Release Orchestrator API Reference

FieldValue
Source specrelease-orchestrator/openapi/v1.json
OpenAPI version3.1.1
API version1.0.0
Operations387
Path filterAll paths

Operations

GET /api/release-orchestrator/access/effective

PropertyValue
Operation IDResourceAccess_EffectiveCombined
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryno
releaseIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/approval-policies

List operator-managed promotion approval policies for the calling tenant.

PropertyValue
Operation IDApprovalPolicy_List
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
includeDisabledqueryno
namequeryno
releaseNamequeryno
sourceEnvironmentqueryno
targetEnvironmentqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approval-policies

Create an operator-managed promotion approval policy.

PropertyValue
Operation IDApprovalPolicy_Create
TagsApproval Policies
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/approval-policies/{id}

Return a single promotion approval policy by id.

PropertyValue
Operation IDApprovalPolicy_Get
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/release-orchestrator/approval-policies/{id}

Update an operator-managed promotion approval policy.

PropertyValue
Operation IDApprovalPolicy_Update
TagsApproval Policies
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/approval-policies/{id}

Disable an approval policy while retaining it for audit replay.

PropertyValue
Operation IDApprovalPolicy_Delete
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/approvals

orchestrator.approval.list_description

PropertyValue
Operation IDApproval_List
TagsApprovals
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
statusesqueryno
urgenciesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/batch-approve

orchestrator.approval.create_description

PropertyValue
Operation IDApproval_BatchApprove
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/batch-cancel

Cancel multiple open (pending or expired) approvals in one call — queue hygiene for stale or duplicate promotion requests. Approvals in any other state are skipped and reported back.

PropertyValue
Operation IDApproval_BatchCancel
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/batch-reject

orchestrator.approval.cancel_description

PropertyValue
Operation IDApproval_BatchReject
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/developer-requests

Create a developer-originated service image update approval request.

PropertyValue
Operation IDApproval_CreateDeveloperUpdateRequest
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/approvals/{id}

orchestrator.approval.get_description

PropertyValue
Operation IDApproval_Get
TagsApprovals
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/{id}/approve

orchestrator.approval.approve_description

PropertyValue
Operation IDApproval_Approve
TagsApprovals
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/{id}/reject

orchestrator.approval.reject_description

PropertyValue
Operation IDApproval_Reject
TagsApprovals
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/dashboard

Return a consolidated release dashboard snapshot for the Console control plane, including pending approvals, active promotions, recent deployments, and environment health indicators. Used by the UI to populate the main release management view.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments

PropertyValue
Operation IDDeployment_List
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
environmentsqueryno
pagequeryno
pageSizequeryno
releaseIdqueryno
releasesqueryno
sortFieldqueryno
sortOrderqueryno
statusqueryno
statusesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments

PropertyValue
Operation IDDeployment_Create
TagsDeployments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}

PropertyValue
Operation IDDeployment_Get
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/cancel

PropertyValue
Operation IDDeployment_Cancel
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/events

PropertyValue
Operation IDDeployment_GetEvents
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/logs

PropertyValue
Operation IDDeployment_GetLogs
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
levelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/metrics

PropertyValue
Operation IDDeployment_GetMetrics
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/pause

PropertyValue
Operation IDDeployment_Pause
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/resume

PropertyValue
Operation IDDeployment_Resume
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/rollback

PropertyValue
Operation IDDeployment_Rollback
TagsDeployments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/share

PropertyValue
Operation IDDeploymentShare_Create
TagsDeployment Share Grants
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/shares

PropertyValue
Operation IDDeploymentShare_List
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/targets/{targetId}/logs

PropertyValue
Operation IDDeployment_GetTargetLogs
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes
levelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

The response body is { "entries": DeploymentLogEntry[] }. For real-engine terminal deployments, entries are persisted from the matched target task only: already-redacted stdout/stderr/output, or the allowlisted Compose execution facts (projectName, services, runtime verification, and completed phases). The route never synthesizes output for a task that returned none. targetId, level, and limit filters apply after tenant + deployment scoping.

POST /api/release-orchestrator/deployments/{id}/targets/{targetId}/retry

PropertyValue
Operation IDDeployment_RetryTarget
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/environments/policy-bindings

List operator-managed environment-to-policy-pack bindings for the calling tenant.

PropertyValue
Operation IDEnvironmentPolicyBinding_List
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
includeDisabledqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/environments/{environment}/policy-bindings

Return the environment policy binding for a single environment, if any.

PropertyValue
Operation IDEnvironmentPolicyBinding_Get
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/release-orchestrator/environments/{environment}/policy-bindings

Insert or update the policy-pack binding for an environment (idempotent).

PropertyValue
Operation IDEnvironmentPolicyBinding_Upsert
TagsEnvironment Policy Bindings
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/environments/{environment}/policy-bindings

Soft-delete the policy-pack binding for an environment (sets enabled=false).

PropertyValue
Operation IDEnvironmentPolicyBinding_Delete
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/environments/{id}/access

PropertyValue
Operation IDEnvironmentAccess_List
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/environments/{id}/access

PropertyValue
Operation IDEnvironmentAccess_Create
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/environments/{id}/access/effective

PropertyValue
Operation IDEnvironmentAccess_Effective
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/environments/{id}/access/transfer

PropertyValue
Operation IDEnvironmentAccess_Transfer
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/environments/{id}/access/{grantId}

PropertyValue
Operation IDEnvironmentAccess_Revoke
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence

Return a paginated list of evidence packets for the calling tenant, optionally filtered by release, type, and creation time window. Each packet includes its identifier, associated release, evidence type, content hash, and creation timestamp.

PropertyValue
Operation IDEvidence_List
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
pagequeryno
pageSizequeryno
releaseIdqueryno
searchqueryno
sortFieldqueryno
sortOrderqueryno
typequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/evidence

Submit a verified release evidence packet. The service recomputes the payload hash before storing the packet so promotion and deployment gates can rely on durable evidence truth.

PropertyValue
Operation IDEvidence_Create
TagsEvidence
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence/{id}

Return the full evidence packet record for the specified ID including release association, evidence type, content hash, algorithm, size, and metadata. Returns 404 when the evidence packet does not exist in the tenant.

PropertyValue
Operation IDEvidence_Get
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence/{id}/export

Export the specified evidence packet as a self-contained JSON bundle suitable for offline audit. The bundle includes the evidence metadata, content, and verification hashes.

PropertyValue
Operation IDEvidence_Export
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence/{id}/raw

Download the raw binary content of the specified evidence packet. Returns the unprocessed evidence payload with Content-Type application/octet-stream. Returns 404 when the evidence packet does not exist.

PropertyValue
Operation IDEvidence_DownloadRaw
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence/{id}/timeline

Return the chronological event timeline for the specified evidence packet including creation, verification, export, and access events. Useful for audit trails and provenance tracking.

PropertyValue
Operation IDEvidence_Timeline
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/evidence/{id}/verify

Verify the integrity of the specified evidence packet by recomputing and comparing its content hash. Returns the verification result including the computed hash, algorithm used, and whether the content matches the stored digest.

PropertyValue
Operation IDEvidence_Verify
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/operator-decisions/prepare

Return the server-canonical operator-decision@v1 payload and DSSE PAE bytes for a release governance action.

PropertyValue
Operation IDOperatorDecision_Prepare
TagsOperator Decisions
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/promotions/{id}/approve

Record an approval decision on the specified pending promotion request, allowing the associated release to advance to the next environment. The calling principal must hold the release approval scope. Returns 404 when the promotion ID does not exist.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/promotions/{id}/reject

Record a rejection decision on the specified pending promotion request with an optional rejection reason, blocking the release from advancing. The calling principal must hold the release approval scope. Returns 404 when the promotion ID does not exist.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/release-environment-limit

Return the effective administrator release environment limit for the calling tenant. Stored settings override deployment configuration.

PropertyValue
Operation IDReleaseEnvironmentLimit_Get
TagsRelease Environment Limits
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/release-orchestrator/release-environment-limit

Persist the administrator release environment allow-list for the calling tenant.

PropertyValue
Operation IDReleaseEnvironmentLimit_Update
TagsRelease Environment Limits
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/release-impact

Return the tenant-scoped reverse release impact for a CVE or advisory identifier. The response contains currentImpact.releases, approvals, promotions, environments, gateVerdicts, reachableCves, and evidenceLinks, all sorted deterministically for FE diffing. Example response shape: { identifier, normalizedIdentifier, empty, currentImpact: { releases, approvals, promotions, environments, gateVerdicts, reachableCves, evidenceLinks }, timeline: { current, historical } }. timeline.current contains the current matching verdict rows; timeline.historical contains older matching gate-decision rows and does not contribute to currentImpact. Empty matches return 200 with empty=true and empty arrays; a missing identifier returns 400 identifier_required.

PropertyValue
Operation IDReleaseImpact_Query
TagsRelease Impact
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
identifierqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases

Return a paginated list of releases for the calling tenant, optionally filtered by status, environment, project, and creation time window. Each release record includes its name, version, current status, component count, and lifecycle timestamps.

PropertyValue
Operation IDRelease_List
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
accessqueryno
environmentqueryno
pagequeryno
pageSizequeryno
searchqueryno
sortFieldqueryno
sortOrderqueryno
statusesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases

Create a new release record in Draft state. The release captures an intent to promote a versioned set of components through defined environments. Returns 409 if a release with the same name and version already exists.

PropertyValue
Operation IDRelease_Create
TagsReleases
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/activity

Return a paginated feed of release activities across all releases, optionally filtered by environment, outcome, and time window.

PropertyValue
Operation IDRelease_Activity
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
limitqueryno
outcomequeryno
releaseIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/latest-by-name

Return the most recent release with the given name, including structured metadata for smart defaults when creating a new version. Used by the release creation wizard to auto-fill from the previous version.

PropertyValue
Operation IDRelease_LatestByName
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
namequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/suggest-version

Suggest the next semantic version for a release name based on the latest existing version. Returns the suggested version string and the source release ID.

PropertyValue
Operation IDRelease_SuggestVersion
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
currentVersionqueryno
namequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/versions

Return a filtered list of release versions, optionally filtered by gate status.

PropertyValue
Operation IDRelease_Versions
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
gateStatusqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{id}

Return the full release record for the specified ID including name, version, status, component list, approval gate state, and event history summary. Returns 404 when the release does not exist in the tenant.

PropertyValue
Operation IDRelease_Get
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/releases/{id}

Permanently remove the specified release record. Only releases in Draft or Failed status can be deleted; returns 409 for releases in other states. All associated components and events are removed with the release record.

PropertyValue
Operation IDRelease_Delete
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/release-orchestrator/releases/{id}

Update mutable metadata on the specified release including description, target environment, and custom labels. Status transitions must be performed through the dedicated lifecycle endpoints. Returns 404 when the release does not exist.

PropertyValue
Operation IDRelease_Update
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{id}/access

PropertyValue
Operation IDReleaseAccess_List
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/access

PropertyValue
Operation IDReleaseAccess_Create
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{id}/access/effective

PropertyValue
Operation IDReleaseAccess_Effective
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/access/transfer

PropertyValue
Operation IDReleaseAccess_Transfer
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/releases/{id}/access/{grantId}

PropertyValue
Operation IDReleaseAccess_Revoke
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/clone

Create a new release by copying the components, labels, and target environment from the specified source release, applying a new name and version. The cloned release starts in Draft state and is independent of the source.

PropertyValue
Operation IDRelease_Clone
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/deploy

Trigger deployment of the specified release to its current target environment. Deployment is orchestrated by the platform and may include pre-deployment checks, artifact staging, and post-deployment validation. Returns 409 if gates have not been satisfied.

PropertyValue
Operation IDRelease_Deploy
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
preflightOverrideJustificationqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/promote

Initiate the promotion workflow to advance the specified release to its next target environment, triggering policy gate evaluation. The promotion runs asynchronously; poll the release record or subscribe to events for outcome updates.

The target may be supplied as a legacy env-* alias, environment name, or UUID. When it resolves, the persisted approval uses the canonical environment name and its configured RequiredApprovals (minimum one). A positive requiredApprovals supplied by the evaluated gate/policy decision overrides that initial environment quorum. Unresolved legacy references retain the compatibility quorum of two.

PropertyValue
Operation IDRelease_Promote
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/ready

Transition the specified release from Draft to Ready state, signalling that all components are assembled and the release is eligible for promotion gate evaluation. Returns 409 if the release is not in Draft state or required components are missing.

PropertyValue
Operation IDRelease_MarkReady
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/rollback

Initiate a rollback of the specified deployed release to the previous stable version in the current environment. The rollback is audited and creates a new release event. Returns 409 if the release is not in Deployed state or no prior stable version exists.

PropertyValue
Operation IDRelease_Rollback
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{id}/updates

Return per-component version currency for the specified release: which components have a STRICTLY-NEWER version that the registry actually serves (never a guessed version/digest), which are up to date, and which could not be checked (registry unreachable/unresolved). Read-only — surfacing an update never deploys; the one-click draft rides the Editor-gated create-version endpoint referenced by each row’s actionEndpoint.

PropertyValue
Operation IDRelease_Updates
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/versions/from-artifact-update

Create a new draft release version from an existing release when a component artifact digest changes. The new version copies source release metadata and components, replaces only the changed component digest/reference, and applies administrator environment scope limits.

PropertyValue
Operation IDRelease_CreateVersionFromArtifactUpdate
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/available-environments

Return the list of environment targets that the specified release can be promoted to from its current state, based on the configured promotion pipeline and the caller’s access rights. Returns 404 when the release does not exist.

PropertyValue
Operation IDRelease_AvailableEnvironments
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/components

Return the list of components registered in the specified release including their artifact references, versions, content digests, and current deployment status. Returns 404 when the release does not exist.

PropertyValue
Operation IDRelease_GetComponents
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{releaseId}/components

Register a new component in the specified release, supplying the artifact reference and content digest. Components must be added before the release is marked Ready. Returns 409 if a component with the same name is already registered.

PropertyValue
Operation IDRelease_AddComponent
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/releases/{releaseId}/components/{componentId}

Remove the specified component from the release. Only permitted when the release is in Draft state; returns 409 for releases that are Ready or beyond. Returns 404 when the component or release does not exist in the tenant.

PropertyValue
Operation IDRelease_RemoveComponent
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
componentIdpathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/release-orchestrator/releases/{releaseId}/components/{componentId}

Update the artifact reference, version, or content digest of the specified release component. Returns 404 when the component does not exist within the release or the release itself does not exist in the tenant.

PropertyValue
Operation IDRelease_UpdateComponent
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentIdpathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{releaseId}/components/{componentName}/scan

Operator-triggered “scan now when unknown”: trigger a Scanner scan for the named release component (resolved to its pinned image reference + digest) so an absent/pending/failed SBOM-readiness gate can be satisfied. Requires scanner:scan + release:read.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentNamepathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/deploy-plan

Return the honest deployment strategy plan preview for the specified release into the given environment (?environmentId=) under a requested strategy (?strategy=rolling|canary|blue_green|all_at_once). The response mirrors the REAL strategy batching (phases: index + per-phase target count) plus the effective behaviour and honest caveats: single-target-collapse (with one target, canary/blue-green/rolling collapse to a single all-at-once deploy) and no-traffic-management (canary/blue-green do phased TARGET rollout, not traffic splitting; cutover is external). Unknown/unresolvable target count returns an honest cannot-preview, never a fabricated plan. Read-only — it never deploys.

PropertyValue
Operation IDRelease_DeployPlan
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
environmentIdqueryno
strategyqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/deploy-preflight

Return the pre-launch deployment readiness checklist for the specified release into the given environment (?environmentId=). Each row is tri-state (pass/fail/unknown); a fail carries the deployment failure anatomy (plain reason + action). armed is true iff no check hard-failed. Honest: unknown (a probe that could not determine the answer) is surfaced as a caution, never a false pass and never a lone blocker. Floor-independent preview — it never deploys.

PropertyValue
Operation IDRelease_DeployPreflight
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
environmentIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/events

Return the chronological event log for the specified release including status transitions, gate evaluations, approval decisions, deployment actions, and rollback events. Useful for audit trails and post-incident analysis.

PropertyValue
Operation IDRelease_GetEvents
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/promotion-preview

Evaluate and return the gate check results for the specified release’s next promotion without committing any state change. Returns the verdict for each configured policy gate so operators can assess promotion eligibility before triggering it.

The preview resolves targetEnvironmentId by environment UUID or name; when the query is omitted it uses the release’s configured target. targetEnvironment, requiredApprovers, and requiresHumanApproval come from that resolved environment so the preview matches the promotion contract. Unresolved legacy references retain the compatibility fallback (staging, two approvers).

PropertyValue
Operation IDRelease_PromotionPreview
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
targetEnvironmentIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/share/{grantId}

PropertyValue
Operation IDDeploymentShare_Get
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/share/{grantId}

PropertyValue
Operation IDDeploymentShare_Revoke
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/release-orchestrator/share/{grantId}

PropertyValue
Operation IDDeploymentShare_Patch
TagsDeployment Share Grants
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/share/{grantId}/accept

PropertyValue
Operation IDDeploymentShare_Accept
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/share/{grantId}/approve

PropertyValue
Operation IDDeploymentShare_Approve
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/agents

List available agents

PropertyValue
Operation IDListAgents
TagsTopology Agents
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/agents/{id}/request-delete

Request deletion of a agent

PropertyValue
Operation IDRequestDeleteAgent
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/approvals

Return the v2 approval queue for the calling tenant, including per-request digest confidence, reachability-weighted risk score, and ops-data integrity score. Optionally filtered by status and target environment. Designed for the enhanced approval UX.

PropertyValue
Operation IDApprovalsV2_List
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
statusqueryno
targetEnvironmentqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}

Return the v2 decision packet for the specified approval, including the full policy gate evaluation trace, reachability-adjusted finding counts, confidence bands, and all structured evidence references required to make an informed approval decision.

PropertyValue
Operation IDApprovalsV2_Get
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/approvals/{id}/decision

Apply a structured decision action (approve, reject, defer, escalate) to the specified v2 approval, attributing the decision to the calling principal with an optional comment. Returns 409 if the approval is not in a state that accepts decisions.

PropertyValue
Operation IDApprovalsV2_Decision
TagsApprovals v2
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/evidence

Return the structured evidence reference set attached to the specified v2 approval decision packet, including SBOM digests, attestation references, scan results, and provenance records. Used to verify the completeness of the evidence chain before approving.

PropertyValue
Operation IDApprovalsV2_Evidence
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/approvals/{id}/gate-exception

Override (bypass) a blocking release gate via a signed, audited gate exception. Requires the dedicated release:gate-bypass scope and a verified operator decision envelope (DSSE) signed with the operator’s platform key, plus a justification and an explicit risk acknowledgement. The targeted gate is flipped to a non-blocking EXCEPTION state so the promotion can be approved; it does NOT auto-approve. 403 without the scope or a valid signature; 404 if the gate is unknown; 409 if the gate is not in a blocking state.

PropertyValue
Operation IDApprovalsV2_GateException
TagsApprovals v2
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/gates

Return the detailed gate evaluation trace for the specified v2 approval, showing each policy gate’s inputs, computed verdict, confidence weight, and any override history. Used by approvers to understand the basis for automated gate results.

PropertyValue
Operation IDApprovalsV2_Gates
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/ops-health

Return the operational data-integrity confidence indicators for the specified approval, including staleness of scan data, missing coverage gaps, and pipeline signal freshness. Low confidence scores reduce the defensibility of approval decisions.

PropertyValue
Operation IDApprovalsV2_OpsHealth
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/replay

Return deterministic replay status for the specified approval decision packet, including the decision digest and replay log reference used by the approval detail UI.

PropertyValue
Operation IDApprovalsV2_Replay
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/security-snapshot

Return the security snapshot computed for the specified approval context, including reachability-adjusted critical and high finding counts (CritR, HighR), SBOM coverage percentage, and the weighted risk score used in the approval decision packet.

PropertyValue
Operation IDApprovalsV2_SecuritySnapshot
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/buildinfo

API alias for /buildinfo.json (same payload).

PropertyValue
Operation IDStellaOpsBuildInfoApi
TagsStellaOps.ReleaseOrchestrator.WebApi
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/components

List tenant-scoped release components.

PropertyValue
Operation IDComponents_List
TagsComponents
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
searchqueryno
statusqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/components

Create a tenant-scoped release component bound to a registry integration and image repository.

PropertyValue
Operation IDComponents_Create
TagsComponents
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/components/{componentId}/versions/{versionId}

Update SCM provenance fields for a digest-pinned component version.

PropertyValue
Operation IDComponents_UpdateVersionScm
TagsComponents
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentIdpathyes
versionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/components/{id}

Get one tenant-scoped release component.

PropertyValue
Operation IDComponents_Get
TagsComponents
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/components/{id}

Retire a component without deleting historical versions.

PropertyValue
Operation IDComponents_Retire
TagsComponents
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/components/{id}

Update mutable component registry metadata.

PropertyValue
Operation IDComponents_Update
TagsComponents
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/components/{id}/sync-versions

Resolve repository tags to immutable digests and upsert component version-map rows.

PropertyValue
Operation IDComponents_SyncVersions
TagsComponents
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/components/{id}/versions

List recorded component versions.

PropertyValue
Operation IDComponents_ListVersions
TagsComponents
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
channelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/environments

List environments

PropertyValue
Operation IDListEnvironments
TagsTopology Environments
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/environments

Create a new environment in the topology

PropertyValue
Operation IDCreateEnvironment
TagsTopology Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/environments/{id}

Return the standardized environment detail header for the specified environment ID, including its name, tier (dev/stage/prod), current active release, and promotion pipeline position. Used to populate the environment context in release dashboards.

PropertyValue
Operation IDEnvironmentsV2_Get
TagsEnvironments v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/environments/{id}/deployments

Return the deployment history for the specified environment ordered by deployment timestamp descending, including each release version, deployment status, and rollback availability. Used for environment-scoped audit and change management views.

PropertyValue
Operation IDEnvironmentsV2_Deployments
TagsEnvironments v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/environments/{id}/evidence

Return the evidence snapshot and export references for the specified environment, including the active attestation bundle, SBOM digest, scan result references, and the evidence locker ID for compliance archiving. Used for environment-level attestation workflows.

PropertyValue
Operation IDEnvironmentsV2_Evidence
TagsEnvironments v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/environments/{id}/name

Rename a environment

PropertyValue
Operation IDRenameEnvironment
TagsTopology Rename
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/environments/{id}/ops-health

Return the operational data-confidence and health signals for the specified environment, including scan data staleness, missing SBOM coverage, pipeline signal freshness, and any active incidents affecting the environment’s reliability score.

PropertyValue
Operation IDEnvironmentsV2_OpsHealth
TagsEnvironments v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/environments/{id}/readiness

Get readiness for all targets in an environment

PropertyValue
Operation IDGetEnvironmentReadiness
TagsTopology Readiness
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

POST /api/v1/environments/{id}/request-delete

Request deletion of a environment

PropertyValue
Operation IDRequestDeleteEnvironment
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/environments/{id}/security-snapshot

Return the current security posture snapshot for the specified environment, including reachability-adjusted critical and high finding counts, SBOM coverage, and the top-ranked risks by exploitability. Refreshed on each new deployment or scan cycle.

PropertyValue
Operation IDEnvironmentsV2_SecuritySnapshot
TagsEnvironments v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/infrastructure-bindings

List bindings by scope

PropertyValue
Operation IDListInfrastructureBindings
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scopeIdqueryno
scopeTypequeryyes

Responses:

StatusDescriptionContent types
200OKapplication/json

POST /api/v1/infrastructure-bindings

Bind an integration to a scope

PropertyValue
Operation IDCreateInfrastructureBinding
TagsInfrastructure Bindings
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
201Createdapplication/json

GET /api/v1/infrastructure-bindings/resolve

Resolve a binding with inheritance cascade

PropertyValue
Operation IDResolveInfrastructureBinding
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryyes
rolequeryyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

GET /api/v1/infrastructure-bindings/resolve-all

Resolve all binding roles with inheritance

PropertyValue
Operation IDResolveAllInfrastructureBindings
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryyes

Responses:

StatusDescriptionContent types
200OKapplication/json

DELETE /api/v1/infrastructure-bindings/{id}

Remove an infrastructure binding

PropertyValue
Operation IDDeleteInfrastructureBinding
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
204No Content-

POST /api/v1/infrastructure-bindings/{id}/test

Test binding connectivity

PropertyValue
Operation IDTestInfrastructureBinding
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

Fans out a discovery probe across all tenant-visible registry integrations to find which registries host the queried image repository. Returns per-(registry, repository) hits the operator can pin from in the component-add wizard.

PropertyValue
Operation IDIntegrations_RegistrySearch
TagsIntegrations
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
queryqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/integrations/{id}/request-delete

Request deletion of a integration

PropertyValue
Operation IDRequestDeleteIntegration
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/jobengine/audit/events

PropertyValue
Operation ID-
TagsJobEngine Legacy - Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
actorIdqueryno
cursorqueryno
endTimequeryno
eventTypequeryno
limitqueryno
resourceIdqueryno
resourceTypequeryno
startTimequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/dag

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/dag

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/dag/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/dag/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/dag/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/dag/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/deadletter

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/deadletter

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/deadletter/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/deadletter/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/deadletter/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/deadletter/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/jobs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - jobs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/jobs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - jobs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/jobs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - jobs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/jobs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - jobs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/jobs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - jobs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/jobs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - jobs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/pack-runs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/pack-runs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/pack-runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/pack-runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/pack-runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/pack-runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/quotas

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - quotas
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/quotas

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - quotas
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/quotas/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - quotas
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/quotas/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - quotas
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/quotas/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - quotas
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/quotas/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - quotas
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/runs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/runs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/runs/{runId}/first-signal

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
If-None-Matchheaderno
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - slos
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/slos

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - slos
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - slos
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/slos/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - slos
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/slos/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - slos
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/slos/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - slos
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/sources

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/sources

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/sources/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/sources/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/sources/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/sources/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/stream

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/stream

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/stream/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/stream/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/stream/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/stream/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/pending-deletions

List all pending deletions for the current tenant

PropertyValue
Operation IDListPendingDeletions
TagsTopology Deletion
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/v1/pending-deletions/{id}

Get pending deletion details with cascade summary

PropertyValue
Operation IDGetPendingDeletion
TagsTopology Deletion
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

POST /api/v1/pending-deletions/{id}/cancel

Cancel a pending deletion

PropertyValue
Operation IDCancelDeletion
TagsTopology Deletion
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
204No Content-

POST /api/v1/pending-deletions/{id}/confirm

Confirm a pending deletion after cool-off expires

PropertyValue
Operation IDConfirmDeletion
TagsTopology Deletion
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/regions

List all regions for the current tenant

PropertyValue
Operation IDListRegions
TagsRegions
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

POST /api/v1/regions

Create a new region

PropertyValue
Operation IDCreateRegion
TagsRegions
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
201Createdapplication/json

GET /api/v1/regions/{id}

Get a region by ID

PropertyValue
Operation IDGetRegion
TagsRegions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

PUT /api/v1/regions/{id}

Update a region

PropertyValue
Operation IDUpdateRegion
TagsRegions
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

DELETE /api/v1/regions/{id}

Delete a region

PropertyValue
Operation IDDeleteRegion
TagsRegions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
204No Content-

PATCH /api/v1/regions/{id}/name

Rename a region

PropertyValue
Operation IDRenameRegion
TagsTopology Rename
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

POST /api/v1/regions/{id}/request-delete

Request deletion of a region

PropertyValue
Operation IDRequestDeleteRegion
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/registry/cache/policies

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/registry/cache/policies

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/registry/cache/policies

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
repositoryqueryno
scopequeryno
tenantIdqueryno
upstreamSlugqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registry/cache/policies/effective

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
repositoryqueryno
tenantIdqueryno
upstreamSlugqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registry/cache/stats

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registry/upstreams

PropertyValue
Operation ID-
TagsRegistry Upstreams
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/registry/upstreams

PropertyValue
Operation ID-
TagsRegistry Upstreams
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/registry/upstreams

PropertyValue
Operation ID-
TagsRegistry Upstreams
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
slugqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registry/upstreams/effective

PropertyValue
Operation ID-
TagsRegistry Upstreams
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/access/effective

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryno
releaseIdqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/admin/secrets

PropertyValue
Operation ID-
TagsRelease Orchestrator Secret Admin
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/admin/tenants/{tenantId}/deployment-secret-mode

PropertyValue
Operation ID-
TagsRelease Orchestrator Tenant Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/admin/tenants/{tenantId}/deployment-secret-mode

PropertyValue
Operation ID-
TagsRelease Orchestrator Tenant Admin
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/admin/tenants/{tenantId}/deployment-secret-mode

PropertyValue
Operation ID-
TagsRelease Orchestrator Tenant Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agent-runtime/agents/{agentId}/heartbeat

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Runtime
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
agentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agent-runtime/agents/{agentId}/refresh-capabilities

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Runtime
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
agentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agent-runtime/agents/{agentId}/tasks/{taskId}/result

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Runtime
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
agentIdpathyes
taskIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agent-runtime/agents/{agentId}/tasks:poll

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Runtime
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
agentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/agents

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
capabilityqueryno
statusqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agents

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/agents/registration-tokens

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agents/registration-tokens

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/agents/registration-tokens/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/agents/{agentId}/targets

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
agentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/agents/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/agents/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
reasonqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agents/{id}/execute-capability

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agents/{id}/refresh-capabilities

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/approval-policies

List operator-managed promotion approval policies for the calling tenant.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
includeDisabledqueryno
namequeryno
releaseNamequeryno
sourceEnvironmentqueryno
targetEnvironmentqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approval-policies

Create an operator-managed promotion approval policy.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/approval-policies/{id}

Return a single promotion approval policy by id.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/approval-policies/{id}

Update an operator-managed promotion approval policy.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/approval-policies/{id}

Disable an approval policy while retaining it for audit replay.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/approvals

orchestrator.approval.list_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
statusesqueryno
urgenciesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/batch-approve

orchestrator.approval.create_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/batch-cancel

Cancel multiple open (pending or expired) approvals in one call — queue hygiene for stale or duplicate promotion requests. Approvals in any other state are skipped and reported back.

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/batch-reject

orchestrator.approval.cancel_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/developer-requests

Create a developer-originated service image update approval request.

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/approvals/{id}

orchestrator.approval.get_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/{id}/approve

orchestrator.approval.approve_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/{id}/reject

orchestrator.approval.reject_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit

orchestrator.audit.list_description

PropertyValue
Operation IDReleaseOrchestrator_ListAuditEntries
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
actorIdqueryno
cursorqueryno
endTimequeryno
eventTypequeryno
limitqueryno
resourceIdqueryno
resourceTypequeryno
startTimequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/latest

orchestrator.audit.get_latest_description

PropertyValue
Operation IDReleaseOrchestrator_GetLatestAuditEntry
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/resource/{resourceType}/{resourceId}

orchestrator.audit.get_resource_history_description

PropertyValue
Operation IDReleaseOrchestrator_GetResourceHistory
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
resourceIdpathyes
resourceTypepathyes
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/sequence/{startSeq}/{endSeq}

orchestrator.audit.get_by_sequence_description

PropertyValue
Operation IDReleaseOrchestrator_GetAuditBySequence
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
endSeqpathyes
startSeqpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/summary

orchestrator.audit.summary_description

PropertyValue
Operation IDReleaseOrchestrator_GetAuditSummary
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sincequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/verify

orchestrator.audit.verify_description

PropertyValue
Operation IDReleaseOrchestrator_VerifyAuditChain
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
deepqueryno
endSeqqueryno
startSeqqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/{entryId}

orchestrator.audit.get_description

PropertyValue
Operation IDReleaseOrchestrator_GetAuditEntry
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
entryIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/build-coproduction/reachability

Ingest an agent-computed reachability graph (canonical JSON + resultDigest + node/edge counts) from the live build context and, when it passes the stub guard, attach a source=build-context reachability referrer on the pushed digest.

PropertyValue
Operation IDBuildCoProduction_IngestReachability
TagsRelease Orchestrator Build Co-Production
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/build-coproduction/scm-info

Ingest a build.docker co-production signal (pushed digest + SCM provenance + emit flags) and, when requested with complete SCM info, publish ComponentVersionScmInfoAvailable to drive the central scanner.

PropertyValue
Operation IDBuildCoProduction_IngestScmInfo
TagsRelease Orchestrator Build Co-Production
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/dashboard

Return a consolidated release dashboard snapshot for the Console control plane, including pending approvals, active promotions, recent deployments, and environment health indicators. Used by the UI to populate the main release management view.

PropertyValue
Operation IDReleaseDashboard_Get
TagsReleaseDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
environmentsqueryno
pagequeryno
pageSizequeryno
releaseIdqueryno
releasesqueryno
sortFieldqueryno
sortOrderqueryno
statusqueryno
statusesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/bundle

PropertyValue
Operation ID-
TagsRelease Orchestrator Deployment Bundles
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
X-StellaOps-TenantIdheaderno
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/cancel

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/events

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/logs

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
levelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/metrics

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/pause

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/registry/content/{kind}/{digest}

PropertyValue
Operation ID-
TagsRelease Orchestrator Content By Digest
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
X-StellaOps-Deployment-Capabilityheaderno
X-StellaOps-TenantIdheaderno
digestpathyes
idpathyes
kindpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/registry/decision-referrers/{digest}

PropertyValue
Operation ID-
TagsRelease Orchestrator Content By Digest
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
X-StellaOps-Deployment-Capabilityheaderno
X-StellaOps-TenantIdheaderno
digestpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/resume

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/rollback

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/secrets/resolve

PropertyValue
Operation ID-
TagsRelease Orchestrator Deployment Secret Broker
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
X-StellaOps-TenantIdheaderno
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/share

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/shares

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/targets/{targetId}/logs

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes
levelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

The response body is { "entries": DeploymentLogEntry[] }. For real-engine terminal deployments, entries are persisted from the matched target task only: already-redacted stdout/stderr/output, or the allowlisted Compose execution facts (projectName, services, runtime verification, and completed phases). The route never synthesizes output for a task that returned none. targetId, level, and limit filters apply after tenant + deployment scoping.

POST /api/v1/release-orchestrator/deployments/{id}/targets/{targetId}/retry

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/by-name/{name}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
namepathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/policy-bindings

List operator-managed environment-to-policy-pack bindings for the calling tenant.

PropertyValue
Operation ID-
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
includeDisabledqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/reorder

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/reorder/validate

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/validate

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{environment}/policy-bindings

Return the environment policy binding for a single environment, if any.

PropertyValue
Operation ID-
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{environment}/policy-bindings

Insert or update the policy-pack binding for an environment (idempotent).

PropertyValue
Operation ID-
TagsEnvironment Policy Bindings
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{environment}/policy-bindings

Soft-delete the policy-pack binding for an environment (sets enabled=false).

PropertyValue
Operation ID-
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/access

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/access

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/access/effective

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/access/transfer

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{id}/access/{grantId}

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/freeze-windows

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows/active

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows/is-frozen

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows/is-frozen/{releaseBundleId}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
releaseBundleIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/next-promotion-target

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/protection

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}/protection

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}/settings

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/targets

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/targets

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/targets/by-name/{name}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
namepathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/targets/healthy

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/deviations

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/digest/{digest}

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
digestpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/drift

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/status

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence

Return a paginated list of evidence packets for the calling tenant, optionally filtered by release, type, and creation time window. Each packet includes its identifier, associated release, evidence type, content hash, and creation timestamp.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
pagequeryno
pageSizequeryno
releaseIdqueryno
searchqueryno
sortFieldqueryno
sortOrderqueryno
typequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/evidence

Submit a verified release evidence packet. The service recomputes the payload hash before storing the packet so promotion and deployment gates can rely on durable evidence truth.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence/{id}

Return the full evidence packet record for the specified ID including release association, evidence type, content hash, algorithm, size, and metadata. Returns 404 when the evidence packet does not exist in the tenant.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence/{id}/export

Export the specified evidence packet as a self-contained JSON bundle suitable for offline audit. The bundle includes the evidence metadata, content, and verification hashes.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence/{id}/raw

Download the raw binary content of the specified evidence packet. Returns the unprocessed evidence payload with Content-Type application/octet-stream. Returns 404 when the evidence packet does not exist.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence/{id}/timeline

Return the chronological event timeline for the specified evidence packet including creation, verification, export, and access events. Useful for audit trails and provenance tracking.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/evidence/{id}/verify

Verify the integrity of the specified evidence packet by recomputing and comparing its content hash. Returns the verification result including the computed hash, algorithm used, and whether the content matches the stored digest.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/execution-plugins

List built-in execution plugin adapters available to release targets.

PropertyValue
Operation IDExecutionPlugins_List
TagsExecution Plugins
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/freeze-window-exemptions/{exemptionId}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
exemptionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/freeze-windows/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/freeze-windows/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/freeze-windows/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/freeze-windows/{id}/exemptions

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/freeze-windows/{id}/exemptions

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/operator-decisions/prepare

Return the server-canonical operator-decision@v1 payload and DSSE PAE bytes for a release governance action.

PropertyValue
Operation ID-
TagsOperator Decisions
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/promotions/{id}/approve

Record an approval decision on the specified pending promotion request, allowing the associated release to advance to the next environment. The calling principal must hold the release approval scope. Returns 404 when the promotion ID does not exist.

PropertyValue
Operation IDReleaseDashboard_ApprovePromotion
TagsReleaseDashboard
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/promotions/{id}/reject

Record a rejection decision on the specified pending promotion request with an optional rejection reason, blocking the release from advancing. The calling principal must hold the release approval scope. Returns 404 when the promotion ID does not exist.

PropertyValue
Operation IDReleaseDashboard_RejectPromotion
TagsReleaseDashboard
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/release-environment-limit

Return the effective administrator release environment limit for the calling tenant. Stored settings override deployment configuration.

PropertyValue
Operation ID-
TagsRelease Environment Limits
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/release-environment-limit

Persist the administrator release environment allow-list for the calling tenant.

PropertyValue
Operation ID-
TagsRelease Environment Limits
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/release-impact

Return the tenant-scoped reverse release impact for a CVE or advisory identifier. The response contains currentImpact.releases, approvals, promotions, environments, gateVerdicts, reachableCves, and evidenceLinks, all sorted deterministically for FE diffing. Example response shape: { identifier, normalizedIdentifier, empty, currentImpact: { releases, approvals, promotions, environments, gateVerdicts, reachableCves, evidenceLinks }, timeline: { current, historical } }. timeline.current contains the current matching verdict rows; timeline.historical contains older matching gate-decision rows and does not contribute to currentImpact. Empty matches return 200 with empty=true and empty arrays; a missing identifier returns 400 identifier_required.

PropertyValue
Operation ID-
TagsRelease Impact
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
identifierqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases

Return a paginated list of releases for the calling tenant, optionally filtered by status, environment, project, and creation time window. Each release record includes its name, version, current status, component count, and lifecycle timestamps.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
accessqueryno
environmentqueryno
pagequeryno
pageSizequeryno
searchqueryno
sortFieldqueryno
sortOrderqueryno
statusesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases

Create a new release record in Draft state. The release captures an intent to promote a versioned set of components through defined environments. Returns 409 if a release with the same name and version already exists.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/activity

Return a paginated feed of release activities across all releases, optionally filtered by environment, outcome, and time window.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
limitqueryno
outcomequeryno
releaseIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/latest-by-name

Return the most recent release with the given name, including structured metadata for smart defaults when creating a new version. Used by the release creation wizard to auto-fill from the previous version.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
namequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/seal

Create or idempotently re-read a sealed release by aggregating release creation, component registration, ready transition, recorded seal evidence, approval gate truth, and deployment dispatch.

PropertyValue
Operation IDRelease_SealAggregate
TagsReleases
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/suggest-version

Suggest the next semantic version for a release name based on the latest existing version. Returns the suggested version string and the source release ID.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
currentVersionqueryno
namequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/versions

Return a filtered list of release versions, optionally filtered by gate status.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
gateStatusqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{id}

Return the full release record for the specified ID including name, version, status, component list, approval gate state, and event history summary. Returns 404 when the release does not exist in the tenant.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/releases/{id}

Permanently remove the specified release record. Only releases in Draft or Failed status can be deleted; returns 409 for releases in other states. All associated components and events are removed with the release record.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/release-orchestrator/releases/{id}

Update mutable metadata on the specified release including description, target environment, and custom labels. Status transitions must be performed through the dedicated lifecycle endpoints. Returns 404 when the release does not exist.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{id}/access

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/access

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{id}/access/effective

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/access/transfer

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/releases/{id}/access/{grantId}

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/clone

Create a new release by copying the components, labels, and target environment from the specified source release, applying a new name and version. The cloned release starts in Draft state and is independent of the source.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/deploy

Trigger deployment of the specified release to its current target environment. Deployment is orchestrated by the platform and may include pre-deployment checks, artifact staging, and post-deployment validation. Returns 409 if gates have not been satisfied.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
preflightOverrideJustificationqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/promote

Initiate the promotion workflow to advance the specified release to its next target environment, triggering policy gate evaluation. The promotion runs asynchronously; poll the release record or subscribe to events for outcome updates.

The target may be supplied as a legacy env-* alias, environment name, or UUID. When it resolves, the persisted approval uses the canonical environment name and its configured RequiredApprovals (minimum one). A positive requiredApprovals supplied by the evaluated gate/policy decision overrides that initial environment quorum. Unresolved legacy references retain the compatibility quorum of two.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/ready

Transition the specified release from Draft to Ready state, signalling that all components are assembled and the release is eligible for promotion gate evaluation. Returns 409 if the release is not in Draft state or required components are missing.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/rollback

Initiate a rollback of the specified deployed release to the previous stable version in the current environment. The rollback is audited and creates a new release event. Returns 409 if the release is not in Deployed state or no prior stable version exists.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{id}/updates

Return per-component version currency for the specified release: which components have a STRICTLY-NEWER version that the registry actually serves (never a guessed version/digest), which are up to date, and which could not be checked (registry unreachable/unresolved). Read-only — surfacing an update never deploys; the one-click draft rides the Editor-gated create-version endpoint referenced by each row’s actionEndpoint.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/versions/from-artifact-update

Create a new draft release version from an existing release when a component artifact digest changes. The new version copies source release metadata and components, replaces only the changed component digest/reference, and applies administrator environment scope limits.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/available-environments

Return the list of environment targets that the specified release can be promoted to from its current state, based on the configured promotion pipeline and the caller’s access rights. Returns 404 when the release does not exist.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/components

Return the list of components registered in the specified release including their artifact references, versions, content digests, and current deployment status. Returns 404 when the release does not exist.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{releaseId}/components

Register a new component in the specified release, supplying the artifact reference and content digest. Components must be added before the release is marked Ready. Returns 409 if a component with the same name is already registered.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/releases/{releaseId}/components/{componentId}

Remove the specified component from the release. Only permitted when the release is in Draft state; returns 409 for releases that are Ready or beyond. Returns 404 when the component or release does not exist in the tenant.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
componentIdpathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/release-orchestrator/releases/{releaseId}/components/{componentId}

Update the artifact reference, version, or content digest of the specified release component. Returns 404 when the component does not exist within the release or the release itself does not exist in the tenant.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentIdpathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{releaseId}/components/{componentName}/scan

Operator-triggered “scan now when unknown”: trigger a Scanner scan for the named release component (resolved to its pinned image reference + digest) so an absent/pending/failed SBOM-readiness gate can be satisfied. Requires scanner:scan + release:read.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentNamepathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/deploy-plan

Return the honest deployment strategy plan preview for the specified release into the given environment (?environmentId=) under a requested strategy (?strategy=rolling|canary|blue_green|all_at_once). The response mirrors the REAL strategy batching (phases: index + per-phase target count) plus the effective behaviour and honest caveats: single-target-collapse (with one target, canary/blue-green/rolling collapse to a single all-at-once deploy) and no-traffic-management (canary/blue-green do phased TARGET rollout, not traffic splitting; cutover is external). Unknown/unresolvable target count returns an honest cannot-preview, never a fabricated plan. Read-only — it never deploys.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
environmentIdqueryno
strategyqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/deploy-preflight

Return the pre-launch deployment readiness checklist for the specified release into the given environment (?environmentId=). Each row is tri-state (pass/fail/unknown); a fail carries the deployment failure anatomy (plain reason + action). armed is true iff no check hard-failed. Honest: unknown (a probe that could not determine the answer) is surfaced as a caution, never a false pass and never a lone blocker. Floor-independent preview — it never deploys.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
environmentIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/events

Return the chronological event log for the specified release including status transitions, gate evaluations, approval decisions, deployment actions, and rollback events. Useful for audit trails and post-incident analysis.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/promotion-preview

Evaluate and return the gate check results for the specified release’s next promotion without committing any state change. Returns the verdict for each configured policy gate so operators can assess promotion eligibility before triggering it.

The preview resolves targetEnvironmentId by environment UUID or name; when the query is omitted it uses the release’s configured target. targetEnvironment, requiredApprovers, and requiresHumanApproval come from that resolved environment so the preview matches the promotion contract. Unresolved legacy references retain the compatibility fallback (staging, two approvers).

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
targetEnvironmentIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/runs/{runId}/first-signal

orchestrator.first_signal.get_description

PropertyValue
Operation IDReleaseOrchestrator_GetFirstSignal
TagsRelease Orchestrator Runs
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
If-None-Matchheaderno
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/share/{grantId}

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/share/{grantId}

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/release-orchestrator/share/{grantId}

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/share/{grantId}/accept

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/share/{grantId}/approve

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/targets/validate

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/targets/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/targets/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/targets/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/targets/{id}/agent

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/targets/{id}/agent

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/targets/{id}/health

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/targets/{id}/health-check

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/targets

List targets

PropertyValue
Operation IDListTargets
TagsTopology Targets
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/targets

Create a new deployment target

PropertyValue
Operation IDCreateTarget
TagsTopology Targets
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/targets/{id}/assign-agent

Assign an agent to a target

PropertyValue
Operation IDAssignAgent
TagsTopology Targets
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/targets/{id}/name

Rename a target

PropertyValue
Operation IDRenameTarget
TagsTopology Rename
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/targets/{id}/readiness

Get latest readiness report for a target

PropertyValue
Operation IDGetTargetReadiness
TagsTopology Readiness
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

POST /api/v1/targets/{id}/request-delete

Request deletion of a target

PropertyValue
Operation IDRequestDeleteTarget
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

POST /api/v1/targets/{id}/validate

Run all readiness gates for a target

PropertyValue
Operation IDValidateTarget
TagsTopology Readiness
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/v2/scripts

List scripts with optional search, language, and visibility filters.

PropertyValue
Operation IDListScripts
TagsScriptsEndpoints
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts

Create a new script.

PropertyValue
Operation IDCreateScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts/validate

Validate script syntax without saving.

PropertyValue
Operation IDValidateScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{scriptId}

Get a single script by ID.

PropertyValue
Operation IDGetScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v2/scripts/{scriptId}

Delete a script.

PropertyValue
Operation IDDeleteScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v2/scripts/{scriptId}

Update an existing script.

PropertyValue
Operation IDUpdateScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts/{scriptId}/check-compatibility

Check script compatibility with a target environment.

PropertyValue
Operation IDCheckScriptCompatibility
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{scriptId}/versions

List all versions of a script.

PropertyValue
Operation IDListScriptVersions
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{scriptId}/versions/{version}/content

Get the content of a specific script version.

PropertyValue
Operation IDGetScriptVersionContent
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes
versionpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /buildinfo.json

Image build provenance (module, gitSha, gitCommitTime, imageBuiltAt, branch) for drift detection.

PropertyValue
Operation IDStellaOpsBuildInfoFile
TagsStellaOps.ReleaseOrchestrator.WebApi
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health/liveness

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health/readiness

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /internal/crypto/populations

PropertyValue
Operation IDROInternalGetCryptoPopulations
TagsInternalCrypto
AuthVerified Bearer or StellaRouterEnvelope: crypto:kek:read, crypto:kek:rotate, or ops.admin
Request body-

Parameters:

NameInRequiredDescription
kekIdqueryyes

Responses:

StatusDescriptionContent types
200OK-

POST /internal/crypto/reseal/start

PropertyValue
Operation IDROInternalStartCryptoReSeal
TagsInternalCrypto
AuthVerified Bearer or StellaRouterEnvelope: crypto:kek:rotate or ops.admin
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /internal/crypto/reseal/{rotationId}/abort

PropertyValue
Operation IDROInternalAbortCryptoReSeal
TagsInternalCrypto
AuthVerified Bearer or StellaRouterEnvelope: crypto:kek:rotate or ops.admin
Request body-

Parameters:

NameInRequiredDescription
rotationIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /internal/crypto/reseal/{rotationId}/progress

PropertyValue
Operation IDROInternalGetCryptoReSealProgress
TagsInternalCrypto
AuthVerified Bearer or StellaRouterEnvelope: crypto:kek:read, crypto:kek:rotate, or ops.admin
Request body-

Parameters:

NameInRequiredDescription
rotationIdpathyes

Responses:

StatusDescriptionContent types
200OK-