merge: compose current auth migration with Ticket case schema 91

openapi/server-api.json

@@ -1437,15 +1437,10 @@
           },
           "public_bundle": {
             "$ref": "#/components/schemas/RuntimePublicIdentityBundle"
-          },
-          "workspace_trust_id": {
-            "description": "Exact Runtime-issued enrollment identity from `trust-workspace add/show`.\nA key fingerprint alone cannot distinguish revocation and re-enrollment.",
-            "type": "string"
           }
         },
         "required": [
           "public_bundle",
-          "workspace_trust_id",
           "endpoint"
         ],
         "type": "object"
@@ -7747,15 +7742,6 @@
         ],
         "type": "object"
       },
-      "RuntimeConnectionDisplayState": {
-        "enum": [
-          "configured",
-          "verified",
-          "unavailable",
-          "revoked"
-        ],
-        "type": "string"
-      },
       "RuntimeConnectionTestFailureKind": {
         "enum": [
           "authentication",
@@ -7772,6 +7758,7 @@
       },
       "RuntimeConnectionTestResponse": {
         "additionalProperties": false,
+        "description": "Observation of an actual signed ping, not a grant or cached approval.",
         "properties": {
           "actual_protocol_version": {
             "format": "uint32",
@@ -7788,9 +7775,6 @@
           "checked_at": {
             "type": "string"
           },
-          "connection_state": {
-            "$ref": "#/components/schemas/RuntimeConnectionDisplayState"
-          },
           "diagnostics": {
             "default": [],
             "items": {
@@ -7820,16 +7804,6 @@
           "status": {
             "$ref": "#/components/schemas/RuntimeConnectionTestStatus"
           },
-          "verification": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/RuntimeVerificationEvidenceSummary"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
           "workspace_id": {
             "type": "string"
           }
@@ -7838,7 +7812,6 @@
           "workspace_id",
           "runtime_id",
           "binding_id",
-          "connection_state",
           "checked_at",
           "status",
           "expected_protocol_version"
@@ -8292,57 +8265,6 @@
         ],
         "type": "string"
       },
-      "RuntimeVerificationEvidenceSummary": {
-        "additionalProperties": false,
-        "properties": {
-          "binding_id": {
-            "type": "string"
-          },
-          "last_checked_at": {
-            "type": "string"
-          },
-          "last_outcome": {
-            "$ref": "#/components/schemas/RuntimeVerificationOutcome"
-          },
-          "runtime_public_key_fingerprint": {
-            "type": "string"
-          },
-          "verified_at": {
-            "type": [
-              "string",
-              "null"
-            ]
-          },
-          "workspace_key_id": {
-            "type": "string"
-          },
-          "workspace_public_key_fingerprint": {
-            "type": "string"
-          },
-          "workspace_trust_id": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "last_checked_at",
-          "last_outcome",
-          "binding_id",
-          "workspace_key_id",
-          "workspace_public_key_fingerprint",
-          "workspace_trust_id",
-          "runtime_public_key_fingerprint"
-        ],
-        "type": "object"
-      },
-      "RuntimeVerificationOutcome": {
-        "enum": [
-          "verified",
-          "challenge_issued",
-          "verification_failed",
-          "connectivity_failed"
-        ],
-        "type": "string"
-      },
       "RuntimeWorkerCompletionsRequest": {
         "additionalProperties": false,
         "properties": {
@@ -15528,43 +15450,14 @@
         ],
         "type": "object"
       },
-      "WorkspaceRuntimeBindingState": {
-        "enum": [
-          "configured",
-          "verified",
-          "revoked"
-        ],
-        "type": "string"
-      },
       "WorkspaceRuntimeBindingSummary": {
         "additionalProperties": false,
+        "description": "Binding identity and explicit revocation only. Each signed request authenticates\nusing the current Workspace signing identity, not a stored approval.",
         "properties": {
           "binding_id": {
             "type": "string"
           },
-          "connection_state": {
-            "$ref": "#/components/schemas/RuntimeConnectionDisplayState"
-          },
-          "state": {
-            "$ref": "#/components/schemas/WorkspaceRuntimeBindingState"
-          },
-          "verification": {
-            "anyOf": [
-              {
-                "$ref": "#/components/schemas/RuntimeVerificationEvidenceSummary"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "workspace_key_id": {
-            "type": [
-              "string",
-              "null"
-            ]
-          },
-          "workspace_trust_id": {
+          "revoked_at": {
             "type": [
               "string",
               "null"
@@ -15572,8 +15465,6 @@
           }
         },
         "required": [
-          "state",
-          "connection_state",
           "binding_id"
         ],
         "type": "object"
@@ -16328,7 +16219,7 @@
   "info": {
     "title": "Yoi Server API",
     "version": "0.1.0",
-    "x-yoi-source-digest": "sha256:6f5ab2a613fca9996680d3a08962dc580563457811e68679574ff4325c86ec4e"
+    "x-yoi-source-digest": "sha256:2e8dcd75d5d7b70c5d820999afcabf3d1377896732c7a3e8c3839e73a994974c"
   },
   "openapi": "3.1.0",
   "paths": {