{"openapi":"3.1.0","info":{"title":"CyberOrbit Universal Frontend Platform API","version":"2.4.0","description":"**CyberOrbit Enterprise Frontend Platform** is a standardized, production-ready container image powered by **Deno 2.9+** and **Fresh 2.3+** for Kubernetes (K3s).\n\nThis OpenAPI specification documents all embedded endpoints available on the platform, including:\n- **Runtime Configuration & Telemetry**: Dynamic multi-app profile management and node metrics.\n- **Identity & Authentication**: JWT-based session security and role-based access control.\n- **Fintech Clearing & Payments**: Real-time transaction state machine, liquidity checks, and cryptographic SHA-256 settlement receipts.\n- **Real-Time Communication Bridges**: Bidirectional gRPC service mesh streaming and WebRTC P2P signaling.","contact":{"name":"CyberOrbit Core Engineering","url":"https://github.com/denoland/fresh"},"license":{"name":"MIT","url":"https://opensource.org/licenses/MIT"}},"servers":[{"url":"/","description":"Current Cluster Pod Instance"},{"url":"http://127.0.0.1:30080","description":"Local K3s NodePort Gateway"}],"tags":[{"name":"System & Health","description":"Cluster liveness probes, runtime telemetry, and multi-app configuration."},{"name":"Authentication","description":"User registration, JWT session issuance, and identity verification."},{"name":"Payments & Clearing","description":"Fintech clearinghouse, automated settlement, and cryptographic receipts."},{"name":"Service Mesh & WebRTC","description":"gRPC service mesh streaming bridge and WebRTC P2P signaling."},{"name":"Portfolio & Venture Studio","description":"MetaData Asset Management and portfolio company metadata (SII, ANO, DAS, NK)."},{"name":"Content Management (CMS1)","description":"Dynamic Markdown portal content publication, revisions, and automated rollback snapshots."},{"name":"Trading & Markets (ATS1)","description":"High-frequency algorithmic order routing, Level-2 depth, and Interactive Brokers market data bridge."},{"name":"Debate & Consensus (Agora1)","description":"Gamified structured deliberation arena, real-time consensus convergence scoring, and compromise ratification."},{"name":"Platform Administration & GitOps","description":"Cluster workload management, CRD application lifecycle, sovereign database/storage inspection, and GitOps registry."},{"name":"Virtual Workstations & Desktops","description":"Sovereign sandboxed virtual workstations streaming over WebSockets via Apache Guacamole HTML5 protocol."}],"paths":{"/api/portfolio":{"get":{"tags":["Portfolio & Venture Studio"],"summary":"Retrieve Venture Studio & Portfolio Metadata","description":"Returns metadata, thesis, metrics, and configurations for MetaData Asset Management and portfolio companies (Sightline Innovation, AnoSense Solutions, DataAsset.Store, Nowkast).","operationId":"getPortfolio","parameters":[{"name":"company","in":"query","description":"Optional company ID filter ('sii', 'ano', 'das', 'nk')","required":false,"schema":{"type":"string","enum":["sii","ano","das","nk"]}}],"responses":{"200":{"description":"Portfolio metadata returned successfully.","content":{"application/json":{"schema":{"type":"object"}}}}}}},"/api/version":{"get":{"tags":["System & Health"],"summary":"Platform Version and Deployment Indicator","description":"Returns platform release version, deployment ID, environment mode, git commit SHA, build timestamp, read-only policy status, K3s pod/namespace, runtime versions (Deno, Fresh, V8, TypeScript), and Kuma service mesh status. Also sets custom HTTP headers X-CyberOrbit-Version and X-CyberOrbit-Deployment.","operationId":"getDeploymentVersion","responses":{"200":{"description":"Deployment indicator and platform version metadata.","headers":{"X-CyberOrbit-Version":{"schema":{"type":"string","example":"2.4.0"},"description":"Semantic version of the CyberOrbit platform"},"X-CyberOrbit-Deployment":{"schema":{"type":"string","example":"k3s-fresh-v2-universal"},"description":"Unique deployment identifier or release tag"}},"content":{"application/json":{"schema":{"type":"object","properties":{"name":{"type":"string","example":"CyberOrbit Universal Frontend Platform"},"version":{"type":"string","example":"2.4.0"},"deploymentId":{"type":"string","example":"k3s-fresh-v2-universal"},"environment":{"type":"string","example":"production"},"gitCommit":{"type":"string","example":"69d0be2"},"buildTime":{"type":"string","example":"2026-10-06T10:40:00Z"},"readOnly":{"type":"boolean","example":true},"blurValuation":{"type":"boolean","example":true,"description":"Configurable switch for portfolio valuation masking (defaults to true)"},"preset":{"type":"string","enum":["full","minimal","readonly","headless-api","custom"],"example":"full"},"features":{"type":"object","description":"Granular feature toggle status (16 flags)","properties":{"webrtc":{"type":"boolean","example":true},"grpcChat":{"type":"boolean","example":true},"payments":{"type":"boolean","example":true},"auth":{"type":"boolean","example":true},"webglBackground":{"type":"boolean","example":true},"strudelAudio":{"type":"boolean","example":true},"llmEngine":{"type":"boolean","example":true},"docsPortal":{"type":"boolean","example":true},"swaggerUi":{"type":"boolean","example":true},"useCaseCatalog":{"type":"boolean","example":true},"tradingTerminal":{"type":"boolean","example":true},"cmsEditor":{"type":"boolean","example":true},"centralStorage":{"type":"boolean","example":true},"portfolioSites":{"type":"boolean","example":true},"readOnly":{"type":"boolean","example":false},"debugApi":{"type":"boolean","example":true}}},"k3s":{"type":"object","properties":{"cluster":{"type":"string","example":"k3s"},"namespace":{"type":"string","example":"fresh-webgl"},"pod":{"type":"string","example":"fresh-city-app-797f58bb78-m2777"},"node":{"type":"string","example":"instance-20260926-142135"}}},"runtime":{"type":"object","properties":{"deno":{"type":"string","example":"2.9.7"},"fresh":{"type":"string","example":"2.3.3"},"v8":{"type":"string","example":"13.4.114.21"},"typescript":{"type":"string","example":"5.8.2"}}},"serviceMesh":{"type":"object","properties":{"enabled":{"type":"boolean","example":true},"provider":{"type":"string","example":"Kuma Service Mesh"},"status":{"type":"string","example":"mTLS Enforced (appProtocol: grpc)"}}}}}}}}}}},"/api/healthz":{"get":{"tags":["System & Health"],"summary":"Kubernetes Liveness and Readiness Probe","description":"Returns the operational health of the Deno Fresh container, runtime version, and V8 engine details.","operationId":"getHealthz","responses":{"200":{"description":"Container pod is healthy and ready to accept ingress traffic.","content":{"application/json":{"schema":{"type":"object","properties":{"status":{"type":"string","example":"healthy"},"timestamp":{"type":"string","format":"date-time","example":"2026-09-28T14:30:00.000Z"},"version":{"type":"object","properties":{"deno":{"type":"string","example":"2.9.7"},"v8":{"type":"string","example":"15.0.245.2-rusty"}}}}}}}}}}},"/api/telemetry":{"get":{"tags":["System & Health"],"summary":"Real-Time Node and Runtime Telemetry","description":"Provides granular hardware memory breakdown (RSS, heap, external), process uptime, and cluster environment tags.","operationId":"getTelemetry","responses":{"200":{"description":"Live system metrics and runtime statistics.","content":{"application/json":{"schema":{"type":"object","properties":{"timestamp":{"type":"string","format":"date-time"},"uptimeSeconds":{"type":"number","example":4520.12},"memoryUsage":{"type":"object","properties":{"rssMb":{"type":"number","example":64.25},"heapTotalMb":{"type":"number","example":38.12},"heapUsedMb":{"type":"number","example":28.45},"externalMb":{"type":"number","example":4.15}}},"environment":{"type":"object","properties":{"denoDeploymentId":{"type":"string","example":"k3s-fresh-v2-universal"},"nodeName":{"type":"string","example":"instance-20260926-142135"}}}}}}}}}}},"/api/config":{"get":{"tags":["System & Health"],"summary":"Multi-App Runtime Profile & Feature Flags","description":"Returns the active branding, theme color, and module feature toggles configured via environment or Kubernetes ConfigMap.","operationId":"getAppConfig","responses":{"200":{"description":"Public configuration used by client islands.","content":{"application/json":{"schema":{"type":"object","properties":{"appName":{"type":"string","example":"CyberOrbit Enterprise Platform"},"appTagline":{"type":"string","example":"Universal Cloud-Native Edge Stack"},"appTheme":{"type":"string","enum":["cyan","purple","emerald","amber"],"example":"cyan"},"preset":{"type":"string","enum":["full","minimal","readonly","headless-api","custom"],"example":"full"},"readOnly":{"type":"boolean","example":false},"blurValuation":{"type":"boolean","example":true,"description":"Configurable switch for portfolio valuation masking (defaults to true)"},"features":{"type":"object","description":"Granular feature toggle status (16 flags)","properties":{"webrtc":{"type":"boolean","example":true},"grpcChat":{"type":"boolean","example":true},"payments":{"type":"boolean","example":true},"auth":{"type":"boolean","example":true},"webglBackground":{"type":"boolean","example":true},"strudelAudio":{"type":"boolean","example":true},"llmEngine":{"type":"boolean","example":true},"docsPortal":{"type":"boolean","example":true},"swaggerUi":{"type":"boolean","example":true},"useCaseCatalog":{"type":"boolean","example":true},"tradingTerminal":{"type":"boolean","example":true},"cmsEditor":{"type":"boolean","example":true},"centralStorage":{"type":"boolean","example":true},"portfolioSites":{"type":"boolean","example":true},"readOnly":{"type":"boolean","example":false},"debugApi":{"type":"boolean","example":true}}},"grpc":{"type":"object","properties":{"serviceHost":{"type":"string","example":"chat-service.default.svc.cluster.local:50051"},"mockMode":{"type":"boolean","example":true}}}}}}}}}}},"/api/auth/register":{"post":{"tags":["Authentication"],"summary":"Register New Platform User","description":"Creates a new user profile with SHA-256 hashed credentials and assigns a role (`admin`, `operator`, `member`, `guest`).","operationId":"registerUser","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["name","email","password"],"properties":{"name":{"type":"string","example":"Nova Architect"},"email":{"type":"string","format":"email","example":"nova@cyberorbit.io"},"password":{"type":"string","format":"password","example":"quantum_pass_2026"},"role":{"type":"string","enum":["admin","operator","member","guest"],"default":"member","example":"operator"}}}}}},"responses":{"201":{"description":"User registered and session token issued.","content":{"application/json":{"schema":{"type":"object","properties":{"success":{"type":"boolean","example":true},"user":{"type":"object","properties":{"id":{"type":"string","example":"usr_4f2b1a"},"name":{"type":"string","example":"Nova Architect"},"email":{"type":"string","example":"nova@cyberorbit.io"},"role":{"type":"string","example":"operator"}}}}}}}},"400":{"description":"Invalid input or email already registered."}}}},"/api/auth/login":{"post":{"tags":["Authentication"],"summary":"Authenticate User Session (JWT)","description":"Validates credentials, issues a signed JWT token, and sets the secure `cyber_session` HTTP-only cookie.","operationId":"loginUser","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["email","password"],"properties":{"email":{"type":"string","format":"email","example":"admin@cyberorbit.io"},"password":{"type":"string","format":"password","example":"admin123"}}}}}},"responses":{"200":{"description":"Authentication successful; session cookie set.","content":{"application/json":{"schema":{"type":"object","properties":{"success":{"type":"boolean","example":true},"user":{"type":"object","properties":{"id":{"type":"string","example":"usr_admin_01"},"name":{"type":"string","example":"SysAdmin Zero"},"email":{"type":"string","example":"admin@cyberorbit.io"},"role":{"type":"string","example":"admin"}}}}}}}},"401":{"description":"Invalid credentials."}}}},"/api/auth/logout":{"post":{"tags":["Authentication"],"summary":"Terminate Current Session","description":"Clears the `cyber_session` cookie and invalidates user authorization.","operationId":"logoutUser","responses":{"200":{"description":"Session successfully terminated.","content":{"application/json":{"schema":{"type":"object","properties":{"success":{"type":"boolean","example":true},"message":{"type":"string","example":"Logged out successfully"}}}}}}}}},"/api/auth/me":{"get":{"tags":["Authentication"],"summary":"Get Authenticated User Profile","description":"Parses the `cyber_session` cookie and returns the active user identity and permissions.","operationId":"getCurrentUser","responses":{"200":{"description":"Active session profile returned.","content":{"application/json":{"schema":{"type":"object","properties":{"authenticated":{"type":"boolean","example":true},"user":{"type":"object","properties":{"id":{"type":"string","example":"usr_admin_01"},"name":{"type":"string","example":"SysAdmin Zero"},"email":{"type":"string","example":"admin@cyberorbit.io"},"role":{"type":"string","example":"admin"}}}}}}}}}}},"/api/payments/checkout":{"post":{"tags":["Payments & Clearing"],"summary":"Initiate Clearing Transaction","description":"Creates a payment clearing intent across Credit Card, Crypto (USDC/ETH/SOL), or Instant Wire with automated risk validation.","operationId":"createCheckout","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["amount","currency","method","customerEmail"],"properties":{"amount":{"type":"number","example":1250},"currency":{"type":"string","enum":["USD","EUR","USDC","ETH","SOL"],"example":"USD"},"method":{"type":"string","enum":["card","crypto","wire"],"example":"card"},"customerEmail":{"type":"string","format":"email","example":"treasury@apex.io"},"description":{"type":"string","example":"Kubernetes GPU Node Pool Allocation // Q4"}}}}}},"responses":{"200":{"description":"Transaction initiated in `initiated` state.","content":{"application/json":{"schema":{"type":"object","properties":{"success":{"type":"boolean","example":true},"transaction":{"type":"object","properties":{"id":{"type":"string","example":"tx_clr_a92f81"},"amount":{"type":"number","example":1250},"currency":{"type":"string","example":"USD"},"status":{"type":"string","example":"initiated"},"timestamp":{"type":"string","format":"date-time"}}}}}}}},"400":{"description":"Invalid transaction payload."}}}},"/api/payments/clear":{"post":{"tags":["Payments & Clearing"],"summary":"Execute Cryptographic Settlement","description":"Executes final clearance on an initiated transaction, transition state to `settled`, and generates a verifiable SHA-256 clearing hash.","operationId":"clearTransaction","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["transactionId"],"properties":{"transactionId":{"type":"string","example":"tx_clr_a92f81"}}}}}},"responses":{"200":{"description":"Transaction settled with cryptographic receipt.","content":{"application/json":{"schema":{"type":"object","properties":{"success":{"type":"boolean","example":true},"transaction":{"type":"object","properties":{"id":{"type":"string","example":"tx_clr_a92f81"},"status":{"type":"string","example":"settled"},"clearingHouse":{"type":"string","example":"CyberClear Automated Network // K3s Gateway"},"clearingHash":{"type":"string","example":"0x8f2d93e1a8b7c4d5e6f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3"},"settledAt":{"type":"string","format":"date-time"}}}}}}}},"404":{"description":"Transaction ID not found in ledger."}}}},"/api/payments/ledger":{"get":{"tags":["Payments & Clearing"],"summary":"Retrieve Settlement Ledger & Audit History","description":"Returns all historical settled and clearing transactions alongside aggregate volume and transaction metrics.","operationId":"getLedger","responses":{"200":{"description":"Audit trail and metrics.","content":{"application/json":{"schema":{"type":"object","properties":{"totalVolumeUsd":{"type":"number","example":12450},"transactionCount":{"type":"number","example":6},"transactions":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","example":"tx_clr_981a2f"},"amount":{"type":"number","example":1450},"currency":{"type":"string","example":"USD"},"method":{"type":"string","example":"card"},"status":{"type":"string","example":"settled"},"clearingHash":{"type":"string"},"timestamp":{"type":"string","format":"date-time"}}}}}}}}}}}},"/api/grpc/chat":{"get":{"tags":["Service Mesh & WebRTC"],"summary":"gRPC Chat Stream Bridge (WebSocket / HTTP)","description":"Bidirectional WebSocket connection bridging frontend chat messages to the upstream Kubernetes gRPC service mesh (`@grpc/grpc-js`). If accessed via standard HTTP GET, returns recent channel history.","operationId":"grpcChatStream","parameters":[{"name":"channel","in":"query","required":false,"schema":{"type":"string","default":"general-mesh"},"description":"Mesh channel identifier (`general-mesh`, `mdam-syndicate`, `mdam-announcements`, `sii-patent-licensing`, `ano-clinical-trials`, `das-sovereignty-audit`, `nk-consensus-feed`)"},{"name":"company","in":"query","required":false,"schema":{"type":"string","enum":["mdam","sii","ano","das","nk"],"default":"mdam"},"description":"Portfolio entity scope for message attribution."}],"responses":{"101":{"description":"Switching Protocols to WebSocket for real-time bidirectional gRPC streaming."},"200":{"description":"Channel message history when requested over HTTP.","content":{"application/json":{"schema":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","example":"msg_init_01"},"channel":{"type":"string","example":"general-mesh"},"company":{"type":"string","example":"mdam"},"sender":{"type":"string","example":"EnvoyMeshGateway"},"senderRole":{"type":"string","example":"operator"},"content":{"type":"string","example":"gRPC service mesh channel initialized."},"meshRoute":{"type":"string","example":"k3s://istio-proxy.default:50051"},"isBroadcast":{"type":"boolean","example":false}}}}}}}}}},"/api/webrtc/signal":{"get":{"tags":["Service Mesh & WebRTC"],"summary":"WebRTC Peer-to-Peer Signaling Server (WebSocket)","description":"WebSocket signaling broker handling dynamic room membership, SDP offer/answer exchange, and ICE candidate negotiation between client browsers with MDAM portfolio multi-tenancy.","operationId":"webrtcSignaling","parameters":[{"name":"room","in":"query","required":false,"schema":{"type":"string","default":"mdam-syndicate-board"},"description":"Meeting conference room identifier (e.g., `sii-patent-licensing`, `ano-clinical-review`, `das-sovereignty-audit`, `nk-deliberative-council`)."},{"name":"company","in":"query","required":false,"schema":{"type":"string","enum":["mdam","sii","ano","das","nk"],"default":"mdam"},"description":"Active portfolio company scope for themed conference branding and peer badges."},{"name":"peerId","in":"query","required":false,"schema":{"type":"string"},"description":"Unique peer node identifier."},{"name":"displayName","in":"query","required":false,"schema":{"type":"string"},"description":"Human-readable display name for conference participant."}],"responses":{"101":{"description":"Upgraded to WebSocket signaling pipe."},"426":{"description":"Upgrade Required: Standard HTTP requests are rejected; WebSocket upgrade expected."}}}},"/api/cms/content":{"get":{"tags":["Content Management (CMS1)"],"summary":"Retrieve CMS Portal Schema & Content","description":"Fetches active Markdown content, headlines, taglines, and version metadata for a specified entity.","operationId":"getCmsContent","parameters":[{"name":"company","in":"query","required":false,"schema":{"type":"string","default":"mdam"},"description":"Target company portal identifier (mdam, sii, ano, das, nk, zs)."}],"responses":{"200":{"description":"CMS content retrieved successfully."}}},"post":{"tags":["Content Management (CMS1)"],"summary":"Publish CMS Content Revision or Rollback","description":"Applies a new Markdown content revision or rolls back to a previous snapshot when platform is not in read-only mode.","operationId":"updateCmsContent","responses":{"200":{"description":"Content updated or rolled back successfully."},"403":{"description":"Forbidden: Mutation blocked by READ_ONLY policy."}}}},"/api/debate":{"get":{"tags":["Debate & Consensus (Agora1)"],"summary":"Retrieve Active Debate Rooms & Convergence State","description":"Lists debate rooms, motions, consensus convergence scores, argument trees, and compromise clauses.","operationId":"getDebateRooms","responses":{"200":{"description":"Debate rooms and state returned successfully."}}},"post":{"tags":["Debate & Consensus (Agora1)"],"summary":"Submit Argument, Vote, or Ratify Compromise","description":"Submits a structured debate argument, perspective stake, or compromise clause ratification in the Agora arena.","operationId":"submitDebateAction","responses":{"200":{"description":"Action recorded and consensus meter recalculated."},"400":{"description":"Invalid action or parameters."}}}},"/api/ats/stream":{"get":{"tags":["Trading & Markets (ATS1)"],"summary":"Real-Time Market Depth & Tick WebSocket Stream","description":"WebSocket connection streaming real-time Level-2 order book depth, ticks, and trade fills for syndicate assets.","operationId":"streamAtsMarketData","parameters":[{"name":"symbol","in":"query","required":false,"schema":{"type":"string","default":"MDAM-EQ"},"description":"Asset ticker symbol (MDAM-EQ, SII-PAT, ANO-BIO, DAS-DAT, NK-NET, SPY, TLT)."}],"responses":{"101":{"description":"Switched to WebSocket market data stream."}}}},"/api/ats/ib-bridge":{"get":{"tags":["Trading & Markets (ATS1)"],"summary":"Interactive Brokers (IBKR) Ingestion Bridge Status","description":"Returns connection health, active tick count, and status for Interactive Brokers Gateway / TWS bridge.","operationId":"getIbBridgeStatus","responses":{"200":{"description":"Bridge status returned successfully."}}},"post":{"tags":["Trading & Markets (ATS1)"],"summary":"Ingest Market Tick from External Feeder","description":"Ingests a real-time price tick into ATS1 order books and TimescaleDB tick database.","operationId":"ingestIbTick","responses":{"200":{"description":"Tick successfully ingested and broadcast."}}}},"/api/admin/apps":{"get":{"tags":["Platform Administration & GitOps"],"summary":"List Installed Applications & CRD Status","description":"Returns all installed Sovereign Realm applications with their CRD specifications, workload health, and platform tiers.","operationId":"getAdminApps","responses":{"200":{"description":"Application inventory returned successfully."},"401":{"description":"Unauthorized: Requires admin/operator session."}}},"post":{"tags":["Platform Administration & GitOps"],"summary":"Install Containerized Application via CRD","description":"Creates and reconciles a ZeroServerApp CRD in the cluster, dynamically deploying child Deployment and Service resources.","operationId":"installAdminApp","responses":{"200":{"description":"Application CRD created and reconciled."},"401":{"description":"Unauthorized: Admin privileges required."}}},"delete":{"tags":["Platform Administration & GitOps"],"summary":"Uninstall Application","description":"Removes a custom ZeroServerApp CRD and cascades deletion to child Deployments and Services.","operationId":"uninstallAdminApp","parameters":[{"name":"appId","in":"query","required":true,"schema":{"type":"string"},"description":"Application ID to uninstall."}],"responses":{"200":{"description":"Application uninstalled successfully."}}}},"/api/admin/database":{"get":{"tags":["Platform Administration & GitOps"],"summary":"Inspect PostgreSQL Relational Schemas & Tables","description":"Queries PostgreSQL 16 cluster status, table sizes, row counts, and application schema divisions.","operationId":"getAdminDatabaseStatus","responses":{"200":{"description":"Database status returned successfully."}}}},"/api/admin/buckets":{"get":{"tags":["Platform Administration & GitOps"],"summary":"Inspect MinIO S3 Object Storage Buckets","description":"Reports status, policies, object counts, and storage usage across all multi-tenant S3 buckets.","operationId":"getAdminBucketsStatus","responses":{"200":{"description":"Bucket status returned successfully."}}}},"/api/admin/grpc":{"get":{"tags":["Platform Administration & GitOps"],"summary":"Inspect gRPC Microservices Mesh Registry","description":"Returns active gRPC service definitions, packages, ports (50051-50055), and Kuma mTLS policies.","operationId":"getAdminGrpcRegistry","responses":{"200":{"description":"gRPC service registry returned successfully."}}}},"/api/admin/workloads":{"get":{"tags":["Platform Administration & GitOps"],"summary":"Inspect K3s Cluster Workloads & Pods","description":"Returns active Kubernetes Deployments, StatefulSets, Pods, replica status, and health conditions.","operationId":"getAdminWorkloads","responses":{"200":{"description":"Workloads inventory returned successfully."}}}},"/api/admin/ingresses":{"get":{"tags":["Platform Administration & GitOps"],"summary":"Inspect Ingress Routing & Access Analytics","description":"Reports Traefik ingress rules, hostname bindings, TLS secrets, and recent access activity logs with session fingerprinting.","operationId":"getAdminIngresses","responses":{"200":{"description":"Ingress topology and access logs returned successfully."}}}},"/api/admin/desktops":{"get":{"tags":["Virtual Workstations & Desktops"],"summary":"Inspect Sovereign Virtual Workstation Status","description":"Lists virtual desktop profiles (dev, quant, opsec, admin), pod readiness, and persistent storage allocations.","operationId":"getAdminDesktops","responses":{"200":{"description":"Workstation status returned successfully."}}},"post":{"tags":["Virtual Workstations & Desktops"],"summary":"Workstation Power Lifecycle Action","description":"Starts, stops, or restarts a sovereign virtual workstation StatefulSet.","operationId":"manageDesktopPower","responses":{"200":{"description":"Power action initiated."}}}},"/api/desktops/tunnel":{"get":{"tags":["Virtual Workstations & Desktops"],"summary":"Apache Guacamole WebSocket Display Tunnel","description":"Bidirectional WebSocket tunnel streaming the interactive desktop display using the Apache Guacamole protocol.","operationId":"connectDesktopTunnel","parameters":[{"name":"id","in":"query","required":true,"schema":{"type":"string","enum":["dev","quant","opsec","admin"]},"description":"Workstation profile ID."}],"responses":{"101":{"description":"Upgraded to Guacamole WebSocket tunnel."}}}}}}