spaps 0.9.0 → 0.9.1

package/AI_TOOLS.json

@@ -1,8 +1,8 @@
 {
   "name": "spaps",
-  "version": "0.7.5",
+  "version": "0.9.0",
   "description": "Auth + payments via SPAPS. Resolve local auth requirements from /health/local-mode.",
-  "base_url": "http://localhost:3301",
+  "base_url": "http://localhost:65535",
   "auth": {
     "local_mode": false,
     "mode_source": "/health/local-mode",
@@ -22,7 +22,15 @@
       },
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/LoginResponse"
+          "anyOf": [
+            {
+              "$ref": "#/components/schemas/LoginResponse"
+            },
+            {
+              "$ref": "#/components/schemas/MfaRequiredResponse"
+            }
+          ],
+          "title": "Response Login Api Auth Login Post"
         },
         "400": {
           "type": "object",
@@ -233,22 +241,17 @@
       }
     },
     {
-      "name": "get_current_user",
-      "description": "Get the currently authenticated user. Uses the bearer token from a previous login.",
+      "name": "auth_methods",
+      "description": "Discover the public auth methods configured for this application before rendering sign-in UI.",
       "method": "GET",
-      "path": "/api/auth/user",
+      "path": "/api/auth/methods",
       "parameters": {
         "type": "object",
-        "properties": {
-          "authorization": {
-            "type": "string",
-            "description": "Bearer <access_token>"
-          }
-        }
+        "properties": {}
       },
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/GetUserResponse"
+          "$ref": "#/components/schemas/AuthMethodsResponse"
         },
         "400": {
           "type": "object",
@@ -346,18 +349,22 @@
       }
     },
     {
-      "name": "create_checkout_session",
-      "description": "Create a Stripe Checkout session against the configured SPAPS server.",
-      "method": "POST",
-      "path": "/api/stripe/checkout-sessions",
+      "name": "get_current_user",
+      "description": "Get the currently authenticated user. Uses the bearer token from a previous login.",
+      "method": "GET",
+      "path": "/api/auth/user",
       "parameters": {
-        "$ref": "#/components/schemas/CreateCheckoutSessionRequest"
+        "type": "object",
+        "properties": {
+          "authorization": {
+            "type": "string",
+            "description": "Bearer <access_token>"
+          }
+        }
       },
       "responses": {
         "200": {
-          "type": "object",
-          "additionalProperties": true,
-          "title": "Response Create Checkout Session Api Stripe Checkout Sessions Post"
+          "$ref": "#/components/schemas/GetUserResponse"
         },
         "400": {
           "type": "object",
@@ -418,9 +425,6 @@
             "error"
           ]
         },
-        "422": {
-          "$ref": "#/components/schemas/HTTPValidationError"
-        },
         "429": {
           "type": "object",
           "properties": {
@@ -458,26 +462,18 @@
       }
     },
     {
-      "name": "list_products",
-      "description": "List products exposed by the SPAPS server.",
-      "method": "GET",
-      "path": "/api/stripe/products",
+      "name": "create_checkout_session",
+      "description": "Create a Stripe Checkout session against the configured SPAPS server.",
+      "method": "POST",
+      "path": "/api/stripe/checkout-sessions",
       "parameters": {
-        "type": "object",
-        "properties": {
-          "active": {
-            "type": "boolean"
-          },
-          "limit": {
-            "type": "number"
-          }
-        }
+        "$ref": "#/components/schemas/CreateCheckoutSessionRequest"
       },
       "responses": {
         "200": {
           "type": "object",
           "additionalProperties": true,
-          "title": "Response List Products Api Stripe Products Get"
+          "title": "Response Create Checkout Session Api Stripe Checkout Sessions Post"
         },
         "400": {
           "type": "object",
@@ -578,16 +574,26 @@
       }
     },
     {
-      "name": "request_magic_link",
-      "description": "Send a magic link for passwordless login.",
-      "method": "POST",
-      "path": "/api/auth/magic-link",
+      "name": "list_products",
+      "description": "List products exposed by the SPAPS server.",
+      "method": "GET",
+      "path": "/api/stripe/products",
       "parameters": {
-        "$ref": "#/components/schemas/MagicLinkRequest"
+        "type": "object",
+        "properties": {
+          "active": {
+            "type": "boolean"
+          },
+          "limit": {
+            "type": "number"
+          }
+        }
       },
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/MagicLinkResponse"
+          "type": "object",
+          "additionalProperties": true,
+          "title": "Response List Products Api Stripe Products Get"
         },
         "400": {
           "type": "object",
@@ -688,16 +694,16 @@
       }
     },
     {
-      "name": "get_wallet_nonce",
-      "description": "Get a nonce to sign for wallet authentication.",
+      "name": "request_magic_link",
+      "description": "Send a magic link for passwordless login.",
       "method": "POST",
-      "path": "/api/auth/nonce",
+      "path": "/api/auth/magic-link",
       "parameters": {
-        "$ref": "#/components/schemas/NonceRequest"
+        "$ref": "#/components/schemas/MagicLinkRequest"
       },
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/NonceResponse"
+          "$ref": "#/components/schemas/MagicLinkResponse"
         },
         "400": {
           "type": "object",
@@ -798,20 +804,16 @@
       }
     },
     {
-      "name": "dayrate_availability",
-      "description": "List bookable slots within the configured horizon with dynamic pricing.",
-      "method": "GET",
-      "path": "/api/dayrate/availability",
+      "name": "get_wallet_nonce",
+      "description": "Get a nonce to sign for wallet authentication.",
+      "method": "POST",
+      "path": "/api/auth/nonce",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/NonceRequest"
       },
-      "domain": "dayrate",
-      "admin_required": false,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/AvailabilityResponse"
+          "$ref": "#/components/schemas/NonceResponse"
         },
         "400": {
           "type": "object",
@@ -872,6 +874,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {
@@ -909,18 +914,25 @@
       }
     },
     {
-      "name": "dayrate_book",
-      "description": "Book a single slot. Returns FreeBookResponse when an entitled user has remaining allotment, otherwise a Stripe Checkout URL.",
+      "name": "wallet_sign_in",
+      "description": "Exchange a signed wallet nonce for SPAPS tokens or an mfa_required challenge.",
       "method": "POST",
-      "path": "/api/dayrate/book",
+      "path": "/api/auth/wallet-sign-in",
       "parameters": {
-        "$ref": "#/components/schemas/BookRequest"
+        "$ref": "#/components/schemas/WalletSignInRequest"
       },
-      "domain": "dayrate",
-      "admin_required": false,
-      "agent_callable": true,
       "responses": {
-        "200": {},
+        "200": {
+          "anyOf": [
+            {
+              "$ref": "#/components/schemas/spaps_server_quickstart__domains__auth__schemas__WalletSignInResponse"
+            },
+            {
+              "$ref": "#/components/schemas/MfaRequiredResponse"
+            }
+          ],
+          "title": "Response Wallet Sign In Api Auth Wallet Sign In Post"
+        },
         "400": {
           "type": "object",
           "properties": {
@@ -1020,19 +1032,24 @@
       }
     },
     {
-      "name": "dayrate_book_multi",
-      "description": "Book multiple slots in one Stripe session with running fill-rate pricing.",
+      "name": "verify_magic_link",
+      "description": "Exchange a magic-link token for SPAPS tokens or an mfa_required challenge.",
       "method": "POST",
-      "path": "/api/dayrate/book-multi",
+      "path": "/api/auth/verify-magic-link",
       "parameters": {
-        "$ref": "#/components/schemas/BookMultiRequest"
+        "$ref": "#/components/schemas/VerifyMagicLinkRequest"
       },
-      "domain": "dayrate",
-      "admin_required": false,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/BookMultiResponse"
+          "anyOf": [
+            {
+              "$ref": "#/components/schemas/VerifyMagicLinkResponse"
+            },
+            {
+              "$ref": "#/components/schemas/MfaRequiredResponse"
+            }
+          ],
+          "title": "Response Verify Magic Link Api Auth Verify Magic Link Post"
         },
         "400": {
           "type": "object",
@@ -1133,20 +1150,17 @@
       }
     },
     {
-      "name": "dayrate_checkout_status",
-      "description": "Poll a Stripe session to learn the resulting booking status.",
-      "method": "GET",
-      "path": "/api/dayrate/checkout-status",
+      "name": "oidc_nonce",
+      "description": "Create a nonce challenge before exchanging an OIDC provider ID token.",
+      "method": "POST",
+      "path": "/api/auth/oidc/nonce",
       "parameters": {
         "type": "object",
         "properties": {}
       },
-      "domain": "dayrate",
-      "admin_required": false,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/CheckoutStatusResponse"
+          "$ref": "#/components/schemas/OidcNonceResponse"
         },
         "400": {
           "type": "object",
@@ -1207,9 +1221,6 @@
             "error"
           ]
         },
-        "422": {
-          "$ref": "#/components/schemas/HTTPValidationError"
-        },
         "429": {
           "type": "object",
           "properties": {
@@ -1247,19 +1258,24 @@
       }
     },
     {
-      "name": "dayrate_cancel",
-      "description": "Cancel an existing booking. Owner verified by user_id then email.",
+      "name": "oidc_sign_in",
+      "description": "Exchange an OIDC ID token and challenge_id for SPAPS tokens or an mfa_required challenge.",
       "method": "POST",
-      "path": "/api/dayrate/cancel",
+      "path": "/api/auth/oidc/sign-in",
       "parameters": {
-        "$ref": "#/components/schemas/CancelRequest"
+        "$ref": "#/components/schemas/OidcSignInRequest"
       },
-      "domain": "dayrate",
-      "admin_required": false,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/CancelResponse"
+          "anyOf": [
+            {
+              "$ref": "#/components/schemas/OidcSignInResponse"
+            },
+            {
+              "$ref": "#/components/schemas/MfaRequiredResponse"
+            }
+          ],
+          "title": "Response Oidc Sign In Api Auth Oidc Sign In Post"
         },
         "400": {
           "type": "object",
@@ -1360,20 +1376,16 @@
       }
     },
     {
-      "name": "dayrate_allotment",
-      "description": "Inspect free allotment status for a policy in the rolling window.",
-      "method": "GET",
-      "path": "/api/dayrate/allotment",
+      "name": "sms_request",
+      "description": "Request an enumeration-safe SMS OTP challenge.",
+      "method": "POST",
+      "path": "/api/auth/sms/request",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/SmsOtpRequest"
       },
-      "domain": "dayrate",
-      "admin_required": false,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/AllotmentResponse"
+          "$ref": "#/components/schemas/SmsOtpRequestResponse"
         },
         "400": {
           "type": "object",
@@ -1474,20 +1486,24 @@
       }
     },
     {
-      "name": "dayrate_admin_get_config",
-      "description": "Fetch dayrate pricing/availability config.",
-      "method": "GET",
-      "path": "/api/dayrate/admin/config",
+      "name": "sms_verify",
+      "description": "Verify an SMS OTP challenge for SPAPS tokens or an mfa_required challenge.",
+      "method": "POST",
+      "path": "/api/auth/sms/verify",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/SmsOtpVerifyRequest"
       },
-      "domain": "dayrate",
-      "admin_required": true,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/GetConfigResponse"
+          "anyOf": [
+            {
+              "$ref": "#/components/schemas/SmsSignInResponse"
+            },
+            {
+              "$ref": "#/components/schemas/MfaRequiredResponse"
+            }
+          ],
+          "title": "Response Verify Sms Otp Api Auth Sms Verify Post"
         },
         "400": {
           "type": "object",
@@ -1548,6 +1564,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {
@@ -1585,19 +1604,24 @@
       }
     },
     {
-      "name": "dayrate_admin_update_config",
-      "description": "Upsert dayrate config (rates, tiers, horizon, timezone, slot definitions).",
-      "method": "PUT",
-      "path": "/api/dayrate/admin/config",
+      "name": "webauthn_assertion_options",
+      "description": "Request WebAuthn assertion options before navigator.credentials.get().",
+      "method": "POST",
+      "path": "/api/auth/webauthn/assertion/options",
       "parameters": {
-        "$ref": "#/components/schemas/UpdateConfigRequest"
+        "anyOf": [
+          {
+            "$ref": "#/components/schemas/WebAuthnAssertionOptionsRequest"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "title": "Body"
       },
-      "domain": "dayrate",
-      "admin_required": true,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/UpdateConfigResponse"
+          "$ref": "#/components/schemas/WebAuthnAssertionOptionsResponse"
         },
         "400": {
           "type": "object",
@@ -1698,20 +1722,24 @@
       }
     },
     {
-      "name": "dayrate_admin_list_bookings",
-      "description": "Admin view of bookings with status/date/email/enrollment/user/is_free filters.",
-      "method": "GET",
-      "path": "/api/dayrate/admin/bookings",
+      "name": "webauthn_assertion_verify",
+      "description": "Verify a browser WebAuthn assertion for SPAPS tokens or an mfa_required challenge.",
+      "method": "POST",
+      "path": "/api/auth/webauthn/assertion/verify",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/WebAuthnAssertionVerifyRequest"
       },
-      "domain": "dayrate",
-      "admin_required": true,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/ListBookingsResponse"
+          "anyOf": [
+            {
+              "$ref": "#/components/schemas/WebAuthnAssertionVerifyResponse"
+            },
+            {
+              "$ref": "#/components/schemas/MfaRequiredResponse"
+            }
+          ],
+          "title": "Response Webauthn Assertion Verify Api Auth Webauthn Assertion Verify Post"
         },
         "400": {
           "type": "object",
@@ -1812,20 +1840,17 @@
       }
     },
     {
-      "name": "dayrate_admin_list_policies",
-      "description": "List active booking policies.",
-      "method": "GET",
-      "path": "/api/dayrate/admin/policies",
+      "name": "webauthn_register_options",
+      "description": "Request WebAuthn passkey registration options for an authenticated user.",
+      "method": "POST",
+      "path": "/api/auth/webauthn/register/options",
       "parameters": {
         "type": "object",
         "properties": {}
       },
-      "domain": "dayrate",
-      "admin_required": true,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__ListPoliciesResponse"
+          "$ref": "#/components/schemas/WebAuthnRegistrationOptionsResponse"
         },
         "400": {
           "type": "object",
@@ -1923,19 +1948,16 @@
       }
     },
     {
-      "name": "dayrate_admin_create_policy",
-      "description": "Create a booking policy (entitlement key, free allotment, overage rate, reschedule rules).",
+      "name": "webauthn_register_verify",
+      "description": "Verify browser WebAuthn registration output for an authenticated user.",
       "method": "POST",
-      "path": "/api/dayrate/admin/policies",
+      "path": "/api/auth/webauthn/register/verify",
       "parameters": {
-        "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__CreatePolicyRequest"
+        "$ref": "#/components/schemas/WebAuthnRegisterVerifyRequest"
       },
-      "domain": "dayrate",
-      "admin_required": true,
-      "agent_callable": true,
       "responses": {
-        "201": {
-          "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__PolicyResponse"
+        "200": {
+          "$ref": "#/components/schemas/WebAuthnRegisterVerifyResponse"
         },
         "400": {
           "type": "object",
@@ -2036,19 +2058,16 @@
       }
     },
     {
-      "name": "dayrate_admin_update_policy",
-      "description": "Partial update of a booking policy.",
-      "method": "PUT",
-      "path": "/api/dayrate/admin/policies/{policy_id}",
+      "name": "mfa_verify",
+      "description": "Complete an mfa_required challenge with a TOTP code or recovery code.",
+      "method": "POST",
+      "path": "/api/auth/mfa/verify",
       "parameters": {
-        "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__UpdatePolicyRequest"
+        "$ref": "#/components/schemas/MfaVerifyRequest"
       },
-      "domain": "dayrate",
-      "admin_required": true,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__PolicyResponse"
+          "$ref": "#/components/schemas/MfaVerifyResponse"
         },
         "400": {
           "type": "object",
@@ -2149,20 +2168,17 @@
       }
     },
     {
-      "name": "dayrate_admin_delete_policy",
-      "description": "Delete a booking policy.",
-      "method": "DELETE",
-      "path": "/api/dayrate/admin/policies/{policy_id}",
+      "name": "mfa_totp_enroll",
+      "description": "Enroll TOTP MFA for an authenticated user.",
+      "method": "POST",
+      "path": "/api/auth/mfa/totp/enroll",
       "parameters": {
         "type": "object",
         "properties": {}
       },
-      "domain": "dayrate",
-      "admin_required": true,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/DeletePolicyResponse"
+          "$ref": "#/components/schemas/MfaTotpEnrollResponse"
         },
         "400": {
           "type": "object",
@@ -2223,9 +2239,6 @@
             "error"
           ]
         },
-        "422": {
-          "$ref": "#/components/schemas/HTTPValidationError"
-        },
         "429": {
           "type": "object",
           "properties": {
@@ -2263,19 +2276,16 @@
       }
     },
     {
-      "name": "email_send",
-      "description": "Send a transactional email by template key. In local mode Mailgun calls are short-circuited.",
+      "name": "mfa_totp_activate",
+      "description": "Activate pending TOTP MFA enrollment with a current code.",
       "method": "POST",
-      "path": "/api/email/send",
+      "path": "/api/auth/mfa/totp/activate",
       "parameters": {
-        "$ref": "#/components/schemas/SendEmailRequest"
+        "$ref": "#/components/schemas/MfaTotpActivateRequest"
       },
-      "domain": "email",
-      "admin_required": false,
-      "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/SendEmailResponse"
+          "$ref": "#/components/schemas/MfaTotpActivateResponse"
         },
         "400": {
           "type": "object",
@@ -2376,13 +2386,1927 @@
       }
     },
     {
-      "name": "email_get_template",
-      "description": "Fetch a template definition by key.",
-      "method": "GET",
-      "path": "/api/email/templates/{template_key}",
+      "name": "mfa_totp_disable",
+      "description": "Disable TOTP MFA for an authenticated user with a current code.",
+      "method": "POST",
+      "path": "/api/auth/mfa/totp/disable",
+      "parameters": {
+        "$ref": "#/components/schemas/MfaTotpDisableRequest"
+      },
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/MfaTotpDisableResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_availability",
+      "description": "List bookable slots within the configured horizon with dynamic pricing.",
+      "method": "GET",
+      "path": "/api/dayrate/availability",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "dayrate",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/AvailabilityResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_book",
+      "description": "Book a single slot. Returns FreeBookResponse when an entitled user has remaining allotment, otherwise a Stripe Checkout URL.",
+      "method": "POST",
+      "path": "/api/dayrate/book",
+      "parameters": {
+        "$ref": "#/components/schemas/BookRequest"
+      },
+      "domain": "dayrate",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {},
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_book_multi",
+      "description": "Book multiple slots in one Stripe session with running fill-rate pricing.",
+      "method": "POST",
+      "path": "/api/dayrate/book-multi",
+      "parameters": {
+        "$ref": "#/components/schemas/BookMultiRequest"
+      },
+      "domain": "dayrate",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/BookMultiResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_checkout_status",
+      "description": "Poll a Stripe session to learn the resulting booking status.",
+      "method": "GET",
+      "path": "/api/dayrate/checkout-status",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "dayrate",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/CheckoutStatusResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_cancel",
+      "description": "Cancel an existing booking. Owner verified by user_id then email.",
+      "method": "POST",
+      "path": "/api/dayrate/cancel",
+      "parameters": {
+        "$ref": "#/components/schemas/CancelRequest"
+      },
+      "domain": "dayrate",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/CancelResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_allotment",
+      "description": "Inspect free allotment status for a policy in the rolling window.",
+      "method": "GET",
+      "path": "/api/dayrate/allotment",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "dayrate",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/AllotmentResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_admin_get_config",
+      "description": "Fetch dayrate pricing/availability config.",
+      "method": "GET",
+      "path": "/api/dayrate/admin/config",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "dayrate",
+      "admin_required": true,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/GetConfigResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_admin_update_config",
+      "description": "Upsert dayrate config (rates, tiers, horizon, timezone, slot definitions).",
+      "method": "PUT",
+      "path": "/api/dayrate/admin/config",
+      "parameters": {
+        "$ref": "#/components/schemas/UpdateConfigRequest"
+      },
+      "domain": "dayrate",
+      "admin_required": true,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/UpdateConfigResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_admin_list_bookings",
+      "description": "Admin view of bookings with status/date/email/enrollment/user/is_free filters.",
+      "method": "GET",
+      "path": "/api/dayrate/admin/bookings",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "dayrate",
+      "admin_required": true,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/ListBookingsResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_admin_list_policies",
+      "description": "List active booking policies.",
+      "method": "GET",
+      "path": "/api/dayrate/admin/policies",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "dayrate",
+      "admin_required": true,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__ListPoliciesResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_admin_create_policy",
+      "description": "Create a booking policy (entitlement key, free allotment, overage rate, reschedule rules).",
+      "method": "POST",
+      "path": "/api/dayrate/admin/policies",
+      "parameters": {
+        "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__CreatePolicyRequest"
+      },
+      "domain": "dayrate",
+      "admin_required": true,
+      "agent_callable": true,
+      "responses": {
+        "201": {
+          "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__PolicyResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_admin_update_policy",
+      "description": "Partial update of a booking policy.",
+      "method": "PUT",
+      "path": "/api/dayrate/admin/policies/{policy_id}",
+      "parameters": {
+        "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__UpdatePolicyRequest"
+      },
+      "domain": "dayrate",
+      "admin_required": true,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/spaps_server_quickstart__domains__dayrate__schemas__PolicyResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "dayrate_admin_delete_policy",
+      "description": "Delete a booking policy.",
+      "method": "DELETE",
+      "path": "/api/dayrate/admin/policies/{policy_id}",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "dayrate",
+      "admin_required": true,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/DeletePolicyResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "email_send",
+      "description": "Send a transactional email by template key. In local mode Mailgun calls are short-circuited.",
+      "method": "POST",
+      "path": "/api/email/send",
+      "parameters": {
+        "$ref": "#/components/schemas/SendEmailRequest"
+      },
+      "domain": "email",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/SendEmailResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "email_get_template",
+      "description": "Fetch a template definition by key.",
+      "method": "GET",
+      "path": "/api/email/templates/{template_key}",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "email",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {},
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "email_preview_template",
+      "description": "Render a template with its sample context.",
+      "method": "GET",
+      "path": "/api/email/templates/{template_key}/preview",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "email",
+      "admin_required": false,
+      "agent_callable": true,
+      "responses": {
+        "200": {},
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "email_preview_template_with_context",
+      "description": "Render a template with caller-provided context.",
+      "method": "POST",
+      "path": "/api/email/templates/{template_key}/preview",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/PreviewTemplateRequest"
       },
       "domain": "email",
       "admin_required": false,
@@ -2488,10 +4412,10 @@
       }
     },
     {
-      "name": "email_preview_template",
-      "description": "Render a template with its sample context.",
+      "name": "email_list_logs",
+      "description": "List email sends. Non-admin users are scoped to their own logs; admins can filter by user_id or owner_id.",
       "method": "GET",
-      "path": "/api/email/templates/{template_key}/preview",
+      "path": "/api/email/logs",
       "parameters": {
         "type": "object",
         "properties": {}
@@ -2500,7 +4424,9 @@
       "admin_required": false,
       "agent_callable": true,
       "responses": {
-        "200": {},
+        "200": {
+          "$ref": "#/components/schemas/ListLogsResponse"
+        },
         "400": {
           "type": "object",
           "properties": {
@@ -2600,18 +4526,134 @@
       }
     },
     {
-      "name": "email_preview_template_with_context",
-      "description": "Render a template with caller-provided context.",
+      "name": "email_admin_list_templates",
+      "description": "List all templates for the application.",
+      "method": "GET",
+      "path": "/api/email/templates",
+      "parameters": {
+        "type": "object",
+        "properties": {}
+      },
+      "domain": "email",
+      "admin_required": true,
+      "agent_callable": true,
+      "responses": {
+        "200": {
+          "$ref": "#/components/schemas/ListTemplatesResponse"
+        },
+        "400": {
+          "type": "object",
+          "properties": {
+            "success": {
+              "type": "boolean"
+            },
+            "error": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "type": "string"
+                },
+                "message": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "message"
+              ]
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "401": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "unauthorized"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "403": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "forbidden"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
+        "429": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "rate_limited"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        },
+        "500": {
+          "type": "object",
+          "properties": {
+            "error": {
+              "type": "string",
+              "enum": [
+                "server_error"
+              ]
+            },
+            "message": {
+              "type": "string"
+            }
+          },
+          "required": [
+            "error"
+          ]
+        }
+      }
+    },
+    {
+      "name": "email_admin_create_template",
+      "description": "Create a template (subject, html, text, variables, sample context).",
       "method": "POST",
-      "path": "/api/email/templates/{template_key}/preview",
+      "path": "/api/email/templates",
       "parameters": {
-        "$ref": "#/components/schemas/PreviewTemplateRequest"
+        "$ref": "#/components/schemas/CreateTemplateRequest"
       },
       "domain": "email",
-      "admin_required": false,
+      "admin_required": true,
       "agent_callable": true,
       "responses": {
-        "200": {},
+        "201": {
+          "$ref": "#/components/schemas/CreateTemplateResponse"
+        },
         "400": {
           "type": "object",
           "properties": {
@@ -2711,20 +4753,19 @@
       }
     },
     {
-      "name": "email_list_logs",
-      "description": "List email sends. Non-admin users are scoped to their own logs; admins can filter by user_id or owner_id.",
-      "method": "GET",
-      "path": "/api/email/logs",
+      "name": "email_admin_update_template",
+      "description": "Update an existing template.",
+      "method": "PUT",
+      "path": "/api/email/templates/{template_key}",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/UpdateTemplateRequest"
       },
       "domain": "email",
-      "admin_required": false,
+      "admin_required": true,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/ListLogsResponse"
+          "$ref": "#/components/schemas/UpdateTemplateResponse"
         },
         "400": {
           "type": "object",
@@ -2825,20 +4866,20 @@
       }
     },
     {
-      "name": "email_admin_list_templates",
-      "description": "List all templates for the application.",
+      "name": "email_admin_get_override",
+      "description": "Get subject/body override for a template.",
       "method": "GET",
-      "path": "/api/email/templates",
+      "path": "/api/email/templates/{template_key}/override",
       "parameters": {
         "type": "object",
         "properties": {}
       },
       "domain": "email",
-      "admin_required": true,
+      "admin_required": false,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/ListTemplatesResponse"
+          "$ref": "#/components/schemas/TemplateOverrideResponse"
         },
         "400": {
           "type": "object",
@@ -2899,6 +4940,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {
@@ -2936,19 +4980,19 @@
       }
     },
     {
-      "name": "email_admin_create_template",
-      "description": "Create a template (subject, html, text, variables, sample context).",
-      "method": "POST",
-      "path": "/api/email/templates",
+      "name": "email_admin_set_override",
+      "description": "Set subject/body override for a template.",
+      "method": "PUT",
+      "path": "/api/email/templates/{template_key}/override",
       "parameters": {
-        "$ref": "#/components/schemas/CreateTemplateRequest"
+        "$ref": "#/components/schemas/TemplateOverrideRequest"
       },
       "domain": "email",
       "admin_required": true,
       "agent_callable": true,
       "responses": {
-        "201": {
-          "$ref": "#/components/schemas/CreateTemplateResponse"
+        "200": {
+          "$ref": "#/components/schemas/TemplateOverrideResponse"
         },
         "400": {
           "type": "object",
@@ -3049,19 +5093,20 @@
       }
     },
     {
-      "name": "email_admin_update_template",
-      "description": "Update an existing template.",
-      "method": "PUT",
-      "path": "/api/email/templates/{template_key}",
+      "name": "email_admin_clear_override",
+      "description": "Clear subject/body override for a template.",
+      "method": "DELETE",
+      "path": "/api/email/templates/{template_key}/override",
       "parameters": {
-        "$ref": "#/components/schemas/UpdateTemplateRequest"
+        "type": "object",
+        "properties": {}
       },
       "domain": "email",
       "admin_required": true,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/UpdateTemplateResponse"
+          "$ref": "#/components/schemas/DeleteTemplateOverrideResponse"
         },
         "400": {
           "type": "object",
@@ -3162,20 +5207,20 @@
       }
     },
     {
-      "name": "email_admin_get_override",
-      "description": "Get subject/body override for a template.",
+      "name": "webhook_list",
+      "description": "List registered outbound webhooks.",
       "method": "GET",
-      "path": "/api/email/templates/{template_key}/override",
+      "path": "/api/webhooks",
       "parameters": {
         "type": "object",
         "properties": {}
       },
-      "domain": "email",
+      "domain": "webhooks",
       "admin_required": false,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/TemplateOverrideResponse"
+          "$ref": "#/components/schemas/ListWebhooksResponse"
         },
         "400": {
           "type": "object",
@@ -3276,19 +5321,19 @@
       }
     },
     {
-      "name": "email_admin_set_override",
-      "description": "Set subject/body override for a template.",
-      "method": "PUT",
-      "path": "/api/email/templates/{template_key}/override",
+      "name": "webhook_register",
+      "description": "Register an outbound webhook. The create response returns a one-time signing_secret.",
+      "method": "POST",
+      "path": "/api/webhooks",
       "parameters": {
-        "$ref": "#/components/schemas/TemplateOverrideRequest"
+        "$ref": "#/components/schemas/CreateWebhookRequest"
       },
-      "domain": "email",
-      "admin_required": true,
+      "domain": "webhooks",
+      "admin_required": false,
       "agent_callable": true,
       "responses": {
-        "200": {
-          "$ref": "#/components/schemas/TemplateOverrideResponse"
+        "201": {
+          "$ref": "#/components/schemas/CreateWebhookResponse"
         },
         "400": {
           "type": "object",
@@ -3389,20 +5434,19 @@
       }
     },
     {
-      "name": "email_admin_clear_override",
-      "description": "Clear subject/body override for a template.",
-      "method": "DELETE",
-      "path": "/api/email/templates/{template_key}/override",
+      "name": "webhook_update",
+      "description": "Update url, events, is_active, or headers on an existing webhook.",
+      "method": "PUT",
+      "path": "/api/webhooks/{webhook_id}",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/UpdateWebhookRequest"
       },
-      "domain": "email",
-      "admin_required": true,
+      "domain": "webhooks",
+      "admin_required": false,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/DeleteTemplateOverrideResponse"
+          "$ref": "#/components/schemas/UpdateWebhookResponse"
         },
         "400": {
           "type": "object",
@@ -3503,10 +5547,10 @@
       }
     },
     {
-      "name": "webhook_list",
-      "description": "List registered outbound webhooks.",
-      "method": "GET",
-      "path": "/api/webhooks",
+      "name": "webhook_delete",
+      "description": "Remove a registered webhook.",
+      "method": "DELETE",
+      "path": "/api/webhooks/{webhook_id}",
       "parameters": {
         "type": "object",
         "properties": {}
@@ -3516,7 +5560,7 @@
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/ListWebhooksResponse"
+          "$ref": "#/components/schemas/DeleteWebhookResponse"
         },
         "400": {
           "type": "object",
@@ -3577,6 +5621,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {
@@ -3614,19 +5661,20 @@
       }
     },
     {
-      "name": "webhook_register",
-      "description": "Register an outbound webhook. The create response returns a one-time signing_secret.",
-      "method": "POST",
-      "path": "/api/webhooks",
+      "name": "webhook_deliveries",
+      "description": "List delivery attempts for a webhook.",
+      "method": "GET",
+      "path": "/api/webhooks/{webhook_id}/deliveries",
       "parameters": {
-        "$ref": "#/components/schemas/CreateWebhookRequest"
+        "type": "object",
+        "properties": {}
       },
       "domain": "webhooks",
       "admin_required": false,
       "agent_callable": true,
       "responses": {
-        "201": {
-          "$ref": "#/components/schemas/CreateWebhookResponse"
+        "200": {
+          "$ref": "#/components/schemas/ListDeliveriesResponse"
         },
         "400": {
           "type": "object",
@@ -3727,19 +5775,20 @@
       }
     },
     {
-      "name": "webhook_update",
-      "description": "Update url, events, is_active, or headers on an existing webhook.",
-      "method": "PUT",
-      "path": "/api/webhooks/{webhook_id}",
+      "name": "webhook_events",
+      "description": "List supported outbound event types.",
+      "method": "GET",
+      "path": "/api/webhooks/events",
       "parameters": {
-        "$ref": "#/components/schemas/UpdateWebhookRequest"
+        "type": "object",
+        "properties": {}
       },
       "domain": "webhooks",
       "admin_required": false,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/UpdateWebhookResponse"
+          "$ref": "#/components/schemas/ListEventTypesResponse"
         },
         "400": {
           "type": "object",
@@ -3840,20 +5889,19 @@
       }
     },
     {
-      "name": "webhook_delete",
-      "description": "Remove a registered webhook.",
-      "method": "DELETE",
-      "path": "/api/webhooks/{webhook_id}",
+      "name": "policy_authorize",
+      "description": "Evaluate a named policy against a user/context. Returns allow/deny with reasons.",
+      "method": "POST",
+      "path": "/api/policies/authorize",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__AuthorizeRequest"
       },
-      "domain": "webhooks",
+      "domain": "policies",
       "admin_required": false,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/DeleteWebhookResponse"
+          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__AuthorizeResponse"
         },
         "400": {
           "type": "object",
@@ -3954,20 +6002,20 @@
       }
     },
     {
-      "name": "webhook_deliveries",
-      "description": "List delivery attempts for a webhook.",
+      "name": "policy_admin_list",
+      "description": "List policies (is_active filter).",
       "method": "GET",
-      "path": "/api/webhooks/{webhook_id}/deliveries",
+      "path": "/api/policies",
       "parameters": {
         "type": "object",
         "properties": {}
       },
-      "domain": "webhooks",
-      "admin_required": false,
+      "domain": "policies",
+      "admin_required": true,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/ListDeliveriesResponse"
+          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__ListPoliciesResponse"
         },
         "400": {
           "type": "object",
@@ -4068,20 +6116,19 @@
       }
     },
     {
-      "name": "webhook_events",
-      "description": "List supported outbound event types.",
-      "method": "GET",
-      "path": "/api/webhooks/events",
+      "name": "policy_admin_create",
+      "description": "Create a policy (name, effect, conditions, priority, metadata).",
+      "method": "POST",
+      "path": "/api/policies",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__CreatePolicyRequest"
       },
-      "domain": "webhooks",
-      "admin_required": false,
+      "domain": "policies",
+      "admin_required": true,
       "agent_callable": true,
       "responses": {
-        "200": {
-          "$ref": "#/components/schemas/ListEventTypesResponse"
+        "201": {
+          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__PolicyResponse"
         },
         "400": {
           "type": "object",
@@ -4142,6 +6189,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {
@@ -4179,19 +6229,20 @@
       }
     },
     {
-      "name": "policy_authorize",
-      "description": "Evaluate a named policy against a user/context. Returns allow/deny with reasons.",
-      "method": "POST",
-      "path": "/api/policies/authorize",
+      "name": "policy_admin_get",
+      "description": "Fetch a single policy.",
+      "method": "GET",
+      "path": "/api/policies/{policy_id}",
       "parameters": {
-        "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__AuthorizeRequest"
+        "type": "object",
+        "properties": {}
       },
       "domain": "policies",
-      "admin_required": false,
+      "admin_required": true,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__AuthorizeResponse"
+          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__PolicyResponse"
         },
         "400": {
           "type": "object",
@@ -4292,20 +6343,19 @@
       }
     },
     {
-      "name": "policy_admin_list",
-      "description": "List policies (is_active filter).",
-      "method": "GET",
-      "path": "/api/policies",
+      "name": "policy_admin_update",
+      "description": "Partial update of a policy.",
+      "method": "PUT",
+      "path": "/api/policies/{policy_id}",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__UpdatePolicyRequest"
       },
       "domain": "policies",
       "admin_required": true,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__ListPoliciesResponse"
+          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__PolicyResponse"
         },
         "400": {
           "type": "object",
@@ -4406,19 +6456,22 @@
       }
     },
     {
-      "name": "policy_admin_create",
-      "description": "Create a policy (name, effect, conditions, priority, metadata).",
-      "method": "POST",
-      "path": "/api/policies",
+      "name": "policy_admin_delete",
+      "description": "Delete a policy.",
+      "method": "DELETE",
+      "path": "/api/policies/{policy_id}",
       "parameters": {
-        "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__CreatePolicyRequest"
+        "type": "object",
+        "properties": {}
       },
       "domain": "policies",
       "admin_required": true,
       "agent_callable": true,
       "responses": {
-        "201": {
-          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__PolicyResponse"
+        "200": {
+          "type": "object",
+          "additionalProperties": true,
+          "title": "Response Delete Policy Api Policies  Policy Id  Delete"
         },
         "400": {
           "type": "object",
@@ -4519,10 +6572,10 @@
       }
     },
     {
-      "name": "policy_admin_get",
-      "description": "Fetch a single policy.",
+      "name": "policy_admin_evaluations",
+      "description": "List policy evaluation audit logs.",
       "method": "GET",
-      "path": "/api/policies/{policy_id}",
+      "path": "/api/policies/evaluations",
       "parameters": {
         "type": "object",
         "properties": {}
@@ -4532,7 +6585,7 @@
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__PolicyResponse"
+          "$ref": "#/components/schemas/EvaluationLogsResponse"
         },
         "400": {
           "type": "object",
@@ -4633,19 +6686,20 @@
       }
     },
     {
-      "name": "policy_admin_update",
-      "description": "Partial update of a policy.",
-      "method": "PUT",
-      "path": "/api/policies/{policy_id}",
+      "name": "billing_status",
+      "description": "Show current application billing-account resolution and redacted Stripe diagnostics.",
+      "method": "GET",
+      "path": "/api/admin/billing/status",
       "parameters": {
-        "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__UpdatePolicyRequest"
+        "type": "object",
+        "properties": {}
       },
-      "domain": "policies",
+      "domain": "billing",
       "admin_required": true,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/spaps_server_quickstart__domains__policies__schemas__PolicyResponse"
+          "$ref": "#/components/schemas/BillingStatusResponse"
         },
         "400": {
           "type": "object",
@@ -4706,9 +6760,6 @@
             "error"
           ]
         },
-        "422": {
-          "$ref": "#/components/schemas/HTTPValidationError"
-        },
         "429": {
           "type": "object",
           "properties": {
@@ -4746,22 +6797,20 @@
       }
     },
     {
-      "name": "policy_admin_delete",
-      "description": "Delete a policy.",
-      "method": "DELETE",
-      "path": "/api/policies/{policy_id}",
+      "name": "billing_verify",
+      "description": "Verify that the current application has usable Stripe secret and webhook configuration.",
+      "method": "GET",
+      "path": "/api/admin/billing/verify",
       "parameters": {
         "type": "object",
         "properties": {}
       },
-      "domain": "policies",
+      "domain": "billing",
       "admin_required": true,
       "agent_callable": true,
       "responses": {
         "200": {
-          "type": "object",
-          "additionalProperties": true,
-          "title": "Response Delete Policy Api Policies  Policy Id  Delete"
+          "$ref": "#/components/schemas/BillingVerifyResponse"
         },
         "400": {
           "type": "object",
@@ -4822,9 +6871,6 @@
             "error"
           ]
         },
-        "422": {
-          "$ref": "#/components/schemas/HTTPValidationError"
-        },
         "429": {
           "type": "object",
           "properties": {
@@ -4862,20 +6908,19 @@
       }
     },
     {
-      "name": "policy_admin_evaluations",
-      "description": "List policy evaluation audit logs.",
-      "method": "GET",
-      "path": "/api/policies/evaluations",
+      "name": "billing_attach",
+      "description": "Bind the current application to an existing active Stripe billing account.",
+      "method": "POST",
+      "path": "/api/admin/billing/attach",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/BillingAttachRequest"
       },
-      "domain": "policies",
+      "domain": "billing",
       "admin_required": true,
       "agent_callable": true,
       "responses": {
         "200": {
-          "$ref": "#/components/schemas/EvaluationLogsResponse"
+          "$ref": "#/components/schemas/BillingAttachResponse"
         },
         "400": {
           "type": "object",
@@ -5277,6 +7322,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {
@@ -5317,7 +7365,7 @@
       "name": "issue_report_get",
       "description": "Fetch a single issue report.",
       "method": "GET",
-      "path": "/api/v1/issue-reports/{report_id}",
+      "path": "/api/v1/issue-reports/{issue_report_id}",
       "parameters": {
         "type": "object",
         "properties": {}
@@ -5326,6 +7374,9 @@
       "admin_required": false,
       "agent_callable": true,
       "responses": {
+        "200": {
+          "$ref": "#/components/schemas/IssueReportOut"
+        },
         "400": {
           "type": "object",
           "properties": {
@@ -5385,6 +7436,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {
@@ -5425,15 +7479,17 @@
       "name": "issue_report_update_note",
       "description": "Update the note on an existing report.",
       "method": "PATCH",
-      "path": "/api/v1/issue-reports/{report_id}",
+      "path": "/api/v1/issue-reports/{issue_report_id}",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/UpdateIssueReportRequest"
       },
       "domain": "issue_reporting",
       "admin_required": false,
       "agent_callable": true,
       "responses": {
+        "200": {
+          "$ref": "#/components/schemas/IssueReportOut"
+        },
         "400": {
           "type": "object",
           "properties": {
@@ -5493,6 +7549,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {
@@ -5533,15 +7592,17 @@
       "name": "issue_report_reply",
       "description": "Reply to an issue; creates a child report and reopens the linked support case.",
       "method": "POST",
-      "path": "/api/v1/issue-reports/{report_id}/replies",
+      "path": "/api/v1/issue-reports/{issue_report_id}/replies",
       "parameters": {
-        "type": "object",
-        "properties": {}
+        "$ref": "#/components/schemas/ReplyIssueReportRequest"
       },
       "domain": "issue_reporting",
       "admin_required": false,
       "agent_callable": true,
       "responses": {
+        "201": {
+          "$ref": "#/components/schemas/IssueReportOut"
+        },
         "400": {
           "type": "object",
           "properties": {
@@ -5601,6 +7662,9 @@
             "error"
           ]
         },
+        "422": {
+          "$ref": "#/components/schemas/HTTPValidationError"
+        },
         "429": {
           "type": "object",
           "properties": {