From 7d947f1e0ea5eeaaaf45e1af127643e595543272 Mon Sep 17 00:00:00 2001
From: mervin008 <42179903+mervin008@users.noreply.github.com>
Date: Sun, 11 Oct 2026 18:49:17 +0000
Subject: [PATCH] chore: refresh routes.json and the guides from CertPilot

---
 guides/agents.md                   |   2 +-
 guides/ca-accounts-gateways.md     |   2 +-
 guides/certificate-transparency.md |   2 +-
 guides/certificates.md             |   2 +-
 guides/cloud-inventory.md          |   2 +-
 guides/dashboard.md                |   2 +-
 guides/deployment.md               |   2 +-
 guides/discovery.md                |   2 +-
 guides/display-tokens.md           |   2 +-
 guides/live-event-stream.md        |   2 +-
 guides/notification-channels.md    |   2 +-
 guides/pki-ca-management.md        |   2 +-
 guides/policies.md                 |   2 +-
 guides/renewal-queue.md            |   2 +-
 routes.json                        | 292 +++++++++++++++++++++++++----
 15 files changed, 266 insertions(+), 54 deletions(-)

diff --git a/guides/agents.md b/guides/agents.md
index d6904f5..ecd0935 100644
--- a/guides/agents.md
+++ b/guides/agents.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Agents". Edit it there, not here. -->
 
 Two APIs, kept completely apart.
diff --git a/guides/ca-accounts-gateways.md b/guides/ca-accounts-gateways.md
index cdecaea..58997b9 100644
--- a/guides/ca-accounts-gateways.md
+++ b/guides/ca-accounts-gateways.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "CA accounts and gateways". Edit it there, not here. -->
 
 ## Registering
diff --git a/guides/certificate-transparency.md b/guides/certificate-transparency.md
index 7a6cac6..d2b07a8 100644
--- a/guides/certificate-transparency.md
+++ b/guides/certificate-transparency.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Certificate Transparency". Edit it there, not here. -->
 
 This is the half of discovery a network scan cannot reach. A scan answers "what
diff --git a/guides/certificates.md b/guides/certificates.md
index c1f1785..497edaf 100644
--- a/guides/certificates.md
+++ b/guides/certificates.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Certificates". Edit it there, not here. -->
 
 `GET /certificates` filters on `status`, `environment`, `common_name`,
diff --git a/guides/cloud-inventory.md b/guides/cloud-inventory.md
index 7f4b2fa..6568921 100644
--- a/guides/cloud-inventory.md
+++ b/guides/cloud-inventory.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Cloud inventory". Edit it there, not here. -->
 
 The third place certificates hide. A scan finds what is **served**; Certificate
diff --git a/guides/dashboard.md b/guides/dashboard.md
index 46a7c75..dbb9997 100644
--- a/guides/dashboard.md
+++ b/guides/dashboard.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Dashboard". Edit it there, not here. -->
 
 ## Statistics
diff --git a/guides/deployment.md b/guides/deployment.md
index 5f59499..ad66606 100644
--- a/guides/deployment.md
+++ b/guides/deployment.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Deployment", "Cryptographic posture". Edit it there, not here. -->
 
 Everything above deployment in this document observes. This changes something
diff --git a/guides/discovery.md b/guides/discovery.md
index 86d1679..3952963 100644
--- a/guides/discovery.md
+++ b/guides/discovery.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Discovery". Edit it there, not here. -->
 
 Scanning is operator-gated because it opens connections to third-party
diff --git a/guides/display-tokens.md b/guides/display-tokens.md
index 1dbe0ca..a93e0c7 100644
--- a/guides/display-tokens.md
+++ b/guides/display-tokens.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Display tokens". Edit it there, not here. -->
 
 Create:
diff --git a/guides/live-event-stream.md b/guides/live-event-stream.md
index 922da2d..3f376b3 100644
--- a/guides/live-event-stream.md
+++ b/guides/live-event-stream.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Live event stream". Edit it there, not here. -->
 
 Opens with a `retry:` directive and a `snapshot` event carrying current
diff --git a/guides/notification-channels.md b/guides/notification-channels.md
index 68359a3..8e0b525 100644
--- a/guides/notification-channels.md
+++ b/guides/notification-channels.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Notification channels". Edit it there, not here. -->
 
 Three channel types have a notifier: `slack`, `webhook`, `email`. Migration 001
diff --git a/guides/pki-ca-management.md b/guides/pki-ca-management.md
index badd340..1405590 100644
--- a/guides/pki-ca-management.md
+++ b/guides/pki-ca-management.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "PKI and CA authorities", "Ownership and acknowledgement". Edit it there, not here. -->
 
 ## Importing the CAs behind a CA account
diff --git a/guides/policies.md b/guides/policies.md
index 5e23713..52f16c2 100644
--- a/guides/policies.md
+++ b/guides/policies.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Policies". Edit it there, not here. -->
 
 Rule types, all of which are evaluated:
diff --git a/guides/renewal-queue.md b/guides/renewal-queue.md
index 3486aee..09eea54 100644
--- a/guides/renewal-queue.md
+++ b/guides/renewal-queue.md
@@ -1,4 +1,4 @@
-<!-- Synced from docs/api-reference.md in certpilot/certpilot at 51f86f743471, last changed 2026-09-26T16:23:02Z.
+<!-- Synced from docs/api-reference.md in certpilot/certpilot at 39bd5ea177f5, last changed 2026-10-10T13:56:22Z.
      Source heading: "Renewal queue". Edit it there, not here. -->
 
 Renewal is the only part of this system that changes the world. Everything else
diff --git a/routes.json b/routes.json
index f5b54b2..394cd03 100644
--- a/routes.json
+++ b/routes.json
@@ -4335,6 +4335,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the agent"
+          ]
         }
       ],
       "section": "The agent API",
@@ -4364,7 +4370,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the agent"
+          ]
         }
       ],
       "section": "The agent API",
@@ -4445,7 +4454,11 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the agent",
+            "could not read the deployment job"
+          ]
         },
         {
           "status": 503,
@@ -4700,7 +4713,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the agent"
+          ]
         }
       ],
       "section": "The agent API",
@@ -4782,7 +4798,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the agent"
+          ]
         }
       ],
       "section": "The agent API",
@@ -4880,7 +4899,10 @@
           ]
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the agent"
+          ]
         }
       ],
       "section": "Agents",
@@ -4917,6 +4939,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the agent"
+          ]
         }
       ],
       "section": "Agents",
@@ -4950,6 +4978,12 @@
         },
         {
           "status": 409
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the agent"
+          ]
         }
       ],
       "section": "Agents",
@@ -5453,6 +5487,12 @@
         {
           "status": 404
         },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the CA account"
+          ]
+        },
         {
           "status": 503
         }
@@ -5520,7 +5560,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the CA account"
+          ]
         }
       ],
       "section": "CA Accounts \u0026 Gateways",
@@ -5811,7 +5854,10 @@
           "status": 409
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate template"
+          ]
         }
       ],
       "section": "Certificate templates",
@@ -5834,6 +5880,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the certificate template"
+          ]
         }
       ],
       "section": "Certificate templates",
@@ -6060,7 +6112,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate template"
+          ]
         }
       ],
       "section": "Certificate templates",
@@ -6315,7 +6370,10 @@
           ]
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Certificates",
@@ -6340,6 +6398,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Certificates",
@@ -6399,7 +6463,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Certificates",
@@ -6448,7 +6515,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Deployment",
@@ -6489,7 +6559,10 @@
           ]
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Certificates",
@@ -6532,7 +6605,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Certificates",
@@ -6577,7 +6653,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Renewal queue",
@@ -6648,7 +6727,10 @@
           ]
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         },
         {
           "status": 502,
@@ -6698,7 +6780,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Deployment",
@@ -6770,7 +6855,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Deployment",
@@ -6807,7 +6895,10 @@
           ]
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate deployment"
+          ]
         }
       ],
       "section": "Deployment",
@@ -6873,7 +6964,10 @@
           ]
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the certificate"
+          ]
         }
       ],
       "section": "Renewal queue",
@@ -7097,7 +7191,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the cloud connection"
+          ]
         }
       ],
       "section": "Cloud inventory",
@@ -7170,7 +7267,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the cloud connection"
+          ]
         }
       ],
       "section": "Cloud inventory",
@@ -7226,7 +7326,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the cloud connection"
+          ]
         },
         {
           "status": 502,
@@ -7331,7 +7434,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the cloud certificate"
+          ]
         }
       ],
       "section": "Cloud inventory",
@@ -7532,7 +7638,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the CT monitor"
+          ]
         }
       ],
       "section": "Certificate Transparency",
@@ -7599,7 +7708,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the CT monitor"
+          ]
         }
       ],
       "section": "Certificate Transparency",
@@ -7650,7 +7762,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the CT monitor"
+          ]
         },
         {
           "status": 502,
@@ -7929,7 +8044,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the deployment target"
+          ]
         }
       ],
       "section": "Deployment",
@@ -8011,7 +8129,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the deployment target"
+          ]
         }
       ],
       "section": "Deployment",
@@ -8120,6 +8241,12 @@
         },
         {
           "status": 409
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the deployment job"
+          ]
         }
       ],
       "section": "Deployment",
@@ -8151,6 +8278,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the deployment job"
+          ]
         }
       ],
       "section": "Deployment",
@@ -8260,7 +8393,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the discovery result"
+          ]
         }
       ],
       "section": "Discovery",
@@ -8560,7 +8696,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the discovery scan"
+          ]
         }
       ],
       "section": "Discovery",
@@ -8597,6 +8736,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the discovery scan"
+          ]
         }
       ],
       "section": "Discovery",
@@ -8740,7 +8885,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the discovery schedule"
+          ]
         }
       ],
       "section": "Discovery",
@@ -8814,7 +8962,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the discovery schedule"
+          ]
         }
       ],
       "section": "Discovery",
@@ -8865,7 +9016,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the discovery schedule"
+          ]
         }
       ],
       "section": "Discovery",
@@ -8991,6 +9145,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not revoke the display token"
+          ]
         }
       ],
       "section": "Display Tokens",
@@ -9212,7 +9372,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the metadata field"
+          ]
         }
       ],
       "section": "Custom metadata fields",
@@ -9294,7 +9457,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the metadata field"
+          ]
         }
       ],
       "section": "Custom metadata fields",
@@ -9451,7 +9617,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the notification channel"
+          ]
         }
       ],
       "section": "Notification channels",
@@ -9531,7 +9700,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the notification channel"
+          ]
         }
       ],
       "section": "Notification channels",
@@ -9568,6 +9740,12 @@
         {
           "status": 404
         },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the notification channel"
+          ]
+        },
         {
           "status": 502,
           "shape": "object",
@@ -9755,6 +9933,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the CA authority"
+          ]
         }
       ],
       "section": "PKI / CA Management",
@@ -9859,7 +10043,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the CA authority"
+          ]
         }
       ],
       "section": "PKI / CA Management",
@@ -9953,7 +10140,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the CA authority"
+          ]
         }
       ],
       "section": "PKI / CA Management",
@@ -10008,7 +10198,10 @@
           "status": 404
         },
         {
-          "status": 500
+          "status": 500,
+          "errors": [
+            "could not read the CA authority"
+          ]
         }
       ],
       "section": "PKI / CA Management",
@@ -10247,6 +10440,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the policy"
+          ]
         }
       ],
       "section": "Policies",
@@ -10526,6 +10725,12 @@
         },
         {
           "status": 409
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the renewal job"
+          ]
         }
       ],
       "section": "Renewal queue",
@@ -10562,6 +10767,12 @@
         },
         {
           "status": 404
+        },
+        {
+          "status": 500,
+          "errors": [
+            "could not read the renewal job"
+          ]
         }
       ],
       "section": "Renewal queue",
@@ -10785,6 +10996,7 @@
         {
           "status": 500,
           "errors": [
+            "could not read the account",
             "could not generate a password"
           ]
         }