Returns the instance-level ruff.toml content as plain text. Intentionally unauthenticated so the LSP extra container can poll it across any deployment topology. Responds with an empty body when the instance config is unset. Ruff configuration is lint/format policy, not a credential.
Powers the Runtimes admin page (#190/#255 runtime governance) — for each language currently in use anywhere on the instance, how many scripts and flows use it. A language with no usage is simply absent from the response.
Powers the block-on-disable instructive message (#190/#255) — where a language an admin is about to disable is still used, so they know what to migrate first. Capped per object kind on a large instance.
Mints a single-use, TTL’d AuthnRequest ID, records it server-side, sets it as a browser-bound cookie, and redirects to the IdP’s SingleSignOnService with a <samlp:AuthnRequest> on the HTTP-Redirect binding. POST /saml/acs then requires the assertion’s InResponseTo to match that ID, which is what binds the login to this browser (#589). Unauthenticated — this is the login entry point. Also available on GET so the sign-in page can hand off with a plain navigation.
Managed licence mode (#1753): every workspace and every licence binding, with the state each resolves to. Superadmin only. Empty in instance mode, where the instance licence answers for every workspace. Refresh with POST /settings/refresh_workspace_licences. Paginated (#1953), ordered by workspace id; total counts all of them.
Managed licence mode (#1750): fetch every workspace’s signed licence from the licence service with the host key, verify and store the genuine ones, and mark workspaces the service no longer serves. Superadmin only. A no-op in instance mode. A response that would revoke more than half of the live workspace licences at once is held back by the mass-revocation guard (reported in mass_revocation_refused); those workspaces then reach Trial and read-only through the ladder, at most ~96h after their last refresh.
Send a restart signal to all workers in the specified worker group. Workers will gracefully shut down and are expected to be restarted by their supervisor. Requires devops role. Deprecated (#370): use POST /settings/restart_worker_pool/{worker_pool} instead.
Send a restart signal to all workers in the specified worker pool. Workers will gracefully shut down and are expected to be restarted by their supervisor. Requires devops role.
Revalidates the licence now instead of waiting for the periodic poll. Superadmin only. Never errors on a failed validation — the escalation ladder owns what failure means, so the resolved state is reported instead. recovered is true when this call cleared an existing failure (and therefore lifted read-only).