openapi.json

{
    "openapi": "3.1.0",
    "x-maintenance": "Hand-written and checked in, not generated: Hono registers routes as code and there is no decorator to read them off. That makes this file a promise rather than a derivation, so it has to be updated in the same change set as any route it describes - see CLAUDE.md. The rationale for every route is in resources/design/http-api.md; the operator's version is resources/guide/http-api.md. Where the three disagree, the design doc is the spec and this is the bug.",
    "info": {
        "title": "silo HTTP API",
        "version": "1.6.0",
        "summary": "The CRUD, media, transfer, plugin and administration API of a silo instance.",
        "description": "JSON everywhere, under `/api`. There is no URL versioning (D13): a breaking\nchange is a release-note event tied to a binary upgrade, and the archive\nformat carries its own `format_version`. CORS is enabled for `/api/*`, and\nfor `GET` and `HEAD` on `/media/*` (D101).\n\n**Environment paths have two spellings.** Every path below written\n`/environments` is also served at `/envs` — one handler registered twice, so\nauthorization cannot land on one spelling and miss the other. Only the\ncanonical `/environments` form is listed here; `/envs` behaves identically.\n\n**Authentication** is a claims-based API key, presented as\n`Authorization: Bearer <key>` or `X-Api-Key: <key>`. There are no users,\nsessions or cookies. Claims are deny-by-default. A collection whose schema\ndoes not set `\"x-silo-auth\": true` is readable anonymously; once a key is\npresented its claims become the visibility boundary, and even a public\ncollection then needs the matching read claim. The claim each operation asks\nfor is named in its description.\n\n**Optimistic concurrency.** `PUT` and `DELETE` on an entry, and every plugin\nmutation that writes a record, require the expected revision as\n`If-Match: \"3\"` or `?rev=3`. A mismatch is `409`.\n\n**Variables.** Every route that answers an entry substitutes `{{NAME}}` from\nthe environment's variables by default. `?variables=raw` answers the stored\ntext instead, for editors. Any other value is `400`.\n",
        "license": {
            "name": "See LICENSE in the repository"
        },
        "contact": {
            "name": "silo",
            "url": "https://github.com/org-quicko/silo"
        }
    },
    "servers": [
        {
            "url": "http://localhost:8090",
            "description": "A local instance on the default listen address."
        },
        {
            "url": "{scheme}://{host}",
            "description": "Any self-hosted instance.",
            "variables": {
                "scheme": {
                    "default": "https",
                    "enum": [
                        "http",
                        "https"
                    ]
                },
                "host": {
                    "default": "silo.example.com"
                }
            }
        }
    ],
    "security": [
        {
            "bearerAuth": []
        },
        {
            "apiKeyAuth": []
        }
    ],
    "tags": [
        {
            "name": "Health",
            "description": "Liveness, and who the presented key is."
        },
        {
            "name": "MCP",
            "description": "The Model Context Protocol surface: the HTTP API as a tool set for AI clients (D86)."
        },
        {
            "name": "Projects",
            "description": "Projects and the environments inside them."
        },
        {
            "name": "Variables",
            "description": "Names declared per project, valued per environment (D57)."
        },
        {
            "name": "Collections",
            "description": "Collection definitions and their JSON Schemas."
        },
        {
            "name": "Entries",
            "description": "The content itself."
        },
        {
            "name": "Search",
            "description": "Full-text and filtered search at three reaches (D30)."
        },
        {
            "name": "Media",
            "description": "The instance-global media library (D23)."
        },
        {
            "name": "Media configuration",
            "description": "Where the bytes go, where URLs point, what may be uploaded."
        },
        {
            "name": "Keys",
            "description": "API keys and their claims."
        },
        {
            "name": "Transfer",
            "description": "Export, import, and instance-to-instance copy."
        },
        {
            "name": "Plugins",
            "description": "Plugin packages, grants and lifecycle."
        },
        {
            "name": "Plugin routes",
            "description": "The routes a plugin declares (D36)."
        },
        {
            "name": "Trash",
            "description": "What a delete left behind, and the two ways out of it (D113).\n\nOne receipt per **explicitly** deleted thing: a collection deleted with 300\nentries under it is one item saying \"300 entries\", not 301 items. Listing\ntakes no claim of its own — each receipt is filtered by the read claim its\norigin already required, so two keys see two different trashes. Restoring\nasks for the write claims at the destination. Only purging has a claim, and\nno preset but `root` carries it.\n"
        },
        {
            "name": "Administration",
            "description": "The audit trail, operating metrics and server settings."
        }
    ],
    "paths": {
        "/api/health": {
            "get": {
                "tags": [
                    "Health"
                ],
                "summary": "Liveness and version",
                "description": "The one route the auth middleware skips entirely. Never authenticated.",
                "operationId": "getHealth",
                "security": [],
                "responses": {
                    "200": {
                        "description": "The server is up.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "status",
                                        "version"
                                    ],
                                    "properties": {
                                        "status": {
                                            "const": "ok"
                                        },
                                        "version": {
                                            "type": "string",
                                            "examples": [
                                                "1.6.0"
                                            ]
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/session": {
            "get": {
                "tags": [
                    "Health"
                ],
                "summary": "The presented key",
                "description": "The label, display prefix and normalized claims of the key on this\nrequest. The admin calls it to verify a key before saving a server.\n",
                "operationId": "getSession",
                "responses": {
                    "200": {
                        "description": "The authenticated key.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "label",
                                        "prefix",
                                        "claims",
                                        "trash"
                                    ],
                                    "properties": {
                                        "label": {
                                            "type": "string"
                                        },
                                        "prefix": {
                                            "type": "string",
                                            "description": "The display prefix, e.g. `silo_ab12`. Empty under `--no-auth`."
                                        },
                                        "claims": {
                                            "type": "array",
                                            "items": {
                                                "type": "string"
                                            }
                                        },
                                        "trash": {
                                            "type": "object",
                                            "description": "How this instance treats deletes (D113), so a delete dialog can say whether the delete can be undone.",
                                            "required": [
                                                "enabled",
                                                "retention_days"
                                            ],
                                            "properties": {
                                                "enabled": {
                                                    "type": "boolean"
                                                },
                                                "retention_days": {
                                                    "type": "integer",
                                                    "description": "`0` keeps trash items until they are purged."
                                                }
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    }
                }
            }
        },
        "/api/mcp": {
            "post": {
                "tags": [
                    "MCP"
                ],
                "summary": "MCP over Streamable HTTP",
                "description": "The Model Context Protocol endpoint (D86). One JSON-RPC 2.0 message, or a batch of them, in; the reply out as `application/json`. silo answers `initialize`, `ping`, `tools/list` and `tools/call`; a body holding only notifications answers `202` with no body; an unknown method is `-32601`.\n\nEvery `tools/call` is dispatched through this same API with the presented key, so a tool asks for exactly the claim its route asks for, and a route's refusal comes back as a result with `isError: true` rather than as a protocol error. The endpoint is stateless: no `Mcp-Session-Id` is issued and `GET` and `DELETE` are `405`. A key is required even where the equivalent `GET` would be public. The tool catalog and the client configurations are in resources/guide/mcp.md.\n",
                "operationId": "postMcp",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "oneOf": [
                                    {
                                        "$ref": "#/components/schemas/JsonRpcRequest"
                                    },
                                    {
                                        "type": "array",
                                        "items": {
                                            "$ref": "#/components/schemas/JsonRpcRequest"
                                        }
                                    }
                                ]
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The reply, or an array of replies for a batch (notifications in the batch get none).",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "oneOf": [
                                        {
                                            "$ref": "#/components/schemas/JsonRpcResponse"
                                        },
                                        {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/JsonRpcResponse"
                                            }
                                        }
                                    ]
                                }
                            }
                        }
                    },
                    "202": {
                        "description": "The body held only notifications. No content."
                    },
                    "400": {
                        "description": "The body is not JSON: a JSON-RPC `-32700` with a `null` id.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/JsonRpcResponse"
                                }
                            }
                        }
                    },
                    "401": {
                        "description": "No key, or an invalid one. Carries `WWW-Authenticate: Bearer realm=\"silo\"`.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "get": {
                "tags": [
                    "MCP"
                ],
                "summary": "No event stream",
                "description": "silo never sends a request of its own, so there is no server-to-client stream to open. Always `405` with `Allow: POST`.",
                "operationId": "getMcp",
                "responses": {
                    "405": {
                        "description": "`method_not_allowed`.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            },
            "delete": {
                "tags": [
                    "MCP"
                ],
                "summary": "No session to end",
                "description": "The endpoint is stateless and issues no `Mcp-Session-Id`, so there is nothing to terminate. Always `405` with `Allow: POST`.",
                "operationId": "deleteMcp",
                "responses": {
                    "405": {
                        "description": "`method_not_allowed`.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/projects": {
            "get": {
                "tags": [
                    "Projects"
                ],
                "summary": "List projects",
                "description": "Visibility is per project: a key sees a project it holds a collection\nclaim for, and nothing else. Fixed claims such as `keys:read` deliberately\ndo not count. With no key, only projects holding a public collection.\n",
                "operationId": "listProjects",
                "responses": {
                    "200": {
                        "description": "The projects this caller may see.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/Project"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            },
            "post": {
                "tags": [
                    "Projects"
                ],
                "summary": "Create a project",
                "description": "Claim: `collections:{project}/*/*:create`.",
                "operationId": "createProject",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "description": "The id under any of three accepted spellings.",
                                "properties": {
                                    "id": {
                                        "$ref": "#/components/schemas/ScopeName"
                                    },
                                    "name": {
                                        "$ref": "#/components/schemas/ScopeName"
                                    },
                                    "project": {
                                        "$ref": "#/components/schemas/ScopeName"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "Created.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Project"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/projects/{project}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                }
            ],
            "patch": {
                "tags": [
                    "Projects"
                ],
                "summary": "Rename a project",
                "description": "Claims are `collections:create` and `collections:delete` at\n`{project}/*/*`, checked at **both** the old and the new name (D51).\nThe response says which claims were rewritten to follow the rename and\nwhich changed reach without being rewritten.\n",
                "operationId": "renameProject",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/ExpectedId"
                    },
                    {
                        "$ref": "#/components/parameters/DryRun"
                    }
                ],
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "name"
                                ],
                                "properties": {
                                    "name": {
                                        "$ref": "#/components/schemas/ScopeName"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "What the rename did, or would do under `?dry_run=true`.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/RenamePreview"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Projects"
                ],
                "summary": "Delete a project",
                "description": "Refuses while content exists. `?force=true` erases every entry\nunderneath and additionally requires `entries:delete` at `{project}/*/*`\n(D37).\n\n**Deletes are recoverable (D113).** Unless `?permanent=true`, this moves the\ncontent to the trash, where `GET /api/trash` lists it and\n`POST /api/trash/{id}/restore` puts it back. `?permanent=true` destroys it now\nand asks for `trash:purge`. An instance with `[trash] enabled = false` deletes\npermanently either way.\n",
                "operationId": "deleteProject",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Force"
                    },
                    {
                        "$ref": "#/components/parameters/Permanent"
                    }
                ],
                "responses": {
                    "204": {
                        "description": "Deleted."
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/projects/{project}/environments": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                }
            ],
            "get": {
                "tags": [
                    "Projects"
                ],
                "summary": "List environments",
                "description": "Filtered by claim, the way the project listing is. Also served at `/envs`.",
                "operationId": "listEnvironments",
                "responses": {
                    "200": {
                        "description": "The environments this caller may see.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/Environment"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            },
            "post": {
                "tags": [
                    "Projects"
                ],
                "summary": "Create an environment",
                "description": "Claim: `collections:{project}/{env}/*:create`.",
                "operationId": "createEnvironment",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "id": {
                                        "$ref": "#/components/schemas/ScopeName"
                                    },
                                    "name": {
                                        "$ref": "#/components/schemas/ScopeName"
                                    },
                                    "env": {
                                        "$ref": "#/components/schemas/ScopeName"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "Created.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Environment"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                }
            ],
            "patch": {
                "tags": [
                    "Projects"
                ],
                "summary": "Rename an environment",
                "description": "Rename permissions at `{project}/{env}/*`, at both names (D51).",
                "operationId": "renameEnvironment",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/ExpectedId"
                    },
                    {
                        "$ref": "#/components/parameters/DryRun"
                    }
                ],
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "name"
                                ],
                                "properties": {
                                    "name": {
                                        "$ref": "#/components/schemas/ScopeName"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "What the rename did, or would do.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/RenamePreview"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Projects"
                ],
                "summary": "Delete an environment",
                "description": "Refuses while content exists. `?force=true` additionally requires\n`entries:delete` at `{project}/{env}/*`.\n\n**Deletes are recoverable (D113).** Unless `?permanent=true`, this moves the\ncontent to the trash, where `GET /api/trash` lists it and\n`POST /api/trash/{id}/restore` puts it back. `?permanent=true` destroys it now\nand asks for `trash:purge`. An instance with `[trash] enabled = false` deletes\npermanently either way.\n",
                "operationId": "deleteEnvironment",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Force"
                    },
                    {
                        "$ref": "#/components/parameters/Permanent"
                    }
                ],
                "responses": {
                    "204": {
                        "description": "Deleted."
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/copy": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                }
            ],
            "post": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Copy another environment of this instance into this one",
                "description": "Destination-driven: the path names the destination and the body names\nthe source (D22). No `transfer:*` claim, because this reaches no scope\nthe caller could not already read or write one entry at a time. It asks\nfor the read half across the source scope and the write half across the\ndestination; `replace` mode adds `entries:delete` and\n`collections:delete` there. Touches no media.\n",
                "operationId": "copyScope",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "$ref": "#/components/schemas/ScopeCopyRequest"
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "What the copy did, or would do under `dry_run`.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/ImportResult"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/package": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                }
            ],
            "post": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Stream a transfer package of the named collections and entries",
                "description": "The source half of a transfer between instances (D108). The package is\nthe export tree cut to exactly what the body names: the selected\nentries, their collections' schemas, and with `media: referenced` the\nactive assets those entries use, their bytes and the folder records\nabove them. Variables, keys, folder moves and everything else stay\nbehind. Its manifest is `package.json`, so `POST /api/import` refuses\na package.\n\nEvery name and id is checked before the response begins: a malformed\none is a 400, one this environment lacks is a 404. An entry deleted\nwhile the package streams truncates it.\n\nClaims: `transfer:export`, plus `collections:{project}/{env}/{name}:schema:read`\nand `:entries:read` for each named collection.\n",
                "operationId": "transferPackage",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "$ref": "#/components/schemas/TransferPackageRequest"
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The package.",
                        "headers": {
                            "Content-Disposition": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "attachment; filename=\"silo-package.tar.gz\""
                            }
                        },
                        "content": {
                            "application/gzip": {
                                "schema": {
                                    "type": "string",
                                    "format": "binary"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/transfers": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                }
            ],
            "post": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Prepare a transfer from another instance into this environment",
                "description": "The destination half of a transfer between instances (D109). This\nserver asks the source for a package (`POST …/package`, D108) of\nexactly the selection, unpacks it under the `[transfer]` size limits\n(D85), and verifies it exactly: every requested collection and entry\nand nothing else, media rows that are exactly what the packaged\nentries reference, a file for each row and nothing more, each file\nwith its row's size and sha256, and only plain files and folders. A\npackage that fails any check is deleted and the answer is a 400.\n\nThen it plans the package against this environment (D110), reading\nonly. Each entry is decided as an import decides it: in `merge`, the\nlater `updated_at` wins, then the higher `rev`, then the higher\ninstance id, unless `prefer` says which side wins; in `replace`, every\npackaged entry is written and every other row of the collection is\nremoved. Each entry to be written is checked against the schema the\ntransfer leaves in place: the package's where it writes the schema,\nthis environment's where it does not. An entry that fails is\n`rejected` and will not be written. A schema change that the\ncollection's entries freeze (D70) fails the preparation with a 409.\nThe plan records what it read, so Apply can refuse if any of it has\nchanged since.\nMedia is planned with it (D111): an asset this server lacks is added,\none it already holds under the same id is never changed (`unchanged`\nwhen it is the same file and details, `skipped` with the reason when\nnot), folders are matched by path, and every reference a written entry\nholds that will not resolve here is listed.\n\nThe verified package is kept for review for 60 minutes. At most 4\ntransfers may be preparing, prepared or applying at once; a fifth is\na 429. The source key is used for the pull and never stored.\n\nEverything that can be refused is refused before the source is\ncontacted: the claims, a missing environment, a storage adapter that\ncannot commit many writes as one (fs: 409 `atomic_commit_unsupported`),\nand a full server. With `Accept: application/x-ndjson` the answer is a\nprogress stream whose first line names the transfer, so it can be\ncancelled while the pull runs.\n\nThis server fetches from the URL in the body. Any key holding\n`transfer:copy` can make it reach any address it can route to.\n\nClaims: `transfer:copy`; `collections:{project}/{env}/{name}:create`,\n`:schema:update`, `:entries:create` and `:entries:update` for each\nselected collection; `:delete` and `:entries:delete` as well in\n`replace` mode; and `media:create` unless `media` is `none`.\n",
                "operationId": "prepareTransfer",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "$ref": "#/components/schemas/PreparedTransferRequest"
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "The prepared transfer, with its review and the first page of its plan, or, when `Accept: application/x-ndjson` asked for one, a progress stream whose last line carries it (status 200).",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/PreparedTransfer"
                                }
                            },
                            "application/x-ndjson": {
                                "schema": {
                                    "$ref": "#/components/schemas/PreparedTransferProgressLine"
                                }
                            }
                        }
                    },
                    "400": {
                        "description": "The body is malformed, or the source refused, could not be reached, is not silo 1.6.0 or later, or sent a package that failed verification or whose entries cannot be checked against the schemas here. The message says which.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "description": "`atomic_commit_unsupported` on the fs storage adapter; `transfer_cancelled` when a cancel stopped the pull; `conflict` when a merged collection holds entries and the package would change what validates them (D70).",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    },
                    "429": {
                        "description": "`too_many_transfers`: 4 transfers are already preparing, prepared or applying. Apply or cancel one, or wait for one to expire.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/transfers/{id}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                },
                {
                    "name": "id",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The transfer's id, as prepare answered it."
                }
            ],
            "get": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Read a prepared transfer and one page of its plan",
                "description": "The state, the expiry, the package summary, the review and, while the\npackage is held, one page of the plan in a stable order: each\ncollection's packaged entries by id, then, in `replace`, the rows it\nremoves, then the packaged media assets and folders (D111). An expired,\ncancelled, stale or applied transfer keeps its record for 24 hours,\nwithout its package or plan.\n\nWhat only this environment holds, the id of a row that `replace`\nremoves and the `rev` and time of a row already here, is shown only to\na key holding `collections:{project}/{env}/{name}:schema:read` and\n`:entries:read` on that collection, as the env copy's preview does.\n\nAnswers only the key that prepared the transfer, and only under the\nenvironment it was prepared for; any other caller gets a 404.\n\nClaims: `transfer:copy`.\n",
                "operationId": "getTransfer",
                "parameters": [
                    {
                        "name": "detail_offset",
                        "in": "query",
                        "schema": {
                            "type": "integer",
                            "minimum": 0,
                            "default": 0
                        }
                    },
                    {
                        "name": "detail_limit",
                        "in": "query",
                        "schema": {
                            "type": "integer",
                            "minimum": 1,
                            "maximum": 100,
                            "default": 25
                        },
                        "description": "At most 100."
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The transfer.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/PreparedTransfer"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Cancel a prepared transfer",
                "description": "Stops a pull that is still running, or drops a prepared package. The\nrecord stays as `cancelled`. A transfer that has already ended is\nanswered as it is.\n\nAnswers only the key that prepared the transfer, and only under the\nenvironment it was prepared for; any other caller gets a 404.\n\nClaims: `transfer:copy`.\n",
                "operationId": "cancelTransfer",
                "responses": {
                    "200": {
                        "description": "The transfer, cancelled.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/PreparedTransfer"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "description": "`transfer_in_progress` while it is applying, `transfer_applied` once it has.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/transfers/{id}/apply": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                },
                {
                    "name": "id",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The transfer's id, as prepare answered it."
                }
            ],
            "post": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Apply a prepared transfer",
                "description": "Writes the reviewed plan as one change, or nothing (D111). There is no\nbody: everything was fixed when the transfer was prepared.\n\nEvery row the plan read is checked again inside the same commit, with\na `_transfers` ledger row that must not exist yet. The destination's\nproject and environment must still have the ids the plan was made\nagainst, so an environment deleted or recreated since counts as a\nchange. If anything has\nchanged, nothing is written, the answer is `409 stale_preview`, and\nthe transfer becomes `stale`: prepare it again. New media files are\nwritten first, under keys no file holds, and removed again if the\ncommit does not land. A server that stopped during an apply settles\nit when it starts again.\n\nApplying an applied transfer answers it again, with `200`. With\n`Accept: application/x-ndjson` the answer is a progress stream\n(`media`, then `commit`).\n\nAnswers only the key that prepared the transfer, and only under the\nenvironment it was prepared for; any other caller gets a 404.\n\nClaims, as the key holds them now: `transfer:copy`;\n`collections:{project}/{env}/{name}:create`, `:schema:update`,\n`:entries:create` and `:entries:update` for each selected collection;\n`:delete` and `:entries:delete` as well in `replace` mode; and\n`media:create` unless `media` is `none`.\n",
                "operationId": "applyTransfer",
                "responses": {
                    "200": {
                        "description": "The applied transfer, or, when `Accept: application/x-ndjson` asked for one, a progress stream whose last line carries it.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/PreparedTransfer"
                                }
                            },
                            "application/x-ndjson": {
                                "schema": {
                                    "$ref": "#/components/schemas/PreparedTransferProgressLine"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "description": "`stale_preview` when this server changed since the plan was made; `transfer_in_progress` while it is being prepared or applied; `transfer_cancelled`; `transfer_expired`.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    },
                    "500": {
                        "description": "The commit or a media file failed. Nothing was written, and the transfer is `prepared` again with `last_error`.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/transfers/{id}/entries/{collection}/{entry}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                },
                {
                    "name": "id",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The transfer's id, as prepare answered it."
                },
                {
                    "name": "collection",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "$ref": "#/components/schemas/CollectionName"
                    }
                },
                {
                    "name": "entry",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    }
                }
            ],
            "get": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Read one packaged entry of a prepared transfer",
                "description": "The entry as the package holds it, which is what Apply will write,\nwhatever the source has done since. It is shown raw, as the entry\neditor reads it: no media URLs and no variable substitution.\n\nAnswers only the key that prepared the transfer, and only under the\nenvironment it was prepared for; any other caller gets a 404.\n\nClaims: `transfer:copy`.\n",
                "operationId": "getTransferEntry",
                "responses": {
                    "200": {
                        "description": "The packaged entry.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Entry"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/projects/{project}/variables": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                }
            ],
            "post": {
                "tags": [
                    "Variables"
                ],
                "summary": "Declare a variable in the project",
                "description": "Declaring reaches every environment in the project, so it asks for\n`collections:{project}/*/*:create`. An initial `value` lands in `?env=`\nand is additionally held to the value authority — `entries:update`\nacross that environment.\n",
                "operationId": "declareVariable",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/VariableEnv"
                    }
                ],
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "name"
                                ],
                                "properties": {
                                    "name": {
                                        "type": "string",
                                        "description": "The `{{NAME}}` this declares."
                                    },
                                    "description": {
                                        "type": "string",
                                        "default": ""
                                    },
                                    "value": {
                                        "type": "string",
                                        "description": "Optional initial value, for the `?env=` environment only."
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "Declared.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Variable"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/projects/{project}/variables/{name}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "name": "name",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The declared variable name."
                }
            ],
            "patch": {
                "tags": [
                    "Variables"
                ],
                "summary": "Rename a declaration, or rewrite its description",
                "description": "A rename rewrites **no content**: every `{{OLD}}` already stored stays\nas an unresolved reference, deliberately. A rename asks for\n`collections:create` and `collections:delete` at `{project}/*/*`; a\ndescription change asks for `create` alone.\n",
                "operationId": "updateVariableDeclaration",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/VariableEnv"
                    }
                ],
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "name": {
                                        "type": "string"
                                    },
                                    "description": {
                                        "type": "string"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The declaration after the change.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Variable"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Variables"
                ],
                "summary": "Undeclare a variable, and every environment's value with it",
                "description": "Claim: `collections:{project}/*/*:delete`.",
                "operationId": "undeclareVariable",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/VariableEnv"
                    }
                ],
                "responses": {
                    "204": {
                        "description": "Undeclared."
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/variables": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                }
            ],
            "get": {
                "tags": [
                    "Variables"
                ],
                "summary": "Every declaration in the project, with this environment's value",
                "description": "Needs `entries:read` on **any** collection in the environment. That is\nthe honest floor: a value is substituted into every entry that\nreferences it, so anyone who can read one entry can already see it.\n",
                "operationId": "listVariables",
                "responses": {
                    "200": {
                        "description": "The declarations, valued for this environment.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/Variable"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/variables/{name}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                },
                {
                    "name": "name",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    }
                }
            ],
            "put": {
                "tags": [
                    "Variables"
                ],
                "summary": "Set this environment's value",
                "description": "Every other environment's is untouched. Changing one value rewrites what\nevery entry in this environment answers, so it asks for\n`collections:{project}/{env}/*:entries:update`.\n",
                "operationId": "setVariableValue",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "value"
                                ],
                                "properties": {
                                    "value": {
                                        "type": "string",
                                        "description": "May be empty, which is a value somebody chose."
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The variable after the write.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Variable"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Variables"
                ],
                "summary": "Clear this environment's value, leaving the name declared",
                "description": "Authorized as an update, not a delete: the declaration survives.",
                "operationId": "clearVariableValue",
                "responses": {
                    "200": {
                        "description": "The variable with `value` back to `null`.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Variable"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/collections": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                }
            ],
            "get": {
                "tags": [
                    "Collections"
                ],
                "summary": "List collections",
                "description": "Summaries, and no schema (D54) — a schema is the largest thing a\ncollection carries and the one thing a list of them never draws. Each\nitem is filtered by `collections:schema:read`, or by the collection\nbeing public when no key is presented.\n",
                "operationId": "listCollections",
                "responses": {
                    "200": {
                        "description": "The collections this caller may see.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/CollectionSummary"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            },
            "post": {
                "tags": [
                    "Collections"
                ],
                "summary": "Create a collection",
                "description": "Claim: `collections:{project}/{env}/{name}:create`.",
                "operationId": "createCollection",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "name",
                                    "schema"
                                ],
                                "properties": {
                                    "name": {
                                        "$ref": "#/components/schemas/CollectionName"
                                    },
                                    "schema": {
                                        "$ref": "#/components/schemas/JsonSchema"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "Created.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Collection"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/schemas": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                }
            ],
            "get": {
                "tags": [
                    "Collections"
                ],
                "summary": "Every schema in the scope",
                "description": "For the callers that genuinely read across all of them — a form\nresolving `silo://` refs, a client validating without a round trip per\ntype. A sibling of `collections` rather than a path beneath it, because\n`schemas` is a legal collection name.\n",
                "operationId": "listSchemas",
                "responses": {
                    "200": {
                        "description": "Every collection with its stored schema, claim-filtered.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/Collection"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/collections/{name}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                },
                {
                    "$ref": "#/components/parameters/CollectionName"
                }
            ],
            "get": {
                "tags": [
                    "Entries"
                ],
                "summary": "List entries",
                "description": "Filter, sort and paginate with the query grammar below. Public without a\nkey unless the schema sets `\"x-silo-auth\": true`; with a key, needs\n`collections:...:entries:read`.\n",
                "operationId": "listEntries",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Filter"
                    },
                    {
                        "$ref": "#/components/parameters/Sort"
                    },
                    {
                        "$ref": "#/components/parameters/Limit"
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    },
                    {
                        "$ref": "#/components/parameters/Variables"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of entries.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/EntryPage"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "503": {
                        "$ref": "#/components/responses/Busy"
                    }
                }
            },
            "post": {
                "tags": [
                    "Entries"
                ],
                "summary": "Create an entry",
                "description": "The body is the entry's own fields. `id`, `rev`, `created_at` and\n`updated_at` are the envelope and are written by the server. Claim:\n`collections:...:entries:create`.\n",
                "operationId": "createEntry",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Variables"
                    }
                ],
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "description": "Validated against the collection's schema.",
                                "additionalProperties": true
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "Created.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Entry"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "patch": {
                "tags": [
                    "Collections"
                ],
                "summary": "Rename a collection",
                "description": "Distinct from the other two renames in one way: `$ref`s address\ncollections by name, so this rewrites every referring schema as well,\nand asks for `collections:schema:update` on each of them up front (D51).\n",
                "operationId": "renameCollection",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/ExpectedId"
                    },
                    {
                        "$ref": "#/components/parameters/DryRun"
                    }
                ],
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "name"
                                ],
                                "properties": {
                                    "name": {
                                        "$ref": "#/components/schemas/CollectionName"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "What the rename did, or would do.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/RenamePreview"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/collections/{name}/schema": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                },
                {
                    "$ref": "#/components/parameters/CollectionName"
                }
            ],
            "get": {
                "tags": [
                    "Collections"
                ],
                "summary": "One collection's schema",
                "description": "Bundled on the way out (D54): every referenced collection's schema is\nre-resolved into `$defs` as it stands now, so one schema is a document a\nclient can render on its own.\n",
                "operationId": "getCollectionSchema",
                "responses": {
                    "200": {
                        "description": "The collection and its bundled schema.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Collection"
                                }
                            }
                        }
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            },
            "put": {
                "tags": [
                    "Collections"
                ],
                "summary": "Replace a collection's schema",
                "description": "Claim: `collections:...:schema:update`. Turning `x-silo-auth` on or off\nadditionally requires `collections:...:access:update`.\n\nA schema that changes which entries are valid is checked against every\nentry the collection holds, under the write lock, and refused with a `409`\nat the first entry it does not admit (D70). `x-silo-auth`, `x-silo-search`,\n`title`, `description`, `$comment` and `$schema` do not change what is\nvalid, so a change to them alone is never refused this way.\n",
                "operationId": "putCollectionSchema",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "$ref": "#/components/schemas/JsonSchema"
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The collection after the write.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Collection"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "description": "An entry the collection holds does not satisfy the new schema, so nothing\nwas saved. The message names the collection only: the check stops at the\nfirst such entry, so it has no entry id or count to give.\n",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Collections"
                ],
                "summary": "Delete a collection",
                "description": "Refuses while entries exist. `?force=true` erases them and additionally\nrequires `entries:delete` on the collection (D37).\n\n**Deletes are recoverable (D113).** Unless `?permanent=true`, this moves the\ncontent to the trash, where `GET /api/trash` lists it and\n`POST /api/trash/{id}/restore` puts it back. `?permanent=true` destroys it now\nand asks for `trash:purge`. An instance with `[trash] enabled = false` deletes\npermanently either way.\n",
                "operationId": "deleteCollection",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Force"
                    },
                    {
                        "$ref": "#/components/parameters/Permanent"
                    }
                ],
                "responses": {
                    "204": {
                        "description": "Deleted."
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/collections/{name}/{id}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                },
                {
                    "$ref": "#/components/parameters/CollectionName"
                },
                {
                    "name": "id",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The entry id. A ULID for anything silo created; an imported id may be anything."
                }
            ],
            "get": {
                "tags": [
                    "Entries"
                ],
                "summary": "Read one entry",
                "operationId": "getEntry",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Variables"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The entry.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Entry"
                                }
                            }
                        }
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            },
            "put": {
                "tags": [
                    "Entries"
                ],
                "summary": "Replace one entry",
                "description": "A full replace, not a patch. Requires the expected revision as\n`If-Match: \"<rev>\"` or `?rev=<rev>`. Claim:\n`collections:...:entries:update`.\n",
                "operationId": "updateEntry",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    },
                    {
                        "$ref": "#/components/parameters/Variables"
                    }
                ],
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "additionalProperties": true
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The entry after the write.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Entry"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "description": "The stored revision is not the expected one.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Entries"
                ],
                "summary": "Delete one entry",
                "description": "Requires the expected revision, like `PUT`. Claim `entries:delete`.\n\n**Deletes are recoverable (D113).** Unless `?permanent=true`, this moves the\ncontent to the trash, where `GET /api/trash` lists it and\n`POST /api/trash/{id}/restore` puts it back. `?permanent=true` destroys it now\nand asks for `trash:purge`. An instance with `[trash] enabled = false` deletes\npermanently either way.\n",
                "operationId": "deleteEntry",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    },
                    {
                        "$ref": "#/components/parameters/Permanent"
                    }
                ],
                "responses": {
                    "204": {
                        "description": "Deleted. Moved to the trash unless the trash is off or `permanent` was set.",
                        "headers": {
                            "X-Silo-Trash-Id": {
                                "description": "The id of the trash item the delete made (D113). Absent when nothing was kept: `[trash] enabled = false`, or `?permanent=true`.",
                                "schema": {
                                    "type": "string"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/search": {
            "get": {
                "tags": [
                    "Search"
                ],
                "summary": "Search the whole instance",
                "description": "The reach is in the path, not a query parameter: a missing `?project=`\nwould silently widen a search (D30). Results are bounded to the targets\nthe caller may read.\n",
                "operationId": "searchInstance",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/SearchQuery"
                    },
                    {
                        "$ref": "#/components/parameters/Filter"
                    },
                    {
                        "$ref": "#/components/parameters/Sort"
                    },
                    {
                        "$ref": "#/components/parameters/Limit"
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    },
                    {
                        "$ref": "#/components/parameters/Variables"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of hits.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/SearchPage"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "503": {
                        "$ref": "#/components/responses/Busy"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/search": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                }
            ],
            "get": {
                "tags": [
                    "Search"
                ],
                "summary": "Search one environment",
                "operationId": "searchScope",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/SearchQuery"
                    },
                    {
                        "$ref": "#/components/parameters/Filter"
                    },
                    {
                        "$ref": "#/components/parameters/Sort"
                    },
                    {
                        "$ref": "#/components/parameters/Limit"
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    },
                    {
                        "$ref": "#/components/parameters/Variables"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of hits.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/SearchPage"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "503": {
                        "$ref": "#/components/responses/Busy"
                    }
                }
            }
        },
        "/api/projects/{project}/environments/{env}/collections/{name}/search": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/Project"
                },
                {
                    "$ref": "#/components/parameters/Env"
                },
                {
                    "$ref": "#/components/parameters/CollectionName"
                }
            ],
            "get": {
                "tags": [
                    "Search"
                ],
                "summary": "Search one collection",
                "operationId": "searchCollection",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/SearchQuery"
                    },
                    {
                        "$ref": "#/components/parameters/Filter"
                    },
                    {
                        "$ref": "#/components/parameters/Sort"
                    },
                    {
                        "$ref": "#/components/parameters/Limit"
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    },
                    {
                        "$ref": "#/components/parameters/Variables"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of hits.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/SearchPage"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "503": {
                        "$ref": "#/components/responses/Busy"
                    }
                }
            }
        },
        "/api/search/reindex": {
            "post": {
                "tags": [
                    "Search"
                ],
                "summary": "Rebuild the search index",
                "description": "Reads every entry in the instance, so it asks for the same instance-wide\nread authority an export does: `collections:schema:read` and\n`collections:entries:read` at `*/*/*`.\n",
                "operationId": "reindexSearch",
                "responses": {
                    "200": {
                        "description": "What was rebuilt, plus an integrity check.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "collections",
                                        "entries",
                                        "engine"
                                    ],
                                    "properties": {
                                        "collections": {
                                            "type": "integer"
                                        },
                                        "entries": {
                                            "type": "integer"
                                        },
                                        "integrity": {
                                            "oneOf": [
                                                {
                                                    "$ref": "#/components/schemas/SearchIntegrity"
                                                },
                                                {
                                                    "type": "null"
                                                }
                                            ]
                                        },
                                        "engine": {
                                            "$ref": "#/components/schemas/SearchEngine"
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/export": {
            "get": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Export the instance, or a named part of it, as a tar.gz",
                "description": "Produced as it is walked, so the response begins immediately and peak\nmemory is one entry rather than the whole media library. A storage or\nblob failure therefore truncates the body instead of becoming an error\nstatus; a truncated archive fails its own gzip check at the far end and\nextracts nothing.\n\nClaims: `transfer:export`, plus `collections:schema:read` and\n`collections:entries:read`. With no `include` those are needed at\n`*/*/*`; with one, only at what each rule names. `?with_keys=true`\nadditionally requires `keys:export` and instance-wide read, because keys\nare instance-global however narrow the content selection is.\n",
                "operationId": "exportArchive",
                "parameters": [
                    {
                        "name": "include",
                        "in": "query",
                        "style": "form",
                        "explode": true,
                        "schema": {
                            "type": "array",
                            "items": {
                                "type": "string"
                            }
                        },
                        "description": "Repeatable. One `project`, `project/env` or `project/env/collection` rule per occurrence; omit for the whole instance. A system collection can never be named."
                    },
                    {
                        "name": "media",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "enum": [
                                "all",
                                "referenced",
                                "none"
                            ]
                        },
                        "description": "What to do about media bytes. Defaults to `all` with no `include`, and `referenced` once one narrows the transfer."
                    },
                    {
                        "name": "with_keys",
                        "in": "query",
                        "schema": {
                            "type": "boolean",
                            "default": false
                        },
                        "description": "Include the `_keys` collection in the archive."
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The archive.",
                        "headers": {
                            "Content-Disposition": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "attachment; filename=\"silo-export.tar.gz\""
                            }
                        },
                        "content": {
                            "application/gzip": {
                                "schema": {
                                    "type": "string",
                                    "format": "binary"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/import": {
            "post": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Import a tar.gz archive",
                "description": "The body is either the raw archive or a `multipart/form-data` `file`\npart. Both are streamed. Claims: `transfer:import` and `collections:*`\nwrite permissions — at `*/*/*` with no `include`, at what each rule names\nwith one. `media:create` is needed unless `media=none`. `?mode=replace`\nadds `collections:delete` and `entries:delete` at the same reach, plus\n`media:delete` unless `media=none`.\n\nThe archive's `_system` half is judged once it is unpacked, against the\nsame claims its own routes ask for (D84): `_keys` needs `keys:import`;\nthe media catalog needs `media:create` even with `media=none`, and\n`media:delete` when a replace would empty it; `_variables` need `create`\nand `entries:update` over each project they belong to. `_audit`,\n`_plugins` and `_scope_renames` never import and are a `400`. A missing\nclaim is a `403` naming the records.\n\nThe archive is held to `[transfer] max_archive_size_mb` as it arrives and\nto `max_extracted_size_mb` as it unpacks (D85); past either it is\n`413 archive_too_large`, naming the setting. It is unpacked before the\nwrite lock is taken, so a slow upload holds up nothing else.\n\nSend `Accept: application/x-ndjson` to be answered with a progress stream\ninstead of one JSON body. The status is then sent before the work begins,\nso the outcome is the **last line** rather than the status code.\n",
                "operationId": "importArchive",
                "parameters": [
                    {
                        "name": "mode",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "enum": [
                                "merge",
                                "replace"
                            ],
                            "default": "merge"
                        },
                        "description": "`replace` brings each archived collection to the archive's content: rows it carries are written over what is there, rows it does not carry are removed after (D85). It never empties a collection first."
                    },
                    {
                        "name": "dry_run",
                        "in": "query",
                        "schema": {
                            "type": "boolean",
                            "default": false
                        }
                    },
                    {
                        "name": "prefer",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "enum": [
                                "local",
                                "remote"
                            ]
                        },
                        "description": "Which side wins on a conflict."
                    },
                    {
                        "name": "include",
                        "in": "query",
                        "style": "form",
                        "explode": true,
                        "schema": {
                            "type": "array",
                            "items": {
                                "type": "string"
                            }
                        },
                        "description": "Repeatable. One `project`, `project/env` or `project/env/collection` rule per occurrence; omit for the whole instance. A system collection can never be named."
                    },
                    {
                        "name": "media",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "enum": [
                                "all",
                                "referenced",
                                "none"
                            ]
                        },
                        "description": "What to do about media bytes. Defaults to `all` with no `include`, and `referenced` once one narrows the transfer."
                    }
                ],
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/gzip": {
                            "schema": {
                                "type": "string",
                                "format": "binary"
                            }
                        },
                        "multipart/form-data": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "file"
                                ],
                                "properties": {
                                    "file": {
                                        "type": "string",
                                        "format": "binary"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "What the import did, or — when `Accept: application/x-ndjson` asked for one — a line-delimited progress stream whose last line carries it.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/ImportResult"
                                }
                            },
                            "application/x-ndjson": {
                                "schema": {
                                    "$ref": "#/components/schemas/TransferProgressLine"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/copy": {
            "post": {
                "tags": [
                    "Transfer"
                ],
                "summary": "Pull another silo's archive and import it",
                "description": "Streamed end to end: the source streams its export and this loads from\nthat stream. An `include` in the body is forwarded to the source's own\n`/api/export`, so the source never walks what this would discard.\n\nClaims: `transfer:copy` and the write permissions `POST /api/import`\nasks for, at the reach `include` names; `media:create` unless\n`media: none`; `replace` mode and `with_keys` add the same claims that\nroute adds. The archive's `_system` half is judged once it is unpacked,\nexactly as `POST /api/import` judges it (D84), and the pulled archive is\nheld to `[transfer] max_archive_size_mb` and `max_extracted_size_mb`\n(D85) — its only size ceilings, since a copy has no request body.\n\nSend `Accept: application/x-ndjson` for a progress stream. A copy's\nconnection is idle for the whole pull, which makes it the operation a\nquiet-connection timeout kills most reliably.\n",
                "operationId": "copyInstance",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "$ref": "#/components/schemas/CopyRequest"
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "What the copy did, or — when `Accept: application/x-ndjson` asked for one — a line-delimited progress stream whose last line carries it.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/ImportResult"
                                }
                            },
                            "application/x-ndjson": {
                                "schema": {
                                    "$ref": "#/components/schemas/TransferProgressLine"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/keys": {
            "get": {
                "tags": [
                    "Keys"
                ],
                "summary": "List keys",
                "description": "Claim: `keys:read`. The secret is never in a listing.",
                "operationId": "listKeys",
                "responses": {
                    "200": {
                        "description": "Every key record.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/Key"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            },
            "post": {
                "tags": [
                    "Keys"
                ],
                "summary": "Mint a key",
                "description": "Claim: `keys:create`, and every requested claim must already be covered\nby the caller's — minting never widens. The plaintext secret is in this\nresponse and nowhere else, ever.\n",
                "operationId": "createKey",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "label",
                                    "claims"
                                ],
                                "properties": {
                                    "label": {
                                        "type": "string"
                                    },
                                    "claims": {
                                        "type": "array",
                                        "items": {
                                            "type": "string"
                                        }
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "The new key, including its secret.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "allOf": [
                                        {
                                            "type": "object",
                                            "required": [
                                                "key"
                                            ],
                                            "properties": {
                                                "key": {
                                                    "type": "string",
                                                    "description": "The plaintext secret. Returned exactly once.",
                                                    "examples": [
                                                        "silo_ab12..."
                                                    ]
                                                }
                                            }
                                        },
                                        {
                                            "$ref": "#/components/schemas/Key"
                                        }
                                    ]
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/keys/{id}": {
            "parameters": [
                {
                    "name": "id",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The key record's id."
                }
            ],
            "patch": {
                "tags": [
                    "Keys"
                ],
                "summary": "Edit a key's label and claims",
                "description": "`claims` replaces the list outright rather than merging, because a merge\ncannot express removing a claim. Gated on `keys:create` and bounded by\ntwo delegation checks: against the target's current claims and against\nthe requested ones (D63). `hash`, `prefix`, `owner` and `parent_id` are\nunreachable. A managed plugin key is refused.\n",
                "operationId": "updateKey",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "label": {
                                        "type": "string"
                                    },
                                    "claims": {
                                        "type": "array",
                                        "items": {
                                            "type": "string"
                                        }
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The key after the edit.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Key"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Keys"
                ],
                "summary": "Revoke a key, and everything descended from it",
                "description": "Claim: `keys:revoke`, and the authority to have minted the target — if\nyou could not mint a key this powerful, you may not destroy one (D37).\nDescendants go with it (D38); `GET /api/audit` names what went.\n",
                "operationId": "revokeKey",
                "responses": {
                    "204": {
                        "description": "Revoked."
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/media": {
            "get": {
                "tags": [
                    "Media"
                ],
                "summary": "Search the media library",
                "description": "No claim (D58). Reading the library needs none.",
                "operationId": "listMedia",
                "parameters": [
                    {
                        "name": "q",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        },
                        "description": "Substring match on the display filename."
                    },
                    {
                        "name": "folder",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        },
                        "description": "Exact folder, or everything beneath it with `recursive`."
                    },
                    {
                        "name": "recursive",
                        "in": "query",
                        "schema": {
                            "type": "boolean",
                            "default": false
                        }
                    },
                    {
                        "name": "type",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        },
                        "description": "Substring match on the content type, e.g. `image/`."
                    },
                    {
                        "name": "ext",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        },
                        "description": "Exact extension, no dot."
                    },
                    {
                        "name": "tag",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        }
                    },
                    {
                        "name": "modified_after",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "format": "date-time"
                        }
                    },
                    {
                        "name": "modified_before",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "format": "date-time"
                        }
                    },
                    {
                        "$ref": "#/components/parameters/Limit"
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    },
                    {
                        "name": "sort",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "default": "-created_at",
                            "enum": [
                                "created_at",
                                "-created_at",
                                "updated_at",
                                "-updated_at",
                                "filename",
                                "-filename",
                                "size",
                                "-size"
                            ]
                        }
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of assets.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items",
                                        "total",
                                        "limit",
                                        "offset"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/MediaAsset"
                                            }
                                        },
                                        "total": {
                                            "type": "integer"
                                        },
                                        "limit": {
                                            "type": "integer"
                                        },
                                        "offset": {
                                            "type": "integer"
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    }
                }
            },
            "post": {
                "tags": [
                    "Media"
                ],
                "summary": "Upload a file",
                "description": "Claim: `media:create`. The extension is checked against the library's\nallowlist, not the declared content type.\n",
                "operationId": "uploadMedia",
                "requestBody": {
                    "required": true,
                    "content": {
                        "multipart/form-data": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "file"
                                ],
                                "properties": {
                                    "file": {
                                        "type": "string",
                                        "format": "binary"
                                    },
                                    "folder": {
                                        "type": "string",
                                        "description": "Normalised `/a/b`. Omit for the library root."
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "The catalogued asset.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaAsset"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/media/delete": {
            "post": {
                "tags": [
                    "Media"
                ],
                "summary": "Delete up to 100 assets",
                "description": "Always `200`: the request itself succeeded, and each id's outcome is\ndata in the body — including the referrers a `409` could not carry.\nClaim: `media:delete`; `force` additionally requires `entries:update`\nand `entries:read` at every scope the assets are referenced from (D49).\n\n**Deletes are recoverable (D113).** Unless `?permanent=true`, this moves the\ncontent to the trash, where `GET /api/trash` lists it and\n`POST /api/trash/{id}/restore` puts it back. `?permanent=true` destroys it now\nand asks for `trash:purge`. An instance with `[trash] enabled = false` deletes\npermanently either way.\n",
                "operationId": "deleteMediaBatch",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "ids"
                                ],
                                "properties": {
                                    "ids": {
                                        "type": "array",
                                        "minItems": 1,
                                        "maxItems": 100,
                                        "items": {
                                            "type": "string"
                                        },
                                        "description": "Deduplicated, first-seen order preserved."
                                    },
                                    "force": {
                                        "type": "boolean",
                                        "default": false,
                                        "description": "Delete over a live reference."
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "Per-id outcomes.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaDeleteBatch"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                },
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Permanent"
                    }
                ]
            }
        },
        "/api/media/purge": {
            "post": {
                "tags": [
                    "Media"
                ],
                "summary": "Empty the whole library",
                "description": "Claims: `media:delete` **and** `media:purge`, which no preset but `root`\ncarries — on `media:delete` alone every integration key that manages its\nown uploads could empty the instance's library in one request (D65).\nThere is no undo, hence the typed confirmation.\n",
                "operationId": "purgeMedia",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "confirm"
                                ],
                                "properties": {
                                    "confirm": {
                                        "const": "purge"
                                    },
                                    "force": {
                                        "type": "boolean",
                                        "default": false
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "Per-id outcomes, plus how many folder records went.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "allOf": [
                                        {
                                            "$ref": "#/components/schemas/MediaDeleteBatch"
                                        },
                                        {
                                            "type": "object",
                                            "required": [
                                                "folders_deleted"
                                            ],
                                            "properties": {
                                                "folders_deleted": {
                                                    "type": "integer"
                                                }
                                            }
                                        }
                                    ]
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/media/reconcile": {
            "post": {
                "tags": [
                    "Media"
                ],
                "summary": "Backfill and repair the catalog",
                "description": "Adopts blobs with no record, finishes an interrupted deletion, aborts\none that cannot finish, and reports orphans without deleting them.\nClaims: `media:create` and `media:delete`.\n",
                "operationId": "reconcileMedia",
                "responses": {
                    "200": {
                        "description": "What the pass changed.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaReconcileResult"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/media/extensions": {
            "get": {
                "tags": [
                    "Media"
                ],
                "summary": "Every distinct extension in the library",
                "description": "No claim (D55, D58). Feeds the admin's Type filter.",
                "operationId": "listMediaExtensions",
                "responses": {
                    "200": {
                        "description": "Sorted, lower case, no dot.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "type": "string"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/media/stats": {
            "get": {
                "tags": [
                    "Media"
                ],
                "summary": "Counts and sizes across the whole library",
                "description": "No claim, like the listing it totals (D58, D106). Read from the\ncatalog in one pass; no blob is opened. A file staged for deletion\nis counted only in `deleting`.\n",
                "operationId": "getMediaStats",
                "security": [],
                "responses": {
                    "200": {
                        "description": "The totals.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaStats"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/media/archives": {
            "post": {
                "tags": [
                    "Media"
                ],
                "summary": "Prepare a bulk download as ZIP parts",
                "description": "Any valid key; no claim (D106). The bytes are public (D58), but an\narchive costs the server a stream, so an anonymous caller cannot\nstart one.\n\nResolves the selection once and holds the plan behind a ticket for\nan hour. A selected folder is included whole, under its own name,\nwith its empty subfolders as directory entries; a selected file lands\nat the archive root. A name that would collide, compared case-blind,\nbecomes `name (1).ext`. Files are split greedily into parts of at\nmost 2 GiB; a single file over 2 GiB is not zipped and is listed in\n`separate` with its own `/media/{id}?download=true` URL.\n\nAt most `[media] download_max_files` files and `download_max_size_mb`\nmegabytes in one download (defaults 5000 and 5120), counted before the\nsplit; past either the answer is `413 archive_too_large`, naming the key.\nAt most `download_max_streams` parts stream at once server-wide (default\n3); while every slot is busy this route answers `503 busy` with\n`Retry-After: 30`. The three are read on every request, so a save on\n`PUT /api/media/settings` applies to the next one.\n",
                "operationId": "prepareMediaArchive",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "ids": {
                                        "type": "array",
                                        "items": {
                                            "type": "string"
                                        },
                                        "description": "Asset ids. Deduplicated; an asset also inside a selected folder is included once."
                                    },
                                    "folders": {
                                        "type": "array",
                                        "items": {
                                            "type": "string"
                                        },
                                        "description": "Folder paths, each included with everything beneath it. Not the library root."
                                    }
                                },
                                "description": "At least one id or folder, and at most 1,000 together."
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "The plan, with one URL per part.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaArchive"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "413": {
                        "description": "`archive_too_large`: over `download_max_files` or `download_max_size_mb`. The message says how much was asked for and which key to raise.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    },
                    "503": {
                        "description": "`busy`: `download_max_streams` parts are already streaming. `Retry-After: 30`.",
                        "headers": {
                            "Retry-After": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "Seconds."
                            }
                        },
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/media/archives/{ticket}/{part}": {
            "parameters": [
                {
                    "name": "ticket",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The `id` a prepare answered with. It is the credential: this route reads no key."
                },
                {
                    "name": "part",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "integer",
                        "minimum": 1
                    },
                    "description": "One-based part number."
                }
            ],
            "get": {
                "tags": [
                    "Media"
                ],
                "summary": "Stream one part of a prepared download",
                "description": "No key (D106): a browser follows this URL as a plain navigation,\nwhich carries no header, so the unguessable ticket stands in for one,\nthe way a signed URL does. Tickets live in the server's memory for an\nhour and do not survive a restart.\n\nThe body is a STORE-only ZIP written as it is sent: each file is read\nfrom the store only when the archive reaches it, never held whole, and\nnot compressed. No `Content-Length`. A file whose bytes cannot be read\nis left out and named in a `missing-files.txt` at the end. Sent as an\n`attachment` with `Cache-Control: no-store`, `nosniff` and\n`Content-Security-Policy: sandbox`.\n\nA `HEAD` answers the headers without opening the archive and holds no\nstream slot.\n",
                "operationId": "downloadMediaArchivePart",
                "security": [],
                "responses": {
                    "200": {
                        "description": "The ZIP.",
                        "content": {
                            "application/zip": {
                                "schema": {
                                    "type": "string",
                                    "format": "binary"
                                }
                            }
                        }
                    },
                    "404": {
                        "description": "The ticket expired, never existed, or has no such part.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    },
                    "503": {
                        "description": "`busy`: `download_max_streams` parts are already streaming. `Retry-After: 30`.",
                        "headers": {
                            "Retry-After": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "Seconds."
                            }
                        },
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/media/folders": {
            "get": {
                "tags": [
                    "Media"
                ],
                "summary": "List explicit folders",
                "description": "No claim. Folders that exist because someone made them.",
                "operationId": "listMediaFolders",
                "responses": {
                    "200": {
                        "description": "The folder records.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/MediaFolder"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            },
            "post": {
                "tags": [
                    "Media"
                ],
                "summary": "Create an empty folder",
                "description": "Claim: `media:create`.",
                "operationId": "createMediaFolder",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "path"
                                ],
                                "properties": {
                                    "path": {
                                        "type": "string",
                                        "examples": [
                                            "/brand/logos"
                                        ]
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "Created.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaFolder"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "patch": {
                "tags": [
                    "Media"
                ],
                "summary": "Rename or move a folder",
                "description": "Carries every asset and descendant folder with it. Refuses on collision\nunless `merge: true`. A body rather than a path parameter, because a\nfolder path contains `/`. Claim: `media:create`.\n",
                "operationId": "renameMediaFolder",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "from",
                                    "to"
                                ],
                                "properties": {
                                    "from": {
                                        "type": "string"
                                    },
                                    "to": {
                                        "type": "string"
                                    },
                                    "merge": {
                                        "type": "boolean",
                                        "default": false
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The normalised paths the move used.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "from",
                                        "to"
                                    ],
                                    "properties": {
                                        "from": {
                                            "type": "string"
                                        },
                                        "to": {
                                            "type": "string"
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Media"
                ],
                "summary": "Delete a folder",
                "description": "Empty only by default. `?recursive=true` takes everything inside it and\nanswers `200` with per-id outcomes instead of `204`. `?force=true`\nrequires `recursive` and the content authority a forced asset delete\nneeds. Claim: `media:delete`.\n\n**Deletes are recoverable (D113).** Unless `?permanent=true`, this moves the\ncontent to the trash, where `GET /api/trash` lists it and\n`POST /api/trash/{id}/restore` puts it back. `?permanent=true` destroys it now\nand asks for `trash:purge`. An instance with `[trash] enabled = false` deletes\npermanently either way.\n\n**A folder is one trash item.** Its folder records and every file that\nwent are one receipt, named in `X-Silo-Trash-Id`, and restoring it brings\nthem all back. A file still in use stays where it is, and then so do the\nfolder records, since the folder is not gone.\n",
                "operationId": "deleteMediaFolder",
                "parameters": [
                    {
                        "name": "path",
                        "in": "query",
                        "required": true,
                        "schema": {
                            "type": "string"
                        }
                    },
                    {
                        "name": "recursive",
                        "in": "query",
                        "schema": {
                            "type": "boolean",
                            "default": false
                        }
                    },
                    {
                        "$ref": "#/components/parameters/Force"
                    },
                    {
                        "$ref": "#/components/parameters/Permanent"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The recursive outcome.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "allOf": [
                                        {
                                            "$ref": "#/components/schemas/MediaDeleteBatch"
                                        },
                                        {
                                            "type": "object",
                                            "required": [
                                                "folders_deleted"
                                            ],
                                            "properties": {
                                                "folders_deleted": {
                                                    "type": "integer",
                                                    "description": "0 when an asset survived, since the folder is then not gone."
                                                }
                                            }
                                        }
                                    ]
                                }
                            }
                        },
                        "headers": {
                            "X-Silo-Trash-Id": {
                                "description": "The id of the one trash item the folder delete made (D113). Absent when nothing was kept: `[trash] enabled = false`, `?permanent=true`, or a folder with nothing in it to keep.",
                                "schema": {
                                    "type": "string"
                                }
                            }
                        }
                    },
                    "204": {
                        "description": "The empty folder was deleted.",
                        "headers": {
                            "X-Silo-Trash-Id": {
                                "description": "The id of the one trash item the folder delete made (D113). Absent when nothing was kept: `[trash] enabled = false`, `?permanent=true`, or a folder with nothing in it to keep.",
                                "schema": {
                                    "type": "string"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/media/storage": {
            "get": {
                "tags": [
                    "Media configuration"
                ],
                "summary": "Where the library keeps its bytes",
                "description": "Claim: `media:configure` — one claim rather than a read/write pair,\nbecause the read names the bucket, endpoint and access key id (D45). The\nsecret never leaves.\n",
                "operationId": "getMediaStorage",
                "responses": {
                    "200": {
                        "description": "The file's configuration and the one in force.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaStorageView"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            },
            "put": {
                "tags": [
                    "Media configuration"
                ],
                "summary": "Repoint the library",
                "description": "A whole configuration, not a patch. `secret_access_key` is the\nexception the read forces: absent keeps the file's value, `\"\"` clears it.\n",
                "operationId": "putMediaStorage",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "$ref": "#/components/schemas/MediaStorageInput"
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The configuration after the save.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaStorageView"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/media/settings": {
            "get": {
                "tags": [
                    "Media configuration"
                ],
                "summary": "Where media URLs point, and what may be uploaded",
                "description": "Claim: `media:configure` (D46).",
                "operationId": "getMediaSettings",
                "responses": {
                    "200": {
                        "description": "The `[media]` table, as the file holds it and as it is in force.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaPolicyView"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            },
            "put": {
                "tags": [
                    "Media configuration"
                ],
                "summary": "Rewrite the media policy",
                "description": "A whole table, not a patch: nothing here is write-only, so an omitted\nfield means cleared rather than kept. A download ceiling is the\nexception: omitted keeps the file's value, and `null` removes it so the\ndefault applies. One out of range is a `400`.\n",
                "operationId": "putMediaSettings",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "base_url": {
                                        "type": "string",
                                        "description": "`\"\"` puts media URLs back on the store's own public root."
                                    },
                                    "extensions": {
                                        "type": "array",
                                        "items": {
                                            "type": "string"
                                        },
                                        "description": "Allowlist, no dots. `[\"*\"]` accepts anything."
                                    },
                                    "download_max_files": {
                                        "type": [
                                            "integer",
                                            "null"
                                        ],
                                        "minimum": 1,
                                        "maximum": 50000,
                                        "description": "The most files one bulk download holds (D106). Default 5000."
                                    },
                                    "download_max_size_mb": {
                                        "type": [
                                            "integer",
                                            "null"
                                        ],
                                        "minimum": 1,
                                        "maximum": 1048576,
                                        "description": "The most megabytes one bulk download holds, before the 2 GiB split. Default 5120."
                                    },
                                    "download_max_streams": {
                                        "type": [
                                            "integer",
                                            "null"
                                        ],
                                        "minimum": 1,
                                        "maximum": 32,
                                        "description": "Archive parts streamed at once, server-wide. Default 3."
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The policy after the save.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaPolicyView"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/media/{id}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/MediaId"
                }
            ],
            "get": {
                "tags": [
                    "Media"
                ],
                "summary": "One asset",
                "description": "No claim.",
                "operationId": "getMedia",
                "responses": {
                    "200": {
                        "description": "The asset.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaAsset"
                                }
                            }
                        }
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            },
            "patch": {
                "tags": [
                    "Media"
                ],
                "summary": "Rename, move or retag an asset",
                "description": "Claim: `media:create` — the claim that already governs putting a file\ninto the library. None of this changes what a reference resolves to,\nwhich is what separates it from a replace.\n",
                "operationId": "updateMedia",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "filename": {
                                        "type": "string"
                                    },
                                    "folder": {
                                        "type": "string"
                                    },
                                    "tags": {
                                        "type": "array",
                                        "items": {
                                            "type": "string"
                                        }
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The asset after the change.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaAsset"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Media"
                ],
                "summary": "Delete one asset",
                "description": "Refuses while anything references it, with the referrers the caller may\nread in the body. `?force=true` deletes anyway and additionally requires\n`entries:read` and `entries:update` at every referring scope (D49).\nClaim: `media:delete`.\n\n**Deletes are recoverable (D113).** Unless `?permanent=true`, this moves the\ncontent to the trash, where `GET /api/trash` lists it and\n`POST /api/trash/{id}/restore` puts it back. `?permanent=true` destroys it now\nand asks for `trash:purge`. An instance with `[trash] enabled = false` deletes\npermanently either way.\n",
                "operationId": "deleteMedia",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Force"
                    },
                    {
                        "$ref": "#/components/parameters/Permanent"
                    }
                ],
                "responses": {
                    "204": {
                        "description": "Deleted. Moved to the trash unless the trash is off or `permanent` was set.",
                        "headers": {
                            "X-Silo-Trash-Id": {
                                "description": "The id of the trash item the delete made (D113). Absent when nothing was kept: `[trash] enabled = false`, or `?permanent=true`.",
                                "schema": {
                                    "type": "string"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "description": "The asset is still referenced.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaInUseError"
                                }
                            }
                        }
                    },
                    "500": {
                        "description": "The record was staged for deletion but the blob delete did not finish.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/media/{id}/usages": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/MediaId"
                }
            ],
            "get": {
                "tags": [
                    "Media"
                ],
                "summary": "What refers to this asset",
                "description": "No claim to read, but the rows are filtered by what the caller may see:\n`total` is the true count and `visible` is how many of them this key may\nread (D58). An anonymous caller enumerates nothing.\n",
                "operationId": "listMediaUsages",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/Limit"
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of referrers.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items",
                                        "total",
                                        "visible",
                                        "visible_capped"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/MediaUsage"
                                            }
                                        },
                                        "total": {
                                            "type": "integer",
                                            "description": "Every referrer, whether or not this caller may see it."
                                        },
                                        "visible": {
                                            "type": "integer",
                                            "description": "How many of them this caller may read."
                                        },
                                        "visible_capped": {
                                            "type": "boolean",
                                            "description": "True when the visibility scan hit its row cap."
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/media/{id}/content": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/MediaId"
                }
            ],
            "post": {
                "tags": [
                    "Media"
                ],
                "summary": "Replace an asset's bytes",
                "description": "Keeps the id, the URL and every reference to it (D67). Claim:\n`media:replace` — not `media:create`, which the `write` preset carries,\nso gating on it would let every upload key overwrite anybody else's\nfile — **and** `entries:read`/`entries:update` at every referring scope.\n",
                "operationId": "replaceMediaContent",
                "requestBody": {
                    "required": true,
                    "content": {
                        "multipart/form-data": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "file"
                                ],
                                "properties": {
                                    "file": {
                                        "type": "string",
                                        "format": "binary"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The asset, with new bytes behind the same id.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/MediaAsset"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/media/{id}": {
            "parameters": [
                {
                    "name": "id",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The catalog id, so the URL survives a rename. A pre-D23 blob key still resolves."
                }
            ],
            "get": {
                "tags": [
                    "Media"
                ],
                "summary": "Stream an asset's bytes",
                "description": "Outside `/api`, outside the auth middleware, and not authenticated.\nCarries an `ETag` of the content hash and answers `304` to a matching\n`If-None-Match`. Cached for an hour and deliberately not `immutable`,\nbecause what an id points at can be replaced.\n\nSince D80 the body is read from the store as it is sent and never held\nwhole, and a single `Range: bytes=...` is honoured with a `206`. A whole\nanswer is sent with chunked transfer encoding and no `Content-Length`; a\nranged answer states the object's size in `Content-Range`.\n\nSince D83 every answer carries `X-Content-Type-Options: nosniff` and\n`Content-Security-Policy: sandbox`, because this origin also serves the\nadmin and its saved keys. Images, video, audio and PDF are `inline`; an\nSVG, and any other type, is an `attachment`, so a browser downloads it\nrather than rendering it here. An `<img>` still draws it. The content\ntype is the one recorded at upload, read off the filename's extension.\n`?download=true` makes every type an `attachment` (D100).\n\nSince D101 every answer carries `Access-Control-Allow-Origin: *`, and a\npreflight allows `GET` and `HEAD` only, so a page on another origin can\n`fetch` the bytes. No credentials are involved: the route reads none.\n",
                "operationId": "streamMedia",
                "security": [],
                "parameters": [
                    {
                        "name": "download",
                        "in": "query",
                        "schema": {
                            "type": "boolean",
                            "default": false
                        },
                        "description": "Send every type as an `attachment`, so a browser saves the file even\nwhen the link is on another origin and a `download` attribute is\nignored (D100). Only the literal string `true` opts in. It never makes\nan `attachment` type `inline`.\n"
                    },
                    {
                        "name": "If-None-Match",
                        "in": "header",
                        "schema": {
                            "type": "string"
                        }
                    },
                    {
                        "name": "Range",
                        "in": "header",
                        "schema": {
                            "type": "string"
                        },
                        "description": "One `bytes=` range: `bytes=0-499`, `bytes=500-`, or `bytes=-500`. Several ranges, another unit or a malformed value are ignored and the whole object is sent."
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The bytes.",
                        "headers": {
                            "ETag": {
                                "schema": {
                                    "type": "string"
                                }
                            },
                            "Cache-Control": {
                                "schema": {
                                    "type": "string"
                                }
                            },
                            "Accept-Ranges": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "`bytes`."
                            },
                            "Content-Disposition": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "`inline` for an image, video, audio or PDF; `attachment` for an SVG and for anything else (D83). Always names the file."
                            },
                            "X-Content-Type-Options": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "`nosniff`."
                            },
                            "Content-Security-Policy": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "`sandbox`: whatever a browser renders from this URL gets an opaque origin and no script."
                            }
                        },
                        "content": {
                            "application/octet-stream": {
                                "schema": {
                                    "type": "string",
                                    "format": "binary"
                                }
                            }
                        }
                    },
                    "206": {
                        "description": "The requested span, clamped to the object.",
                        "headers": {
                            "Content-Range": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "`bytes <start>-<end>/<size>`."
                            },
                            "ETag": {
                                "schema": {
                                    "type": "string"
                                }
                            }
                        },
                        "content": {
                            "application/octet-stream": {
                                "schema": {
                                    "type": "string",
                                    "format": "binary"
                                }
                            }
                        }
                    },
                    "304": {
                        "description": "The hash matched `If-None-Match`."
                    },
                    "400": {
                        "description": "The identifier contained a path separator."
                    },
                    "404": {
                        "description": "No such asset."
                    },
                    "416": {
                        "description": "The range lies wholly outside the object. `Content-Range: bytes */<size>` names the size."
                    }
                }
            }
        },
        "/api/settings": {
            "get": {
                "tags": [
                    "Administration"
                ],
                "summary": "Every other table of silo.toml",
                "description": "Answers with every section at once, because the page shows them together\nand four round trips to draw one screen is four ways for it to be\nhalf-drawn. Claim: `settings:configure` — one claim, not a pair, because\nthe read names the data directory, the log path, and whether\nauthentication is on at all (D47).\n",
                "operationId": "getSettings",
                "responses": {
                    "200": {
                        "description": "Every section, plus whether the file can be written.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/SettingsView"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/settings/{table}": {
            "parameters": [
                {
                    "name": "table",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string",
                        "enum": [
                            "log",
                            "http",
                            "transfer",
                            "trash",
                            "search",
                            "schema",
                            "auth",
                            "storage"
                        ]
                    },
                    "description": "`[blob_storage]` and `[media]` have their own routes under `/api/media/`;\n`[[plugins]]` is deliberately absent, since it decides what code runs.\n`storage` is reported and never written.\n"
                }
            ],
            "put": {
                "tags": [
                    "Administration"
                ],
                "summary": "Rewrite one table",
                "description": "One table at a time, because they are separate tables with separate\nfailure modes and a rejected `[search]` value must not stop a `[log]`\nlevel being fixed. A whole document rather than a patch; an unknown key\nis refused rather than dropped. Claim: `settings:configure`.\n",
                "operationId": "putSettingsTable",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "description": "The table's fields, as `GET /api/settings` describes them.",
                                "additionalProperties": true
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "Every section after the save.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/SettingsView"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            }
        },
        "/api/plugins": {
            "get": {
                "tags": [
                    "Plugins"
                ],
                "summary": "List plugins",
                "description": "What each package requested, what it was granted, what it is actually\ndoing, and the author's reason for every claim. Claim: `plugins:read`.\n",
                "operationId": "listPlugins",
                "responses": {
                    "200": {
                        "description": "Every plugin with a record on this instance.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/Plugin"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/plugins/install": {
            "post": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Install a package and adopt it",
                "description": "No restart and no shell (D42). A JSON body names a spec; a multipart\nbody may carry a `.tgz` instead, up to 64 MiB, which takes the identical\npath through the installer. Claim: `plugins:enable` — the claim that\nalready decides whether plugin code runs. The `[[plugins]]` block this\nwrites carries **no** claims: authority stays in the record, where the\ndelegation checks and the audit trail can see it.\n",
                "operationId": "installPlugin",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "$ref": "#/components/schemas/PluginInstallRequest"
                            }
                        },
                        "multipart/form-data": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "file": {
                                        "type": "string",
                                        "format": "binary",
                                        "description": "A package tarball. Omit it and send `spec` instead."
                                    },
                                    "spec": {
                                        "type": "string"
                                    },
                                    "ref": {
                                        "type": "string"
                                    },
                                    "integrity": {
                                        "type": "string"
                                    },
                                    "registry": {
                                        "type": "string"
                                    },
                                    "force": {
                                        "type": "string",
                                        "enum": [
                                            "true",
                                            "false",
                                            "1"
                                        ]
                                    },
                                    "claims": {
                                        "type": "string",
                                        "description": "Comma-separated, unlike the JSON body's array."
                                    },
                                    "timeout_ms": {
                                        "type": "string"
                                    },
                                    "on_error": {
                                        "type": "string",
                                        "enum": [
                                            "skip",
                                            "fail"
                                        ]
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "201": {
                        "description": "The plugin's view, plus any warnings. A package contributing only\nproviders has no record to view, so `state` and `runtime` are `null`.\n",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "allOf": [
                                        {
                                            "$ref": "#/components/schemas/Plugin"
                                        },
                                        {
                                            "type": "object",
                                            "properties": {
                                                "warnings": {
                                                    "type": "array",
                                                    "items": {
                                                        "type": "string"
                                                    }
                                                }
                                            }
                                        }
                                    ]
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    },
                    "500": {
                        "description": "The package on disk cannot start.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Error"
                                }
                            }
                        }
                    }
                }
            }
        },
        "/api/plugins/rescan": {
            "post": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Re-read silo.toml and make the running set match it",
                "description": "Reports per plugin rather than refusing over one: a rescan that refused\nwould abandon every other change in the file. Claim: `plugins:enable`.\nWrites no record, so no `If-Match`.\n",
                "operationId": "rescanPlugins",
                "responses": {
                    "200": {
                        "description": "What started, restarted, stopped, was skipped or failed.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/RescanReport"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/plugins/{name}": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/PluginName"
                }
            ],
            "get": {
                "tags": [
                    "Plugins"
                ],
                "summary": "One plugin",
                "description": "Carries `ETag: \"<rev>\"` to send back as `If-Match`. Claim `plugins:read`.",
                "operationId": "getPlugin",
                "responses": {
                    "200": {
                        "description": "The plugin's view.",
                        "headers": {
                            "ETag": {
                                "schema": {
                                    "type": "string"
                                },
                                "description": "The record revision, quoted."
                            }
                        },
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Plugin"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Take a plugin off this instance",
                "description": "Unlists it, destroys its record, stops its worker and removes the\npackage (D43). Claim: `plugins:enable`, the same claim install takes,\nbecause it is the same decision read the other way round. `If-Match` is\nrequired wherever there is a record to demand it about — a\nprovider-only install has none.\n",
                "operationId": "uninstallPlugin",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "What was taken away.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/PluginUninstallResult"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/plugins/{name}/ui": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/PluginName"
                }
            ],
            "get": {
                "tags": [
                    "Plugins"
                ],
                "summary": "The plugin's declared admin panel",
                "description": "Answered as **JSON**, never as a document, with `nosniff`,\n`default-src 'none'; sandbox` and `no-store` (D41). This origin also\nserves the admin SPA, which keeps an API key per configured server in\n`localStorage`, so a plugin's HTML rendered here would be a\ncredential-exfiltration primitive. Only the admin makes it a document,\ninside a sandboxed iframe with no origin of its own. Claim\n`plugins:read`.\n",
                "operationId": "getPluginPanel",
                "responses": {
                    "200": {
                        "description": "The panel source.",
                        "headers": {
                            "X-Content-Type-Options": {
                                "schema": {
                                    "const": "nosniff"
                                }
                            },
                            "Content-Security-Policy": {
                                "schema": {
                                    "type": "string"
                                }
                            },
                            "Cache-Control": {
                                "schema": {
                                    "const": "no-store"
                                }
                            }
                        },
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "title",
                                        "entry",
                                        "html"
                                    ],
                                    "properties": {
                                        "title": {
                                            "type": "string"
                                        },
                                        "entry": {
                                            "type": "string",
                                            "description": "The file it came from, relative to the package."
                                        },
                                        "html": {
                                            "type": "string"
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/plugins/{name}/grant": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/PluginName"
                }
            ],
            "put": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Approve, or narrow, a grant",
                "description": "The body is the **complete** granted set, so sending it twice grants the\nsame thing. An omitted `claims` approves everything the package says it\n**requires** — not everything it requested, which would make the word\noptional mean nothing. Claim: `plugins:grant`, `If-Match` required:\napproving means approving what you read, and a package whose request\nchanged in between is exactly the substitution the fence catches.\n",
                "operationId": "grantPlugin",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    }
                ],
                "requestBody": {
                    "required": false,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "claims": {
                                        "type": "array",
                                        "items": {
                                            "type": "string"
                                        }
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The plugin after the grant.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Plugin"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Withdraw the stored grant",
                "description": "Clears the record's half only. Claims declared in `silo.toml` are the\nother half and stay — `config_claims` on the view says what they are.\nClaim: `plugins:grant`, `If-Match` required.\n",
                "operationId": "revokePluginGrant",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The plugin after the revocation.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Plugin"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/plugins/{name}/enable": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/PluginName"
                }
            ],
            "post": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Start a plugin now",
                "description": "Claim: `plugins:enable`, `If-Match` required. The response carries\n`runtime`, which says what actually happened — it replaced\n`restart_required` (D39).\n",
                "operationId": "enablePlugin",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The plugin after the change.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Plugin"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/plugins/{name}/disable": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/PluginName"
                }
            ],
            "post": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Stop a plugin now",
                "description": "Not `plugins:grant`: withdrawing authority and refusing to load are\nseparate remedies, and an operator who had to re-approve after every\npause would learn to approve widely. Claim: `plugins:enable`,\n`If-Match` required.\n",
                "operationId": "disablePlugin",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The plugin after the change.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Plugin"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/plugins/{name}/config": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/PluginName"
                }
            ],
            "patch": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Pin a config override",
                "description": "An [RFC 7396](https://www.rfc-editor.org/rfc/rfc7396) merge patch, so\none setting can change without restating the block and `null` removes\none. Claim: `plugins:configure`, `If-Match` required.\n",
                "operationId": "configurePlugin",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    }
                ],
                "requestBody": {
                    "required": false,
                    "content": {
                        "application/merge-patch+json": {
                            "schema": {
                                "type": "object",
                                "additionalProperties": true
                            }
                        },
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "additionalProperties": true
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "The plugin, with `config` and `config_source` updated.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Plugin"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    },
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Clear the override and return to silo.toml's block",
                "description": "The only way out of the pin an override creates. Claim `plugins:configure`.",
                "operationId": "clearPluginConfig",
                "parameters": [
                    {
                        "$ref": "#/components/parameters/IfMatch"
                    },
                    {
                        "$ref": "#/components/parameters/Rev"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The plugin after the change.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/Plugin"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        },
        "/api/plugins/{name}/restart": {
            "parameters": [
                {
                    "$ref": "#/components/parameters/PluginName"
                }
            ],
            "post": {
                "tags": [
                    "Plugins"
                ],
                "summary": "Tear the worker down and bring it back",
                "description": "A plugin that missed its dispatch budget or crashed is not respawned on\nits own. Claim: `plugins:enable`. Writes no record, so no `If-Match`.\n",
                "operationId": "restartPlugin",
                "responses": {
                    "200": {
                        "description": "What the plugin is doing now.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/PluginStatus"
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/ext/{name}/{path}": {
            "description": "One handler matches every plugin route (D36). A plugin's routes are data\nthe host interprets rather than patterns it registers, so a plugin can\nneither shadow nor reorder anything in this file, and the set is resolved\nper request — enable, disable, revoke and rescan apply to routes as they\ndo to hooks.\n\n**A handler runs with the plugin's authority, not the caller's.** That is\nwhy exposure is a claim (`http:route`) and why a route declaring\n`auth: \"public\"` is called out separately: it publishes whatever the\nplugin was granted at a URL anyone can reach. The caller's\n`Authorization`, `X-Api-Key` and `Cookie` are withheld from the handler,\nwhich receives an id, a label and claims instead.\n\nStatus, headers and body are the plugin's. A thrown validation or\nauthorization error maps to 400 or 403 through the same handler as\neverything else, and a body past the route's declared limit is refused\nrather than truncated.\n\nTwo headers are silo's, not the plugin's (D83): every answer leaves with\n`X-Content-Type-Options: nosniff` and `Content-Security-Policy:\ndefault-src 'none'; sandbox`, whatever type the plugin declared and\nreplacing its own spelling of either. A plugin route is an API answer and\nnever a page, since this origin also holds the admin's saved keys.\n",
            "parameters": [
                {
                    "$ref": "#/components/parameters/PluginName"
                },
                {
                    "name": "path",
                    "in": "path",
                    "required": true,
                    "schema": {
                        "type": "string"
                    },
                    "description": "The rest of the path, matched against the routes the plugin's manifest\ndeclares. Not URL-decoded before splitting, so a `%2F` inside a\nparameter cannot become a separator. A bare `/api/ext/{name}`\naddresses the plugin's root, which is `/`.\n"
                }
            ],
            "get": {
                "tags": [
                    "Plugin routes"
                ],
                "summary": "A route the plugin declares",
                "operationId": "pluginRouteGet",
                "responses": {
                    "default": {
                        "$ref": "#/components/responses/PluginRouteResponse"
                    }
                }
            },
            "post": {
                "tags": [
                    "Plugin routes"
                ],
                "summary": "A route the plugin declares",
                "operationId": "pluginRoutePost",
                "requestBody": {
                    "required": false,
                    "content": {
                        "*/*": {
                            "schema": {}
                        }
                    }
                },
                "responses": {
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    },
                    "default": {
                        "$ref": "#/components/responses/PluginRouteResponse"
                    }
                }
            },
            "put": {
                "tags": [
                    "Plugin routes"
                ],
                "summary": "A route the plugin declares",
                "operationId": "pluginRoutePut",
                "requestBody": {
                    "required": false,
                    "content": {
                        "*/*": {
                            "schema": {}
                        }
                    }
                },
                "responses": {
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    },
                    "default": {
                        "$ref": "#/components/responses/PluginRouteResponse"
                    }
                }
            },
            "patch": {
                "tags": [
                    "Plugin routes"
                ],
                "summary": "A route the plugin declares",
                "operationId": "pluginRoutePatch",
                "requestBody": {
                    "required": false,
                    "content": {
                        "*/*": {
                            "schema": {}
                        }
                    }
                },
                "responses": {
                    "413": {
                        "$ref": "#/components/responses/PayloadTooLarge"
                    },
                    "default": {
                        "$ref": "#/components/responses/PluginRouteResponse"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Plugin routes"
                ],
                "summary": "A route the plugin declares",
                "operationId": "pluginRouteDelete",
                "responses": {
                    "default": {
                        "$ref": "#/components/responses/PluginRouteResponse"
                    }
                }
            },
            "head": {
                "tags": [
                    "Plugin routes"
                ],
                "summary": "A route the plugin declares",
                "description": "Reaches a declared `GET`; the content it produced is dropped here.",
                "operationId": "pluginRouteHead",
                "responses": {
                    "default": {
                        "$ref": "#/components/responses/PluginRouteResponse"
                    }
                }
            }
        },
        "/api/audit": {
            "get": {
                "tags": [
                    "Administration"
                ],
                "summary": "The trail of authority changes",
                "description": "Newest first. Read-only, and there is no route to write one: an event is\nappended by the service that made the change, so an actor cannot claim\nsomething happened that did not (D38). There is no delete either, which\nis why `audit:read` has no `audit:write` beside it. Claim: `audit:read`.\n",
                "operationId": "listAudit",
                "parameters": [
                    {
                        "name": "subject",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        },
                        "description": "Filter to one key id or plugin name."
                    },
                    {
                        "name": "limit",
                        "in": "query",
                        "schema": {
                            "type": "integer",
                            "minimum": 1,
                            "default": 50
                        }
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of events.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items",
                                        "total",
                                        "limit",
                                        "offset"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/AuditEvent"
                                            }
                                        },
                                        "total": {
                                            "type": "integer"
                                        },
                                        "limit": {
                                            "type": "integer"
                                        },
                                        "offset": {
                                            "type": "integer"
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/observability": {
            "get": {
                "tags": [
                    "Administration"
                ],
                "summary": "One bounded snapshot of this process",
                "description": "Aggregate operating facts only. Requests are grouped by the registered\nroute pattern; a successful request's project, environment and collection\nare filled in, and every other parameter, an id included, stays a\nplaceholder (D99). Each caller sees names only for the scopes its own\ncollection claims reach; the rest are folded into their pattern. Query\nstrings, ids, caller identities, bodies, credentials, content and\nfilesystem paths never enter the accumulator, so granting this does not\nquietly become a content-read capability (D52). Claim\n`observability:read`.\n",
                "operationId": "getObservability",
                "responses": {
                    "200": {
                        "description": "The snapshot.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/ObservabilitySnapshot"
                                }
                            }
                        }
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/trash": {
            "get": {
                "tags": [
                    "Trash"
                ],
                "summary": "List what is in the trash",
                "description": "Newest first, one item per explicitly deleted thing.\n\nNo claim of its own: each item is filtered by the read claim its origin\nalready required, at the names the origin has today — `entries:read` for a trashed entry, `schema:read` for a\ncollection, environment or project — so a key sees exactly the deletions it\ncould have seen the content of. Media is visible to any authenticated\ncaller, because reading the library has needed no claim since D58. `total`\ncounts what this caller may see, and that filter applies before the page is\ncut, so `offset` and `limit` page through those items alone, however many\nthe trash holds.\n\nAnswers an empty list on an instance running with `[trash] enabled = false`.\n",
                "operationId": "listTrash",
                "parameters": [
                    {
                        "name": "kind",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "enum": [
                                "project",
                                "environment",
                                "collection",
                                "entry",
                                "media",
                                "media_folder"
                            ]
                        }
                    },
                    {
                        "name": "project",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        },
                        "description": "Narrow to one project's deletions, by its name today."
                    },
                    {
                        "name": "env",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        }
                    },
                    {
                        "name": "collection",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        }
                    },
                    {
                        "name": "deleted_after",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "format": "date-time"
                        }
                    },
                    {
                        "name": "deleted_before",
                        "in": "query",
                        "schema": {
                            "type": "string",
                            "format": "date-time"
                        }
                    },
                    {
                        "name": "q",
                        "in": "query",
                        "schema": {
                            "type": "string"
                        },
                        "description": "Case-insensitive substring of the subject's name."
                    },
                    {
                        "$ref": "#/components/parameters/Limit"
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of trash items.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items",
                                        "total",
                                        "limit",
                                        "offset"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "$ref": "#/components/schemas/TrashItem"
                                            }
                                        },
                                        "total": {
                                            "type": "integer"
                                        },
                                        "limit": {
                                            "type": "integer"
                                        },
                                        "offset": {
                                            "type": "integer"
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    }
                }
            }
        },
        "/api/trash/purge": {
            "post": {
                "tags": [
                    "Trash"
                ],
                "summary": "Empty the trash",
                "description": "Destroys every receipt and everything parked under it, including the media\nbytes a trashed asset was still holding. There is no undo.\n\nClaim: `trash:purge`, carried by no preset but `root` — for `media:purge`'s\nreason (D65): whoever deleted the content already spent their delete claim,\nand ending it forever is a second decision. The typed confirmation is the\nsame insurance `POST /api/media/purge` takes against a stray or replayed\nrequest.\n",
                "operationId": "emptyTrash",
                "requestBody": {
                    "required": true,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "required": [
                                    "confirm"
                                ],
                                "properties": {
                                    "confirm": {
                                        "type": "string",
                                        "enum": [
                                            "empty"
                                        ]
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "How many receipts were destroyed.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "purged"
                                    ],
                                    "properties": {
                                        "purged": {
                                            "type": "integer"
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "400": {
                        "$ref": "#/components/responses/ValidationFailed"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    }
                }
            }
        },
        "/api/trash/{id}": {
            "get": {
                "tags": [
                    "Trash"
                ],
                "summary": "One trash item",
                "description": "Answers 404 rather than 403 for an item the caller may not see: saying\n\"forbidden\" would confirm that something was deleted there.\n",
                "operationId": "getTrashItem",
                "parameters": [
                    {
                        "name": "id",
                        "in": "path",
                        "required": true,
                        "schema": {
                            "type": "string"
                        },
                        "description": "The trash receipt's id."
                    }
                ],
                "responses": {
                    "200": {
                        "description": "The item.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/TrashItem"
                                }
                            }
                        }
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            },
            "delete": {
                "tags": [
                    "Trash"
                ],
                "summary": "Destroy one trash item",
                "description": "Permanently deletes this receipt and everything it parked, including any\nmedia bytes it was holding. There is no undo. Claim: `trash:purge`.\n\nMedia files still claimed by the live catalog are preserved, including\nassets revived by an import while an older receipt remains.\n",
                "operationId": "purgeTrashItem",
                "parameters": [
                    {
                        "name": "id",
                        "in": "path",
                        "required": true,
                        "schema": {
                            "type": "string"
                        },
                        "description": "The trash receipt's id."
                    }
                ],
                "responses": {
                    "204": {
                        "description": "Destroyed."
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/trash/{id}/items": {
            "get": {
                "tags": [
                    "Trash"
                ],
                "summary": "What a trash item parked",
                "description": "The records this receipt holds, returned as opaque objects by kind.\n\nReceipt visibility alone does not grant access to entry bodies. In addition\nto the receipt's read claim, collection contents need entries:read on that\ncollection, environment contents on project/environment/*, and project\ncontents on project/*/*. A visible receipt without these claims returns 403.\nInternal restore journal fields are omitted.\n",
                "operationId": "listTrashItemContents",
                "parameters": [
                    {
                        "name": "id",
                        "in": "path",
                        "required": true,
                        "schema": {
                            "type": "string"
                        },
                        "description": "The trash receipt's id."
                    },
                    {
                        "$ref": "#/components/parameters/Limit"
                    },
                    {
                        "$ref": "#/components/parameters/Offset"
                    }
                ],
                "responses": {
                    "200": {
                        "description": "One page of parked records.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "type": "object",
                                    "required": [
                                        "items",
                                        "total"
                                    ],
                                    "properties": {
                                        "items": {
                                            "type": "array",
                                            "items": {
                                                "type": "object"
                                            }
                                        },
                                        "total": {
                                            "type": "integer"
                                        }
                                    }
                                }
                            }
                        }
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    }
                }
            }
        },
        "/api/trash/{id}/restore": {
            "post": {
                "tags": [
                    "Trash"
                ],
                "summary": "Put a trash item back",
                "description": "Restores the content to where it came from, addressed by the record ids the\nreceipt holds — so a rename between the delete and the restore does not\nmisfile it.\n\n**Asks for the write claims at the destination**, not a claim of its own:\nrestoring an entry into `prod` is writing to `prod`, so it needs\n`entries:create` there. A container additionally needs `create`. The\nclaims are checked at the names the destination has today, and at\n`rename` in place of the subject's own name. With `chain`, every\ncontainer it brings back is checked the same way, before anything is\nwritten; one this key cannot read is a 403, since the blocked item\nalready names it. A\n`trash:restore` claim would let a key place content in a scope it cannot\notherwise write to, which is the escalation shape D37 measured for\n`keys:import`.\n\nRefuses with 409 when the container is gone (`blocked_by` says which) or\nwhen the name or id has been taken since — a restore that overwrote a live\nrecord would put one thing back by destroying another. It also refuses\nwith 409, and keeps the item, when the collection's current schema rejects\nan entry: a schema can change once its collection is empty (D70), and a\nrestore is held to it like any other write.\n\nAn interrupted restore can be retried, including after restart. The server\nrecognizes its own unchanged writes without overwriting live changes. A\nrenamed restore retains its original destination and checks claims there on\nretry; a different rename after replay has started is a 409.\n",
                "operationId": "restoreTrashItem",
                "parameters": [
                    {
                        "name": "id",
                        "in": "path",
                        "required": true,
                        "schema": {
                            "type": "string"
                        },
                        "description": "The trash receipt's id."
                    }
                ],
                "requestBody": {
                    "required": false,
                    "content": {
                        "application/json": {
                            "schema": {
                                "type": "object",
                                "properties": {
                                    "rename": {
                                        "type": "string",
                                        "description": "Restore the subject under this name instead. Applies to the\nsubject only; the records under it were never in collision.\n"
                                    },
                                    "chain": {
                                        "type": "boolean",
                                        "default": false,
                                        "description": "Restore the containers blocking this one first, in order.\nOnly works while they are themselves in the trash.\n"
                                    }
                                }
                            }
                        }
                    }
                },
                "responses": {
                    "200": {
                        "description": "What came back.",
                        "content": {
                            "application/json": {
                                "schema": {
                                    "$ref": "#/components/schemas/TrashRestoreResult"
                                }
                            }
                        }
                    },
                    "401": {
                        "$ref": "#/components/responses/Unauthorized"
                    },
                    "403": {
                        "$ref": "#/components/responses/Forbidden"
                    },
                    "404": {
                        "$ref": "#/components/responses/NotFound"
                    },
                    "409": {
                        "$ref": "#/components/responses/Conflict"
                    }
                }
            }
        }
    },
    "components": {
        "securitySchemes": {
            "bearerAuth": {
                "type": "http",
                "scheme": "bearer",
                "description": "`Authorization: Bearer silo_...`"
            },
            "apiKeyAuth": {
                "type": "apiKey",
                "in": "header",
                "name": "X-Api-Key",
                "description": "The same secret, for callers that cannot set `Authorization`."
            }
        },
        "parameters": {
            "Project": {
                "name": "project",
                "in": "path",
                "required": true,
                "schema": {
                    "$ref": "#/components/schemas/ScopeName"
                },
                "description": "The project name, not its id."
            },
            "Env": {
                "name": "env",
                "in": "path",
                "required": true,
                "schema": {
                    "$ref": "#/components/schemas/ScopeName"
                },
                "description": "The environment name. Also served under `/envs/{env}`."
            },
            "CollectionName": {
                "name": "name",
                "in": "path",
                "required": true,
                "schema": {
                    "$ref": "#/components/schemas/CollectionName"
                },
                "description": "The collection name."
            },
            "MediaId": {
                "name": "id",
                "in": "path",
                "required": true,
                "schema": {
                    "type": "string"
                },
                "description": "The asset's catalog id."
            },
            "PluginName": {
                "name": "name",
                "in": "path",
                "required": true,
                "schema": {
                    "type": "string"
                },
                "description": "The `[[plugins]] name`."
            },
            "Force": {
                "name": "force",
                "in": "query",
                "schema": {
                    "type": "boolean",
                    "default": false
                },
                "description": "A second operation, not a modifier (D37). Only the literal string\n`true` opts in, and it always asks for additional claims.\n"
            },
            "DryRun": {
                "name": "dry_run",
                "in": "query",
                "schema": {
                    "type": "boolean",
                    "default": false
                },
                "description": "Answer with what would change, and write nothing."
            },
            "ExpectedId": {
                "name": "expected_id",
                "in": "query",
                "schema": {
                    "type": "string"
                },
                "description": "Bind the rename to the record's id, so a request delayed in flight\ncannot rename whatever took the name in the meantime. A mismatch is 409.\n"
            },
            "VariableEnv": {
                "name": "env",
                "in": "query",
                "schema": {
                    "$ref": "#/components/schemas/ScopeName"
                },
                "description": "Which environment an initial value lands in. Defaults to the default environment."
            },
            "IfMatch": {
                "name": "If-Match",
                "in": "header",
                "schema": {
                    "type": "string",
                    "examples": [
                        "\"3\""
                    ]
                },
                "description": "The expected revision, quoted. `?rev=` is the alternative."
            },
            "Rev": {
                "name": "rev",
                "in": "query",
                "schema": {
                    "type": "integer",
                    "minimum": 1
                },
                "description": "The expected revision, for callers that cannot set `If-Match`."
            },
            "Limit": {
                "name": "limit",
                "in": "query",
                "schema": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 500,
                    "default": 50
                }
            },
            "Offset": {
                "name": "offset",
                "in": "query",
                "schema": {
                    "type": "integer",
                    "minimum": 0,
                    "default": 0
                }
            },
            "Filter": {
                "name": "filter",
                "in": "query",
                "schema": {
                    "type": "string"
                },
                "description": "A URL-encoded JSON `Filter` document — see the `Filter` schema for its\ngrammar. Capped at 50 nodes and 10 levels of nesting.\n",
                "examples": {
                    "titleEquals": {
                        "summary": "One leaf op",
                        "value": "{\"op\":\"eq\",\"path\":\"$.data.title\",\"value\":\"Hello\"}"
                    }
                }
            },
            "Sort": {
                "name": "sort",
                "in": "query",
                "schema": {
                    "type": "string"
                },
                "description": "Comma-separated RFC 9535 paths over the API response shape, each\noptionally prefixed with `-` for descending, e.g.\n`-$.updated_at,$.data.title`. A wildcard path is refused: it selects\nmany nodes and has no deterministic order. Strings sort by Unicode\ncodepoint, and types sort as missing or null, numbers, strings,\nbooleans, arrays, objects (D92).\n"
            },
            "Variables": {
                "name": "variables",
                "in": "query",
                "schema": {
                    "type": "string",
                    "enum": [
                        "resolved",
                        "raw"
                    ],
                    "default": "resolved"
                },
                "description": "`resolved` substitutes `{{NAME}}` from the environment's variables.\n`raw` answers the stored text, which is what an editor wants — a form\nseeded with a resolved value saves that value back and replaces the\nreference with a snapshot of it. Any other value is a 400.\n"
            },
            "SearchQuery": {
                "name": "q",
                "in": "query",
                "schema": {
                    "type": "string"
                },
                "description": "The text to match. Omit it to filter and sort without a term."
            },
            "Permanent": {
                "name": "permanent",
                "in": "query",
                "schema": {
                    "type": "string",
                    "enum": [
                        "true"
                    ]
                },
                "description": "Skip the trash and destroy now (D113). A purge fused to a delete, so it asks\nfor `trash:purge` on top of whatever the delete already needed. Only the\nliteral string `true` opts in.\n"
            }
        },
        "responses": {
            "ValidationFailed": {
                "description": "The request was malformed, or an entry failed its schema.",
                "content": {
                    "application/json": {
                        "schema": {
                            "$ref": "#/components/schemas/Error"
                        }
                    }
                }
            },
            "Unauthorized": {
                "description": "No key was presented, or the presented key is not valid.",
                "content": {
                    "application/json": {
                        "schema": {
                            "$ref": "#/components/schemas/Error"
                        }
                    }
                }
            },
            "Forbidden": {
                "description": "The key is missing a claim this operation needs.",
                "content": {
                    "application/json": {
                        "schema": {
                            "$ref": "#/components/schemas/Error"
                        }
                    }
                }
            },
            "NotFound": {
                "description": "No such resource.",
                "content": {
                    "application/json": {
                        "schema": {
                            "$ref": "#/components/schemas/Error"
                        }
                    }
                }
            },
            "Conflict": {
                "description": "The write would collide: a revision mismatch, a name already taken, or a\ndelete refused while content exists.\n",
                "content": {
                    "application/json": {
                        "schema": {
                            "$ref": "#/components/schemas/Error"
                        }
                    }
                }
            },
            "PluginRouteResponse": {
                "description": "Whatever the plugin answers, plus the host's own refusals: 403 when\n`http:route` is not granted, 404 when no plugin serves this path (which\nis also the answer for a plugin that is absent, ungranted or disabled —\nthat is the operator's business, not a caller's), 405 when it serves the\npath but not this method, and 504 when the worker did not answer inside\nits `timeout_ms`, naming `POST /api/plugins/{name}/restart` as the\nremedy. Every answer carries `nosniff` and a `default-src 'none';\nsandbox` policy (D83).\n",
                "headers": {
                    "X-Content-Type-Options": {
                        "schema": {
                            "type": "string"
                        },
                        "description": "`nosniff`."
                    },
                    "Content-Security-Policy": {
                        "schema": {
                            "type": "string"
                        },
                        "description": "`default-src 'none'; sandbox`, replacing the plugin's own."
                    }
                },
                "content": {
                    "*/*": {
                        "schema": {}
                    }
                }
            },
            "PayloadTooLarge": {
                "description": "The request body is larger than this route accepts: [http] max_json_body_size_mb for a route that takes a JSON document (default 4 MB), [http] max_body_size_mb for the media upload, media replace, import and plugin install routes (default 128 MB). Answered from the headers, before the route or the key check runs. On `/api/import` and `/api/copy` the code is `archive_too_large` instead when the archive, or the tree it unpacks to, is past `[transfer] max_archive_size_mb` or `max_extracted_size_mb` (D85); the message names the setting.",
                "content": {
                    "application/json": {
                        "schema": {
                            "$ref": "#/components/schemas/Error"
                        }
                    }
                }
            },
            "Busy": {
                "description": "Storage cannot answer now. Too many reads are already waiting on it: a filter or a sort over entry data scans the collection on a read worker with a bounded queue, and past it the request is refused with `Retry-After: 1` rather than queued behind a flood. Or, on the `postgres` driver, the database cannot be reached; then any route can answer this, including before the key is checked, since the key is looked up in storage (D102). A 503 never means the key is wrong.",
                "headers": {
                    "Retry-After": {
                        "schema": {
                            "type": "string"
                        },
                        "description": "Seconds."
                    }
                },
                "content": {
                    "application/json": {
                        "schema": {
                            "$ref": "#/components/schemas/Error"
                        }
                    }
                }
            }
        },
        "schemas": {
            "ScopeName": {
                "type": "string",
                "maxLength": 64,
                "pattern": "^[a-z][a-z0-9_-]*$",
                "description": "Lowercase letter first, then `[a-z0-9_-]`, at most 64 characters."
            },
            "CollectionName": {
                "type": "string",
                "maxLength": 128,
                "pattern": "^[a-z][a-z0-9_-]*$",
                "description": "Lowercase letter first, then `[a-z0-9_-]`, at most 128 characters (D104). Longer than a project or environment name, which `ScopeName` caps at 64."
            },
            "Project": {
                "type": "object",
                "required": [
                    "id",
                    "name"
                ],
                "properties": {
                    "id": {
                        "type": "string",
                        "description": "The record's ULID. Stable across renames (D51)."
                    },
                    "name": {
                        "type": "string",
                        "description": "What every path addresses."
                    }
                }
            },
            "Environment": {
                "type": "object",
                "required": [
                    "id",
                    "name",
                    "project_id"
                ],
                "properties": {
                    "id": {
                        "type": "string"
                    },
                    "name": {
                        "type": "string"
                    },
                    "project_id": {
                        "type": "string"
                    }
                }
            },
            "RenamePreview": {
                "type": "object",
                "description": "What a rename did, or would do. The interesting part is the two claim\nlists: a literal claim segment is a reference and is rewritten, while a\nwildcard or prefix pattern is a pattern over names and never is — so the\nsecond list is the only place anything says a key's reach moved without\nits claims changing (D51, D64).\n",
                "required": [
                    "id",
                    "from",
                    "to",
                    "rewritten_claims",
                    "pattern_affected_claims"
                ],
                "properties": {
                    "id": {
                        "type": "string"
                    },
                    "from": {
                        "type": "string"
                    },
                    "to": {
                        "type": "string"
                    },
                    "rewritten_claims": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "pattern_affected_claims": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    }
                }
            },
            "Variable": {
                "type": "object",
                "required": [
                    "name",
                    "description",
                    "value",
                    "set_in",
                    "created_at",
                    "updated_at"
                ],
                "properties": {
                    "name": {
                        "type": "string"
                    },
                    "description": {
                        "type": "string"
                    },
                    "value": {
                        "oneOf": [
                            {
                                "type": "string"
                            },
                            {
                                "type": "null"
                            }
                        ],
                        "description": "**This** environment's value. `null` means the project declares the\nname and this environment has given it nothing, which is distinct\nfrom `\"\"` — a value somebody chose.\n"
                    },
                    "set_in": {
                        "type": "integer",
                        "description": "How many of the project's environments have a value, so a page can\nsay \"set in 2 of 3\" without learning any other environment's value.\n"
                    },
                    "created_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "updated_at": {
                        "type": "string",
                        "format": "date-time"
                    }
                }
            },
            "JsonSchema": {
                "description": "A JSON Schema document. silo adds two vocabulary extensions:\n`x-silo-auth: true` on the root makes the collection non-public, and a\n`silo://` `$ref` addresses another collection in the same scope, which\nthe server bundles into `$defs` on the way out.\n",
                "type": "object",
                "additionalProperties": true
            },
            "Collection": {
                "type": "object",
                "required": [
                    "id",
                    "name",
                    "schema"
                ],
                "properties": {
                    "id": {
                        "type": "string"
                    },
                    "name": {
                        "type": "string"
                    },
                    "schema": {
                        "$ref": "#/components/schemas/JsonSchema"
                    }
                }
            },
            "CollectionSummary": {
                "type": "object",
                "description": "What a listing answers — everything a navigation surface draws, and no schema (D54).",
                "required": [
                    "id",
                    "name",
                    "entries",
                    "requires_auth",
                    "created_at",
                    "updated_at"
                ],
                "properties": {
                    "id": {
                        "type": "string"
                    },
                    "name": {
                        "type": "string"
                    },
                    "entries": {
                        "type": "integer",
                        "description": "How many entries it holds."
                    },
                    "requires_auth": {
                        "type": "boolean",
                        "description": "Whether reading it needs a key (`x-silo-auth`)."
                    },
                    "created_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "updated_at": {
                        "type": "string",
                        "format": "date-time"
                    }
                }
            },
            "Entry": {
                "type": "object",
                "description": "The entry's own fields, plus the envelope. `rev` is in the response\nbecause `PUT` and `DELETE` require it back as `If-Match`; the rest of\nthe envelope — the collection, the sequence, the scope — stays hidden.\n",
                "required": [
                    "id",
                    "rev",
                    "created_at",
                    "updated_at"
                ],
                "properties": {
                    "id": {
                        "type": "string"
                    },
                    "rev": {
                        "type": "integer",
                        "description": "Send this back as `If-Match: \"<rev>\"` or `?rev=<rev>`."
                    },
                    "created_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "updated_at": {
                        "type": "string",
                        "format": "date-time"
                    }
                },
                "additionalProperties": true
            },
            "EntryPage": {
                "type": "object",
                "required": [
                    "data",
                    "total",
                    "limit",
                    "offset"
                ],
                "properties": {
                    "data": {
                        "type": "array",
                        "items": {
                            "$ref": "#/components/schemas/Entry"
                        }
                    },
                    "total": {
                        "type": "integer"
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "offset": {
                        "type": "integer"
                    }
                }
            },
            "Filter": {
                "type": "object",
                "description": "One node of the query AST (D29). Leaf ops address the virtual entry\ndocument with an RFC 9535 path; group ops combine completed predicates.\nComparisons are type-strict: `eq`, `neq` and `in` match only the value's\nown JSON type, and `gt`/`gte`/`lt`/`lte` compare numbers with numbers and\nstrings with strings, by Unicode codepoint (D92).\n",
                "required": [
                    "op"
                ],
                "properties": {
                    "op": {
                        "type": "string",
                        "enum": [
                            "eq",
                            "neq",
                            "contains",
                            "gt",
                            "gte",
                            "lt",
                            "lte",
                            "in",
                            "exists",
                            "and",
                            "or",
                            "not"
                        ]
                    },
                    "path": {
                        "type": "string",
                        "description": "Leaf ops only, e.g. `$.data.title` or `$.updated_at`.",
                        "examples": [
                            "$.data.title"
                        ]
                    },
                    "value": {
                        "description": "Leaf ops except `exists`. An array for `in`."
                    },
                    "args": {
                        "type": "array",
                        "description": "`and`, `or` and `not` only.",
                        "items": {
                            "$ref": "#/components/schemas/Filter"
                        }
                    }
                }
            },
            "SearchEngine": {
                "type": "string",
                "enum": [
                    "fts5",
                    "postgres",
                    "scan"
                ],
                "description": "`fts5` is SQLite's index and `postgres` is Postgres's text search; ranks differ between them. `scan` means there is no index, so the answer may be truncated."
            },
            "SearchSnippet": {
                "type": "object",
                "description": "Three plain strings rather than one with markers in it: a body\ncontaining a literal bracket would give a highlighter two candidate\npairs and no way to tell which the engine meant.\n",
                "required": [
                    "path",
                    "before",
                    "match",
                    "after"
                ],
                "properties": {
                    "path": {
                        "type": "string",
                        "description": "The path of the node the match came from."
                    },
                    "before": {
                        "type": "string",
                        "description": "Starts with an ellipsis when the fragment was cut."
                    },
                    "match": {
                        "type": "string",
                        "description": "The matched run, quoted from the original text."
                    },
                    "after": {
                        "type": "string"
                    }
                }
            },
            "SearchPage": {
                "type": "object",
                "required": [
                    "data",
                    "total",
                    "limit",
                    "offset",
                    "truncated",
                    "engine"
                ],
                "properties": {
                    "data": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "required": [
                                "project",
                                "env",
                                "collection",
                                "entry",
                                "snippets"
                            ],
                            "properties": {
                                "project": {
                                    "type": "string"
                                },
                                "env": {
                                    "type": "string"
                                },
                                "collection": {
                                    "type": "string"
                                },
                                "entry": {
                                    "$ref": "#/components/schemas/Entry"
                                },
                                "snippets": {
                                    "type": "array",
                                    "items": {
                                        "$ref": "#/components/schemas/SearchSnippet"
                                    }
                                }
                            }
                        }
                    },
                    "total": {
                        "type": "integer",
                        "description": "Exact for what was visited. See `truncated`."
                    },
                    "limit": {
                        "type": "integer"
                    },
                    "offset": {
                        "type": "integer"
                    },
                    "truncated": {
                        "type": "boolean",
                        "description": "True when a scan stopped at its visit cap or time budget, so `total`\ncounts what was examined rather than what exists.\n"
                    },
                    "engine": {
                        "$ref": "#/components/schemas/SearchEngine"
                    }
                }
            },
            "SearchIntegrity": {
                "type": "object",
                "required": [
                    "index",
                    "orphanDocuments",
                    "missingDocuments"
                ],
                "properties": {
                    "index": {
                        "type": "string",
                        "description": "\"ok\", or the message the index's own integrity check raised."
                    },
                    "orphanDocuments": {
                        "type": "integer",
                        "description": "Index documents whose entry has gone."
                    },
                    "missingDocuments": {
                        "type": "integer",
                        "description": "Entries with no index document."
                    }
                }
            },
            "ImportResult": {
                "type": "object",
                "required": [
                    "mode",
                    "dry_run",
                    "added",
                    "updated",
                    "deleted",
                    "skipped",
                    "rejected",
                    "rejections"
                ],
                "properties": {
                    "mode": {
                        "type": "string"
                    },
                    "dry_run": {
                        "type": "boolean"
                    },
                    "added": {
                        "type": "integer"
                    },
                    "updated": {
                        "type": "integer"
                    },
                    "deleted": {
                        "type": "integer"
                    },
                    "skipped": {
                        "type": "integer"
                    },
                    "rejected": {
                        "type": "integer",
                        "description": "Entries the destination's schema refused (D70). Always present, and `0` on a clean import. A dry run reports `0`: the schemas it would write are unwritten, so it cannot judge entries yet."
                    },
                    "rejections": {
                        "type": "array",
                        "items": {
                            "$ref": "#/components/schemas/ImportRejection"
                        },
                        "description": "Which ones, capped at 100. `rejected` stays exact."
                    },
                    "media": {
                        "type": "object",
                        "description": "What the run did about media bytes. Absent for a scope copy, which touches none.",
                        "required": [
                            "files",
                            "cleared"
                        ],
                        "properties": {
                            "files": {
                                "type": "integer",
                                "description": "Blobs written. `0` on a dry run and under `media=none`."
                            },
                            "cleared": {
                                "type": "boolean",
                                "description": "Whether the destination library was emptied before loading. True only for a replace of an archive that is authoritative for the whole library: no selection, and `media: all`."
                            }
                        }
                    },
                    "scope_copy": {
                        "$ref": "#/components/schemas/ScopeCopyPreview"
                    }
                }
            },
            "ScopeCopyPreview": {
                "type": "object",
                "description": "A bounded detail page, present only on a scope-copy dry run that asked for one.",
                "required": [
                    "collections",
                    "entries",
                    "total",
                    "offset",
                    "limit"
                ],
                "properties": {
                    "collections": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "required": [
                                "collection",
                                "schema",
                                "added",
                                "updated",
                                "deleted",
                                "skipped"
                            ],
                            "properties": {
                                "collection": {
                                    "type": "string"
                                },
                                "schema": {
                                    "type": "string",
                                    "enum": [
                                        "create",
                                        "update",
                                        "unchanged"
                                    ]
                                },
                                "added": {
                                    "type": "integer"
                                },
                                "updated": {
                                    "type": "integer"
                                },
                                "deleted": {
                                    "type": "integer"
                                },
                                "skipped": {
                                    "type": "integer"
                                }
                            }
                        }
                    },
                    "entries": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "required": [
                                "collection",
                                "action"
                            ],
                            "properties": {
                                "collection": {
                                    "type": "string"
                                },
                                "id": {
                                    "type": "string",
                                    "description": "Omitted when the caller may not read the destination scope."
                                },
                                "action": {
                                    "type": "string",
                                    "enum": [
                                        "added",
                                        "updated",
                                        "deleted",
                                        "skipped"
                                    ]
                                }
                            }
                        }
                    },
                    "total": {
                        "type": "integer"
                    },
                    "offset": {
                        "type": "integer"
                    },
                    "limit": {
                        "type": "integer"
                    }
                }
            },
            "ScopeCopyRequest": {
                "type": "object",
                "required": [
                    "from"
                ],
                "properties": {
                    "from": {
                        "type": "object",
                        "required": [
                            "project",
                            "env"
                        ],
                        "properties": {
                            "project": {
                                "$ref": "#/components/schemas/ScopeName"
                            },
                            "env": {
                                "$ref": "#/components/schemas/ScopeName"
                            }
                        }
                    },
                    "mode": {
                        "type": "string",
                        "enum": [
                            "merge",
                            "replace"
                        ],
                        "default": "merge"
                    },
                    "dry_run": {
                        "type": "boolean"
                    },
                    "validate": {
                        "type": "boolean"
                    },
                    "prefer": {
                        "type": "string",
                        "enum": [
                            "local",
                            "remote"
                        ]
                    },
                    "detail_offset": {
                        "type": "integer",
                        "minimum": 0,
                        "description": "Dry run only."
                    },
                    "detail_limit": {
                        "type": "integer",
                        "minimum": 1,
                        "maximum": 100,
                        "default": 25,
                        "description": "Dry run only."
                    },
                    "selection": {
                        "type": "array",
                        "minItems": 1,
                        "description": "Omit to copy the whole source scope. An item without `entry_ids`\ncopies its whole collection. An entry subset cannot be used with\n`replace`.\n",
                        "items": {
                            "type": "object",
                            "required": [
                                "collection"
                            ],
                            "properties": {
                                "collection": {
                                    "$ref": "#/components/schemas/CollectionName"
                                },
                                "entry_ids": {
                                    "type": "array",
                                    "minItems": 1,
                                    "items": {
                                        "type": "string"
                                    }
                                }
                            }
                        }
                    }
                }
            },
            "TransferPackageRequest": {
                "type": "object",
                "required": [
                    "collections"
                ],
                "properties": {
                    "collections": {
                        "type": "array",
                        "minItems": 1,
                        "description": "Each collection once. An item without `entry_ids` carries its whole\ncollection; one with them carries exactly those entries. System\ncollections cannot be named.\n",
                        "items": {
                            "type": "object",
                            "required": [
                                "name"
                            ],
                            "properties": {
                                "name": {
                                    "$ref": "#/components/schemas/CollectionName"
                                },
                                "entry_ids": {
                                    "type": "array",
                                    "minItems": 1,
                                    "uniqueItems": true,
                                    "items": {
                                        "type": "string"
                                    }
                                }
                            }
                        }
                    },
                    "media": {
                        "type": "string",
                        "enum": [
                            "referenced",
                            "none"
                        ],
                        "default": "referenced",
                        "description": "`referenced` carries the assets the entries use, their bytes and their\nancestor folders. `none` carries no catalog row and no byte, which is\nstricter than an archive's `none`.\n"
                    }
                }
            },
            "PreparedTransferRequest": {
                "type": "object",
                "required": [
                    "source",
                    "from",
                    "selection"
                ],
                "properties": {
                    "source": {
                        "type": "object",
                        "required": [
                            "url",
                            "api_key"
                        ],
                        "properties": {
                            "url": {
                                "type": "string",
                                "format": "uri",
                                "description": "The source server's base URL: http or https, with no credentials, query or fragment. Redirects are refused."
                            },
                            "api_key": {
                                "type": "string",
                                "description": "A source key with `transfer:export` and read on each selected collection. Used for this pull and never stored."
                            }
                        }
                    },
                    "from": {
                        "type": "object",
                        "required": [
                            "project",
                            "env"
                        ],
                        "properties": {
                            "project": {
                                "$ref": "#/components/schemas/ScopeName"
                            },
                            "env": {
                                "$ref": "#/components/schemas/ScopeName"
                            }
                        }
                    },
                    "selection": {
                        "type": "array",
                        "minItems": 1,
                        "description": "Each collection once. An item without `entry_ids` takes its whole\ncollection. An entry subset cannot be used with `replace`.\n",
                        "items": {
                            "type": "object",
                            "required": [
                                "collection"
                            ],
                            "properties": {
                                "collection": {
                                    "$ref": "#/components/schemas/CollectionName"
                                },
                                "entry_ids": {
                                    "type": "array",
                                    "minItems": 1,
                                    "items": {
                                        "type": "string"
                                    }
                                }
                            }
                        }
                    },
                    "mode": {
                        "type": "string",
                        "enum": [
                            "merge",
                            "replace"
                        ],
                        "default": "merge"
                    },
                    "prefer": {
                        "type": "string",
                        "enum": [
                            "local",
                            "remote"
                        ]
                    },
                    "media": {
                        "type": "string",
                        "enum": [
                            "referenced",
                            "none"
                        ],
                        "default": "referenced",
                        "description": "`referenced` brings the assets the entries use. `none` brings no catalog row and no byte."
                    }
                }
            },
            "PreparedTransfer": {
                "type": "object",
                "required": [
                    "id",
                    "state",
                    "created_at",
                    "updated_at",
                    "expires_at",
                    "source",
                    "from",
                    "to",
                    "selection",
                    "mode",
                    "media"
                ],
                "properties": {
                    "id": {
                        "type": "string"
                    },
                    "state": {
                        "type": "string",
                        "enum": [
                            "preparing",
                            "prepared",
                            "applying",
                            "applied",
                            "stale",
                            "cancelled",
                            "expired"
                        ]
                    },
                    "created_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "updated_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "expires_at": {
                        "type": "string",
                        "format": "date-time",
                        "description": "When a `prepared` transfer becomes `expired`: 60 minutes after it was prepared."
                    },
                    "source": {
                        "type": "object",
                        "properties": {
                            "url": {
                                "type": "string"
                            }
                        }
                    },
                    "from": {
                        "type": "object",
                        "required": [
                            "project",
                            "env"
                        ],
                        "properties": {
                            "project": {
                                "$ref": "#/components/schemas/ScopeName"
                            },
                            "env": {
                                "$ref": "#/components/schemas/ScopeName"
                            }
                        }
                    },
                    "to": {
                        "type": "object",
                        "required": [
                            "project",
                            "env"
                        ],
                        "properties": {
                            "project": {
                                "$ref": "#/components/schemas/ScopeName"
                            },
                            "env": {
                                "$ref": "#/components/schemas/ScopeName"
                            }
                        }
                    },
                    "selection": {
                        "type": "array",
                        "minItems": 1,
                        "description": "Each collection once. An item without `entry_ids` takes its whole\ncollection. An entry subset cannot be used with `replace`.\n",
                        "items": {
                            "type": "object",
                            "required": [
                                "collection"
                            ],
                            "properties": {
                                "collection": {
                                    "$ref": "#/components/schemas/CollectionName"
                                },
                                "entry_ids": {
                                    "type": "array",
                                    "minItems": 1,
                                    "items": {
                                        "type": "string"
                                    }
                                }
                            }
                        }
                    },
                    "mode": {
                        "type": "string",
                        "enum": [
                            "merge",
                            "replace"
                        ]
                    },
                    "prefer": {
                        "type": "string",
                        "enum": [
                            "local",
                            "remote"
                        ]
                    },
                    "media": {
                        "type": "string",
                        "enum": [
                            "referenced",
                            "none"
                        ]
                    },
                    "package": {
                        "$ref": "#/components/schemas/TransferPackageSummary"
                    },
                    "review": {
                        "$ref": "#/components/schemas/TransferReview"
                    },
                    "applied_at": {
                        "type": "string",
                        "format": "date-time",
                        "description": "When the commit landed."
                    },
                    "entries": {
                        "type": "object",
                        "description": "One page of the plan. Only while the package is held.",
                        "properties": {
                            "offset": {
                                "type": "integer"
                            },
                            "limit": {
                                "type": "integer"
                            },
                            "total": {
                                "type": "integer",
                                "description": "How many lines the plan holds."
                            },
                            "items": {
                                "type": "array",
                                "items": {
                                    "$ref": "#/components/schemas/TransferPlanItem"
                                }
                            }
                        }
                    },
                    "last_error": {
                        "type": "string"
                    }
                }
            },
            "PreparedTransferProgressLine": {
                "type": "object",
                "description": "One line of a preparation's progress stream. The first line names the transfer. The outcome is the last line: `result` on success, `error` otherwise.",
                "required": [
                    "type"
                ],
                "properties": {
                    "type": {
                        "type": "string",
                        "enum": [
                            "progress",
                            "result",
                            "error"
                        ]
                    },
                    "phase": {
                        "type": "string",
                        "enum": [
                            "fetch",
                            "verify",
                            "plan",
                            "media",
                            "commit",
                            "working"
                        ],
                        "description": "`progress` lines only. Preparing: `fetch`, `verify`, `plan`. Applying: `media`, `commit`."
                    },
                    "transfer": {
                        "type": "object",
                        "properties": {
                            "id": {
                                "type": "string"
                            },
                            "state": {
                                "type": "string"
                            },
                            "expires_at": {
                                "type": "string"
                            }
                        }
                    },
                    "result": {
                        "$ref": "#/components/schemas/PreparedTransfer"
                    },
                    "status": {
                        "type": "integer",
                        "description": "`error` lines only: the status this would have been."
                    },
                    "error": {
                        "type": "object",
                        "properties": {
                            "code": {
                                "type": "string"
                            },
                            "message": {
                                "type": "string"
                            }
                        }
                    }
                }
            },
            "TransferPackageSummary": {
                "type": "object",
                "description": "What the verified package holds. Every number was counted from its files.",
                "properties": {
                    "created_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "silo_version": {
                        "type": "string"
                    },
                    "instance_id": {
                        "type": "string"
                    },
                    "collections": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "properties": {
                                "name": {
                                    "$ref": "#/components/schemas/CollectionName"
                                },
                                "entries": {
                                    "type": "integer"
                                }
                            }
                        }
                    },
                    "media_assets": {
                        "type": "integer"
                    },
                    "media_folders": {
                        "type": "integer"
                    },
                    "missing_media": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "References the packaged entries hold that the source had no asset for."
                    }
                }
            },
            "TransferReview": {
                "type": "object",
                "description": "What Apply will do, counted as an import counts it: `replace` counts every row of a collection here as `deleted`, whether the package overwrites it or it is removed.",
                "properties": {
                    "planned_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "added": {
                        "type": "integer"
                    },
                    "updated": {
                        "type": "integer"
                    },
                    "deleted": {
                        "type": "integer"
                    },
                    "skipped": {
                        "type": "integer"
                    },
                    "rejected": {
                        "type": "integer"
                    },
                    "collections": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "properties": {
                                "collection": {
                                    "$ref": "#/components/schemas/CollectionName"
                                },
                                "schema": {
                                    "type": "string",
                                    "enum": [
                                        "create",
                                        "update",
                                        "unchanged"
                                    ]
                                },
                                "added": {
                                    "type": "integer"
                                },
                                "updated": {
                                    "type": "integer"
                                },
                                "deleted": {
                                    "type": "integer"
                                },
                                "skipped": {
                                    "type": "integer"
                                },
                                "rejected": {
                                    "type": "integer"
                                }
                            }
                        }
                    },
                    "media": {
                        "type": "object",
                        "properties": {
                            "added": {
                                "type": "integer"
                            },
                            "unchanged": {
                                "type": "integer"
                            },
                            "skipped": {
                                "type": "integer"
                            },
                            "folders_added": {
                                "type": "integer"
                            },
                            "unresolved": {
                                "type": "array",
                                "items": {
                                    "type": "string"
                                },
                                "description": "Media references the written entries hold that will not resolve here once the transfer lands."
                            }
                        }
                    }
                }
            },
            "TransferPlanItem": {
                "type": "object",
                "description": "One line of the plan: a packaged entry, a row here that `replace` removes, or a packaged media asset (`_media`) or folder (`_media_folders`).",
                "required": [
                    "collection",
                    "action"
                ],
                "properties": {
                    "collection": {
                        "$ref": "#/components/schemas/CollectionName"
                    },
                    "id": {
                        "type": "string",
                        "description": "Absent on a `deleted` line unless the key may read the collection here."
                    },
                    "action": {
                        "type": "string",
                        "enum": [
                            "added",
                            "updated",
                            "unchanged",
                            "skipped",
                            "rejected",
                            "deleted"
                        ],
                        "description": "`rejected`: the schema the transfer leaves in place refuses the entry, so it is not written. `deleted`: `replace` removes a row the package does not carry. `unchanged`: this server already holds the same media asset or folder. A `skipped` media asset keeps this server's own, and `reason` says why."
                    },
                    "name": {
                        "type": "string",
                        "description": "A media line's filename, or its folder's path."
                    },
                    "rev": {
                        "type": "integer",
                        "description": "The packaged entry's."
                    },
                    "updated_at": {
                        "type": "string",
                        "format": "date-time",
                        "description": "The packaged entry's."
                    },
                    "destination": {
                        "type": "object",
                        "description": "The row already here, as the plan read it. Only for a key that may read the collection here.",
                        "properties": {
                            "rev": {
                                "type": "integer"
                            },
                            "updated_at": {
                                "type": "string",
                                "format": "date-time"
                            }
                        }
                    },
                    "reason": {
                        "type": "string",
                        "description": "Why a `rejected` entry was refused, or why a media asset was `skipped`."
                    },
                    "unresolved": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "The media references this entry holds that will not resolve here."
                    }
                }
            },
            "CopyRequest": {
                "type": "object",
                "required": [
                    "source_url",
                    "source_api_key"
                ],
                "properties": {
                    "source_url": {
                        "type": "string",
                        "format": "uri",
                        "description": "The other instance's base URL."
                    },
                    "source_api_key": {
                        "type": "string",
                        "description": "A key on the source holding `transfer:export`."
                    },
                    "mode": {
                        "type": "string",
                        "enum": [
                            "merge",
                            "replace"
                        ],
                        "default": "merge"
                    },
                    "with_keys": {
                        "type": "boolean",
                        "default": false
                    },
                    "dry_run": {
                        "type": "boolean",
                        "default": false
                    },
                    "prefer": {
                        "type": "string",
                        "enum": [
                            "local",
                            "remote"
                        ]
                    },
                    "include": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "`project[/env[/collection]]` rules, as `GET /api/export?include=` spells them. Omit for the whole instance."
                    },
                    "media": {
                        "type": "string",
                        "enum": [
                            "all",
                            "referenced",
                            "none"
                        ],
                        "description": "Defaults to `all` with no `include`, `referenced` with one."
                    }
                }
            },
            "Key": {
                "type": "object",
                "description": "The public shape of a key record. Never the secret.",
                "required": [
                    "id",
                    "label",
                    "claims",
                    "prefix",
                    "created_at",
                    "updated_at"
                ],
                "properties": {
                    "id": {
                        "type": "string"
                    },
                    "label": {
                        "type": "string"
                    },
                    "claims": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "prefix": {
                        "type": "string",
                        "description": "The display prefix, e.g. `silo_ab12`."
                    },
                    "created_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "updated_at": {
                        "type": "string",
                        "format": "date-time",
                        "description": "Equal to `created_at` until someone edits the label or the claims,\nwhich is the only thing that moves it (D63).\n"
                    },
                    "owner": {
                        "type": "object",
                        "description": "Present only on a key silo minted for a plugin, so a listing can say\nwhy this one is not an operator's to revoke (D34).\n",
                        "required": [
                            "kind",
                            "name"
                        ],
                        "properties": {
                            "kind": {
                                "const": "plugin"
                            },
                            "name": {
                                "type": "string"
                            }
                        }
                    },
                    "parent_id": {
                        "type": "string",
                        "description": "The key that minted this one. Revoking a key takes everything naming\nit here, transitively (D38).\n"
                    }
                }
            },
            "MediaAsset": {
                "type": "object",
                "required": [
                    "id",
                    "url",
                    "filename",
                    "folder",
                    "blob_key",
                    "size",
                    "content_type",
                    "hash",
                    "state",
                    "tags",
                    "created_at",
                    "updated_at"
                ],
                "properties": {
                    "id": {
                        "type": "string"
                    },
                    "url": {
                        "type": "string",
                        "description": "Derived, not stored: it addresses the asset by catalog id, so it\nsurvives a rename or a move.\n"
                    },
                    "filename": {
                        "type": "string"
                    },
                    "folder": {
                        "type": "string",
                        "description": "`\"\"` for the library root, else a normalised `/a/b` path."
                    },
                    "blob_key": {
                        "type": "string"
                    },
                    "size": {
                        "type": "integer"
                    },
                    "content_type": {
                        "type": "string"
                    },
                    "hash": {
                        "type": "string",
                        "description": "sha256 of the bytes, hex. Also the `ETag` on the public stream."
                    },
                    "state": {
                        "type": "string",
                        "enum": [
                            "active",
                            "deleting"
                        ],
                        "description": "`deleting` means the blob delete has been committed to but may not\nhave finished. New references are refused and startup retries it.\n"
                    },
                    "tags": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "created_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "updated_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "usage_count": {
                        "type": "integer",
                        "description": "Present only where the caller asked for it, since counting is a query."
                    }
                }
            },
            "MediaFolder": {
                "type": "object",
                "required": [
                    "path"
                ],
                "properties": {
                    "path": {
                        "type": "string",
                        "description": "Normalised `/a/b`; never `\"\"`, since the root needs no record."
                    }
                }
            },
            "MediaUsage": {
                "type": "object",
                "description": "One entry's reference to one asset.",
                "required": [
                    "media_id",
                    "project",
                    "env",
                    "collection",
                    "entry_id"
                ],
                "properties": {
                    "media_id": {
                        "type": "string",
                        "description": "The catalog id, or `blob:<key>` for a pre-D23 reference."
                    },
                    "project": {
                        "type": "string"
                    },
                    "env": {
                        "type": "string"
                    },
                    "collection": {
                        "type": "string"
                    },
                    "entry_id": {
                        "type": "string"
                    }
                }
            },
            "MediaDeleteBatch": {
                "type": "object",
                "description": "The per-id outcomes every route that deletes many assets answers with,\nso a bulk delete, a recursive folder delete and a purge report the same\nshape (D49).\n",
                "required": [
                    "deleted",
                    "failed"
                ],
                "properties": {
                    "deleted": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "failed": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "required": [
                                "id",
                                "code",
                                "message"
                            ],
                            "properties": {
                                "id": {
                                    "type": "string"
                                },
                                "code": {
                                    "type": "string",
                                    "enum": [
                                        "media_in_use",
                                        "not_found",
                                        "media_delete_stalled",
                                        "invalid_id"
                                    ]
                                },
                                "message": {
                                    "type": "string"
                                },
                                "usage_count": {
                                    "type": "integer",
                                    "description": "On `media_in_use`: every referrer, visible or not."
                                },
                                "visible_count": {
                                    "type": "integer"
                                },
                                "visible_capped": {
                                    "type": "boolean"
                                },
                                "referrers": {
                                    "type": "array",
                                    "items": {
                                        "$ref": "#/components/schemas/MediaUsage"
                                    }
                                }
                            }
                        }
                    }
                }
            },
            "MediaInUseError": {
                "type": "object",
                "description": "The 409 a guarded single delete answers with. The counts are the true\ntotals and the rows are only what this key may read: checking against\nthe true reach must not become the one place that discloses it.\n",
                "required": [
                    "error"
                ],
                "properties": {
                    "error": {
                        "type": "object",
                        "required": [
                            "code",
                            "message",
                            "details"
                        ],
                        "properties": {
                            "code": {
                                "const": "media_in_use"
                            },
                            "message": {
                                "type": "string"
                            },
                            "details": {
                                "type": "object",
                                "required": [
                                    "usage_count",
                                    "visible_count",
                                    "visible_capped",
                                    "referrers"
                                ],
                                "properties": {
                                    "usage_count": {
                                        "type": "integer"
                                    },
                                    "visible_count": {
                                        "type": "integer"
                                    },
                                    "visible_capped": {
                                        "type": "boolean"
                                    },
                                    "referrers": {
                                        "type": "array",
                                        "items": {
                                            "$ref": "#/components/schemas/MediaUsage"
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            },
            "MediaReconcileResult": {
                "type": "object",
                "required": [
                    "adopted",
                    "pruned",
                    "finished",
                    "aborted",
                    "pending",
                    "orphans"
                ],
                "properties": {
                    "adopted": {
                        "type": "integer",
                        "description": "Catalog records created for blobs that had none."
                    },
                    "pruned": {
                        "type": "integer",
                        "description": "Assets whose blob is gone, so the record was dropped."
                    },
                    "finished": {
                        "type": "integer",
                        "description": "Staged deletions carried to completion."
                    },
                    "aborted": {
                        "type": "integer",
                        "description": "Assets returned to `active` because the blob delete failed again."
                    },
                    "pending": {
                        "type": "integer",
                        "description": "Still staged after this pass — the delete failed and the abort could not be recorded either."
                    },
                    "orphans": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Blob keys no catalog record claims. Reported, never deleted."
                    }
                }
            },
            "SettingsOverride": {
                "type": "object",
                "description": "One field the file does not decide. A file is the third thing consulted\n— flags outrank `SILO_*` variables, which outrank it — so without this,\nan operator would type a bucket into a form, watch it save, and see the\ninstance keep using another one.\n",
                "required": [
                    "field"
                ],
                "properties": {
                    "field": {
                        "type": "string",
                        "description": "The field as this API spells it: `bucket`, `path`, `access_key_id`, ..."
                    },
                    "env": {
                        "type": "string",
                        "description": "The variable in force, when one is. Absent means something else\nsupplies the field — a flag, or a `silo.toml` edited by hand since\nthis process started.\n"
                    }
                }
            },
            "MediaStorageFacts": {
                "type": "object",
                "description": "One media storage configuration, read out. There is no\n`secret_access_key` and there will not be one: `secret_access_key_set`\nis as much as a form needs to render \"configured, leave blank to keep\",\nand everything more is handing a credential back out over the API it was\nconfigured through.\n",
                "required": [
                    "driver",
                    "secret_access_key_set"
                ],
                "properties": {
                    "driver": {
                        "type": "string",
                        "examples": [
                            "fs",
                            "s3"
                        ]
                    },
                    "path": {
                        "type": "string"
                    },
                    "bucket": {
                        "type": "string"
                    },
                    "region": {
                        "type": "string"
                    },
                    "endpoint": {
                        "type": "string"
                    },
                    "access_key_id": {
                        "type": "string"
                    },
                    "secret_access_key_set": {
                        "type": "boolean",
                        "description": "That a credential is configured, never the credential."
                    },
                    "force_path_style": {
                        "type": "boolean"
                    },
                    "public_read": {
                        "type": "boolean"
                    }
                },
                "additionalProperties": true
            },
            "MediaStorageView": {
                "type": "object",
                "description": "Two configurations, not one, and the split is the design: `file` is what\nthe form edits and writes, `in_force` is what the instance is actually\ndoing, and they differ whenever a flag or a `SILO_*` variable outranks\nthe file (D45).\n",
                "required": [
                    "file",
                    "in_force",
                    "drivers",
                    "overrides",
                    "writable"
                ],
                "properties": {
                    "file": {
                        "$ref": "#/components/schemas/MediaStorageFacts"
                    },
                    "in_force": {
                        "$ref": "#/components/schemas/MediaStorageFacts"
                    },
                    "drivers": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Every blob driver this process can open, plugin-contributed ones included."
                    },
                    "overrides": {
                        "type": "array",
                        "items": {
                            "$ref": "#/components/schemas/SettingsOverride"
                        }
                    },
                    "config_path": {
                        "type": "string",
                        "description": "Absent when this process was handed no config file."
                    },
                    "writable": {
                        "type": "boolean"
                    },
                    "read_only_reason": {
                        "type": "string",
                        "description": "Why a save cannot land, when one cannot."
                    }
                }
            },
            "MediaStorageInput": {
                "type": "object",
                "required": [
                    "driver"
                ],
                "properties": {
                    "driver": {
                        "type": "string"
                    },
                    "path": {
                        "type": "string"
                    },
                    "bucket": {
                        "type": "string"
                    },
                    "region": {
                        "type": "string"
                    },
                    "endpoint": {
                        "type": "string"
                    },
                    "access_key_id": {
                        "type": "string"
                    },
                    "secret_access_key": {
                        "type": "string",
                        "description": "The one field that is not \"a PUT of what was read\": absent keeps\nwhat the file holds, `\"\"` clears it.\n"
                    },
                    "force_path_style": {
                        "type": "boolean"
                    },
                    "public_read": {
                        "type": "boolean"
                    }
                }
            },
            "MediaPolicyView": {
                "type": "object",
                "required": [
                    "file",
                    "in_force",
                    "overrides",
                    "default_extensions",
                    "download_defaults",
                    "writable"
                ],
                "properties": {
                    "file": {
                        "type": "object",
                        "description": "What the file names, and only that.",
                        "additionalProperties": true
                    },
                    "in_force": {
                        "type": "object",
                        "description": "The same, after env vars and flags.",
                        "additionalProperties": true
                    },
                    "overrides": {
                        "type": "array",
                        "items": {
                            "$ref": "#/components/schemas/SettingsOverride"
                        }
                    },
                    "default_extensions": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "What a new instance starts with, so the page can offer it back."
                    },
                    "download_defaults": {
                        "type": "object",
                        "description": "Each bulk download ceiling's default and the range it accepts (D106).",
                        "additionalProperties": {
                            "type": "object",
                            "required": [
                                "value",
                                "min",
                                "max"
                            ],
                            "properties": {
                                "value": {
                                    "type": "integer"
                                },
                                "min": {
                                    "type": "integer"
                                },
                                "max": {
                                    "type": "integer"
                                }
                            }
                        }
                    },
                    "config_path": {
                        "type": "string"
                    },
                    "writable": {
                        "type": "boolean"
                    },
                    "read_only_reason": {
                        "type": "string"
                    }
                }
            },
            "ConfigField": {
                "type": "object",
                "description": "One setting's spec, sent to the admin so a new setting appears on the\npage without the admin being taught about it separately.\n",
                "required": [
                    "key",
                    "type"
                ],
                "properties": {
                    "key": {
                        "type": "string"
                    },
                    "type": {
                        "type": "string",
                        "enum": [
                            "string",
                            "number",
                            "boolean",
                            "enum"
                        ]
                    },
                    "values": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "env": {
                        "type": "string",
                        "description": "The `SILO_*` variable that outranks the file for this field."
                    },
                    "restart": {
                        "type": "boolean",
                        "description": "Whether a change takes effect only at the next start."
                    },
                    "readOnly": {
                        "type": "boolean"
                    },
                    "secret": {
                        "type": "boolean",
                        "description": "Never reported in full. The section's `file` and `in_force` carry it redacted: a URL keeps its host, port, database and user, with the password and any credential in its query string replaced by `*****`; any other value is `*****`."
                    },
                    "min": {
                        "type": "number"
                    },
                    "zeroMeans": {
                        "type": "string"
                    },
                    "label": {
                        "type": "string"
                    },
                    "help": {
                        "type": "string"
                    }
                }
            },
            "SettingsView": {
                "type": "object",
                "required": [
                    "sections",
                    "writable",
                    "restart_pending"
                ],
                "properties": {
                    "sections": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "required": [
                                "table",
                                "title",
                                "summary",
                                "fields",
                                "file",
                                "in_force",
                                "overrides",
                                "writable",
                                "restart_pending"
                            ],
                            "properties": {
                                "table": {
                                    "type": "string"
                                },
                                "title": {
                                    "type": "string"
                                },
                                "summary": {
                                    "type": "string"
                                },
                                "fields": {
                                    "type": "array",
                                    "items": {
                                        "$ref": "#/components/schemas/ConfigField"
                                    }
                                },
                                "file": {
                                    "type": "object",
                                    "description": "Only what the file names.",
                                    "additionalProperties": true
                                },
                                "in_force": {
                                    "type": "object",
                                    "additionalProperties": true
                                },
                                "overrides": {
                                    "type": "array",
                                    "items": {
                                        "$ref": "#/components/schemas/SettingsOverride"
                                    }
                                },
                                "writable": {
                                    "type": "boolean",
                                    "description": "False for `[storage]`, which is reported and never written."
                                },
                                "restart_pending": {
                                    "type": "array",
                                    "items": {
                                        "type": "string"
                                    }
                                }
                            }
                        }
                    },
                    "config_path": {
                        "type": "string"
                    },
                    "writable": {
                        "type": "boolean",
                        "description": "False when there is no config file, or it is not writable by this process."
                    },
                    "read_only_reason": {
                        "type": "string"
                    },
                    "restart_pending": {
                        "type": "boolean",
                        "description": "True while any saved field is waiting for a restart."
                    }
                }
            },
            "PluginStatus": {
                "type": "object",
                "description": "What a plugin is **doing**, as distinct from what the record says about\nit. The two can disagree: a granted, enabled plugin whose worker died on\na dispatch timeout is not running (D39).\n",
                "required": [
                    "state",
                    "hooks",
                    "detail"
                ],
                "properties": {
                    "state": {
                        "type": "string",
                        "enum": [
                            "running",
                            "stopped",
                            "failed"
                        ],
                        "description": "`stopped` is nobody's fault — disabled, or not listed in\n`silo.toml`. `failed` is a crash or a dispatch that outlived its\nbudget; the restart route is the way back.\n"
                    },
                    "hooks": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "detail": {
                        "oneOf": [
                            {
                                "type": "string"
                            },
                            {
                                "type": "null"
                            }
                        ],
                        "description": "Why it is not running, in a sentence, or `null` when it is."
                    }
                }
            },
            "PluginContributions": {
                "type": "object",
                "description": "Everything a package contributes, declared in its manifest rather than discovered.",
                "required": [
                    "hooks",
                    "routes",
                    "runtime",
                    "providers",
                    "ui"
                ],
                "properties": {
                    "hooks": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "routes": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "properties": {
                                "method": {
                                    "type": "string"
                                },
                                "path": {
                                    "type": "string"
                                },
                                "auth": {
                                    "type": "string",
                                    "enum": [
                                        "key",
                                        "public"
                                    ]
                                },
                                "body": {
                                    "type": "object",
                                    "additionalProperties": true
                                }
                            },
                            "additionalProperties": true
                        }
                    },
                    "runtime": {
                        "type": "boolean",
                        "description": "Whether the module exports `activate` / `deactivate`."
                    },
                    "providers": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "additionalProperties": true
                        }
                    },
                    "ui": {
                        "oneOf": [
                            {
                                "type": "object",
                                "additionalProperties": true
                            },
                            {
                                "type": "null"
                            }
                        ]
                    }
                }
            },
            "Plugin": {
                "type": "object",
                "description": "One plugin, as the management API reports it. The claim lists are the\nload-bearing part: effective authority is the union of the record's\ngrant and what `silo.toml` declares, and `DELETE .../grant` clears only\nthe first (D40).\n",
                "required": [
                    "name",
                    "state",
                    "enabled",
                    "requested",
                    "required",
                    "granted",
                    "config_claims",
                    "effective",
                    "not_granted",
                    "hooks",
                    "rev",
                    "runtime"
                ],
                "properties": {
                    "name": {
                        "type": "string"
                    },
                    "state": {
                        "description": "The resolver's answer, not the record's.",
                        "oneOf": [
                            {
                                "type": "string"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "enabled": {
                        "type": "boolean",
                        "description": "Explicit on the wire — a client reading `undefined` as false would show every plugin as off."
                    },
                    "requested": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "required": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "The subset of `requested` the package cannot work without, and what a bodyless grant approves."
                    },
                    "granted": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "What the operator approved through the record — the half this API can change."
                    },
                    "config_claims": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "What `silo.toml` grants. The other half."
                    },
                    "effective": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "The two of them together — what the plugin actually holds."
                    },
                    "not_granted": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "`requested` minus `effective`, computed here rather than left to the\nclient, which would be a second implementation of the wildcard-aware\ncomparison this repo keeps in one place.\n"
                    },
                    "hooks": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "key_id": {
                        "description": "The managed key carrying the grant. Its id only; the secret is host-side.",
                        "oneOf": [
                            {
                                "type": "string"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "granted_by": {
                        "oneOf": [
                            {
                                "type": "string"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "granted_at": {
                        "oneOf": [
                            {
                                "type": "string"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "rev": {
                        "type": "integer",
                        "description": "Send back as `If-Match` on a change."
                    },
                    "runtime": {
                        "oneOf": [
                            {
                                "$ref": "#/components/schemas/PluginStatus"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "config": {
                        "type": "object",
                        "additionalProperties": true
                    },
                    "config_source": {
                        "type": "string",
                        "enum": [
                            "silo.toml",
                            "store"
                        ],
                        "description": "Which of the two sources won. An override makes the file's block stop applying."
                    },
                    "contributes": {
                        "oneOf": [
                            {
                                "$ref": "#/components/schemas/PluginContributions"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "reasons": {
                        "type": "object",
                        "description": "Claim to the author's reason for wanting it. Documentation, from the manifest.",
                        "additionalProperties": {
                            "type": "string"
                        }
                    },
                    "config_schema": {
                        "description": "JSON Schema for the config block. `null` means the plugin takes no configuration."
                    }
                }
            },
            "PluginInstallRequest": {
                "type": "object",
                "required": [
                    "spec"
                ],
                "properties": {
                    "spec": {
                        "type": "string",
                        "description": "An npm spec, a URL, a git remote, a local directory or a tarball path."
                    },
                    "ref": {
                        "type": "string"
                    },
                    "integrity": {
                        "type": "string",
                        "description": "A subresource-integrity digest the fetched package must match."
                    },
                    "registry": {
                        "type": "string"
                    },
                    "force": {
                        "type": "boolean"
                    },
                    "claims": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Absent means absent, not empty: \"grant nothing\" and \"grant what the\npackage requires\" are different requests.\n"
                    },
                    "timeout_ms": {
                        "type": "integer",
                        "minimum": 1
                    },
                    "on_error": {
                        "type": "string",
                        "enum": [
                            "skip",
                            "fail"
                        ]
                    }
                }
            },
            "PluginUninstallResult": {
                "type": "object",
                "required": [
                    "name",
                    "withdrawn",
                    "unlisted",
                    "forgotten",
                    "removed",
                    "warnings"
                ],
                "properties": {
                    "name": {
                        "type": "string"
                    },
                    "withdrawn": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "What the record held at the moment it went."
                    },
                    "unlisted": {
                        "type": "boolean",
                        "description": "Whether an entry was taken out of `silo.toml`."
                    },
                    "forgotten": {
                        "type": "boolean",
                        "description": "Whether a record was destroyed."
                    },
                    "removed": {
                        "type": "boolean",
                        "description": "Whether the package left the data directory."
                    },
                    "warnings": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    }
                }
            },
            "RescanReport": {
                "type": "object",
                "required": [
                    "started",
                    "restarted",
                    "stopped",
                    "unchanged",
                    "skipped",
                    "failed"
                ],
                "properties": {
                    "started": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "restarted": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Torn down and started again because something it was started with changed."
                    },
                    "stopped": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "unchanged": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        }
                    },
                    "skipped": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "required": [
                                "name",
                                "reason"
                            ],
                            "properties": {
                                "name": {
                                    "type": "string"
                                },
                                "reason": {
                                    "type": "string"
                                }
                            }
                        }
                    },
                    "failed": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "required": [
                                "name",
                                "error"
                            ],
                            "properties": {
                                "name": {
                                    "type": "string"
                                },
                                "error": {
                                    "type": "string"
                                }
                            }
                        }
                    },
                    "order": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "The dispatch order after the rescan, which is the file's order."
                    }
                }
            },
            "AuditEvent": {
                "type": "object",
                "description": "One recorded **authority** change (D38). Entry writes are not audited —\n`rev`, `updated_at` and the hook stream already are that, and\nduplicating content history here would turn a log about decisions into a\nlog about traffic.\n",
                "required": [
                    "at",
                    "action",
                    "actor",
                    "subject",
                    "detail"
                ],
                "properties": {
                    "at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "action": {
                        "type": "string",
                        "enum": [
                            "key.create",
                            "key.update",
                            "key.revoke",
                            "plugin.grant",
                            "plugin.revoke",
                            "plugin.uninstall",
                            "plugin.enable",
                            "plugin.disable",
                            "plugin.configure",
                            "media.configure",
                            "settings.configure",
                            "project.rename",
                            "environment.rename",
                            "collection.rename"
                        ]
                    },
                    "actor": {
                        "type": "object",
                        "required": [
                            "kind"
                        ],
                        "properties": {
                            "kind": {
                                "type": "string",
                                "enum": [
                                    "key",
                                    "cli",
                                    "system"
                                ],
                                "description": "`cli` carries no id on purpose: the offline commands are bounded\nby filesystem access, not by a key, so there is nothing to name.\n"
                            },
                            "id": {
                                "type": "string",
                                "description": "The key record's id, for `kind: \"key\"` only. Survives revocation."
                            },
                            "label": {
                                "type": "string",
                                "description": "The key's label at the time, so a revoked key's entries stay readable."
                            }
                        }
                    },
                    "subject": {
                        "type": "string",
                        "description": "A key id for `key.*`, a plugin name for `plugin.*`, a table for `settings.configure`."
                    },
                    "detail": {
                        "type": "object",
                        "description": "Everything action-specific, and never a secret or a hash. Claims\nthemselves are in: a trail that says the grant changed without\nsaying to what is a notification, not a record.\n",
                        "additionalProperties": true
                    }
                }
            },
            "ObservabilitySnapshot": {
                "type": "object",
                "required": [
                    "generated_at",
                    "since",
                    "requests",
                    "process",
                    "storage"
                ],
                "properties": {
                    "generated_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "since": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "requests": {
                        "type": "object",
                        "required": [
                            "total",
                            "errors",
                            "error_rate",
                            "internal",
                            "status",
                            "latency",
                            "endpoints",
                            "timeline",
                            "latency_buckets"
                        ],
                        "properties": {
                            "total": {
                                "type": "integer"
                            },
                            "errors": {
                                "type": "integer"
                            },
                            "error_rate": {
                                "type": "number"
                            },
                            "internal": {
                                "type": "integer",
                                "description": "Requests a plugin dispatched in-process rather than ones that crossed a socket."
                            },
                            "status": {
                                "type": "object",
                                "required": [
                                    "informational",
                                    "success",
                                    "redirect",
                                    "client_error",
                                    "server_error"
                                ],
                                "properties": {
                                    "informational": {
                                        "type": "integer"
                                    },
                                    "success": {
                                        "type": "integer"
                                    },
                                    "redirect": {
                                        "type": "integer"
                                    },
                                    "client_error": {
                                        "type": "integer"
                                    },
                                    "server_error": {
                                        "type": "integer"
                                    }
                                }
                            },
                            "latency": {
                                "type": "object",
                                "description": "Percentiles are bucket upper bounds clamped to the slowest request observed.",
                                "properties": {
                                    "avg_ms": {
                                        "type": "number"
                                    },
                                    "p50_ms": {
                                        "type": "number"
                                    },
                                    "p95_ms": {
                                        "type": "number"
                                    },
                                    "p99_ms": {
                                        "type": "number"
                                    },
                                    "max_ms": {
                                        "type": "number"
                                    }
                                }
                            },
                            "endpoints": {
                                "type": "array",
                                "description": "The busiest 25 this caller may see. Keyed by the **registered route\npattern** with the scope names of successful requests filled in, such as\n`/api/projects/acme/environments/prod/collections/posts/:id`, so no id or\nquery string becomes a series. A named series whose scope the caller's\ncollection claims do not reach is counted under its pattern instead.\nEndpoints collapse into one `* <other>` row past 256, and a named one\npast that cap is counted under its pattern.\n",
                                "items": {
                                    "type": "object",
                                    "properties": {
                                        "method": {
                                            "type": "string"
                                        },
                                        "route": {
                                            "type": "string"
                                        },
                                        "hits": {
                                            "type": "integer"
                                        },
                                        "errors": {
                                            "type": "integer"
                                        },
                                        "error_rate": {
                                            "type": "number"
                                        },
                                        "internal": {
                                            "type": "integer"
                                        },
                                        "avg_ms": {
                                            "type": "number"
                                        },
                                        "p95_ms": {
                                            "type": "number"
                                        },
                                        "max_ms": {
                                            "type": "number"
                                        }
                                    }
                                }
                            },
                            "timeline": {
                                "type": "array",
                                "description": "One bucket per minute, pruned to the last sixty.",
                                "items": {
                                    "type": "object",
                                    "properties": {
                                        "at": {
                                            "type": "string",
                                            "format": "date-time"
                                        },
                                        "requests": {
                                            "type": "integer"
                                        },
                                        "errors": {
                                            "type": "integer"
                                        },
                                        "avg_ms": {
                                            "type": "number"
                                        }
                                    }
                                }
                            },
                            "latency_buckets": {
                                "type": "array",
                                "items": {
                                    "type": "object",
                                    "additionalProperties": true
                                }
                            }
                        }
                    },
                    "process": {
                        "type": "object",
                        "properties": {
                            "uptime_seconds": {
                                "type": "number"
                            },
                            "rss_bytes": {
                                "type": "integer"
                            },
                            "heap_used_bytes": {
                                "type": "integer"
                            },
                            "heap_total_bytes": {
                                "type": "integer"
                            },
                            "external_bytes": {
                                "type": "integer"
                            },
                            "cpu_user_seconds": {
                                "type": "number"
                            },
                            "cpu_system_seconds": {
                                "type": "number"
                            }
                        }
                    },
                    "storage": {
                        "type": "object",
                        "description": "Cached background probes, so a snapshot never waits on a scan. The\nwalks follow no symlink and stop after 50,000 entries; the data\nfigure skips the media subtree, so the two are disjoint. A remote\nprovider's capacity is `null`, not guessed.\n",
                        "required": [
                            "state",
                            "sampled_at",
                            "storage_driver",
                            "blob_driver",
                            "data_directory",
                            "media_directory",
                            "filesystem"
                        ],
                        "properties": {
                            "state": {
                                "type": "string",
                                "enum": [
                                    "ok",
                                    "sampling",
                                    "unavailable"
                                ]
                            },
                            "sampled_at": {
                                "oneOf": [
                                    {
                                        "type": "string"
                                    },
                                    {
                                        "type": "null"
                                    }
                                ]
                            },
                            "storage_driver": {
                                "type": "string"
                            },
                            "blob_driver": {
                                "type": "string"
                            },
                            "data_directory": {
                                "oneOf": [
                                    {
                                        "$ref": "#/components/schemas/DirectoryMetric"
                                    },
                                    {
                                        "type": "null"
                                    }
                                ]
                            },
                            "media_directory": {
                                "oneOf": [
                                    {
                                        "$ref": "#/components/schemas/DirectoryMetric"
                                    },
                                    {
                                        "type": "null"
                                    }
                                ]
                            },
                            "filesystem": {
                                "oneOf": [
                                    {
                                        "type": "object",
                                        "properties": {
                                            "total_bytes": {
                                                "type": "integer"
                                            },
                                            "free_bytes": {
                                                "type": "integer"
                                            },
                                            "available_bytes": {
                                                "type": "integer"
                                            }
                                        }
                                    },
                                    {
                                        "type": "null"
                                    }
                                ]
                            },
                            "database": {
                                "description": "The store's own report when it lives in a database (`postgres`), sampled with the directories; `null` for `sqlite` and `fs`, and until the first sample.",
                                "oneOf": [
                                    {
                                        "$ref": "#/components/schemas/StorageMeasurement"
                                    },
                                    {
                                        "type": "null"
                                    }
                                ]
                            }
                        }
                    }
                }
            },
            "StorageMeasurement": {
                "type": "object",
                "required": [
                    "bytes",
                    "pool",
                    "owner",
                    "tls"
                ],
                "properties": {
                    "bytes": {
                        "description": "What silo's tables and their indexes take, or `null` when it could not be read.",
                        "oneOf": [
                            {
                                "type": "integer"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "pool": {
                        "oneOf": [
                            {
                                "type": "object",
                                "properties": {
                                    "size": {
                                        "type": "integer"
                                    },
                                    "in_use": {
                                        "type": "integer"
                                    },
                                    "scans_active": {
                                        "type": "integer"
                                    },
                                    "scans_waiting": {
                                        "type": "integer"
                                    },
                                    "shed": {
                                        "type": "integer",
                                        "description": "Lists and searches refused as `503 busy` since the start."
                                    },
                                    "retries": {
                                        "type": "integer",
                                        "description": "Statements and transactions run again since the start."
                                    },
                                    "failures": {
                                        "type": "integer",
                                        "description": "Calls that failed as unavailable since the start."
                                    },
                                    "replaced": {
                                        "type": "integer",
                                        "description": "Times the driver left the pool broken and a new pool replaced it, since the start. Above zero means the server saw connections end while they were being opened (oven-sh/bun#42804)."
                                    }
                                }
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "owner": {
                        "description": "Whether this server holds the store's owner lock: `held`; `retaking` while its connection is replaced, when writes answer 503; `lost` when another server took it and this one is stopping; `not_claimed` for a process that is not a server.",
                        "oneOf": [
                            {
                                "type": "string",
                                "enum": [
                                    "held",
                                    "retaking",
                                    "lost",
                                    "not_claimed"
                                ]
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "tls": {
                        "description": "What `[storage] url` asked of TLS (`sslmode`: `disable`, `require`, `verify-ca` or `verify-full`), and the protocol a session actually uses, as the server reports it (`TLSv1.3`); `protocol` is `null` when the connection is not encrypted or could not be read.",
                        "oneOf": [
                            {
                                "type": "object",
                                "required": [
                                    "mode",
                                    "protocol"
                                ],
                                "properties": {
                                    "mode": {
                                        "type": "string",
                                        "enum": [
                                            "disable",
                                            "require",
                                            "verify-ca",
                                            "verify-full"
                                        ]
                                    },
                                    "protocol": {
                                        "oneOf": [
                                            {
                                                "type": "string"
                                            },
                                            {
                                                "type": "null"
                                            }
                                        ]
                                    }
                                }
                            },
                            {
                                "type": "null"
                            }
                        ]
                    }
                }
            },
            "DirectoryMetric": {
                "type": "object",
                "required": [
                    "bytes",
                    "files",
                    "truncated"
                ],
                "properties": {
                    "bytes": {
                        "type": "integer"
                    },
                    "files": {
                        "type": "integer"
                    },
                    "truncated": {
                        "type": "boolean",
                        "description": "True when the walk hit its entry budget."
                    }
                }
            },
            "Error": {
                "type": "object",
                "description": "Every refusal takes this shape. `details` on a `validation_failed`\ncarries the validator's JSON Pointer paths.\n",
                "required": [
                    "error"
                ],
                "properties": {
                    "error": {
                        "type": "object",
                        "required": [
                            "code",
                            "message"
                        ],
                        "properties": {
                            "code": {
                                "type": "string",
                                "enum": [
                                    "validation_failed",
                                    "unauthorized",
                                    "forbidden",
                                    "not_found",
                                    "conflict",
                                    "media_in_use",
                                    "media_delete_stalled",
                                    "plugin_start_failed",
                                    "plugin_unavailable",
                                    "method_not_allowed",
                                    "internal",
                                    "payload_too_large",
                                    "archive_too_large",
                                    "busy",
                                    "atomic_commit_unsupported",
                                    "transfer_cancelled",
                                    "transfer_in_progress",
                                    "transfer_applied",
                                    "stale_preview",
                                    "transfer_expired",
                                    "too_many_transfers"
                                ]
                            },
                            "message": {
                                "type": "string"
                            },
                            "details": {
                                "description": "Validation pointers, the referrers of a refused media delete, or\nthe plugin and the remedy for a plugin failure.\n"
                            }
                        }
                    }
                }
            },
            "ImportRejection": {
                "type": "object",
                "description": "One entry the destination's schema refused (D70).",
                "required": [
                    "project",
                    "env",
                    "collection",
                    "id",
                    "reason"
                ],
                "properties": {
                    "project": {
                        "type": "string"
                    },
                    "env": {
                        "type": "string"
                    },
                    "collection": {
                        "type": "string"
                    },
                    "id": {
                        "type": "string"
                    },
                    "reason": {
                        "type": "string"
                    }
                }
            },
            "TransferProgressLine": {
                "type": "object",
                "description": "One line of a transfer's progress stream. The response status is sent before the work begins, so the outcome is the last line: `result` on success, `error` otherwise. A `progress` line with no `result` is a bare heartbeat.",
                "required": [
                    "type"
                ],
                "properties": {
                    "type": {
                        "type": "string",
                        "enum": [
                            "progress",
                            "result",
                            "error"
                        ]
                    },
                    "phase": {
                        "type": "string",
                        "enum": [
                            "extract",
                            "entries",
                            "media",
                            "working"
                        ],
                        "description": "`progress` lines only."
                    },
                    "result": {
                        "$ref": "#/components/schemas/ImportResult"
                    },
                    "status": {
                        "type": "integer",
                        "description": "`error` lines only: the status this would have been."
                    },
                    "error": {
                        "type": "object",
                        "properties": {
                            "code": {
                                "type": "string"
                            },
                            "message": {
                                "type": "string"
                            }
                        }
                    }
                }
            },
            "JsonRpcRequest": {
                "type": "object",
                "description": "One JSON-RPC 2.0 request, or a notification when `id` is absent.",
                "required": [
                    "jsonrpc",
                    "method"
                ],
                "properties": {
                    "jsonrpc": {
                        "const": "2.0"
                    },
                    "id": {
                        "description": "The request id. Absent on a notification; `null` is legal on a request and required on a parse-error reply.",
                        "oneOf": [
                            {
                                "type": "string"
                            },
                            {
                                "type": "integer"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "method": {
                        "type": "string",
                        "description": "`initialize`, `ping`, `tools/list` or `tools/call` are answered; `notifications/*` are accepted; anything else is `-32601`.",
                        "examples": [
                            "initialize",
                            "tools/list",
                            "tools/call"
                        ]
                    },
                    "params": {
                        "type": "object",
                        "description": "For `tools/call`: `{name, arguments}`, where `arguments` must match the tool's `inputSchema` from `tools/list`."
                    }
                }
            },
            "JsonRpcResponse": {
                "type": "object",
                "description": "One of `result` or `error`, never both.",
                "required": [
                    "jsonrpc",
                    "id"
                ],
                "properties": {
                    "jsonrpc": {
                        "const": "2.0"
                    },
                    "id": {
                        "description": "The request id. Absent on a notification; `null` is legal on a request and required on a parse-error reply.",
                        "oneOf": [
                            {
                                "type": "string"
                            },
                            {
                                "type": "integer"
                            },
                            {
                                "type": "null"
                            }
                        ]
                    },
                    "result": {
                        "description": "For `tools/call`: `{content: [{type: \"text\", text}], structuredContent?, isError?}`. The text is the route's JSON answer, pretty-printed; `structuredContent` repeats it when it is an object; `isError: true` marks a `4xx` from the route, with the text reading `code (status): message`."
                    },
                    "error": {
                        "type": "object",
                        "required": [
                            "code",
                            "message"
                        ],
                        "properties": {
                            "code": {
                                "type": "integer",
                                "description": "`-32700` parse error, `-32600` invalid request, `-32601` method not found, `-32602` invalid params (an unknown tool, or arguments off the tool's schema), `-32603` internal."
                            },
                            "message": {
                                "type": "string"
                            },
                            "data": {
                                "description": "For `-32602`: the validator's `{path, message}` list."
                            }
                        }
                    }
                }
            },
            "TrashItem": {
                "type": "object",
                "description": "One explicitly deleted thing (D113).\n\n`origin` holds both ids and names: the ids are what a restore anchors on,\nbecause a name is mutable and a rename between delete and restore would\notherwise misfile the content. The names are today's: a rename after the\ndelete shows here, and the read check, the restore check and the\nfilters all use it. A container that is gone keeps the name it had.\n",
                "required": [
                    "id",
                    "kind",
                    "origin",
                    "subject_id",
                    "subject_name",
                    "deleted_at",
                    "deleted_by",
                    "expires_at",
                    "contents",
                    "media_refs",
                    "state",
                    "restorable"
                ],
                "properties": {
                    "id": {
                        "type": "string",
                        "description": "The receipt's own id."
                    },
                    "kind": {
                        "type": "string",
                        "enum": [
                            "project",
                            "environment",
                            "collection",
                            "entry",
                            "media",
                            "media_folder"
                        ]
                    },
                    "origin": {
                        "type": "object",
                        "description": "Where the thing was, by id and by name.",
                        "properties": {
                            "project_id": {
                                "type": "string"
                            },
                            "project_name": {
                                "type": "string"
                            },
                            "env_id": {
                                "type": "string"
                            },
                            "env_name": {
                                "type": "string"
                            },
                            "collection_id": {
                                "type": "string"
                            },
                            "collection_name": {
                                "type": "string"
                            },
                            "folder": {
                                "type": "string",
                                "description": "Media only: the normalised library path."
                            }
                        }
                    },
                    "subject_id": {
                        "type": "string",
                        "description": "Preserved, so a restore keeps every reference to it."
                    },
                    "subject_name": {
                        "type": "string"
                    },
                    "deleted_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "deleted_by": {
                        "$ref": "#/components/schemas/TrashActor"
                    },
                    "expires_at": {
                        "type": "string",
                        "format": "date-time",
                        "nullable": true,
                        "description": "When the sweeper will purge this. Null when the instance keeps trash\nindefinitely (`[trash] retention_days = 0`). Stamped at delete time, so\nshortening the setting never retroactively destroys content.\n"
                    },
                    "contents": {
                        "$ref": "#/components/schemas/TrashContents"
                    },
                    "media_refs": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Media the parked content referenced. Those rows left the usage index with\nthe content, so an asset can be deleted while the only thing naming it\nsits in the trash; a restore reports what no longer resolves.\n"
                    },
                    "state": {
                        "type": "string",
                        "enum": [
                            "parking",
                            "parked",
                            "restoring",
                            "purging"
                        ],
                        "description": "Anything but `parked` is in flight and is resumed at the next start.\n"
                    },
                    "restorable": {
                        "type": "boolean",
                        "description": "False whenever `blocked_by` is set."
                    },
                    "blocked_by": {
                        "$ref": "#/components/schemas/TrashBlocker"
                    }
                }
            },
            "TrashActor": {
                "type": "object",
                "description": "Who deleted it. silo authenticates keys, so \"who\" is a key.",
                "required": [
                    "kind"
                ],
                "properties": {
                    "kind": {
                        "type": "string",
                        "enum": [
                            "key",
                            "cli",
                            "system"
                        ]
                    },
                    "id": {
                        "type": "string",
                        "description": "The `_keys` record id, for `kind: key`."
                    },
                    "label": {
                        "type": "string",
                        "description": "The key's label at the time, so a revoked key still reads."
                    }
                }
            },
            "TrashContents": {
                "type": "object",
                "description": "What rode along with the explicitly deleted thing, counted once at delete\ntime so drawing a list never counts anything.\n",
                "required": [
                    "collections",
                    "entries",
                    "assets",
                    "bytes"
                ],
                "properties": {
                    "collections": {
                        "type": "integer"
                    },
                    "entries": {
                        "type": "integer"
                    },
                    "assets": {
                        "type": "integer"
                    },
                    "bytes": {
                        "type": "integer"
                    }
                }
            },
            "TrashBlocker": {
                "type": "object",
                "description": "Why this cannot be restored yet: the container it came from is gone.\n\nRestoring into a missing container would orphan the content, so it is\nrefused and named instead. `trash_id` points at the receipt that would\nunblock it when the container is itself in the trash, which is what\n`chain` acts on; null means the container was purged.\n",
                "required": [
                    "kind",
                    "name",
                    "trash_id"
                ],
                "properties": {
                    "kind": {
                        "type": "string",
                        "enum": [
                            "project",
                            "environment",
                            "collection",
                            "entry",
                            "media",
                            "media_folder"
                        ]
                    },
                    "name": {
                        "type": "string"
                    },
                    "trash_id": {
                        "type": "string",
                        "nullable": true
                    }
                }
            },
            "TrashRestoreResult": {
                "type": "object",
                "description": "What a restore put back, and what it could not fix.",
                "required": [
                    "restored",
                    "projects",
                    "environments",
                    "collections",
                    "entries",
                    "assets",
                    "broken_media_refs"
                ],
                "properties": {
                    "restored": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Receipt ids restored, containers first when `chain` was set."
                    },
                    "projects": {
                        "type": "integer"
                    },
                    "environments": {
                        "type": "integer"
                    },
                    "collections": {
                        "type": "integer"
                    },
                    "entries": {
                        "type": "integer"
                    },
                    "assets": {
                        "type": "integer"
                    },
                    "broken_media_refs": {
                        "type": "array",
                        "items": {
                            "type": "string"
                        },
                        "description": "Media ids the restored content still names that the library no longer\nholds. Reported rather than repaired: restoring an entry with a dead\nimage and saying nothing is worse than restoring it and saying so.\n"
                    },
                    "renamed_to": {
                        "type": "string",
                        "description": "Set when a name collision forced a rename."
                    }
                }
            },
            "MediaStats": {
                "type": "object",
                "required": [
                    "files",
                    "bytes",
                    "folders",
                    "types",
                    "largest",
                    "last_upload",
                    "deleting"
                ],
                "properties": {
                    "files": {
                        "type": "integer"
                    },
                    "bytes": {
                        "type": "integer"
                    },
                    "folders": {
                        "type": "integer",
                        "description": "Explicit and implied folders, ancestors included."
                    },
                    "types": {
                        "type": "array",
                        "description": "Largest share first. A kind the library holds none of is left out.",
                        "items": {
                            "type": "object",
                            "required": [
                                "type",
                                "files",
                                "bytes"
                            ],
                            "properties": {
                                "type": {
                                    "type": "string",
                                    "enum": [
                                        "image",
                                        "video",
                                        "audio",
                                        "document",
                                        "other"
                                    ],
                                    "description": "Read off the content type. `document` is text, PDF, JSON, XML, RTF and office formats."
                                },
                                "files": {
                                    "type": "integer"
                                },
                                "bytes": {
                                    "type": "integer"
                                }
                            }
                        }
                    },
                    "largest": {
                        "type": [
                            "object",
                            "null"
                        ],
                        "required": [
                            "id",
                            "filename",
                            "folder",
                            "size"
                        ],
                        "properties": {
                            "id": {
                                "type": "string"
                            },
                            "filename": {
                                "type": "string"
                            },
                            "folder": {
                                "type": "string"
                            },
                            "size": {
                                "type": "integer"
                            }
                        }
                    },
                    "last_upload": {
                        "type": [
                            "string",
                            "null"
                        ],
                        "format": "date-time"
                    },
                    "deleting": {
                        "type": "integer",
                        "description": "Files staged for deletion, left out of every other figure."
                    }
                }
            },
            "MediaArchive": {
                "type": "object",
                "required": [
                    "id",
                    "expires_at",
                    "files",
                    "bytes",
                    "parts",
                    "separate"
                ],
                "properties": {
                    "id": {
                        "type": "string",
                        "description": "The ticket. Treat it as a secret: it opens the parts without a key."
                    },
                    "expires_at": {
                        "type": "string",
                        "format": "date-time"
                    },
                    "files": {
                        "type": "integer",
                        "description": "Every file, in parts and in `separate`."
                    },
                    "bytes": {
                        "type": "integer"
                    },
                    "parts": {
                        "type": "array",
                        "description": "Empty when every selected file is in `separate`.",
                        "items": {
                            "type": "object",
                            "required": [
                                "part",
                                "filename",
                                "files",
                                "bytes",
                                "url"
                            ],
                            "properties": {
                                "part": {
                                    "type": "integer"
                                },
                                "filename": {
                                    "type": "string",
                                    "description": "`<folder>.zip` for one folder alone, else `media-<UTC stamp>.zip`; `-<n>-of-<total>` before `.zip` when there are several."
                                },
                                "files": {
                                    "type": "integer"
                                },
                                "bytes": {
                                    "type": "integer"
                                },
                                "url": {
                                    "type": "string",
                                    "description": "Relative to the server."
                                }
                            }
                        }
                    },
                    "separate": {
                        "type": "array",
                        "description": "Files over 2 GiB, downloaded on their own.",
                        "items": {
                            "type": "object",
                            "required": [
                                "id",
                                "filename",
                                "size",
                                "url"
                            ],
                            "properties": {
                                "id": {
                                    "type": "string"
                                },
                                "filename": {
                                    "type": "string"
                                },
                                "size": {
                                    "type": "integer"
                                },
                                "url": {
                                    "type": "string",
                                    "description": "`/media/{id}?download=true`, relative to the server."
                                }
                            }
                        }
                    }
                }
            }
        }
    }
}