uplim.api.v1.PipelineAdminService
postList Step Blob Outputs
Returns 5-minute presigned GET URLs with mime and size for a step's committed blob outputs and run-scoped local blobs. NotFound when the run or step run is missing. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postList Step KV Outputs
Returns the live KV entries a step recorded on the run's upload, each value serialised as JSON. Empty for non-upload runs. NotFound when the run or step run is missing. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postList Step Local Outputs
Returns the run-scoped locals a step wrote, as a JSON object. NotFound when the run or step run is missing. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postArchive Pipeline
Archives a pipeline so it can no longer be published. NotFound for an unknown id. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postCancel Pipeline Run
Cancels an in-flight run: marks it CANCELLED with `reason` (default "Cancelled from admin UI") and cancels its PENDING and RUNNING step runs. The coordinator notices on its next status poll and tears down the running step's Job. Already-terminal runs are returned unchanged. NotFound for an unknown run. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postGet Pipeline
Gets a pipeline by id, checking the caller's access to its integration. NotFound for an unknown id. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postGet Pipeline Run
Gets a run with all of its step runs. NotFound for an unknown id. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postGet Pipeline Run Trace
Returns the run's public (`upl.public`) trace spans from the coordinator's trace store; internal coordinator spans are filtered out. Returns an empty list rather than an error when the run has no trace id or the coordinator is unreachable. NotFound for an unknown run. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postGet Pipeline Snapshot
Gets the frozen snapshot a run executed against (full step list and manifests), checking access through the snapshot's pipeline. NotFound for an unknown id. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postGet Step Logs
Mints a 5-minute presigned GET URL for a step's persisted JSONL log object, with its truncation flag. Returns an empty URL when the step has no log object yet. NotFound for an unknown run. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postList Available Steps
Lists the latest version of each step the integration can reference: its own packages first, then the public shelf (platform or third-party). Optionally filtered by step kind and by resource kind. Returns an empty list when the steps registry isn't configured; the public shelf is skipped if it is unavailable. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postList Composable Pipelines
Lists the pipelines that can be referenced from a sub-pipeline step: the PUBLISHED pipelines of the system Default integration. integration_id only scopes the access check; the result is the same for every tenant. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postList Pipeline Runs
Lists runs newest first (ties broken by run id): one integration's, or with `owner_scope.team` every integration that team owns, paged across all of them. `integration_id` alongside a team narrows to that integration, which must be the team's (NotFound otherwise). `limit` defaults to 50 and is clamped to 200. `page_token` is the previous response's `next_page_token` (InvalidArgument if unparseable); `next_page_token` is empty on the last page. Status, trigger, bucket, time-range, content-type URN, pipeline version and upload filters are applied in the query, so every page but the last is full. **Access:** for one integration, an authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), a upl writer or above in the team that owns it, or any caller holding the `upl:admin` scope; system integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied. For a team, the upl writer role or above in that team or `upl:admin`; a team the caller has no such role in is NotFound. A system integration the team owns is included only for `upl:admin` (naming it without that is PermissionDenied).
postList Pipeline Runs For Resource
Lists the runs for one upload or folder, newest first, limited to runs belonging to the given integration. InvalidArgument when neither upload_id nor folder_id is set. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postList Pipelines
Lists every pipeline (any status) belonging to the integration. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postList Step Versions
Lists a step package's versions newest first with validation status. For a package owned by another integration (named by its slug prefix) only public versions are returned. Empty when the steps registry isn't configured. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postPublish Pipeline
Publishes a pipeline: inlines sub-pipeline steps (one level only), resolves and freezes every step manifest from the steps registry, bumps the version and writes a PipelineSnapshot. Returns FailedPrecondition when the pipeline is archived or any publish check fails: step config against its schema, manifest kinds against the resource kind, BUILTIN steps, KV key registrations, required secrets, or a total time budget above the orphan reaper's max age (default 1800s). **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postResolve Step Ref
Resolves a `<name>@<version>` step ref to its registry manifest, the same manifest PublishPipeline would freeze. A slugged name resolves against the owning integration and the registry only returns versions the caller owns or that are public (NotFound otherwise). `pipeline:` refs return an empty manifest. InvalidArgument for a malformed ref; FailedPrecondition when the registry isn't configured. integration_id accepts a UUID or slug. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.
postUpsert Pipeline
Creates or updates a pipeline keyed by id, or by (integration, content_type_urn, resource_kind) when id is empty. The integration is taken from `integration_id` (UUID or slug) or else from the URN's slug prefix. On update, content_type_urn and resource_kind are immutable (InvalidArgument), the policy is replaced, the status drops back to DRAFT, and the step list is replaced atomically in request order. InvalidArgument when `pipeline` is missing. **Access:** authenticated caller who owns the integration's OAuth client (and its application, when the client belongs to one), or any caller holding the `upl:admin` scope. System integrations such as Default require `upl:admin`. Missing integrations return NotFound; other callers get PermissionDenied.