Release Orchestrator API Reference

FieldValue
Source specrelease-orchestrator/openapi/v1.json
OpenAPI version3.1.1
API version1.0.0
Operations386
Path filterAll paths

Operations

GET /api/release-orchestrator/access/effective

PropertyValue
Operation IDResourceAccess_EffectiveCombined
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryno
releaseIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/approval-policies

List operator-managed promotion approval policies for the calling tenant.

PropertyValue
Operation IDApprovalPolicy_List
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
includeDisabledqueryno
namequeryno
releaseNamequeryno
sourceEnvironmentqueryno
targetEnvironmentqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approval-policies

Create an operator-managed promotion approval policy.

PropertyValue
Operation IDApprovalPolicy_Create
TagsApproval Policies
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/approval-policies/{id}

Return a single promotion approval policy by id.

PropertyValue
Operation IDApprovalPolicy_Get
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/release-orchestrator/approval-policies/{id}

Update an operator-managed promotion approval policy.

PropertyValue
Operation IDApprovalPolicy_Update
TagsApproval Policies
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/approval-policies/{id}

Disable an approval policy while retaining it for audit replay.

PropertyValue
Operation IDApprovalPolicy_Delete
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/approvals

orchestrator.approval.list_description

PropertyValue
Operation IDApproval_List
TagsApprovals
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
statusesqueryno
urgenciesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/batch-approve

orchestrator.approval.create_description

PropertyValue
Operation IDApproval_BatchApprove
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/batch-cancel

Cancel multiple open (pending or expired) approvals in one call — queue hygiene for stale or duplicate promotion requests. Approvals in any other state are skipped and reported back.

PropertyValue
Operation IDApproval_BatchCancel
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/batch-reject

orchestrator.approval.cancel_description

PropertyValue
Operation IDApproval_BatchReject
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/developer-requests

Create a developer-originated service image update approval request.

PropertyValue
Operation IDApproval_CreateDeveloperUpdateRequest
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/approvals/{id}

orchestrator.approval.get_description

PropertyValue
Operation IDApproval_Get
TagsApprovals
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/{id}/approve

orchestrator.approval.approve_description

PropertyValue
Operation IDApproval_Approve
TagsApprovals
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/approvals/{id}/reject

orchestrator.approval.reject_description

PropertyValue
Operation IDApproval_Reject
TagsApprovals
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/dashboard

Return a consolidated release dashboard snapshot for the Console control plane, including pending approvals, active promotions, recent deployments, and environment health indicators. Used by the UI to populate the main release management view.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments

PropertyValue
Operation IDDeployment_List
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
candidateDigestqueryno
currentDigestqueryno
environmentqueryno
environmentsqueryno
initiatingDevelopersqueryno
pagequeryno
pageSizequeryno
releaseIdqueryno
releasesqueryno
serviceIdsqueryno
sortFieldqueryno
sortOrderqueryno
sourceTypesqueryno
statusqueryno
statusesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments

PropertyValue
Operation IDDeployment_Create
TagsDeployments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
409Conflictapplication/problem+json

GET /api/release-orchestrator/deployments/{id}

PropertyValue
Operation IDDeployment_Get
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/cancel

PropertyValue
Operation IDDeployment_Cancel
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/events

PropertyValue
Operation IDDeployment_GetEvents
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/logs

PropertyValue
Operation IDDeployment_GetLogs
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
levelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/metrics

PropertyValue
Operation IDDeployment_GetMetrics
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/pause

PropertyValue
Operation IDDeployment_Pause
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/resume

PropertyValue
Operation IDDeployment_Resume
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/rollback

PropertyValue
Operation IDDeployment_Rollback
TagsDeployments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/share

PropertyValue
Operation IDDeploymentShare_Create
TagsDeployment Share Grants
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/shares

PropertyValue
Operation IDDeploymentShare_List
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/deployments/{id}/targets/{targetId}/logs

PropertyValue
Operation IDDeployment_GetTargetLogs
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes
levelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/deployments/{id}/targets/{targetId}/retry

PropertyValue
Operation IDDeployment_RetryTarget
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/environments/policy-bindings

List operator-managed environment-to-policy-pack bindings for the calling tenant.

PropertyValue
Operation IDEnvironmentPolicyBinding_List
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
includeDisabledqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/environments/{environment}/policy-bindings

Return the environment policy binding for a single environment, if any.

PropertyValue
Operation IDEnvironmentPolicyBinding_Get
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/release-orchestrator/environments/{environment}/policy-bindings

Insert or update the policy-pack binding for an environment (idempotent).

PropertyValue
Operation IDEnvironmentPolicyBinding_Upsert
TagsEnvironment Policy Bindings
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/environments/{environment}/policy-bindings

Soft-delete the policy-pack binding for an environment (sets enabled=false).

PropertyValue
Operation IDEnvironmentPolicyBinding_Delete
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/environments/{id}/access

PropertyValue
Operation IDEnvironmentAccess_List
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/environments/{id}/access

PropertyValue
Operation IDEnvironmentAccess_Create
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/environments/{id}/access/effective

PropertyValue
Operation IDEnvironmentAccess_Effective
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/environments/{id}/access/transfer

PropertyValue
Operation IDEnvironmentAccess_Transfer
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/environments/{id}/access/{grantId}

PropertyValue
Operation IDEnvironmentAccess_Revoke
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence

Return a paginated list of evidence packets for the calling tenant, optionally filtered by release, type, and creation time window. Each packet includes its identifier, associated release, evidence type, content hash, and creation timestamp.

PropertyValue
Operation IDEvidence_List
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
pagequeryno
pageSizequeryno
releaseIdqueryno
searchqueryno
sortFieldqueryno
sortOrderqueryno
typequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/evidence

Submit a verified release evidence packet. The service recomputes the payload hash before storing the packet so promotion and deployment gates can rely on durable evidence truth.

PropertyValue
Operation IDEvidence_Create
TagsEvidence
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence/{id}

Return the full evidence packet record for the specified ID including release association, evidence type, content hash, algorithm, size, and metadata. Returns 404 when the evidence packet does not exist in the tenant.

PropertyValue
Operation IDEvidence_Get
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence/{id}/export

Export the specified evidence packet as a self-contained JSON bundle suitable for offline audit. The bundle includes the evidence metadata, content, and verification hashes.

PropertyValue
Operation IDEvidence_Export
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence/{id}/raw

Download the raw binary content of the specified evidence packet. Returns the unprocessed evidence payload with Content-Type application/octet-stream. Returns 404 when the evidence packet does not exist.

PropertyValue
Operation IDEvidence_DownloadRaw
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/evidence/{id}/timeline

Return the chronological event timeline for the specified evidence packet including creation, verification, export, and access events. Useful for audit trails and provenance tracking.

PropertyValue
Operation IDEvidence_Timeline
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/evidence/{id}/verify

Verify the integrity of the specified evidence packet by recomputing and comparing its content hash. Returns the verification result including the computed hash, algorithm used, and whether the content matches the stored digest.

PropertyValue
Operation IDEvidence_Verify
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/gate-decisions

List the replayable policy gate decisions for a release (required releaseId, optional targetEnvironment), most recent first, as { packId, version, subject } rows. Feeds the Verify “recent gate decisions” picker: each subject is composed server-side to exactly reproduce what the policy engine evaluated at decision time, and rows without a bound policy pack/version (seal, auto-approve, and pre-basis legacy decisions) are excluded because they cannot be replayed.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdqueryno
targetEnvironmentqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/operator-decisions/prepare

Return the server-canonical operator-decision@v1 payload and DSSE PAE bytes for a release governance action.

PropertyValue
Operation IDOperatorDecision_Prepare
TagsOperator Decisions
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/promotions/{id}/approve

Record an approval decision on the specified pending promotion request, allowing the associated release to advance to the next environment. The calling principal must hold the release approval scope. Returns 404 when the promotion ID does not exist.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/promotions/{id}/reject

Record a rejection decision on the specified pending promotion request with an optional rejection reason, blocking the release from advancing. The calling principal must hold the release approval scope. Returns 404 when the promotion ID does not exist.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/release-blockers

Return the current tenant’s bounded blocked/warned release projection from stored Release Orchestrator truth. Each item carries block-vs-warn consequence, stored fired rule/policy identity when recorded, stored remediation link or explicit not_recorded, and stored release ownership or explicit unassigned. The endpoint does not re-evaluate or search Policy.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/release-orchestrator/release-environment-limit

Return the effective administrator release environment limit for the calling tenant. Stored settings override deployment configuration.

PropertyValue
Operation IDReleaseEnvironmentLimit_Get
TagsRelease Environment Limits
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/release-orchestrator/release-environment-limit

Persist the administrator release environment allow-list for the calling tenant.

PropertyValue
Operation IDReleaseEnvironmentLimit_Update
TagsRelease Environment Limits
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/release-impact

Return the tenant-scoped reverse release impact for a CVE or advisory identifier. The response contains currentImpact.releases, approvals, promotions, environments, gateVerdicts, reachableCves, and evidenceLinks, all sorted deterministically for FE diffing. Example response shape: { identifier, normalizedIdentifier, empty, currentImpact: { releases, approvals, promotions, environments, gateVerdicts, reachableCves, evidenceLinks }, timeline: { current, historical } }. timeline.current contains the current matching verdict rows; timeline.historical contains older matching gate-decision rows and does not contribute to currentImpact. Empty matches return 200 with empty=true and empty arrays; a missing identifier returns 400 identifier_required.

PropertyValue
Operation IDReleaseImpact_Query
TagsRelease Impact
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
identifierqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases

Return a paginated list of releases for the calling tenant, optionally filtered by status, environment, project, and creation time window. Each release record includes its name, version, current status, component count, and lifecycle timestamps.

PropertyValue
Operation IDRelease_List
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
accessqueryno
environmentqueryno
pagequeryno
pageSizequeryno
searchqueryno
sortFieldqueryno
sortOrderqueryno
statusesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases

Create a new release record in Draft state. The release captures an intent to promote a versioned set of components through defined environments. Returns 409 if a release with the same name and version already exists.

PropertyValue
Operation IDRelease_Create
TagsReleases
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases-this-week

Return the current tenant’s bounded UTC calendar-week release rollup: shipped releases, currently blocked releases with stored gate/rule reasons where available, owner/team counts sourced only from persisted release ownership, and an eight-week chronological shipped trend sourced only from stored deployedAt timestamps. The effective upper bound is asOfUtc; future-dated rows are excluded even though the calendar window ends on the following Monday.

PropertyValue
Operation ID-
TagsReleaseDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/release-orchestrator/releases/activity

Return a paginated feed of release activities across all releases, optionally filtered by environment, outcome, and time window.

PropertyValue
Operation IDRelease_Activity
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
limitqueryno
outcomequeryno
releaseIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/latest-by-name

Return the most recent release with the given name, including structured metadata for smart defaults when creating a new version. Used by the release creation wizard to auto-fill from the previous version.

PropertyValue
Operation IDRelease_LatestByName
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
namequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/suggest-version

Suggest the next semantic version for a release name based on the latest existing version. Returns the suggested version string and the source release ID.

PropertyValue
Operation IDRelease_SuggestVersion
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
currentVersionqueryno
namequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/versions

Return a filtered list of release versions, optionally filtered by gate status.

PropertyValue
Operation IDRelease_Versions
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
gateStatusqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{id}

Return the full release record for the specified ID including name, version, status, component list, approval gate state, and event history summary. Returns 404 when the release does not exist in the tenant.

PropertyValue
Operation IDRelease_Get
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/releases/{id}

Permanently remove the specified release record. Only releases in Draft or Failed status can be deleted; returns 409 for releases in other states. All associated components and events are removed with the release record.

PropertyValue
Operation IDRelease_Delete
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/release-orchestrator/releases/{id}

Update mutable metadata on the specified release including description, target environment, and custom labels. Status transitions must be performed through the dedicated lifecycle endpoints. Returns 404 when the release does not exist.

PropertyValue
Operation IDRelease_Update
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{id}/access

PropertyValue
Operation IDReleaseAccess_List
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/access

PropertyValue
Operation IDReleaseAccess_Create
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{id}/access/effective

PropertyValue
Operation IDReleaseAccess_Effective
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/access/transfer

PropertyValue
Operation IDReleaseAccess_Transfer
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/releases/{id}/access/{grantId}

PropertyValue
Operation IDReleaseAccess_Revoke
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/clone

Create a new release by copying the components, labels, and target environment from the specified source release, applying a new name and version. The cloned release starts in Draft state and is independent of the source.

PropertyValue
Operation IDRelease_Clone
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/deploy

Trigger deployment of the specified release to its current target environment. The scanner-pass floor and pre-launch readiness checks are fail-closed; a hard preflight failure must be resolved and has no unsigned query-string override. Returns 409 if release truth has not been satisfied and 403 when a deploy-time floor or readiness check blocks.

PropertyValue
Operation IDRelease_Deploy
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/promote

Initiate the promotion workflow to advance the specified release to its next target environment, triggering policy gate evaluation. The promotion runs asynchronously; poll the release record or subscribe to events for outcome updates.

PropertyValue
Operation IDRelease_Promote
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/ready

Transition the specified release from Draft to Ready state, signalling that all components are assembled and the release is eligible for promotion gate evaluation. Returns 409 if the release is not in Draft state or required components are missing.

PropertyValue
Operation IDRelease_MarkReady
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/rollback

Initiate a rollback of the specified deployed release to the previous stable version in the current environment. The rollback is audited and creates a new release event. Returns 409 if the release is not in Deployed state or no prior stable version exists.

PropertyValue
Operation IDRelease_Rollback
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{id}/updates

Return per-component version currency for the specified release: which components have a STRICTLY-NEWER version that the registry actually serves (never a guessed version/digest), which are up to date, and which could not be checked (registry unreachable/unresolved). Read-only — surfacing an update never deploys; the one-click draft rides the Editor-gated create-version endpoint referenced by each row’s actionEndpoint.

PropertyValue
Operation IDRelease_Updates
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{id}/versions/from-artifact-update

Create a new draft release version from an existing release when a component artifact digest changes. The new version copies source release metadata and components, replaces only the changed component digest/reference, and applies administrator environment scope limits.

PropertyValue
Operation IDRelease_CreateVersionFromArtifactUpdate
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/components

Return tenant-owned release components with artifact references, versions, persisted content digests, and nullable persisted package PURL/ecosystem metadata. Returns 404 when the release does not exist in the caller’s tenant.

PropertyValue
Operation IDRelease_GetComponents
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

POST /api/release-orchestrator/releases/{releaseId}/components

Register a new component in the specified release, supplying the artifact reference and content digest. Components must be added before the release is marked Ready. Returns 409 if a component with the same name is already registered.

PropertyValue
Operation IDRelease_AddComponent
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/releases/{releaseId}/components/{componentId}

Remove the specified component from the release. Only permitted when the release is in Draft state; returns 409 for releases that are Ready or beyond. Returns 404 when the component or release does not exist in the tenant.

PropertyValue
Operation IDRelease_RemoveComponent
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
componentIdpathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/release-orchestrator/releases/{releaseId}/components/{componentId}

Update the artifact reference, version, or content digest of the specified release component. Returns 404 when the component does not exist within the release or the release itself does not exist in the tenant.

PropertyValue
Operation IDRelease_UpdateComponent
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentIdpathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/releases/{releaseId}/components/{componentName}/scan

Operator-triggered “scan now when unknown”: trigger a Scanner scan for the named release component (resolved to its pinned image reference + digest) so an absent/pending/failed SBOM-readiness gate can be satisfied. Requires scanner:scan + release:read.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentNamepathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/deploy-plan

Return the honest deployment strategy plan preview for the specified release into the given environment (?environmentId=) under a requested strategy (?strategy=rolling|canary|blue_green|all_at_once). The response mirrors the REAL strategy batching (phases: index + per-phase target count) plus the effective behaviour and honest caveats: single-target-collapse (with one target, canary/blue-green/rolling collapse to a single all-at-once deploy) and no-traffic-management (canary/blue-green do phased TARGET rollout, not traffic splitting; cutover is external). Unknown/unresolvable target count returns an honest cannot-preview, never a fabricated plan. Read-only — it never deploys.

PropertyValue
Operation IDRelease_DeployPlan
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
environmentIdqueryno
strategyqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/deploy-preflight

Return the pre-launch deployment readiness checklist for the specified release into the given environment (?environmentId=). Each row is tri-state (pass/fail/unknown); a fail carries the deployment failure anatomy (plain reason + action). armed is true iff no check hard-failed. Honest: unknown (a probe that could not determine the answer) is surfaced as a caution, never a false pass and never a lone blocker. Floor-independent preview — it never deploys.

PropertyValue
Operation IDRelease_DeployPreflight
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
environmentIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/releases/{releaseId}/events

Return the chronological event log for the specified release including status transitions, gate evaluations, approval decisions, deployment actions, and rollback events. Useful for audit trails and post-incident analysis.

PropertyValue
Operation IDRelease_GetEvents
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/release-orchestrator/share/{grantId}

PropertyValue
Operation IDDeploymentShare_Get
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/release-orchestrator/share/{grantId}

PropertyValue
Operation IDDeploymentShare_Revoke
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/release-orchestrator/share/{grantId}

PropertyValue
Operation IDDeploymentShare_Patch
TagsDeployment Share Grants
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/share/{grantId}/accept

PropertyValue
Operation IDDeploymentShare_Accept
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/release-orchestrator/share/{grantId}/approve

PropertyValue
Operation IDDeploymentShare_Approve
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/agents

List available agents

PropertyValue
Operation IDListAgents
TagsTopology Agents
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/agents/{id}/request-delete

Request deletion of a agent

PropertyValue
Operation IDRequestDeleteAgent
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/approvals

Return the v2 approval queue for the calling tenant, including per-request digest confidence, reachability-weighted risk score, and ops-data integrity score. Optionally filtered by status and target environment. Designed for the enhanced approval UX.

PropertyValue
Operation IDApprovalsV2_List
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
statusqueryno
targetEnvironmentqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}

Return the v2 decision packet for the specified approval, including the full policy gate evaluation trace, reachability-adjusted finding counts, confidence bands, and all structured evidence references required to make an informed approval decision.

PropertyValue
Operation IDApprovalsV2_Get
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/approvals/{id}/decision

Apply a structured decision action (approve, reject, defer, escalate) to the specified v2 approval, attributing the decision to the calling principal with an optional comment. Returns 409 if the approval is not in a state that accepts decisions.

PropertyValue
Operation IDApprovalsV2_Decision
TagsApprovals v2
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/evidence

Return the structured evidence reference set attached to the specified v2 approval decision packet, including SBOM digests, attestation references, scan results, and provenance records. Used to verify the completeness of the evidence chain before approving.

PropertyValue
Operation IDApprovalsV2_Evidence
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/approvals/{id}/gate-exception

Override (bypass) a transition-blocking release gate result via a signed, audited gate exception. This includes failed/denied rows and advisory/skipped rows that do not prove completed gate truth. Requires the dedicated release:gate-bypass scope and a verified operator decision envelope (DSSE) signed with the operator’s platform key, plus a justification and an explicit risk acknowledgement. The targeted gate is flipped to a non-blocking EXCEPTION state so the promotion can be approved; it does NOT auto-approve. 403 without the scope or a valid signature; 404 if the gate is unknown; 409 if the gate is already satisfied or excepted; 503 with the required setting names when operator signing is not configured.

PropertyValue
Operation IDApprovalsV2_GateException
TagsApprovals v2
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/approvals/{id}/gates

Return the detailed gate evaluation trace for the specified v2 approval, showing each policy gate’s inputs, computed verdict, confidence weight, and any override history. Used by approvers to understand the basis for automated gate results.

PropertyValue
Operation IDApprovalsV2_Gates
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/ops-health

Return the operational data-integrity confidence indicators for the specified approval, including staleness of scan data, missing coverage gaps, and pipeline signal freshness. Low confidence scores reduce the defensibility of approval decisions.

PropertyValue
Operation IDApprovalsV2_OpsHealth
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/replay

Return deterministic replay status for the specified approval decision packet, including the decision digest and replay log reference used by the approval detail UI.

PropertyValue
Operation IDApprovalsV2_Replay
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/approvals/{id}/security-snapshot

Return the security snapshot computed for the specified approval context, including reachability-adjusted critical and high finding counts (CritR, HighR), SBOM coverage percentage, and the weighted risk score used in the approval decision packet.

PropertyValue
Operation IDApprovalsV2_SecuritySnapshot
TagsApprovals v2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/buildinfo

API alias for /buildinfo.json (same payload).

PropertyValue
Operation IDStellaOpsBuildInfoApi
TagsStellaOps.ReleaseOrchestrator.WebApi
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/components

List tenant-scoped release components.

PropertyValue
Operation IDComponents_List
TagsComponents
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
searchqueryno
statusqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/components

Create a tenant-scoped release component bound to a registry integration and image repository.

PropertyValue
Operation IDComponents_Create
TagsComponents
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/components/{componentId}/versions/{versionId}

Update SCM provenance fields for a digest-pinned component version.

PropertyValue
Operation IDComponents_UpdateVersionScm
TagsComponents
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentIdpathyes
versionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/components/{id}

Get one tenant-scoped release component.

PropertyValue
Operation IDComponents_Get
TagsComponents
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/components/{id}

Retire a component without deleting historical versions.

PropertyValue
Operation IDComponents_Retire
TagsComponents
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/components/{id}

Update mutable component registry metadata.

PropertyValue
Operation IDComponents_Update
TagsComponents
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/components/{id}/sync-versions

Resolve repository tags to immutable digests and upsert component version-map rows.

PropertyValue
Operation IDComponents_SyncVersions
TagsComponents
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/components/{id}/versions

List recorded component versions.

PropertyValue
Operation IDComponents_ListVersions
TagsComponents
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
channelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/environments

List environments

PropertyValue
Operation IDListEnvironments
TagsTopology Environments
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/environments

Create a new environment in the topology

PropertyValue
Operation IDCreateEnvironment
TagsTopology Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/environments/{id}/name

Rename a environment

PropertyValue
Operation IDRenameEnvironment
TagsTopology Rename
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/environments/{id}/readiness

Get readiness for all targets in an environment

PropertyValue
Operation IDGetEnvironmentReadiness
TagsTopology Readiness
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

POST /api/v1/environments/{id}/request-delete

Request deletion of a environment

PropertyValue
Operation IDRequestDeleteEnvironment
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/infrastructure-bindings

List bindings by scope

PropertyValue
Operation IDListInfrastructureBindings
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scopeIdqueryno
scopeTypequeryyes

Responses:

StatusDescriptionContent types
200OKapplication/json

POST /api/v1/infrastructure-bindings

Bind an integration to a scope

PropertyValue
Operation IDCreateInfrastructureBinding
TagsInfrastructure Bindings
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
201Createdapplication/json

GET /api/v1/infrastructure-bindings/resolve

Resolve a binding with inheritance cascade

PropertyValue
Operation IDResolveInfrastructureBinding
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryyes
rolequeryyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

GET /api/v1/infrastructure-bindings/resolve-all

Resolve all binding roles with inheritance

PropertyValue
Operation IDResolveAllInfrastructureBindings
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryyes

Responses:

StatusDescriptionContent types
200OKapplication/json

DELETE /api/v1/infrastructure-bindings/{id}

Remove an infrastructure binding

PropertyValue
Operation IDDeleteInfrastructureBinding
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
204No Content-

POST /api/v1/infrastructure-bindings/{id}/test

Test binding connectivity

PropertyValue
Operation IDTestInfrastructureBinding
TagsInfrastructure Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

Fans out a discovery probe across all tenant-visible registry integrations to find which registries host the queried image repository. Returns per-(registry, repository) hits the operator can pin from in the component-add wizard.

PropertyValue
Operation IDIntegrations_RegistrySearch
TagsIntegrations
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
queryqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/integrations/{id}/request-delete

Request deletion of a integration

PropertyValue
Operation IDRequestDeleteIntegration
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/jobengine/audit/events

PropertyValue
Operation ID-
TagsJobEngine Legacy - Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
actorIdqueryno
cursorqueryno
endTimequeryno
eventTypequeryno
limitqueryno
resourceIdqueryno
resourceTypequeryno
startTimequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/dag

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/dag

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/dag/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/dag/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/dag/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/dag/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - dag
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/deadletter

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/deadletter

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/deadletter/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/deadletter/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/deadletter/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/deadletter/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - deadletter
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/pack-runs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/pack-runs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/pack-runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/pack-runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/pack-runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/pack-runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - pack-runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/runs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/runs

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/runs/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/runs/{runId}/first-signal

PropertyValue
Operation ID-
TagsJobEngine Legacy - Runs
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
If-None-Matchheaderno
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos

SLO definitions — empty until an SLO store is wired.

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/slos

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/alerts

SLO alerts — empty until an alerting engine is wired.

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/states

SLO states — empty until an SLO store is wired.

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/summary

SLO health summary — zero objectives until an SLO service is wired.

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/slos/{rest}

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/slos/{rest}

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/slos/{rest}

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/{sloId}

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/{sloId}/forecast

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/{sloId}/history

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/{sloId}/state

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/slos/{sloId}/thresholds

SLO alert thresholds — empty until an SLO store is wired.

PropertyValue
Operation ID-
TagsJobEngine Legacy - SLOs
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sloIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/sources

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/sources

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/sources/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/sources/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/sources/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/sources/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - sources
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/stream

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/stream

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/stream/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/jobengine/stream/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/jobengine/stream/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/jobengine/stream/{rest}

Legacy jobengine compatibility endpoint - feature pending migration.

PropertyValue
Operation ID-
TagsJobEngine Legacy - stream
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/pending-deletions

List all pending deletions for the current tenant

PropertyValue
Operation IDListPendingDeletions
TagsTopology Deletion
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/v1/pending-deletions/{id}

Get pending deletion details with cascade summary

PropertyValue
Operation IDGetPendingDeletion
TagsTopology Deletion
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

POST /api/v1/pending-deletions/{id}/cancel

Cancel a pending deletion

PropertyValue
Operation IDCancelDeletion
TagsTopology Deletion
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
204No Content-

POST /api/v1/pending-deletions/{id}/confirm

Confirm a pending deletion after cool-off expires

PropertyValue
Operation IDConfirmDeletion
TagsTopology Deletion
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/regions

List all regions for the current tenant

PropertyValue
Operation IDListRegions
TagsRegions
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

POST /api/v1/regions

Create a new region

PropertyValue
Operation IDCreateRegion
TagsRegions
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
201Createdapplication/json

GET /api/v1/regions/{id}

Get a region by ID

PropertyValue
Operation IDGetRegion
TagsRegions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

PUT /api/v1/regions/{id}

Update a region

PropertyValue
Operation IDUpdateRegion
TagsRegions
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

DELETE /api/v1/regions/{id}

Delete a region

PropertyValue
Operation IDDeleteRegion
TagsRegions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
204No Content-

PATCH /api/v1/regions/{id}/name

Rename a region

PropertyValue
Operation IDRenameRegion
TagsTopology Rename
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

POST /api/v1/regions/{id}/request-delete

Request deletion of a region

PropertyValue
Operation IDRequestDeleteRegion
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/registry/cache/policies

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/registry/cache/policies

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/registry/cache/policies

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
repositoryqueryno
scopequeryno
tenantIdqueryno
upstreamSlugqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registry/cache/policies/effective

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
repositoryqueryno
tenantIdqueryno
upstreamSlugqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registry/cache/stats

PropertyValue
Operation ID-
TagsRegistry Cache
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registry/upstreams

PropertyValue
Operation ID-
TagsRegistry Upstreams
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/registry/upstreams

PropertyValue
Operation ID-
TagsRegistry Upstreams
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/registry/upstreams

PropertyValue
Operation ID-
TagsRegistry Upstreams
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
slugqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registry/upstreams/effective

PropertyValue
Operation ID-
TagsRegistry Upstreams
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/access/effective

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryno
releaseIdqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/admin/secrets

PropertyValue
Operation ID-
TagsRelease Orchestrator Secret Admin
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/admin/tenants/{tenantId}/deployment-secret-mode

PropertyValue
Operation ID-
TagsRelease Orchestrator Tenant Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/admin/tenants/{tenantId}/deployment-secret-mode

PropertyValue
Operation ID-
TagsRelease Orchestrator Tenant Admin
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/admin/tenants/{tenantId}/deployment-secret-mode

PropertyValue
Operation ID-
TagsRelease Orchestrator Tenant Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agent-runtime/agents/{agentId}/heartbeat

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Runtime
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
agentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agent-runtime/agents/{agentId}/refresh-capabilities

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Runtime
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
agentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agent-runtime/agents/{agentId}/tasks/{taskId}/result

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Runtime
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
agentIdpathyes
taskIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agent-runtime/agents/{agentId}/tasks:poll

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Runtime
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
agentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/agents

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
capabilityqueryno
statusqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agents

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/agents/registration-tokens

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agents/registration-tokens

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/agents/registration-tokens/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/agents/{agentId}/targets

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
agentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/agents/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/agents/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
reasonqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agents/{id}/execute-capability

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/agents/{id}/refresh-capabilities

PropertyValue
Operation ID-
TagsRelease Orchestrator Agent Registration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/approval-policies

List operator-managed promotion approval policies for the calling tenant.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
includeDisabledqueryno
namequeryno
releaseNamequeryno
sourceEnvironmentqueryno
targetEnvironmentqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approval-policies

Create an operator-managed promotion approval policy.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/approval-policies/{id}

Return a single promotion approval policy by id.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/approval-policies/{id}

Update an operator-managed promotion approval policy.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/approval-policies/{id}

Disable an approval policy while retaining it for audit replay.

PropertyValue
Operation ID-
TagsApproval Policies
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/approvals

orchestrator.approval.list_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
statusesqueryno
urgenciesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/batch-approve

orchestrator.approval.create_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/batch-cancel

Cancel multiple open (pending or expired) approvals in one call — queue hygiene for stale or duplicate promotion requests. Approvals in any other state are skipped and reported back.

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/batch-reject

orchestrator.approval.cancel_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/developer-requests

Create a developer-originated service image update approval request.

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/approvals/{id}

orchestrator.approval.get_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/{id}/approve

orchestrator.approval.approve_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/approvals/{id}/reject

orchestrator.approval.reject_description

PropertyValue
Operation ID-
TagsApprovals
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit

orchestrator.audit.list_description

PropertyValue
Operation IDReleaseOrchestrator_ListAuditEntries
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
actorIdqueryno
cursorqueryno
endTimequeryno
eventTypequeryno
limitqueryno
resourceIdqueryno
resourceTypequeryno
startTimequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/latest

orchestrator.audit.get_latest_description

PropertyValue
Operation IDReleaseOrchestrator_GetLatestAuditEntry
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/resource/{resourceType}/{resourceId}

orchestrator.audit.get_resource_history_description

PropertyValue
Operation IDReleaseOrchestrator_GetResourceHistory
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
resourceIdpathyes
resourceTypepathyes
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/sequence/{startSeq}/{endSeq}

orchestrator.audit.get_by_sequence_description

PropertyValue
Operation IDReleaseOrchestrator_GetAuditBySequence
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
endSeqpathyes
startSeqpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/summary

orchestrator.audit.summary_description

PropertyValue
Operation IDReleaseOrchestrator_GetAuditSummary
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sincequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/verify

orchestrator.audit.verify_description

PropertyValue
Operation IDReleaseOrchestrator_VerifyAuditChain
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
deepqueryno
endSeqqueryno
startSeqqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/audit/{entryId}

orchestrator.audit.get_description

PropertyValue
Operation IDReleaseOrchestrator_GetAuditEntry
TagsRelease Orchestrator Audit
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
entryIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/build-coproduction/reachability

Ingest an agent-computed reachability graph (canonical JSON + resultDigest + node/edge counts) from the live build context and, when it passes the stub guard, attach a source=build-context reachability referrer on the pushed digest.

PropertyValue
Operation IDBuildCoProduction_IngestReachability
TagsRelease Orchestrator Build Co-Production
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/build-coproduction/scm-info

Ingest a build.docker co-production signal (pushed digest + SCM provenance + emit flags) and, when requested with complete SCM info, publish ComponentVersionScmInfoAvailable to drive the central scanner.

PropertyValue
Operation IDBuildCoProduction_IngestScmInfo
TagsRelease Orchestrator Build Co-Production
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/dashboard

Return a consolidated release dashboard snapshot for the Console control plane, including pending approvals, active promotions, recent deployments, and environment health indicators. Used by the UI to populate the main release management view.

PropertyValue
Operation IDReleaseDashboard_Get
TagsReleaseDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
candidateDigestqueryno
currentDigestqueryno
environmentqueryno
environmentsqueryno
initiatingDevelopersqueryno
pagequeryno
pageSizequeryno
releaseIdqueryno
releasesqueryno
serviceIdsqueryno
sortFieldqueryno
sortOrderqueryno
sourceTypesqueryno
statusqueryno
statusesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
409Conflictapplication/problem+json

GET /api/v1/release-orchestrator/deployments/{id}

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/bundle

PropertyValue
Operation ID-
TagsRelease Orchestrator Deployment Bundles
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
X-StellaOps-TenantIdheaderno
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/cancel

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/events

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/logs

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
levelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/metrics

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/pause

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/registry/content/{kind}/{digest}

PropertyValue
Operation ID-
TagsRelease Orchestrator Content By Digest
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
X-StellaOps-Deployment-Capabilityheaderno
X-StellaOps-TenantIdheaderno
digestpathyes
idpathyes
kindpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/registry/decision-referrers/{digest}

PropertyValue
Operation ID-
TagsRelease Orchestrator Content By Digest
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
X-StellaOps-Deployment-Capabilityheaderno
X-StellaOps-TenantIdheaderno
digestpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/resume

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/rollback

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/secrets/resolve

PropertyValue
Operation ID-
TagsRelease Orchestrator Deployment Secret Broker
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
X-StellaOps-TenantIdheaderno
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/share

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/shares

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/deployments/{id}/targets/{targetId}/logs

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes
levelqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/deployments/{id}/targets/{targetId}/retry

PropertyValue
Operation ID-
TagsDeployments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
lifecyclequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/by-name/{name}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
namepathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/operational-truth

Get aggregate readiness and protection truth for every environment

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/policy-bindings

List operator-managed environment-to-policy-pack bindings for the calling tenant.

PropertyValue
Operation ID-
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
includeDisabledqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/readiness/validate-all

Validate readiness for every target and return partial-safe counts

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/reorder

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/reorder/validate

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/validate

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{environment}/policy-bindings

Return the environment policy binding for a single environment, if any.

PropertyValue
Operation ID-
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{environment}/policy-bindings

Insert or update the policy-pack binding for an environment (idempotent).

PropertyValue
Operation ID-
TagsEnvironment Policy Bindings
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{environment}/policy-bindings

Soft-delete the policy-pack binding for an environment (sets enabled=false).

PropertyValue
Operation ID-
TagsEnvironment Policy Bindings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/access

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/access

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/access/effective

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/access/transfer

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{id}/access/{grantId}

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/freeze-windows

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows/active

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows/is-frozen

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows/is-frozen/{releaseBundleId}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
releaseBundleIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}/lifecycle

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/next-promotion-target

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/protection

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}/protection

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}/settings

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/targets

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
lifecyclequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/targets

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/targets/by-name/{name}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
namepathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/targets/healthy

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/deviations

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/digest/{digest}

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
digestpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/drift

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/status

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/estate/unproven-cells

PropertyValue
Operation ID-
TagsRelease Orchestrator Estate
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence

Return a paginated list of evidence packets for the calling tenant, optionally filtered by release, type, and creation time window. Each packet includes its identifier, associated release, evidence type, content hash, and creation timestamp.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
pagequeryno
pageSizequeryno
releaseIdqueryno
searchqueryno
sortFieldqueryno
sortOrderqueryno
typequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/evidence

Submit a verified release evidence packet. The service recomputes the payload hash before storing the packet so promotion and deployment gates can rely on durable evidence truth.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence/{id}

Return the full evidence packet record for the specified ID including release association, evidence type, content hash, algorithm, size, and metadata. Returns 404 when the evidence packet does not exist in the tenant.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence/{id}/export

Export the specified evidence packet as a self-contained JSON bundle suitable for offline audit. The bundle includes the evidence metadata, content, and verification hashes.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence/{id}/raw

Download the raw binary content of the specified evidence packet. Returns the unprocessed evidence payload with Content-Type application/octet-stream. Returns 404 when the evidence packet does not exist.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/evidence/{id}/timeline

Return the chronological event timeline for the specified evidence packet including creation, verification, export, and access events. Useful for audit trails and provenance tracking.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/evidence/{id}/verify

Verify the integrity of the specified evidence packet by recomputing and comparing its content hash. Returns the verification result including the computed hash, algorithm used, and whether the content matches the stored digest.

PropertyValue
Operation ID-
TagsEvidence
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/execution-plugins

List built-in execution plugin adapters available to release targets.

PropertyValue
Operation IDExecutionPlugins_List
TagsExecution Plugins
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/freeze-window-exemptions/{exemptionId}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
exemptionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/freeze-windows/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/freeze-windows/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/freeze-windows/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/freeze-windows/{id}/exemptions

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/freeze-windows/{id}/exemptions

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/gate-decisions

List the replayable policy gate decisions for a release (required releaseId, optional targetEnvironment), most recent first, as { packId, version, subject } rows. Feeds the Verify “recent gate decisions” picker: each subject is composed server-side to exactly reproduce what the policy engine evaluated at decision time, and rows without a bound policy pack/version (seal, auto-approve, and pre-basis legacy decisions) are excluded because they cannot be replayed.

PropertyValue
Operation IDReleaseDashboard_GateDecisions
TagsReleaseDashboard
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdqueryno
targetEnvironmentqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/operator-decisions/prepare

Return the server-canonical operator-decision@v1 payload and DSSE PAE bytes for a release governance action.

PropertyValue
Operation ID-
TagsOperator Decisions
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/promotions/{id}/approve

Record an approval decision on the specified pending promotion request, allowing the associated release to advance to the next environment. The calling principal must hold the release approval scope. Returns 404 when the promotion ID does not exist.

PropertyValue
Operation IDReleaseDashboard_ApprovePromotion
TagsReleaseDashboard
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/promotions/{id}/reject

Record a rejection decision on the specified pending promotion request with an optional rejection reason, blocking the release from advancing. The calling principal must hold the release approval scope. Returns 404 when the promotion ID does not exist.

PropertyValue
Operation IDReleaseDashboard_RejectPromotion
TagsReleaseDashboard
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/release-blockers

Return the current tenant’s bounded blocked/warned release projection from stored Release Orchestrator truth. Each item carries block-vs-warn consequence, stored fired rule/policy identity when recorded, stored remediation link or explicit not_recorded, and stored release ownership or explicit unassigned. The endpoint does not re-evaluate or search Policy.

PropertyValue
Operation IDReleaseDashboard_ReleaseBlockers
TagsReleaseDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/v1/release-orchestrator/release-environment-limit

Return the effective administrator release environment limit for the calling tenant. Stored settings override deployment configuration.

PropertyValue
Operation ID-
TagsRelease Environment Limits
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/release-environment-limit

Persist the administrator release environment allow-list for the calling tenant.

PropertyValue
Operation ID-
TagsRelease Environment Limits
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/release-impact

Return the tenant-scoped reverse release impact for a CVE or advisory identifier. The response contains currentImpact.releases, approvals, promotions, environments, gateVerdicts, reachableCves, and evidenceLinks, all sorted deterministically for FE diffing. Example response shape: { identifier, normalizedIdentifier, empty, currentImpact: { releases, approvals, promotions, environments, gateVerdicts, reachableCves, evidenceLinks }, timeline: { current, historical } }. timeline.current contains the current matching verdict rows; timeline.historical contains older matching gate-decision rows and does not contribute to currentImpact. Empty matches return 200 with empty=true and empty arrays; a missing identifier returns 400 identifier_required.

PropertyValue
Operation ID-
TagsRelease Impact
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
identifierqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases

Return a paginated list of releases for the calling tenant, optionally filtered by status, environment, project, and creation time window. Each release record includes its name, version, current status, component count, and lifecycle timestamps.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
accessqueryno
environmentqueryno
pagequeryno
pageSizequeryno
searchqueryno
sortFieldqueryno
sortOrderqueryno
statusesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases

Create a new release record in Draft state. The release captures an intent to promote a versioned set of components through defined environments. Returns 409 if a release with the same name and version already exists.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases-this-week

Return the current tenant’s bounded UTC calendar-week release rollup: shipped releases, currently blocked releases with stored gate/rule reasons where available, owner/team counts sourced only from persisted release ownership, and an eight-week chronological shipped trend sourced only from stored deployedAt timestamps. The effective upper bound is asOfUtc; future-dated rows are excluded even though the calendar window ends on the following Monday.

PropertyValue
Operation IDReleaseDashboard_ReleasesThisWeek
TagsReleaseDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/v1/release-orchestrator/releases/activity

Return a paginated feed of release activities across all releases, optionally filtered by environment, outcome, and time window.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentqueryno
limitqueryno
outcomequeryno
releaseIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/latest-by-name

Return the most recent release with the given name, including structured metadata for smart defaults when creating a new version. Used by the release creation wizard to auto-fill from the previous version.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
namequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/seal

Create or idempotently re-read a sealed release by aggregating release creation, component registration, ready transition, recorded seal evidence, approval gate truth, and deployment dispatch.

PropertyValue
Operation IDRelease_SealAggregate
TagsReleases
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/suggest-version

Suggest the next semantic version for a release name based on the latest existing version. Returns the suggested version string and the source release ID.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
currentVersionqueryno
namequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/versions

Return a filtered list of release versions, optionally filtered by gate status.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
gateStatusqueryno
limitqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{id}

Return the full release record for the specified ID including name, version, status, component list, approval gate state, and event history summary. Returns 404 when the release does not exist in the tenant.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/releases/{id}

Permanently remove the specified release record. Only releases in Draft or Failed status can be deleted; returns 409 for releases in other states. All associated components and events are removed with the release record.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/release-orchestrator/releases/{id}

Update mutable metadata on the specified release including description, target environment, and custom labels. Status transitions must be performed through the dedicated lifecycle endpoints. Returns 404 when the release does not exist.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{id}/access

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/access

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{id}/access/effective

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/access/transfer

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/releases/{id}/access/{grantId}

PropertyValue
Operation ID-
TagsResource Access
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/clone

Create a new release by copying the components, labels, and target environment from the specified source release, applying a new name and version. The cloned release starts in Draft state and is independent of the source.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/deploy

Trigger deployment of the specified release to its current target environment. The scanner-pass floor and pre-launch readiness checks are fail-closed; a hard preflight failure must be resolved and has no unsigned query-string override. Returns 409 if release truth has not been satisfied and 403 when a deploy-time floor or readiness check blocks.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/promote

Initiate the promotion workflow to advance the specified release to its next target environment, triggering policy gate evaluation. The promotion runs asynchronously; poll the release record or subscribe to events for outcome updates.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/ready

Transition the specified release from Draft to Ready state, signalling that all components are assembled and the release is eligible for promotion gate evaluation. Returns 409 if the release is not in Draft state or required components are missing.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/rollback

Initiate a rollback of the specified deployed release to the previous stable version in the current environment. The rollback is audited and creates a new release event. Returns 409 if the release is not in Deployed state or no prior stable version exists.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{id}/updates

Return per-component version currency for the specified release: which components have a STRICTLY-NEWER version that the registry actually serves (never a guessed version/digest), which are up to date, and which could not be checked (registry unreachable/unresolved). Read-only — surfacing an update never deploys; the one-click draft rides the Editor-gated create-version endpoint referenced by each row’s actionEndpoint.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{id}/versions/from-artifact-update

Create a new draft release version from an existing release when a component artifact digest changes. The new version copies source release metadata and components, replaces only the changed component digest/reference, and applies administrator environment scope limits.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/components

Return tenant-owned release components with artifact references, versions, persisted content digests, and nullable persisted package PURL/ecosystem metadata. Returns 404 when the release does not exist in the caller’s tenant.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

POST /api/v1/release-orchestrator/releases/{releaseId}/components

Register a new component in the specified release, supplying the artifact reference and content digest. Components must be added before the release is marked Ready. Returns 409 if a component with the same name is already registered.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/releases/{releaseId}/components/{componentId}

Remove the specified component from the release. Only permitted when the release is in Draft state; returns 409 for releases that are Ready or beyond. Returns 404 when the component or release does not exist in the tenant.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
componentIdpathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/release-orchestrator/releases/{releaseId}/components/{componentId}

Update the artifact reference, version, or content digest of the specified release component. Returns 404 when the component does not exist within the release or the release itself does not exist in the tenant.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentIdpathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/releases/{releaseId}/components/{componentName}/scan

Operator-triggered “scan now when unknown”: trigger a Scanner scan for the named release component (resolved to its pinned image reference + digest) so an absent/pending/failed SBOM-readiness gate can be satisfied. Requires scanner:scan + release:read.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
componentNamepathyes
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/deploy-plan

Return the honest deployment strategy plan preview for the specified release into the given environment (?environmentId=) under a requested strategy (?strategy=rolling|canary|blue_green|all_at_once). The response mirrors the REAL strategy batching (phases: index + per-phase target count) plus the effective behaviour and honest caveats: single-target-collapse (with one target, canary/blue-green/rolling collapse to a single all-at-once deploy) and no-traffic-management (canary/blue-green do phased TARGET rollout, not traffic splitting; cutover is external). Unknown/unresolvable target count returns an honest cannot-preview, never a fabricated plan. Read-only — it never deploys.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
environmentIdqueryno
strategyqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/deploy-preflight

Return the pre-launch deployment readiness checklist for the specified release into the given environment (?environmentId=). Each row is tri-state (pass/fail/unknown); a fail carries the deployment failure anatomy (plain reason + action). armed is true iff no check hard-failed. Honest: unknown (a probe that could not determine the answer) is surfaced as a caution, never a false pass and never a lone blocker. Floor-independent preview — it never deploys.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes
environmentIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/releases/{releaseId}/events

Return the chronological event log for the specified release including status transitions, gate evaluations, approval decisions, deployment actions, and rollback events. Useful for audit trails and post-incident analysis.

PropertyValue
Operation ID-
TagsReleases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/runs/{runId}/first-signal

orchestrator.first_signal.get_description

PropertyValue
Operation IDReleaseOrchestrator_GetFirstSignal
TagsRelease Orchestrator Runs
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
If-None-Matchheaderno
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/share/{grantId}

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/share/{grantId}

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/release-orchestrator/share/{grantId}

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/share/{grantId}/accept

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/share/{grantId}/approve

PropertyValue
Operation ID-
TagsDeployment Share Grants
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
grantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/targets/validate

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/targets/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/targets/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/targets/{id}

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/targets/{id}/agent

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
204No Content-
404Not Found-
409Conflict-

DELETE /api/v1/release-orchestrator/targets/{id}/agent

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/targets/{id}/health

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/targets/{id}/health-check

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/targets/{id}/lifecycle

PropertyValue
Operation ID-
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/targets

List targets

PropertyValue
Operation IDListTargets
TagsTopology Targets
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
environmentIdqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/targets

Create a new deployment target

PropertyValue
Operation IDCreateTarget
TagsTopology Targets
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/targets/{id}/assign-agent

Assign an eligible executor agent to a target

PropertyValue
Operation IDAssignAgent
TagsTopology Targets
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-
404Not Found-
409Conflict-

PATCH /api/v1/targets/{id}/name

Rename a target

PropertyValue
Operation IDRenameTarget
TagsTopology Rename
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

GET /api/v1/targets/{id}/readiness

Get latest readiness report for a target

PropertyValue
Operation IDGetTargetReadiness
TagsTopology Readiness
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

POST /api/v1/targets/{id}/request-delete

Request deletion of a target

PropertyValue
Operation IDRequestDeleteTarget
TagsTopology Deletion
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
503Service Unavailable-

POST /api/v1/targets/{id}/validate

Run all readiness gates for a target

PropertyValue
Operation IDValidateTarget
TagsTopology Readiness
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/v2/scripts

List scripts with optional search, language, and visibility filters.

PropertyValue
Operation IDListScripts
TagsScriptsEndpoints
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts

Create a new script.

PropertyValue
Operation IDCreateScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts/validate

Validate script syntax without saving.

PropertyValue
Operation IDValidateScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{scriptId}

Get a single script by ID.

PropertyValue
Operation IDGetScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v2/scripts/{scriptId}

Delete a script.

PropertyValue
Operation IDDeleteScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v2/scripts/{scriptId}

Update an existing script.

PropertyValue
Operation IDUpdateScript
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts/{scriptId}/check-compatibility

Check script compatibility with a target environment.

PropertyValue
Operation IDCheckScriptCompatibility
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{scriptId}/versions

List all versions of a script.

PropertyValue
Operation IDListScriptVersions
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{scriptId}/versions/{version}/content

Get the content of a specific script version.

PropertyValue
Operation IDGetScriptVersionContent
TagsScriptsEndpoints
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scriptIdpathyes
versionpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /buildinfo.json

Image build provenance (module, gitSha, gitCommitTime, imageBuiltAt, branch) for drift detection.

PropertyValue
Operation IDStellaOpsBuildInfoFile
TagsStellaOps.ReleaseOrchestrator.WebApi
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /doctor/checks

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health/liveness

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health/readiness

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /internal/crypto/populations

PropertyValue
Operation IDROInternalGetCryptoPopulations
TagsInternalCrypto
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
kekIdqueryyes

Responses:

StatusDescriptionContent types
200OK-

POST /internal/crypto/reseal/start

PropertyValue
Operation IDROInternalStartCryptoReSeal
TagsInternalCrypto
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /internal/crypto/reseal/{rotationId}/abort

PropertyValue
Operation IDROInternalAbortCryptoReSeal
TagsInternalCrypto
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
rotationIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /internal/crypto/reseal/{rotationId}/progress

PropertyValue
Operation IDROInternalGetCryptoReSealProgress
TagsInternalCrypto
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
rotationIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /internal/v1/release-orchestrator/topology-snapshot

PropertyValue
Operation IDGetReleaseTopologySnapshot
TagsReleaseTopologySnapshotEndpoints
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json