+             * @description The email address of the Waitlist User.
+             * @example marcelina.davis@example.com
+             */
+            email: string;
+            /**
+             * @description The state of the Waitlist User.
+             * @example pending
+             * @enum {string}
+             */
+            state: "pending" | "approved" | "denied";
+            /**
+             * Format: date-time
+             * @description The timestamp when the Waitlist User was approved, or null if not yet approved.
+             * @example null
+             */
+            approved_at: string | null;
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
              */
             created_at: string;
             /**
@@ -6233,6 +6798,12 @@ export interface components {
                  * @example 2026-01-15T12:00:00.000Z
                  */
                 last_used_at: string | null;
+                /**
+                 * Format: date-time
+                 * @description Timestamp when the API Key expires. Null means the key does not expire.
+                 * @example null
+                 */
+                expires_at?: string | null;
                 /**
                  * @description The permissions granted to the API key.
                  * @example [
@@ -6328,6 +6899,12 @@ export interface components {
                  * @example 2026-01-15T12:00:00.000Z
                  */
                 last_used_at: string | null;
+                /**
+                 * Format: date-time
+                 * @description Timestamp when the API Key expires. Null means the key does not expire.
+                 * @example null
+                 */
+                expires_at?: string | null;
                 /**
                  * @description The permissions granted to the API key.
                  * @example [
@@ -11091,6 +11668,72 @@ export interface components {
              * @constant
              */
             object: "event";
+        } | {
+            /**
+             * @description Unique identifier for the event.
+             * @example event_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            id: string;
+            /** @constant */
+            event: "pipes.connected_account.connected";
+            /** @description The event payload. */
+            data: components["schemas"]["PipesConnectedAccount"];
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            context?: components["schemas"]["EventContextDto"];
+            /**
+             * @description Distinguishes the Event object.
+             * @constant
+             */
+            object: "event";
+        } | {
+            /**
+             * @description Unique identifier for the event.
+             * @example event_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            id: string;
+            /** @constant */
+            event: "pipes.connected_account.disconnected";
+            /** @description The event payload. */
+            data: components["schemas"]["PipesConnectedAccount"];
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            context?: components["schemas"]["EventContextDto"];
+            /**
+             * @description Distinguishes the Event object.
+             * @constant
+             */
+            object: "event";
+        } | {
+            /**
+             * @description Unique identifier for the event.
+             * @example event_01EHZNVPK3SFK441A1RGBFSHRT
+             */
+            id: string;
+            /** @constant */
+            event: "pipes.connected_account.reauthorization_needed";
+            /** @description The event payload. */
+            data: components["schemas"]["PipesConnectedAccount"];
+            /**
+             * Format: date-time
+             * @description An ISO 8601 timestamp.
+             * @example 2026-01-15T12:00:00.000Z
+             */
+            created_at: string;
+            context?: components["schemas"]["EventContextDto"];
+            /**
+             * @description Distinguishes the Event object.
+             * @constant
+             */
+            object: "event";
         } | {
             /**
              * @description Unique identifier for the event.
@@ -12323,6 +12966,12 @@ export interface components {
              * @example null
              */
             last_used_at: string | null;
+            /**
+             * Format: date-time
+             * @description Timestamp when the API Key expires. Null means the key does not expire.
+             * @example null
+             */
+            expires_at: string | null;
             /**
              * @description The permission slugs assigned to the API Key.
              * @example [
@@ -12407,6 +13056,12 @@ export interface components {
              * @example null
              */
             last_used_at: string | null;
+            /**
+             * Format: date-time
+             * @description Timestamp when the API Key expires. Null means the key does not expire.
+             * @example 2030-01-01T00:00:00.000Z
+             */
+            expires_at: string | null;
             /**
              * @description The permission slugs assigned to the API Key.
              * @example [
@@ -12909,7 +13564,7 @@ export interface components {
              * @example bot_detection
              * @enum {string}
              */
-            control?: "bot_detection" | "brute_force_attack" | "credential_stuffing" | "domain_sign_up_rate_limit" | "ip_sign_up_rate_limit" | "impossible_travel" | "repeat_sign_up" | "stale_account" | "unrecognized_device" | "restriction";
+            control?: "bot_detection" | "brute_force_attack" | "domain_sign_up_rate_limit" | "impossible_travel" | "repeat_sign_up" | "stale_account" | "unrecognized_device" | "restriction";
             /**
              * @description The type of blocklist entry that triggered the verdict. Only present if the control is `restriction`.
              * @example ip_address
@@ -13223,6 +13878,12 @@ export interface components {
              * @example null
              */
             last_used_at: string | null;
+            /**
+             * Format: date-time
+             * @description Timestamp when the API Key expires. Null means the key does not expire.
+             * @example null
+             */
+            expires_at: string | null;
             /**
              * @description The permission slugs assigned to the API Key.
              * @example [
@@ -13312,6 +13973,12 @@ export interface components {
              * @example null
              */
             last_used_at: string | null;
+            /**
+             * Format: date-time
+             * @description Timestamp when the API Key expires. Null means the key does not expire.
+             * @example 2030-01-01T00:00:00.000Z
+             */
+            expires_at: string | null;
             /**
              * @description The permission slugs assigned to the API Key.
              * @example [
@@ -13704,7 +14371,7 @@ export interface components {
             connection_id: string;
             /**
              * @description The type of SSO connection.
-             * @example GoogleOAuth
+             * @example OktaSAML
              * @enum {string}
              */
             connection_type: "Pending" | "ADFSSAML" | "AdpOidc" | "AppleOAuth" | "Auth0Migration" | "Auth0SAML" | "AzureSAML" | "BitbucketOAuth" | "CasSAML" | "ClassLinkSAML" | "CleverOIDC" | "CloudflareSAML" | "CyberArkSAML" | "DiscordOAuth" | "DuoSAML" | "EntraIdOIDC" | "GenericOIDC" | "GenericSAML" | "GitHubOAuth" | "GitLabOAuth" | "GoogleOAuth" | "GoogleOIDC" | "GoogleSAML" | "IntuitOAuth" | "JumpCloudSAML" | "KeycloakSAML" | "LastPassSAML" | "LinkedInOAuth" | "LoginGovOidc" | "MagicLink" | "MicrosoftOAuth" | "MiniOrangeSAML" | "NetIqSAML" | "OktaOIDC" | "OktaSAML" | "OneLoginSAML" | "OracleSAML" | "PingFederateSAML" | "PingOneSAML" | "RipplingSAML" | "SalesforceSAML" | "ShibbolethGenericSAML" | "ShibbolethSAML" | "SimpleSamlPhpSAML" | "SalesforceOAuth" | "SlackOAuth" | "TestIdp" | "VercelMarketplaceOAuth" | "VercelOAuth" | "VMwareSAML" | "XeroOAuth";
@@ -19025,6 +19692,7 @@ export interface operations {
                          */
                         secret_hint: string;
                         /**
+                         * Format: date-time
                          * @description The timestamp when the client secret was last used, or null if never used.
                          * @example null
                          */
@@ -22157,20 +22825,10 @@ export interface operations {
                     auth_method: "Password" | "Passkey" | "Authenticator" | "SMS_OTP" | "Email_OTP" | "Social" | "SSO" | "Other";
                     /**
                      * @description The action being performed.
-                     * @example login
+                     * @example sign-in
                      * @enum {string}
                      */
-                    action: "login" | "signup" | "sign-up" | "sign-in" | "sign_up" | "sign_in" | "sign in" | "sign up";
-                    /**
-                     * @description An optional device fingerprint for the request.
-                     * @example fp_abc123
-                     */
-                    device_fingerprint?: string;
-                    /**
-                     * @description An optional bot detection score for the request.
-                     * @example 0.1
-                     */
-                    bot_score?: string;
+                    action: "sign-up" | "sign-in";
                 };
             };
         };
@@ -27909,6 +28567,483 @@ export interface operations {
             };
         };
     };
+    "JumpWireWeb.KeyController.create_data_key": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description Data key request. */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateDataKeyRequest"];
+            };
+        };
+        responses: {
+            /** @description Data key. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CreateDataKeyResponse"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Validation error. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.KeyController.decrypt": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description Decrypt request. */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DecryptRequest"];
+            };
+        };
+        responses: {
+            /** @description Decrypted key. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DecryptResponse"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.KeyController.rekey": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description Rekey request. */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["RekeyRequest"];
+            };
+        };
+        responses: {
+            /** @description Re-encrypted key. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CreateDataKeyResponse"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Validation error. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.DataVaultController.index": {
+        parameters: {
+            query?: {
+                /** @description Upper limit on the number of objects to return. */
+                limit?: number;
+                /** @description Cursor for the previous page of results. */
+                before?: string;
+                /** @description Cursor for the next page of results. */
+                after?: string;
+                /** @description Sort direction for results. */
+                order?: "asc" | "desc";
+                /** @description Filter results by name or structured search JSON. */
+                search?: string;
+                /** @description ISO 8601 timestamp to filter by last modified time. */
+                updatedAfter?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Object list. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ObjectListResponse"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.DataVaultController.create": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description Create object. */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateObjectRequest"];
+            };
+        };
+        responses: {
+            /** @description Object created. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ObjectMetadata"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Conflict. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Validation error. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.DataVaultController.show_by_name": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Unique name of the object. */
+                name: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Object. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Object"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.DataVaultController.show_by_id": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Unique identifier of the object. */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Object. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Object"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.DataVaultController.update": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Unique identifier of the object. */
+                id: string;
+            };
+            cookie?: never;
+        };
+        /** @description Update object. */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateObjectRequest"];
+            };
+        };
+        responses: {
+            /** @description Object updated. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ObjectWithoutValue"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Version mismatch. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.DataVaultController.delete": {
+        parameters: {
+            query?: {
+                /** @description Expected current version for optimistic locking. */
+                version_check?: string;
+            };
+            header?: never;
+            path: {
+                /** @description Unique identifier of the object. */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Deletion result. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DeleteObjectResponse"];
+                };
+            };
+            /** @description Not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Version mismatch. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Internal error. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.DataVaultController.describe": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Unique identifier of the object. */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Object metadata. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ObjectWithoutValue"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "JumpWireWeb.DataVaultController.versions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Unique identifier of the object. */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Version list. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VersionListResponse"];
+                };
+            };
+            /** @description Bad request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     WebhookEndpointsController_list: {
         parameters: {
             query?: {