attune-sdk 0.4.0

package/dist/api_client/sdk.gen.js

@@ -0,0 +1,2145 @@
+// This file is auto-generated by @hey-api/openapi-ts
+import { formDataBodySerializer } from './client.js';
+import { client } from './client.gen.js';
+/**
+ * List all actions with pagination
+ */
+export const listActions = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/actions',
+    ...options
+});
+/**
+ * Create a new action
+ */
+export const createAction = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/actions',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Search for actions by keyword and pack filter.
+ *
+ * Returns lean `ActionSearchHit` rows optimized for action discovery — useful
+ * for AI agents and human browsing of large action catalogs. Whitespace-separated
+ * tokens in `q` are AND-matched (each token must appear in at least one of
+ * `ref`, `label`, `description`, or `pack_ref`).
+ */
+export const searchActions = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/actions/search',
+    ...options
+});
+export const listPoliciesByAction = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/actions/{action_ref}/policies',
+    ...options
+});
+/**
+ * List rules by action reference
+ */
+export const listRulesByAction = (options) => (options.client ?? client).get({ url: '/api/v1/actions/{action_ref}/rules', ...options });
+/**
+ * Delete an action
+ */
+export const deleteAction = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/actions/{ref}',
+    ...options
+});
+/**
+ * Get a single action by reference
+ */
+export const getAction = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/actions/{ref}',
+    ...options
+});
+/**
+ * Update an existing action
+ */
+export const updateAction = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/actions/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get queue statistics for an action
+ */
+export const getQueueStats = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/actions/{ref}/queue-stats',
+    ...options
+});
+/**
+ * Download the agent binary
+ *
+ * Returns the statically-linked attune-agent binary for the requested architecture.
+ * The binary can be injected into any container to turn it into an Attune worker.
+ */
+export const downloadAgentBinary = (options) => (options?.client ?? client).get({ url: '/api/v1/agent/binary', ...options });
+/**
+ * Get agent binary metadata
+ *
+ * Returns information about available agent binaries, including
+ * supported architectures and binary sizes.
+ */
+export const agentInfo = (options) => (options?.client ?? client).get({ url: '/api/v1/agent/info', ...options });
+/**
+ * Get a combined dashboard analytics payload.
+ *
+ * Returns all key metrics in a single response to avoid multiple round-trips
+ * from the dashboard page. Includes execution throughput, status transitions,
+ * event volume, enforcement volume, worker status, and failure rate.
+ */
+export const getDashboardAnalytics = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/analytics/dashboard',
+    ...options
+});
+/**
+ * Get enforcement volume over time.
+ *
+ * Returns hourly buckets of enforcement creation counts, aggregated across all rules.
+ */
+export const getEnforcementVolumeAnalytics = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/analytics/enforcements/volume',
+    ...options
+});
+/**
+ * Get event volume over time.
+ *
+ * Returns hourly buckets of event creation counts, aggregated across all triggers.
+ */
+export const getEventVolumeAnalytics = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/analytics/events/volume',
+    ...options
+});
+/**
+ * Get the execution failure rate summary.
+ *
+ * Returns aggregate failure/timeout/completion counts and the failure rate
+ * percentage over the requested time range.
+ */
+export const getFailureRateAnalytics = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/analytics/executions/failure-rate',
+    ...options
+});
+/**
+ * Get execution status transitions over time.
+ *
+ * Returns hourly buckets of execution status transitions (e.g., how many
+ * executions moved to "completed", "failed", "running" per hour).
+ */
+export const getExecutionStatusAnalytics = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/analytics/executions/status',
+    ...options
+});
+/**
+ * Get execution throughput over time.
+ *
+ * Returns hourly buckets of execution creation counts.
+ */
+export const getExecutionThroughputAnalytics = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/analytics/executions/throughput',
+    ...options
+});
+/**
+ * Get worker status transitions over time.
+ *
+ * Returns hourly buckets of worker status changes (online/offline/draining).
+ */
+export const getWorkerStatusAnalytics = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/analytics/workers/status',
+    ...options
+});
+/**
+ * List artifacts with pagination and optional filters
+ */
+export const listArtifacts = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts',
+    ...options
+});
+/**
+ * Create a new artifact
+ */
+export const createArtifact = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get a single artifact by ref
+ */
+export const getArtifactByRef = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/ref/{ref}',
+    ...options
+});
+/**
+ * Upsert an artifact by ref and allocate a file-backed version in one call.
+ *
+ * If the artifact doesn't exist, it is created using the supplied metadata.
+ * If it already exists, the execution link is updated (if provided).
+ * Then a new file-backed version is allocated and the `file_path` is returned.
+ *
+ * The caller writes the file to `$ATTUNE_ARTIFACTS_DIR/{file_path}` on the
+ * shared volume — no HTTP upload needed.
+ */
+export const allocateFileVersionByRef = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/ref/{ref}/versions/file',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Upload a file version to an artifact identified by ref, creating the artifact if it does not
+ * already exist.
+ *
+ * This is the recommended way for actions to produce versioned file artifacts. The caller
+ * provides the artifact ref and file content in a single multipart request. The server:
+ *
+ * 1. Looks up the artifact by `ref`.
+ * 2. If not found, creates it using the metadata fields in the multipart body.
+ * 3. If found, optionally updates the `execution` link to the current execution.
+ * 4. Uploads the file bytes as a new version (version number is auto-assigned).
+ *
+ * **Multipart fields:**
+ * - `file` (required) — the binary file content
+ * - `ref` (required for creation) — artifact reference (ignored if artifact already exists)
+ * - `scope` — owner scope: `system`, `pack`, `action`, `sensor`, `rule` (default: `action`)
+ * - `owner` — owner identifier (default: empty string)
+ * - `type` — artifact type: `file_text`, `file_image`, etc. (default: `file_text`)
+ * - `visibility` — `public` or `private` (default: type-aware server default)
+ * - `name` — human-readable name
+ * - `description` — optional description
+ * - `content_type` — MIME type (default: auto-detected from multipart or `application/octet-stream`)
+ * - `execution` — execution ID to link this artifact to (updates existing artifacts too)
+ * - `retention_policy` — `versions`, `days`, `hours`, `minutes` (default: `versions`)
+ * - `retention_limit` — limit value (default: `10`)
+ * - `created_by` — who created this version
+ * - `meta` — JSON metadata for this version
+ */
+export const uploadVersionByRef = (options) => (options.client ?? client).post({
+    ...formDataBodySerializer,
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/ref/{ref}/versions/upload',
+    ...options,
+    headers: {
+        'Content-Type': null,
+        ...options.headers
+    }
+});
+/**
+ * Delete an artifact (cascades to all versions, including disk files)
+ */
+export const deleteArtifact = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}',
+    ...options
+});
+/**
+ * Get a single artifact by ID
+ */
+export const getArtifact = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}',
+    ...options
+});
+/**
+ * Update an existing artifact
+ */
+export const updateArtifact = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Set the full data payload on an artifact (replaces existing data).
+ *
+ * Useful for resetting progress, updating metadata, or setting structured content.
+ */
+export const setArtifactData = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/data',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Download the latest version's content
+ */
+export const downloadLatest = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/download',
+    ...options
+});
+/**
+ * Append an entry to a progress-type artifact's data array.
+ *
+ * The entry is atomically appended to `artifact.data` (initialized as `[]` if null).
+ * This is the primary mechanism for actions to stream progress updates.
+ */
+export const appendProgress = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/progress',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Stream the latest file-backed artifact version as Server-Sent Events.
+ *
+ * The endpoint:
+ * 1. Waits (up to ~30 s) for the file to appear on disk if it has been
+ * allocated but not yet written by the worker.
+ * 2. Once the file exists it sends the current content as an initial `content`
+ * event, then tails the file every 500 ms, sending `append` events with new
+ * bytes.
+ * 3. When no new bytes have appeared for several consecutive checks **and** the
+ * linked execution (if any) has reached a terminal status, it sends a `done`
+ * event and the stream ends.
+ * 4. If the client disconnects the stream is cleaned up automatically.
+ *
+ * **Event types** (SSE `event:` field):
+ * - `content`  – full file content up to the current offset (sent once)
+ * - `append`   – incremental bytes appended since the last event
+ * - `waiting`  – file does not exist yet; sent periodically while waiting
+ * - `done`     – no more data expected; stream will close
+ * - `error`    – something went wrong; `data` contains a human-readable message
+ */
+export const streamArtifact = (options) => (options.client ?? client).sse.get({ url: '/api/v1/artifacts/{id}/stream', ...options });
+/**
+ * List all versions for an artifact (without binary content)
+ */
+export const listVersions = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/versions',
+    ...options
+});
+/**
+ * Create a new version with JSON content
+ */
+export const createVersionJson = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/versions',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Create a new file-backed version (no file content in request).
+ *
+ * This endpoint allocates a version number and computes a `file_path` on the
+ * shared artifact volume. The caller (execution process) is expected to write
+ * the file content directly to `$ATTUNE_ARTIFACTS_DIR/{file_path}` after
+ * receiving the response. The worker finalizes `size_bytes` after execution.
+ *
+ * Only applicable to file-type artifacts (FileBinary, FileDatatable, FileText, Log).
+ */
+export const createVersionFile = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/versions/file',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get the latest version's metadata and JSON content
+ */
+export const getLatestVersion = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/versions/latest',
+    ...options
+});
+/**
+ * Upload a binary file as a new version (multipart/form-data)
+ *
+ * The file is sent as a multipart form field named `file`. Optional fields:
+ * - `content_type`: MIME type override (auto-detected from filename if omitted)
+ * - `meta`: JSON metadata string
+ * - `created_by`: Creator identifier
+ */
+export const uploadVersion = (options) => (options.client ?? client).post({
+    ...formDataBodySerializer,
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/versions/upload',
+    ...options,
+    headers: {
+        'Content-Type': null,
+        ...options.headers
+    }
+});
+/**
+ * Delete a specific version by version number (including disk file if file-backed)
+ */
+export const deleteVersion = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/versions/{version}',
+    ...options
+});
+/**
+ * Get a specific version's metadata and JSON content (no binary)
+ */
+export const getVersion = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/versions/{version}',
+    ...options
+});
+/**
+ * Download the binary content of a specific version.
+ *
+ * For file-backed versions, reads from the shared artifact volume on disk.
+ * For DB-stored versions, reads from the BYTEA/JSON content column.
+ */
+export const downloadVersion = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/artifacts/{id}/versions/{version}/download',
+    ...options
+});
+/**
+ * List audit events with optional filters.
+ */
+export const listAuditEvents = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/audit-events',
+    ...options
+});
+/**
+ * Get all audit events sharing a request_id (full request lineage).
+ */
+export const getAuditEventsByRequest = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/audit-events/by-request/{request_id}',
+    ...options
+});
+/**
+ * Get a single audit event by ID.
+ */
+export const getAuditEvent = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/audit-events/{id}',
+    ...options
+});
+/**
+ * List cache namespaces for one owner scope.
+ */
+export const listNamespaces = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces',
+    ...options
+});
+/**
+ * Create a cache namespace.
+ */
+export const createNamespace = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Tombstone a cache namespace and queue bounded cleanup.
+ */
+export const deleteNamespace = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}',
+    ...options
+});
+/**
+ * Show cache namespace metadata and health.
+ */
+export const showNamespace = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}',
+    ...options
+});
+/**
+ * Update a cache namespace's publication policy.
+ */
+export const updateNamespace = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Generation-pinned cursor scan.
+ */
+export const scanEntries = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/entries',
+    ...options
+});
+/**
+ * Point lookup by external id.
+ */
+export const lookupEntry = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/entries/lookup',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Bounded multi-ID lookup.
+ */
+export const lookupEntries = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/entries/lookup-many',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List generations for a namespace.
+ */
+export const listGenerations = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/generations',
+    ...options
+});
+/**
+ * Begin a staging generation.
+ */
+export const createGeneration = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/generations',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Show a single generation.
+ */
+export const showGeneration = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/generations/{generation_id}',
+    ...options
+});
+/**
+ * Abandon a staging or ready generation.
+ */
+export const abandonGeneration = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/generations/{generation_id}/abandon',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Upload a numbered ingest chunk. Idempotent by generation/chunk index and a
+ * server-computed request digest.
+ */
+export const uploadChunk = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/generations/{generation_id}/chunks/{chunk_index}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Atomically promote a ready generation.
+ */
+export const promoteGeneration = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/generations/{generation_id}/promote',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Seal a staging generation into `ready`.
+ */
+export const sealGeneration = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/cache/namespaces/{namespace}/generations/{generation_id}/seal',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const listDashboards = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards',
+    ...options
+});
+export const createDashboard = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const previewDashboard = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards/preview',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const getDashboardSourceCatalog = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards/source-catalog',
+    ...options
+});
+export const deleteDashboard = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards/{ref}',
+    ...options
+});
+export const getDashboard = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards/{ref}',
+    ...options
+});
+export const updateDashboard = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const cloneDashboard = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards/{ref}/clone',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const getDashboardData = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/dashboards/{ref}/data',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List all enforcements with pagination and optional filters
+ */
+export const listEnforcements = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/enforcements',
+    ...options
+});
+/**
+ * List executions by enforcement ID
+ */
+export const listExecutionsByEnforcement = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/enforcements/{enforcement_id}/executions',
+    ...options
+});
+/**
+ * Get a single enforcement by ID
+ */
+export const getEnforcement = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/enforcements/{id}',
+    ...options
+});
+/**
+ * List all events with pagination and optional filters
+ */
+export const listEvents = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/events',
+    ...options
+});
+/**
+ * Create a new event
+ */
+export const createEvent = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/events',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get a single event by ID
+ */
+export const getEvent = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/events/{id}',
+    ...options
+});
+/**
+ * List all executions with pagination and optional filters
+ */
+export const listExecutions = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions',
+    ...options
+});
+/**
+ * Create a new execution (manual execution)
+ *
+ * This endpoint allows directly executing an action without a trigger or rule.
+ * The execution is queued and will be picked up by the executor service.
+ */
+export const createExecution = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/execute',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get execution statistics
+ */
+export const getExecutionStats = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/stats',
+    ...options
+});
+/**
+ * List executions by status
+ */
+export const listExecutionsByStatus = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/status/{status}',
+    ...options
+});
+/**
+ * Create execution routes
+ * Stream execution updates via Server-Sent Events
+ *
+ * This endpoint streams real-time updates for execution status changes.
+ * Optionally filter by execution_id to watch a specific execution.
+ *
+ *
+ */
+export const streamExecutionUpdates = (options) => (options?.client ?? client).sse.get({ url: '/api/v1/executions/stream', ...options });
+/**
+ * List all artifacts for a given execution
+ */
+export const listArtifactsByExecution = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/{execution_id}/artifacts',
+    ...options
+});
+/**
+ * List inquiries for a specific execution
+ */
+export const listInquiriesByExecution = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/{execution_id}/inquiries',
+    ...options
+});
+/**
+ * Get a single execution by ID
+ */
+export const getExecution = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/{id}',
+    ...options
+});
+/**
+ * Cancel a running execution
+ *
+ * This endpoint requests cancellation of an execution. The execution must be in a
+ * cancellable state (requested, scheduling, scheduled, running, or canceling).
+ * For running executions, the worker will send SIGINT to the process, then SIGTERM
+ * after a 10-second grace period if it hasn't stopped.
+ *
+ * **Workflow cascading**: When a workflow (parent) execution is cancelled, all of
+ * its incomplete child task executions are also cancelled. Children that haven't
+ * reached a worker yet are set to Cancelled immediately; children that are running
+ * receive a cancel MQ message so their worker can gracefully stop the process.
+ * The workflow_execution record is also marked as Cancelled to prevent the
+ * scheduler from dispatching any further tasks.
+ */
+export const cancelExecution = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/{id}/cancel',
+    ...options
+});
+/**
+ * Get history for a specific execution by ID.
+ *
+ * Returns all change records for the given execution, ordered by time descending.
+ */
+export const getExecutionHistory = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/{id}/history',
+    ...options
+});
+/**
+ * Stream stdout/stderr for an execution as SSE.
+ *
+ * This tails the worker's live log files directly from the shared artifacts
+ * volume. The file may not exist yet when the worker has not emitted any
+ * output, so the stream waits briefly for it to appear.
+ */
+export const streamExecutionLog = (options) => (options.client ?? client).sse.get({ url: '/api/v1/executions/{id}/logs/{stream}/stream', ...options });
+/**
+ * Republish a Requested execution's scheduler message.
+ *
+ * This is a recovery control for executions that are still `requested` after
+ * their original `ExecutionRequested` message may have been consumed during a
+ * transient scheduler failure. It does not restart running work.
+ */
+export const rescheduleExecution = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/{id}/reschedule',
+    ...options
+});
+/**
+ * List safe workflow cache iteration status for an execution.
+ */
+export const listWorkflowCacheIterations = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/executions/{id}/workflow-cache-iterations',
+    ...options
+});
+/**
+ * List history records for a given entity type.
+ *
+ * Supported entity types: `execution`, `worker`.
+ * Returns a paginated list of change records ordered by time descending.
+ */
+export const listEntityHistory = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/history/{entity_type}',
+    ...options
+});
+export const listIdentities = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities',
+    ...options
+});
+export const createIdentity = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const deleteIdentityRoleAssignment = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/roles/{id}',
+    ...options
+});
+export const deleteIdentity = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}',
+    ...options
+});
+export const getIdentity = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}',
+    ...options
+});
+export const updateIdentity = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const freezeIdentity = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}/freeze',
+    ...options
+});
+export const listIntegrationTokens = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}/integration-tokens',
+    ...options
+});
+export const createIntegrationToken = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}/integration-tokens',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const deleteIntegrationToken = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}/integration-tokens/{token_id}',
+    ...options
+});
+export const revokeIntegrationToken = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}/integration-tokens/{token_id}/revoke',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const listIdentityPermissions = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}/permissions',
+    ...options
+});
+export const createIdentityRoleAssignment = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}/roles',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const unfreezeIdentity = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/identities/{id}/unfreeze',
+    ...options
+});
+/**
+ * List all inquiries with pagination and optional filters
+ */
+export const listInquiries = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/inquiries',
+    ...options
+});
+/**
+ * Create a new inquiry
+ */
+export const createInquiry = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/inquiries',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List inquiries by status
+ */
+export const listInquiriesByStatus = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/inquiries/status/{status}',
+    ...options
+});
+/**
+ * Delete an inquiry
+ */
+export const deleteInquiry = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/inquiries/{id}',
+    ...options
+});
+/**
+ * Get a single inquiry by ID
+ */
+export const getInquiry = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/inquiries/{id}',
+    ...options
+});
+/**
+ * Update an existing inquiry
+ */
+export const updateInquiry = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/inquiries/{id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Respond to an inquiry (user-facing endpoint)
+ */
+export const respondToInquiry = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/inquiries/{id}/respond',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Wrapper to avoid conflict with the `delete` import from axum::routing
+ */
+export const deleteFileHandler = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/internal/files/{file_path}',
+    ...options
+});
+/**
+ * Download file content at the given path.
+ */
+export const downloadFile = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/internal/files/{file_path}',
+    ...options
+});
+/**
+ * Check file existence and return size via HEAD request.
+ */
+export const checkFile = (options) => (options.client ?? client).head({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/internal/files/{file_path}',
+    ...options
+});
+/**
+ * Append content to an existing file (or create it).
+ *
+ * Used for streaming log writes — workers send periodic chunks.
+ */
+export const appendToFile = (options) => (options.client ?? client).patch({
+    bodySerializer: null,
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/internal/files/{file_path}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/octet-stream',
+        ...options.headers
+    }
+});
+/**
+ * Upload or overwrite a file at the given path.
+ *
+ * The request body is the raw file content.
+ * Content-Type header is stored alongside the file if needed.
+ */
+export const uploadFile = (options) => (options.client ?? client).put({
+    bodySerializer: null,
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/internal/files/{file_path}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/octet-stream',
+        ...options.headers
+    }
+});
+/**
+ * Stream the staged candidate for a pending pack-install test.
+ */
+export const downloadPackInstallCandidateArchive = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/internal/pack-installs/{pack_install_id}/archive',
+    ...options
+});
+/**
+ * Stream a pack directory as a `.tar.gz` archive.
+ *
+ * Used by remote workers/sensors to download pack contents when they
+ * don't share a mounted volume with the API.
+ */
+export const downloadPackArchive = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/internal/packs/{pack_ref}/archive',
+    ...options
+});
+/**
+ * List all keys with pagination and optional filters (values redacted)
+ */
+export const listKeys = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/keys',
+    ...options
+});
+/**
+ * Create a new key/secret
+ */
+export const createKey = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/keys',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Delete a key/secret
+ */
+export const deleteKey = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/keys/{ref}',
+    ...options
+});
+/**
+ * Get a single key by reference (includes decrypted value)
+ */
+export const getKey = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/keys/{ref}',
+    ...options
+});
+/**
+ * Update an existing key/secret
+ */
+export const updateKey = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/keys/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const listPackIndices = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/pack-indices',
+    ...options
+});
+export const createPackIndex = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/pack-indices',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const browseIndexedPacks = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/pack-indices/packs',
+    ...options
+});
+export const getIndexedPack = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/pack-indices/packs/{ref}',
+    ...options
+});
+export const deletePackIndex = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/pack-indices/{id}',
+    ...options
+});
+export const updatePackIndex = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/pack-indices/{id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List all packs with pagination
+ */
+export const listPacks = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs',
+    ...options
+});
+/**
+ * Create a new pack
+ */
+export const createPack = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Build pack environments
+ */
+export const buildPackEnvs = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/build-envs',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get pack dependencies
+ */
+export const getPackDependencies = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/dependencies',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Create pack routes
+ *
+ * Note: Nested resource routes (e.g., /packs/:ref/actions) are defined
+ * in their respective modules (actions.rs, triggers.rs, rules.rs) to avoid
+ * route conflicts and maintain proper separation of concerns.
+ * Download packs from various sources
+ */
+export const downloadPacks = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/download',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Install a pack from a Git, archive, local, or managed-registry source.
+ */
+export const installPack = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/install',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get the status of a specific pack install record.
+ */
+export const getPackInstall = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/install/{id}',
+    ...options
+});
+/**
+ * Register a pack from local filesystem
+ */
+export const registerPack = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/register',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Register multiple packs
+ */
+export const registerPacksBatch = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/register-batch',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get a single pack test execution by ID
+ */
+export const getPackTest = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/tests/{id}',
+    ...options
+});
+/**
+ * Upload and register a pack from a tar.gz archive (multipart/form-data)
+ *
+ * The archive should be a gzipped tar containing the pack directory at its root
+ * (i.e. the archive should unpack to files like `pack.yaml`, `actions/`, etc.).
+ * The multipart field name must be `pack`.
+ *
+ * Optional form fields:
+ * - `force`: `"true"` to overwrite an existing pack with the same ref
+ * - `skip_tests`: `"true"` to skip test execution after registration
+ */
+export const uploadPack = (options) => (options.client ?? client).post({
+    ...formDataBodySerializer,
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/upload',
+    ...options,
+    headers: {
+        'Content-Type': null,
+        ...options.headers
+    }
+});
+/**
+ * List actions by pack reference
+ */
+export const listActionsByPack = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{pack_ref}/actions',
+    ...options
+});
+export const listPoliciesByPack = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{pack_ref}/policies',
+    ...options
+});
+export const listQueuesByPack = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{pack_ref}/queues',
+    ...options
+});
+/**
+ * List rules by pack reference
+ */
+export const listRulesByPack = (options) => (options.client ?? client).get({ url: '/api/v1/packs/{pack_ref}/rules', ...options });
+export const listRuntimesByPack = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{pack_ref}/runtimes',
+    ...options
+});
+/**
+ * List sensors by pack reference
+ */
+export const listSensorsByPack = (options) => (options.client ?? client).get({ url: '/api/v1/packs/{pack_ref}/sensors', ...options });
+/**
+ * List triggers by pack reference
+ */
+export const listTriggersByPack = (options) => (options.client ?? client).get({ url: '/api/v1/packs/{pack_ref}/triggers', ...options });
+/**
+ * Save a workflow file to disk and sync it to the database
+ *
+ * Writes a `{name}.workflow.yaml` file to `{packs_base_dir}/{pack_ref}/actions/workflows/`
+ * and creates or updates the corresponding workflow_definition record in the database.
+ * Also creates a companion action record so the workflow appears in action lists and palettes.
+ */
+export const saveWorkflowFile = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{pack_ref}/workflow-files',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List workflows by pack reference
+ */
+export const listWorkflowsByPack = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{pack_ref}/workflows',
+    ...options
+});
+/**
+ * Delete a pack
+ */
+export const deletePack = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}',
+    ...options
+});
+/**
+ * Get a single pack by reference
+ */
+export const getPack = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}',
+    ...options
+});
+/**
+ * Update an existing pack
+ */
+export const updatePack = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Serve the optional icon bundled at a pack root as `pack-icon.{jpg,png,ico,svg}`.
+ */
+export const getPackIcon = (options) => (options.client ?? client).get({ url: '/api/v1/packs/{ref}/icon', ...options });
+/**
+ * Get the most recent install status for a pack (survives a rollback).
+ */
+export const getPackLatestInstall = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}/install/latest',
+    ...options
+});
+/**
+ * Execute tests for a pack
+ */
+export const testPack = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}/test',
+    ...options
+});
+/**
+ * Get test history for a pack
+ */
+export const getPackTestHistory = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}/tests',
+    ...options
+});
+/**
+ * Get latest test result for a pack
+ */
+export const getPackLatestTest = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}/tests/latest',
+    ...options
+});
+/**
+ * Sync workflows from filesystem to database for a pack
+ */
+export const syncPackWorkflows = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}/workflows/sync',
+    ...options
+});
+/**
+ * Validate workflows for a pack without syncing
+ */
+export const validatePackWorkflows = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/packs/{ref}/workflows/validate',
+    ...options
+});
+export const createPermissionAssignment = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/permissions/assignments',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const deletePermissionAssignment = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/permissions/assignments/{id}',
+    ...options
+});
+export const listPermissionSets = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/permissions/sets',
+    ...options
+});
+export const deletePermissionSetRoleAssignment = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/permissions/sets/roles/{id}',
+    ...options
+});
+export const updatePermissionSet = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/permissions/sets/{id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const createPermissionSetRoleAssignment = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/permissions/sets/{id}/roles',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const listPolicies = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/policies',
+    ...options
+});
+export const createPolicy = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/policies',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const deletePolicy = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/policies/{ref}',
+    ...options
+});
+export const getPolicy = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/policies/{ref}',
+    ...options
+});
+export const updatePolicy = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/policies/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const listQueues = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues',
+    ...options
+});
+export const createQueue = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const deleteQueue = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}',
+    ...options
+});
+export const getQueue = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}',
+    ...options
+});
+export const updateQueue = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const listQueueItems = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}/items',
+    ...options
+});
+export const enqueueQueueItem = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}/items',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const bulkEnqueueQueueItems = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}/items/bulk',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const applyQueueItemsBySelector = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}/items/query/apply',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const previewQueueItemsBySelector = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}/items/query/preview',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const deleteQueueItem = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}/items/{item_id}',
+    ...options
+});
+export const updateQueueItem = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/queues/{ref}/items/{item_id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get runtime retention configuration.
+ */
+export const getRetentionConfig = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/retention-config',
+    ...options
+});
+/**
+ * Update runtime retention configuration.
+ */
+export const updateRetentionConfig = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/retention-config',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List all rules with pagination
+ */
+export const listRules = (options) => (options?.client ?? client).get({ url: '/api/v1/rules', ...options });
+/**
+ * Create a new rule
+ */
+export const createRule = (options) => (options.client ?? client).post({
+    url: '/api/v1/rules',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List enabled rules
+ */
+export const listEnabledRules = (options) => (options?.client ?? client).get({ url: '/api/v1/rules/enabled', ...options });
+/**
+ * Delete a rule
+ */
+export const deleteRule = (options) => (options.client ?? client).delete({ url: '/api/v1/rules/{ref}', ...options });
+/**
+ * Get a single rule by reference
+ */
+export const getRule = (options) => (options.client ?? client).get({ url: '/api/v1/rules/{ref}', ...options });
+/**
+ * Update an existing rule
+ */
+export const updateRule = (options) => (options.client ?? client).put({
+    url: '/api/v1/rules/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Disable a rule
+ */
+export const disableRule = (options) => (options.client ?? client).post({ url: '/api/v1/rules/{ref}/disable', ...options });
+/**
+ * Enable a rule
+ */
+export const enableRule = (options) => (options.client ?? client).post({ url: '/api/v1/rules/{ref}/enable', ...options });
+export const listRuntimes = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/runtimes',
+    ...options
+});
+export const createRuntime = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/runtimes',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const deleteRuntime = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/runtimes/{ref}',
+    ...options
+});
+export const getRuntime = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/runtimes/{ref}',
+    ...options
+});
+export const updateRuntime = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/runtimes/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List all sensors with pagination
+ */
+export const listSensors = (options) => (options?.client ?? client).get({ url: '/api/v1/sensors', ...options });
+/**
+ * Create a new sensor
+ */
+export const createSensor = (options) => (options.client ?? client).post({
+    url: '/api/v1/sensors',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List enabled sensors
+ */
+export const listEnabledSensors = (options) => (options?.client ?? client).get({ url: '/api/v1/sensors/enabled', ...options });
+/**
+ * Delete a sensor
+ */
+export const deleteSensor = (options) => (options.client ?? client).delete({ url: '/api/v1/sensors/{ref}', ...options });
+/**
+ * Get a single sensor by reference
+ */
+export const getSensor = (options) => (options.client ?? client).get({ url: '/api/v1/sensors/{ref}', ...options });
+/**
+ * Update an existing sensor
+ */
+export const updateSensor = (options) => (options.client ?? client).put({
+    url: '/api/v1/sensors/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Disable a sensor
+ */
+export const disableSensor = (options) => (options.client ?? client).post({ url: '/api/v1/sensors/{ref}/disable', ...options });
+/**
+ * Enable a sensor
+ */
+export const enableSensor = (options) => (options.client ?? client).post({ url: '/api/v1/sensors/{ref}/enable', ...options });
+/**
+ * List available log streams for a sensor.
+ */
+export const listSensorLogs = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/sensors/{sensor_ref}/logs',
+    ...options
+});
+/**
+ * Download a specific sensor log stream.
+ *
+ * Resolves the sensor ref + stream to a log file on disk and serves
+ * the content as plain text.
+ */
+export const getSensorLog = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/sensors/{sensor_ref}/logs/{stream}',
+    ...options
+});
+export const getTraceReport = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/traces/{trace_tag}',
+    ...options
+});
+/**
+ * List all triggers with pagination
+ */
+export const listTriggers = (options) => (options?.client ?? client).get({ url: '/api/v1/triggers', ...options });
+/**
+ * Create a new trigger
+ */
+export const createTrigger = (options) => (options.client ?? client).post({
+    url: '/api/v1/triggers',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List enabled triggers
+ */
+export const listEnabledTriggers = (options) => (options?.client ?? client).get({ url: '/api/v1/triggers/enabled', ...options });
+/**
+ * Delete a trigger
+ */
+export const deleteTrigger = (options) => (options.client ?? client).delete({ url: '/api/v1/triggers/{ref}', ...options });
+/**
+ * Get a single trigger by reference
+ */
+export const getTrigger = (options) => (options.client ?? client).get({ url: '/api/v1/triggers/{ref}', ...options });
+/**
+ * Update an existing trigger
+ */
+export const updateTrigger = (options) => (options.client ?? client).put({
+    url: '/api/v1/triggers/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Disable a trigger
+ */
+export const disableTrigger = (options) => (options.client ?? client).post({ url: '/api/v1/triggers/{ref}/disable', ...options });
+/**
+ * Enable a trigger
+ */
+export const enableTrigger = (options) => (options.client ?? client).post({ url: '/api/v1/triggers/{ref}/enable', ...options });
+/**
+ * Disable webhooks for a trigger
+ */
+export const disableWebhook = (options) => (options.client ?? client).post({ url: '/api/v1/triggers/{ref}/webhooks/disable', ...options });
+/**
+ * Enable webhooks for a trigger
+ */
+export const enableWebhook = (options) => (options.client ?? client).post({ url: '/api/v1/triggers/{ref}/webhooks/enable', ...options });
+/**
+ * Regenerate webhook key for a trigger
+ */
+export const regenerateWebhookKey = (options) => (options.client ?? client).post({ url: '/api/v1/triggers/{ref}/webhooks/regenerate', ...options });
+/**
+ * List rules by trigger reference
+ */
+export const listRulesByTrigger = (options) => (options.client ?? client).get({ url: '/api/v1/triggers/{trigger_ref}/rules', ...options });
+/**
+ * List sensors by trigger reference
+ */
+export const listSensorsByTrigger = (options) => (options.client ?? client).get({ url: '/api/v1/triggers/{trigger_ref}/sensors', ...options });
+/**
+ * Webhook receiver endpoint - receives webhook events and creates events
+ */
+export const receiveWebhook = (options) => (options.client ?? client).post({
+    url: '/api/v1/webhooks/{webhook_key}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+export const listWorkers = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workers',
+    ...options
+});
+export const getWorker = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workers/{id}',
+    ...options
+});
+export const cordonWorker = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workers/{id}/cordon',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get history for a specific worker by ID.
+ *
+ * Returns all change records for the given worker, ordered by time descending.
+ */
+export const getWorkerHistory = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workers/{id}/history',
+    ...options
+});
+export const uncordonWorker = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workers/{id}/uncordon',
+    ...options
+});
+/**
+ * List all workflows with pagination and filtering
+ */
+export const listWorkflows = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workflows',
+    ...options
+});
+/**
+ * Create a new workflow
+ */
+export const createWorkflow = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workflows',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Delete a workflow
+ */
+export const deleteWorkflow = (options) => (options.client ?? client).delete({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workflows/{ref}',
+    ...options
+});
+/**
+ * Get a single workflow by reference
+ */
+export const getWorkflow = (options) => (options.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workflows/{ref}',
+    ...options
+});
+/**
+ * Update an existing workflow
+ */
+export const updateWorkflow = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workflows/{ref}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Update a workflow file on disk and sync changes to the database
+ */
+export const updateWorkflowFile = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/api/v1/workflows/{ref}/file',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Handle the OIDC authorization code callback.
+ */
+export const oidcCallback = (options) => (options?.client ?? client).get({ url: '/auth/callback', ...options });
+/**
+ * Change password endpoint
+ *
+ * POST /auth/change-password
+ */
+export const changePassword = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/auth/change-password',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Create sensor token endpoint for internal service-to-service use.
+ *
+ * POST /auth/internal/sensor-token
+ *
+ * Worker/service callers can provision tokens by supplying `sensor_ref` and
+ * `trigger_types`. Sensor callers can refresh their own tokens; `sensor_ref`
+ * and `trigger_types` are derived from authenticated sensor identity state.
+ */
+export const createSensorTokenInternal = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/auth/internal/sensor-token',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Authenticate via LDAP directory.
+ *
+ * POST /auth/ldap/login
+ */
+export const ldapLogin = (options) => (options.client ?? client).post({
+    url: '/auth/ldap/login',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Login endpoint
+ *
+ * POST /auth/login
+ */
+export const login = (options) => (options.client ?? client).post({
+    url: '/auth/login',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Logout the current browser session and optionally redirect through the provider logout flow.
+ */
+export const logout = (options) => (options?.client ?? client).get({ url: '/auth/logout', ...options });
+/**
+ * Get current user endpoint
+ *
+ * GET /auth/me
+ */
+export const getCurrentUser = (options) => (options?.client ?? client).get({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/auth/me',
+    ...options
+});
+/**
+ * Update current user profile endpoint
+ *
+ * PUT /auth/me
+ */
+export const updateCurrentUser = (options) => (options.client ?? client).put({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/auth/me',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Begin browser OIDC login by redirecting to the provider.
+ */
+export const oidcLogin = (options) => (options?.client ?? client).get({ url: '/auth/oidc/login', ...options });
+/**
+ * Refresh token endpoint
+ *
+ * POST /auth/refresh
+ */
+export const refreshToken = (options) => (options.client ?? client).post({
+    url: '/auth/refresh',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Register endpoint
+ *
+ * POST /auth/register
+ */
+export const register = (options) => (options.client ?? client).post({
+    url: '/auth/register',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Create sensor token endpoint (internal use by sensor service)
+ *
+ * POST /auth/sensor-token
+ */
+export const createSensorToken = (options) => (options.client ?? client).post({
+    security: [{ scheme: 'bearer', type: 'http' }],
+    url: '/auth/sensor-token',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Authentication settings endpoint
+ *
+ * GET /auth/settings
+ */
+export const authSettings = (options) => (options?.client ?? client).get({ url: '/auth/settings', ...options });
+/**
+ * Passwordless integration-token login endpoint.
+ *
+ * POST /auth/token-login
+ */
+export const tokenLogin = (options) => (options.client ?? client).post({
+    url: '/auth/token-login',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Basic health check endpoint
+ *
+ * Returns 200 OK if the service is running
+ */
+export const health = (options) => (options?.client ?? client).get({ url: '/health', ...options });
+/**
+ * Detailed health check endpoint
+ *
+ * Checks database connectivity and returns detailed status
+ */
+export const healthDetailed = (options) => (options?.client ?? client).get({ url: '/health/detailed', ...options });
+/**
+ * Liveness check endpoint
+ *
+ * Returns 200 OK if the service process is alive
+ */
+export const liveness = (options) => (options?.client ?? client).get({ url: '/health/live', ...options });
+/**
+ * Readiness check endpoint
+ *
+ * Returns 200 OK if the service is ready to accept requests
+ */
+export const readiness = (options) => (options?.client ?? client).get({ url: '/health/ready', ...options });
+//# sourceMappingURL=sdk.gen.js.map