diff --git a/config.json b/config.json
index f401acd5..32ea31bc 100644
--- a/config.json
+++ b/config.json
@@ -3,7 +3,7 @@
   "licenseName": "MIT",
   "moduleName": "NotehubJs",
   "npmRepository": "https://registry.npmjs.org",
-  "projectVersion": "6.1.0",
+  "projectVersion": "6.2.0-beta.4",
   "sourceFolder": "src",
   "usePromises": true
 }
diff --git a/openapi.yaml b/openapi.yaml
index 2f796c02..7c647cd8 100644
--- a/openapi.yaml
+++ b/openapi.yaml
@@ -3,14 +3,14 @@ info:
   contact:
     email: engineering@blues.io
     name: Blues Engineering
-    url: 'https://dev.blues.io/support/'
+    url: https://dev.blues.io/support/
   description: |
     The OpenAPI definition for the Notehub.io API.
   title: Notehub API
   version: 1.2.0
 servers:
   - description: Production server
-    url: 'https://api.notefile.net'
+    url: https://api.notefile.net
 paths:
   /auth/login:
     post:
@@ -143,7 +143,7 @@ paths:
         - personalAccessToken: []
       tags:
         - billing_account
-  '/v1/billing-accounts/{billingAccountUID}':
+  /v1/billing-accounts/{billingAccountUID}:
     get:
       operationId: GetBillingAccount
       description: Get Billing Account Information
@@ -191,10 +191,10 @@ paths:
         - personalAccessToken: []
       tags:
         - billing_account
-  '/v1/billing-accounts/{billingAccountUID}/balance-history':
+  /v1/billing-accounts/{billingAccountUID}/balance-history:
     get:
       operationId: GetBillingAccountBalanceHistory
-      description: 'Get Billing Account Balance history, only enterprise supported'
+      description: Get Billing Account Balance history
       parameters:
         - $ref: '#/components/parameters/billingAccountUIDParam'
         - $ref: '#/components/parameters/startDateParam'
@@ -231,7 +231,7 @@ paths:
         - personalAccessToken: []
       tags:
         - billing_account
-  '/v1/products/{productUID}/devices/{deviceUID}/environment_variables_with_pin':
+  /v1/products/{productUID}/devices/{deviceUID}/environment_variables_with_pin:
     get:
       operationId: GetDeviceEnvironmentVariablesByPin
       description: Get environment variables of a device with device pin authorization
@@ -263,7 +263,7 @@ paths:
           $ref: '#/components/responses/ErrorResponse'
       tags:
         - device
-  '/v1/products/{productUID}/ext-devices/{deviceUID}/event':
+  /v1/products/{productUID}/ext-devices/{deviceUID}/event:
     post:
       operationId: CreateEventExtDevice
       description: Creates an event using specified webhook
@@ -286,7 +286,7 @@ paths:
         - personalAccessToken: []
       tags:
         - external devices
-  '/v1/products/{productUID}/ext-devices/{deviceUID}/session/close':
+  /v1/products/{productUID}/ext-devices/{deviceUID}/session/close:
     post:
       operationId: ExtDeviceSessionClose
       description: Closes the session for the specified device if open
@@ -309,7 +309,7 @@ paths:
         - personalAccessToken: []
       tags:
         - external devices
-  '/v1/products/{productUID}/ext-devices/{deviceUID}/session/open':
+  /v1/products/{productUID}/ext-devices/{deviceUID}/session/open:
     post:
       operationId: ExtDeviceSessionOpen
       description: Create a Session for the specified device.  | If a session is currently open it will be closed and a new one opened.
@@ -332,7 +332,7 @@ paths:
         - personalAccessToken: []
       tags:
         - external devices
-  '/v1/products/{productUID}/project':
+  /v1/products/{productUID}/project:
     get:
       operationId: GetProjectByProduct
       description: Get a Project by ProductUID
@@ -412,7 +412,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}':
+  /v1/projects/{projectOrProductUID}:
     delete:
       operationId: DeleteProject
       description: Delete a Project by ProjectUID
@@ -445,7 +445,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/alerts':
+  /v1/projects/{projectOrProductUID}/alerts:
     get:
       operationId: GetAlerts
       description: Get list of defined Alerts
@@ -463,7 +463,7 @@ paths:
         - personalAccessToken: []
       tags:
         - alert
-  '/v1/projects/{projectOrProductUID}/aws-role-config':
+  /v1/projects/{projectOrProductUID}/aws-role-config:
     get:
       operationId: GetAWSRoleConfig
       summary: Get AWS role configuration for role-based authentication
@@ -485,7 +485,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/clone':
+  /v1/projects/{projectOrProductUID}/clone:
     post:
       operationId: CloneProject
       description: Clone a Project
@@ -500,7 +500,7 @@ paths:
               type: object
               properties:
                 billing_account_uid:
-                  description: 'The billing account UID for the project. The caller of the API must be able to create projects within the billing account, otherwise an error will be returned.'
+                  description: The billing account UID for the project. The caller of the API must be able to create projects within the billing account, otherwise an error will be returned.
                   type: string
                 disable_clone_fleets:
                   description: Whether to disallow the cloning of the fleets from the parent project.  Default is false if not specified.
@@ -527,7 +527,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/devices':
+  /v1/projects/{projectOrProductUID}/devices:
     get:
       operationId: GetDevices
       description: Get Devices of a Project
@@ -553,7 +553,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}:
     delete:
       operationId: DeleteDevice
       description: Delete Device
@@ -585,7 +585,7 @@ paths:
     parameters:
       - $ref: '#/components/parameters/projectOrProductUIDParam'
       - $ref: '#/components/parameters/deviceUIDParam'
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/dfu/{firmwareType}/history':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/dfu/{firmwareType}/history:
     get:
       operationId: GetDeviceDfuHistory
       description: Get device DFU history for host or Notecard firmware
@@ -606,7 +606,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/dfu/{firmwareType}/status':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/dfu/{firmwareType}/status:
     get:
       operationId: GetDeviceDfuStatus
       description: Get device DFU history for host or Notecard firmware
@@ -627,7 +627,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/disable':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/disable:
     post:
       operationId: DisableDevice
       description: Disable Device
@@ -643,7 +643,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/enable':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/enable:
     post:
       operationId: EnableDevice
       description: Enable Device
@@ -659,7 +659,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/environment_hierarchy':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/environment_hierarchy:
     get:
       operationId: GetDeviceEnvironmentHierarchy
       summary: Get environment variable hierarchy for a device
@@ -681,7 +681,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/environment_variables':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/environment_variables:
     get:
       operationId: GetDeviceEnvironmentVariables
       description: Get environment variables of a device
@@ -716,7 +716,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/environment_variables/{key}':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/environment_variables/{key}:
     delete:
       operationId: DeleteDeviceEnvironmentVariable
       description: Delete environment variable of a device
@@ -738,7 +738,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/files':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/files:
     delete:
       operationId: DeleteNotefiles
       description: Deletes Notefiles and the Notes they contain.
@@ -799,7 +799,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/fleets':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/fleets:
     delete:
       operationId: DeleteDeviceFromFleets
       description: Remove Device from Fleets
@@ -871,7 +871,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/health-log':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/health-log:
     get:
       operationId: GetDeviceHealthLog
       description: Get Device Health Log
@@ -923,7 +923,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/latest':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/latest:
     get:
       operationId: GetDeviceLatestEvents
       description: Get Device Latest Events
@@ -939,7 +939,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/notefiles/{notefileID}':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/notefiles/{notefileID}:
     post:
       operationId: CreateNotefile
       description: Creates an empty Notefile on the device.
@@ -956,10 +956,10 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/notes/{notefileID}':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/notes/{notefileID}:
     get:
       operationId: GetNotefile
-      description: 'For .qi files, returns the queued up notes.  For .db files, returns all notes in the notefile'
+      description: For .qi files, returns the queued up notes.  For .db files, returns all notes in the notefile
       parameters:
         - $ref: '#/components/parameters/projectOrProductUIDParam'
         - $ref: '#/components/parameters/deviceUIDParam'
@@ -1007,7 +1007,7 @@ paths:
         - device
     post:
       operationId: AddQiNote
-      description: 'Adds a Note to a Notefile, creating the Notefile if it doesn''t yet exist.'
+      description: Adds a Note to a Notefile, creating the Notefile if it doesn't yet exist.
       parameters:
         - $ref: '#/components/parameters/projectOrProductUIDParam'
         - $ref: '#/components/parameters/deviceUIDParam'
@@ -1028,7 +1028,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/notes/{notefileID}/{noteID}':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/notes/{notefileID}/{noteID}:
     delete:
       operationId: DeleteNote
       description: Delete a note from a .db or .qi notefile
@@ -1137,10 +1137,10 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/plans':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/plans:
     get:
       operationId: GetDevicePlans
-      description: 'Get Data Plans associated with the device, this include the primary sim, any external sim, as well as any satellite connections.'
+      description: Get Data Plans associated with the device, this include the primary sim, any external sim, as well as any satellite connections.
       responses:
         '200':
           $ref: '#/components/responses/DevicePlansResponse'
@@ -1153,7 +1153,7 @@ paths:
     parameters:
       - $ref: '#/components/parameters/projectOrProductUIDParam'
       - $ref: '#/components/parameters/deviceUIDParam'
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/provision':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/provision:
     post:
       operationId: ProvisionDevice
       description: Provision Device for a Project
@@ -1196,7 +1196,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/public-key':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/public-key:
     get:
       operationId: GetDevicePublicKey
       description: Get Device Public Key
@@ -1224,7 +1224,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/sessions':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/sessions:
     get:
       operationId: GetDeviceSessions
       description: Get Device Sessions
@@ -1245,7 +1245,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/{deviceUID}/signal':
+  /v1/projects/{projectOrProductUID}/devices/{deviceUID}/signal:
     post:
       operationId: SignalDevice
       description: Send a signal from Notehub to a Notecard.
@@ -1276,7 +1276,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/devices/public-keys':
+  /v1/projects/{projectOrProductUID}/devices/public-keys:
     get:
       operationId: GetDevicePublicKeys
       description: Get Device Public Keys of a Project
@@ -1312,7 +1312,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/dfu/{firmwareType}/{action}':
+  /v1/projects/{projectOrProductUID}/dfu/{firmwareType}/{action}:
     post:
       operationId: PerformDfuAction
       description: Update/cancel host or notecard firmware updates
@@ -1345,7 +1345,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/dfu/{firmwareType}/history':
+  /v1/projects/{projectOrProductUID}/dfu/{firmwareType}/history:
     get:
       operationId: GetDevicesDfuHistory
       description: Get host or Notecard DFU history for all devices that match the filter criteria
@@ -1378,7 +1378,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/dfu/{firmwareType}/status':
+  /v1/projects/{projectOrProductUID}/dfu/{firmwareType}/status:
     get:
       operationId: GetDevicesDfuStatus
       description: Get host or Notecard DFU history for all devices that match the filter criteria
@@ -1411,7 +1411,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/environment_hierarchy':
+  /v1/projects/{projectOrProductUID}/environment_hierarchy:
     get:
       operationId: GetProjectEnvironmentHierarchy
       summary: Get environment variable hierarchy for a device
@@ -1432,7 +1432,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/environment_variables':
+  /v1/projects/{projectOrProductUID}/environment_variables:
     get:
       operationId: GetProjectEnvironmentVariables
       description: Get environment variables of a project
@@ -1464,7 +1464,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/environment_variables/{key}':
+  /v1/projects/{projectOrProductUID}/environment_variables/{key}:
     delete:
       operationId: DeleteProjectEnvironmentVariable
       description: Delete an environment variable of a project by key
@@ -1485,7 +1485,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/events':
+  /v1/projects/{projectOrProductUID}/events:
     get:
       operationId: GetEvents
       description: Get Events of a Project
@@ -1532,7 +1532,7 @@ paths:
         - personalAccessToken: []
       tags:
         - event
-  '/v1/projects/{projectOrProductUID}/events-cursor':
+  /v1/projects/{projectOrProductUID}/events-cursor:
     get:
       operationId: GetEventsByCursor
       description: Get Events of a Project by cursor
@@ -1554,7 +1554,7 @@ paths:
         - personalAccessToken: []
       tags:
         - event
-  '/v1/projects/{projectOrProductUID}/events/{eventUID}/route-logs':
+  /v1/projects/{projectOrProductUID}/events/{eventUID}/route-logs:
     get:
       operationId: GetRouteLogsByEvent
       description: Get Route Logs by Event UID
@@ -1576,7 +1576,7 @@ paths:
         - personalAccessToken: []
       tags:
         - event
-  '/v1/projects/{projectOrProductUID}/firmware':
+  /v1/projects/{projectOrProductUID}/firmware:
     get:
       operationId: GetFirmwareInfo
       description: Get Available Firmware Information
@@ -1606,7 +1606,34 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/firmware/{firmwareType}/{filename}':
+  /v1/projects/{projectOrProductUID}/firmware/{firmwareType}/{filename}:
+    delete:
+      operationId: DeleteFirmware
+      description: |
+        Delete a host firmware binary. The filename must be the full stored filename including the timestamp suffix (e.g. test$20260324190911.bin) as returned by the firmware upload or list endpoints.
+      parameters:
+        - $ref: '#/components/parameters/projectOrProductUIDParam'
+        - name: firmwareType
+          in: path
+          required: true
+          schema:
+            type: string
+            enum:
+              - host
+        - name: filename
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '204':
+          description: Firmware deleted successfully
+        default:
+          $ref: '#/components/responses/ErrorResponse'
+      security:
+        - personalAccessToken: []
+      tags:
+        - project
     get:
       operationId: DownloadFirmware
       description: Download firmware binary
@@ -1632,6 +1659,44 @@ paths:
         - personalAccessToken: []
       tags:
         - project
+    post:
+      operationId: UpdateFirmware
+      description: |
+        Update the metadata of an existing host firmware entry. The filename must be the full stored filename including the timestamp suffix (e.g. test$20260324190911.bin) as returned by the firmware upload or list endpoints.
+      parameters:
+        - $ref: '#/components/parameters/projectOrProductUIDParam'
+        - name: firmwareType
+          in: path
+          required: true
+          schema:
+            type: string
+            enum:
+              - host
+        - name: filename
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        description: Firmware metadata fields to update. All fields are optional; only provided fields will be updated.
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/UpdateHostFirmwareRequest'
+      responses:
+        '200':
+          description: Update successful
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/FirmwareInfo'
+        default:
+          $ref: '#/components/responses/ErrorResponse'
+      security:
+        - personalAccessToken: []
+      tags:
+        - project
     put:
       operationId: UploadFirmware
       description: Upload firmware binary
@@ -1645,7 +1710,7 @@ paths:
             type: string
         - name: version
           in: query
-          description: 'Firmware version (optional). If not provided, the version will be extracted from firmware binary if available, otherwise left empty'
+          description: Firmware version (optional). If not provided, the version will be extracted from firmware binary if available, otherwise left empty
           required: false
           schema:
             type: string
@@ -1676,7 +1741,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/fleets':
+  /v1/projects/{projectOrProductUID}/fleets:
     get:
       operationId: GetFleets
       description: Get Project Fleets
@@ -1705,7 +1770,7 @@ paths:
                 connectivity_assurance:
                   $ref: '#/components/schemas/FleetConnectivityAssurance'
                 label:
-                  description: 'The label, or name,  for the Fleet.'
+                  description: The label, or name,  for the Fleet.
                   type: string
                 smart_rule:
                   $ref: '#/components/schemas/FleetRule'
@@ -1724,7 +1789,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/fleets/{fleetUID}':
+  /v1/projects/{projectOrProductUID}/fleets/{fleetUID}:
     delete:
       operationId: DeleteFleet
       description: Delete Fleet
@@ -1801,7 +1866,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/fleets/{fleetUID}/devices':
+  /v1/projects/{projectOrProductUID}/fleets/{fleetUID}/devices:
     get:
       operationId: GetFleetDevices
       description: Get Devices of a Fleet within a Project
@@ -1827,7 +1892,7 @@ paths:
         - personalAccessToken: []
       tags:
         - device
-  '/v1/projects/{projectOrProductUID}/fleets/{fleetUID}/environment_hierarchy':
+  /v1/projects/{projectOrProductUID}/fleets/{fleetUID}/environment_hierarchy:
     get:
       operationId: GetFleetEnvironmentHierarchy
       summary: Get environment variable hierarchy for a device
@@ -1849,7 +1914,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/fleets/{fleetUID}/environment_variables':
+  /v1/projects/{projectOrProductUID}/fleets/{fleetUID}/environment_variables:
     get:
       operationId: GetFleetEnvironmentVariables
       description: Get environment variables of a fleet
@@ -1884,7 +1949,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/fleets/{fleetUID}/environment_variables/{key}':
+  /v1/projects/{projectOrProductUID}/fleets/{fleetUID}/environment_variables/{key}:
     delete:
       operationId: DeleteFleetEnvironmentVariable
       description: Delete environment variables of a fleet
@@ -1906,7 +1971,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/fleets/{fleetUID}/events':
+  /v1/projects/{projectOrProductUID}/fleets/{fleetUID}/events:
     get:
       operationId: GetFleetEvents
       description: Get Events of a Fleet
@@ -1953,7 +2018,7 @@ paths:
         - personalAccessToken: []
       tags:
         - event
-  '/v1/projects/{projectOrProductUID}/fleets/{fleetUID}/events-cursor':
+  /v1/projects/{projectOrProductUID}/fleets/{fleetUID}/events-cursor:
     get:
       operationId: GetFleetEventsByCursor
       description: Get Events of a Fleet by cursor
@@ -1977,7 +2042,7 @@ paths:
         - personalAccessToken: []
       tags:
         - event
-  '/v1/projects/{projectOrProductUID}/global-transformation':
+  /v1/projects/{projectOrProductUID}/global-transformation:
     post:
       operationId: SetGlobalEventTransformation
       description: Set the project-level event JSONata transformation
@@ -1999,7 +2064,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/global-transformation/disable':
+  /v1/projects/{projectOrProductUID}/global-transformation/disable:
     post:
       operationId: DisableGlobalEventTransformation
       description: Disable the project-level event JSONata transformation
@@ -2014,7 +2079,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/global-transformation/enable':
+  /v1/projects/{projectOrProductUID}/global-transformation/enable:
     post:
       operationId: EnableGlobalEventTransformation
       description: Enable the project-level event JSONata transformation
@@ -2029,7 +2094,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/jobs':
+  /v1/projects/{projectOrProductUID}/jobs:
     get:
       operationId: GetJobs
       description: List all batch jobs for a project
@@ -2074,7 +2139,7 @@ paths:
         - personalAccessToken: []
       tags:
         - jobs
-  '/v1/projects/{projectOrProductUID}/jobs/{jobUID}':
+  /v1/projects/{projectOrProductUID}/jobs/{jobUID}:
     delete:
       operationId: DeleteJob
       description: Delete a batch job
@@ -2109,7 +2174,7 @@ paths:
         - personalAccessToken: []
       tags:
         - jobs
-  '/v1/projects/{projectOrProductUID}/jobs/{jobUID}/run':
+  /v1/projects/{projectOrProductUID}/jobs/{jobUID}/run:
     post:
       operationId: RunJob
       description: Execute a batch job
@@ -2134,7 +2199,7 @@ paths:
         - personalAccessToken: []
       tags:
         - jobs
-  '/v1/projects/{projectOrProductUID}/jobs/{jobUID}/runs':
+  /v1/projects/{projectOrProductUID}/jobs/{jobUID}/runs:
     get:
       operationId: GetJobRuns
       description: List all runs for a specific job
@@ -2165,7 +2230,7 @@ paths:
         - personalAccessToken: []
       tags:
         - jobs
-  '/v1/projects/{projectOrProductUID}/jobs/runs/{reportUID}':
+  /v1/projects/{projectOrProductUID}/jobs/runs/{reportUID}:
     get:
       operationId: GetJobRun
       description: Get the result of a job execution
@@ -2183,7 +2248,7 @@ paths:
         - personalAccessToken: []
       tags:
         - jobs
-  '/v1/projects/{projectOrProductUID}/jobs/runs/{reportUID}/cancel':
+  /v1/projects/{projectOrProductUID}/jobs/runs/{reportUID}/cancel:
     post:
       operationId: CancelJobRun
       description: Cancel a running job execution
@@ -2201,7 +2266,7 @@ paths:
         - personalAccessToken: []
       tags:
         - jobs
-  '/v1/projects/{projectOrProductUID}/members':
+  /v1/projects/{projectOrProductUID}/members:
     get:
       operationId: GetProjectMembers
       description: Get Project Members
@@ -2227,7 +2292,7 @@ paths:
         - project
     parameters:
       - $ref: '#/components/parameters/projectOrProductUIDParam'
-  '/v1/projects/{projectOrProductUID}/monitors':
+  /v1/projects/{projectOrProductUID}/monitors:
     get:
       operationId: GetMonitors
       description: Get list of defined Monitors
@@ -2267,7 +2332,7 @@ paths:
         - personalAccessToken: []
       tags:
         - monitor
-  '/v1/projects/{projectOrProductUID}/monitors/{monitorUID}':
+  /v1/projects/{projectOrProductUID}/monitors/{monitorUID}:
     delete:
       operationId: DeleteMonitor
       description: Delete Monitor
@@ -2332,7 +2397,7 @@ paths:
         - personalAccessToken: []
       tags:
         - monitor
-  '/v1/projects/{projectOrProductUID}/products':
+  /v1/projects/{projectOrProductUID}/products:
     get:
       operationId: GetProducts
       description: Get Products within a Project
@@ -2372,7 +2437,7 @@ paths:
                   items:
                     type: string
                 disable_devices_by_default:
-                  description: 'If `true`, devices provisioned to this product will be automatically disabled by default.'
+                  description: If `true`, devices provisioned to this product will be automatically disabled by default.
                   type: boolean
                 label:
                   description: The label for the Product.
@@ -2396,7 +2461,7 @@ paths:
         - personalAccessToken: []
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/products/{productUID}':
+  /v1/projects/{projectOrProductUID}/products/{productUID}:
     delete:
       operationId: DeleteProduct
       description: Delete a product
@@ -2412,7 +2477,7 @@ paths:
     parameters:
       - $ref: '#/components/parameters/projectOrProductUIDParam'
       - $ref: '#/components/parameters/productUIDParam'
-  '/v1/projects/{projectOrProductUID}/routes':
+  /v1/projects/{projectOrProductUID}/routes:
     get:
       operationId: GetRoutes
       description: Get all Routes within a Project
@@ -2426,34 +2491,34 @@ paths:
               example:
                 - disabled: false
                   label: success route
-                  modified: '2020-03-09T17:58:37Z'
+                  modified: 2020-03-09T17:58:37Z
                   type: http
-                  uid: 'route:8d65a087d5d290ce5bdf03aeff2becc0'
+                  uid: route:8d65a087d5d290ce5bdf03aeff2becc0
                 - disabled: false
                   label: failing route
-                  modified: '2020-03-09T17:59:15Z'
+                  modified: 2020-03-09T17:59:15Z
                   type: http
-                  uid: 'route:a9eaad31d5cee8d01a42762f71fb777a'
+                  uid: route:a9eaad31d5cee8d01a42762f71fb777a
                 - disabled: true
                   label: disabled route
-                  modified: '2020-03-09T17:59:44Z'
+                  modified: 2020-03-09T17:59:44Z
                   type: http
-                  uid: 'route:02ddc0e6e236c2a7e482da62047229ad'
+                  uid: route:02ddc0e6e236c2a7e482da62047229ad
                 - disabled: false
                   label: Proxy Route
-                  modified: '2020-03-09T17:58:36Z'
+                  modified: 2020-03-09T17:58:36Z
                   type: proxy
-                  uid: 'route:0ac565deb7b478a250bb82348b9cfdd4'
+                  uid: route:0ac565deb7b478a250bb82348b9cfdd4
                 - disabled: false
                   label: Myjsonlive Webtest
-                  modified: '2020-03-09T17:58:35Z'
+                  modified: 2020-03-09T17:58:35Z
                   type: proxy
-                  uid: 'route:fb1b9e0aba1bf030311ba2c3c1e3efd7'
+                  uid: route:fb1b9e0aba1bf030311ba2c3c1e3efd7
                 - disabled: false
                   label: Myjsonlive Echo
-                  modified: '2020-03-09T17:58:34Z'
+                  modified: 2020-03-09T17:58:34Z
                   type: proxy
-                  uid: 'route:7804818f84a3be6193e14d804fe7fca7'
+                  uid: route:7804818f84a3be6193e14d804fe7fca7
               schema:
                 type: array
                 items:
@@ -2483,13 +2548,13 @@ paths:
                     disable_http_headers: false
                     filter: {}
                     fleets:
-                      - 'fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d'
+                      - fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d
                     http_headers:
                       X-My-Header: value
                     throttle_ms: 100
                     timeout: 5000
                     transform: {}
-                    url: 'https://example.com/ingest'
+                    url: https://example.com/ingest
                   label: Route Label
             schema:
               $ref: '#/components/schemas/NotehubRoute'
@@ -2506,16 +2571,16 @@ paths:
                     system_notefiles: false
                     type: ''
                   fleets:
-                    - 'fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d'
+                    - fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d
                   http_headers: null
                   throttle_ms: 100
                   timeout: 0
                   transform: {}
-                  url: 'http://route.url'
+                  url: http://route.url
                 label: Route Label
-                modified: '2020-03-09T17:59:44Z'
+                modified: 2020-03-09T17:59:44Z
                 type: http
-                uid: 'route:8d65a087d5d290ce5bdf03aeff2becc0'
+                uid: route:8d65a087d5d290ce5bdf03aeff2becc0
               schema:
                 $ref: '#/components/schemas/NotehubRoute'
         default:
@@ -2524,7 +2589,7 @@ paths:
         - personalAccessToken: []
       tags:
         - route
-  '/v1/projects/{projectOrProductUID}/routes/{routeUID}':
+  /v1/projects/{projectOrProductUID}/routes/{routeUID}:
     delete:
       operationId: DeleteRoute
       description: Delete single route within a project
@@ -2559,16 +2624,16 @@ paths:
                     system_notefiles: false
                     type: ''
                   fleets:
-                    - 'fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d'
+                    - fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d
                   http_headers: null
                   throttle_ms: 100
                   timeout: 0
                   transform: {}
-                  url: 'http://route.url'
+                  url: http://route.url
                 label: Route Label
-                modified: '2020-03-09T17:59:44Z'
+                modified: 2020-03-09T17:59:44Z
                 type: http
-                uid: 'route:8d65a087d5d290ce5bdf03aeff2becc0'
+                uid: route:8d65a087d5d290ce5bdf03aeff2becc0
               schema:
                 $ref: '#/components/schemas/NotehubRoute'
         default:
@@ -2637,7 +2702,7 @@ paths:
         - personalAccessToken: []
       tags:
         - route
-  '/v1/projects/{projectOrProductUID}/routes/{routeUID}/route-logs':
+  /v1/projects/{projectOrProductUID}/routes/{routeUID}/route-logs:
     get:
       operationId: GetRouteLogsByRoute
       description: Get Route Logs by Route UID
@@ -2671,7 +2736,7 @@ paths:
         - personalAccessToken: []
       tags:
         - route
-  '/v1/projects/{projectOrProductUID}/schemas':
+  /v1/projects/{projectOrProductUID}/schemas:
     get:
       operationId: GetNotefileSchemas
       summary: Get variable format for a notefile
@@ -2688,7 +2753,95 @@ paths:
                   $ref: '#/components/schemas/NotefileSchema'
       tags:
         - project
-  '/v1/projects/{projectOrProductUID}/usage/data':
+  /v1/projects/{projectOrProductUID}/secrets:
+    get:
+      operationId: GetProjectSecrets
+      description: Get all secrets for a project (metadata only, values are never returned)
+      responses:
+        '200':
+          $ref: '#/components/responses/GetProjectSecretsResponse'
+        default:
+          $ref: '#/components/responses/ErrorResponse'
+      security:
+        - personalAccessToken: []
+      tags:
+        - project
+    parameters:
+      - $ref: '#/components/parameters/projectOrProductUIDParam'
+    post:
+      operationId: CreateProjectSecret
+      description: Create a new project secret
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/CreateProjectSecretRequest'
+      responses:
+        '201':
+          description: Secret created successfully
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ProjectSecret'
+        '400':
+          $ref: '#/components/responses/ErrorResponse'
+        '409':
+          $ref: '#/components/responses/ErrorResponse'
+        default:
+          $ref: '#/components/responses/ErrorResponse'
+      security:
+        - personalAccessToken: []
+      tags:
+        - project
+  /v1/projects/{projectOrProductUID}/secrets/{secretName}:
+    delete:
+      operationId: DeleteProjectSecret
+      description: Delete a project secret by name
+      responses:
+        '204':
+          description: Secret deleted successfully
+        '404':
+          $ref: '#/components/responses/ErrorResponse'
+        default:
+          $ref: '#/components/responses/ErrorResponse'
+      security:
+        - personalAccessToken: []
+      tags:
+        - project
+    parameters:
+      - $ref: '#/components/parameters/projectOrProductUIDParam'
+      - name: secretName
+        in: path
+        description: The name of the secret.
+        required: true
+        schema:
+          type: string
+    put:
+      operationId: UpdateProjectSecret
+      description: Update the value of an existing project secret
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/UpdateProjectSecretRequest'
+      responses:
+        '200':
+          description: Secret updated successfully
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ProjectSecret'
+        '404':
+          $ref: '#/components/responses/ErrorResponse'
+        default:
+          $ref: '#/components/responses/ErrorResponse'
+      security:
+        - personalAccessToken: []
+      tags:
+        - project
+  /v1/projects/{projectOrProductUID}/usage/data:
     get:
       operationId: GetDataUsage
       description: Get data usage in bytes for a project with time range and period aggregation
@@ -2729,10 +2882,10 @@ paths:
         - personalAccessToken: []
       tags:
         - usage
-  '/v1/projects/{projectOrProductUID}/usage/events':
+  /v1/projects/{projectOrProductUID}/usage/events:
     get:
       operationId: GetEventsUsage
-      description: 'Get events usage for a project with time range and period aggregation, when endDate is 0 or unspecified the current time is implied'
+      description: Get events usage for a project with time range and period aggregation, when endDate is 0 or unspecified the current time is implied
       parameters:
         - $ref: '#/components/parameters/projectOrProductUIDParam'
         - $ref: '#/components/parameters/startDateParam'
@@ -2773,7 +2926,7 @@ paths:
           style: form
         - name: skipRecentData
           in: query
-          description: 'When true, skips fetching recent data from raw event tables and only returns data from summary tables. Use this for better performance on large projects.'
+          description: When true, skips fetching recent data from raw event tables and only returns data from summary tables. Use this for better performance on large projects.
           required: false
           schema:
             type: boolean
@@ -2798,10 +2951,10 @@ paths:
         - personalAccessToken: []
       tags:
         - usage
-  '/v1/projects/{projectOrProductUID}/usage/route-logs':
+  /v1/projects/{projectOrProductUID}/usage/route-logs:
     get:
       operationId: GetRouteLogsUsage
-      description: 'Get route logs usage for a project with time range and period aggregation, when endDate is 0 or unspecified the current time is implied'
+      description: Get route logs usage for a project with time range and period aggregation, when endDate is 0 or unspecified the current time is implied
       parameters:
         - $ref: '#/components/parameters/projectOrProductUIDParam'
         - $ref: '#/components/parameters/startDateParam'
@@ -2830,7 +2983,7 @@ paths:
               - project
         - name: skipRecentData
           in: query
-          description: 'When true, skips fetching recent data from raw event tables and only returns data from summary tables. Use this for better performance on large projects.'
+          description: When true, skips fetching recent data from raw event tables and only returns data from summary tables. Use this for better performance on large projects.
           required: false
           schema:
             type: boolean
@@ -2844,10 +2997,10 @@ paths:
         - personalAccessToken: []
       tags:
         - usage
-  '/v1/projects/{projectOrProductUID}/usage/sessions':
+  /v1/projects/{projectOrProductUID}/usage/sessions:
     get:
       operationId: GetSessionsUsage
-      description: 'Get sessions usage for a project with time range and period aggregation, when endDate is 0 or unspecified the current time is implied'
+      description: Get sessions usage for a project with time range and period aggregation, when endDate is 0 or unspecified the current time is implied
       parameters:
         - $ref: '#/components/parameters/projectOrProductUIDParam'
         - $ref: '#/components/parameters/startDateParam'
@@ -2878,7 +3031,7 @@ paths:
               - project
         - name: skipRecentData
           in: query
-          description: 'When true, skips fetching recent data from raw event tables and only returns data from summary tables. Use this for better performance on large projects.'
+          description: When true, skips fetching recent data from raw event tables and only returns data from summary tables. Use this for better performance on large projects.
           required: false
           schema:
             type: boolean
@@ -2892,7 +3045,7 @@ paths:
         - personalAccessToken: []
       tags:
         - usage
-  '/v1/projects/{projectOrProductUID}/webhooks':
+  /v1/projects/{projectOrProductUID}/webhooks:
     get:
       operationId: GetWebhooks
       description: Retrieves all webhooks for the specified project
@@ -2916,7 +3069,7 @@ paths:
         - personalAccessToken: []
       tags:
         - webhook
-  '/v1/projects/{projectOrProductUID}/webhooks/{webhookUID}':
+  /v1/projects/{projectOrProductUID}/webhooks/{webhookUID}:
     delete:
       operationId: DeleteWebhook
       description: Deletes the specified webhook
@@ -3019,7 +3172,7 @@ components:
       schema:
         type: string
     datasetAggregateWindowQueryParam:
-      description: 'Aggregate results into buckets for a time duration, expressed in Postgres INTERVAL format'
+      description: Aggregate results into buckets for a time duration, expressed in Postgres INTERVAL format
       in: query
       name: aggregate_window
       required: false
@@ -3033,7 +3186,7 @@ components:
       schema:
         type: boolean
     datasetEndQueryParam:
-      description: 'End of the time range, as an ISO-8601 date or relative to now. If omitted, current time is used.'
+      description: End of the time range, as an ISO-8601 date or relative to now. If omitted, current time is used.
       in: query
       name: end
       required: false
@@ -3047,15 +3200,15 @@ components:
       schema:
         type: integer
     datasetLocationNearQueryParam:
-      description: 'Latitude and Longitude for location-based filtering, location_near_radius must also be provided'
+      description: Latitude and Longitude for location-based filtering, location_near_radius must also be provided
       in: query
       name: location_near
       required: false
       schema:
         type: string
-        example: '42.393125,-71.185015'
+        example: 42.393125,-71.185015
     datasetLocationRadiusQueryParam:
-      description: 'Distance from location_near in meters, location_near must also be provided'
+      description: Distance from location_near in meters, location_near must also be provided
       in: query
       name: location_near_radius
       required: false
@@ -3076,28 +3229,28 @@ components:
       schema:
         type: string
     datasetSelectQueryParam:
-      description: 'Comma separated list of fields to include. Supports aggregate functions (avg, sum, min, max, count, most_recent).'
+      description: Comma separated list of fields to include. Supports aggregate functions (avg, sum, min, max, count, most_recent).
       in: query
       name: select
       required: false
       schema:
         type: string
     datasetStartQueryParam:
-      description: 'Start of the time range, as an ISO-8601 date or relative to now (e.g. -1y). Relative dates follow the Postgres INTERVAL format.'
+      description: Start of the time range, as an ISO-8601 date or relative to now (e.g. -1y). Relative dates follow the Postgres INTERVAL format.
       in: query
       name: start
       required: true
       schema:
         type: string
     datasetWhereQueryParam:
-      description: 'Additional filters using boolean logic mini-language (e.g. and.(device.eq.dev:123,temp.gt.100))'
+      description: Additional filters using boolean logic mini-language (e.g. and.(device.eq.dev:123,temp.gt.100))
       in: query
       name: where
       required: false
       schema:
         type: string
     dateTypeParam:
-      description: 'Which date to filter on, either ''captured'' or ''uploaded''.  This will apply to the startDate and endDate parameters'
+      description: Which date to filter on, either 'captured' or 'uploaded'.  This will apply to the startDate and endDate parameters
       example: uploaded
       in: query
       name: dateType
@@ -3117,7 +3270,7 @@ components:
         items:
           type: string
     deviceUIDParam:
-      example: 'dev:000000000000000'
+      example: dev:000000000000000
       in: path
       name: deviceUID
       required: true
@@ -3153,7 +3306,7 @@ components:
           - update
           - cancel
     endDateParam:
-      description: 'End date for filtering results, specified as a Unix timestamp'
+      description: End date for filtering results, specified as a Unix timestamp
       example: 1657894210
       in: query
       name: endDate
@@ -3187,7 +3340,7 @@ components:
       schema:
         type: string
     filesQueryParam:
-      example: '_health.qo, data.qo'
+      example: _health.qo, data.qo
       in: query
       name: files
       required: false
@@ -3207,7 +3360,7 @@ components:
           - version
           - length
     firmwareSortOrderParam:
-      description: 'Sort order (asc for ascending, desc for descending)'
+      description: Sort order (asc for ascending, desc for descending)
       in: query
       name: sortOrder
       required: false
@@ -3233,7 +3386,7 @@ components:
       schema:
         type: string
     firstSyncParam:
-      description: 'When true, filters results to only show first sync sessions'
+      description: When true, filters results to only show first sync sessions
       in: query
       name: firstSync
       required: false
@@ -3335,7 +3488,7 @@ components:
       schema:
         type: string
     monitorUIDParam:
-      example: 'monitor:8bAdf00d-000f-51c-af-01d5eaf00dbad'
+      example: monitor:8bAdf00d-000f-51c-af-01d5eaf00dbad
       in: path
       name: monitorUID
       required: true
@@ -3402,7 +3555,7 @@ components:
       schema:
         type: string
     productUIDParam:
-      example: 'com.blues.bridge:sensors'
+      example: com.blues.bridge:sensors
       in: path
       name: productUID
       required: true
@@ -3419,7 +3572,7 @@ components:
           type: string
       style: form
     projectOrProductUIDParam:
-      example: 'app:2606f411-dea6-44a0-9743-1130f57d77d8'
+      example: app:2606f411-dea6-44a0-9743-1130f57d77d8
       in: path
       name: projectOrProductUID
       required: true
@@ -3446,7 +3599,7 @@ components:
       required: true
       schema:
         type: string
-        example: 'rid:2606f411-dea6-44a0-9743-1130f57d77d8'
+        example: rid:2606f411-dea6-44a0-9743-1130f57d77d8
     responseStatusParam:
       example: 500
       in: query
@@ -3477,7 +3630,7 @@ components:
           - asc
           - desc
     routeUIDParam:
-      example: 'route:cbd20093cba58392c9f9bbdd0cdeb1a0'
+      example: route:cbd20093cba58392c9f9bbdd0cdeb1a0
       in: path
       name: routeUID
       required: true
@@ -3507,7 +3660,7 @@ components:
             - failure
           type: string
     selectFieldsParam:
-      description: 'Comma-separated list of fields to select from JSON payload (e.g., "field1,field2.subfield,field3"), this will reflect the columns in the CSV output.'
+      description: Comma-separated list of fields to select from JSON payload (e.g., "field1,field2.subfield,field3"), this will reflect the columns in the CSV output.
       in: query
       name: selectFields
       required: false
@@ -3585,7 +3738,7 @@ components:
           - asc
           - desc
     startDateParam:
-      description: 'Start date for filtering results, specified as a Unix timestamp'
+      description: Start date for filtering results, specified as a Unix timestamp
       example: 1628631763
       in: query
       name: startDate
@@ -3744,7 +3897,7 @@ components:
                 type: number
             type: object
         resolved:
-          description: 'If true, the alert has been resolved'
+          description: If true, the alert has been resolved
           type: boolean
         source:
           description: The UID of the source of the alert
@@ -3902,9 +4055,9 @@ components:
           type: integer
           format: int64
         plan_type:
-          description: 'Description of the SIM plan type including data allowance, region, and validity period'
+          description: Description of the SIM plan type including data allowance, region, and validity period
           type: string
-          example: '500MB, North America, 10-year lifetime'
+          example: 500MB, North America, 10-year lifetime
     CellularUsage:
       type: array
       items:
@@ -3933,6 +4086,18 @@ components:
             - alert_routes
             - source_type
             - threshold
+    CreateProjectSecretRequest:
+      type: object
+      properties:
+        name:
+          description: The secret name (alphanumeric and underscores only).
+          type: string
+        value:
+          description: The secret value (encrypted at rest, never returned after creation).
+          type: string
+      required:
+        - name
+        - value
     CreateUpdateRepository:
       type: object
       properties:
@@ -4016,7 +4181,7 @@ components:
           description: Last updated timestamp
           type: number
         version:
-          description: 'Last known version, which is generally a JSON object contained within the firmware image'
+          description: Last known version, which is generally a JSON object contained within the firmware image
           type: string
       nullable: true
     DataField:
@@ -4305,7 +4470,7 @@ components:
         bssid:
           type: string
         cell:
-          description: 'Cell ID where the session originated and quality ("mcc,mnc,lac,cellid")'
+          description: Cell ID where the session originated and quality ("mcc,mnc,lac,cellid")
           type: string
         continuous:
           description: Was this a continuous connection?
@@ -4602,7 +4767,7 @@ components:
           description: Country
           type: string
         best_id:
-          description: 'The device serial number, or the DeviceUID if the serial number is not set'
+          description: The device serial number, or the DeviceUID if the serial number is not set
           type: string
         best_lat:
           description: Latitude
@@ -4612,7 +4777,7 @@ components:
           description: Location
           type: string
         best_location_type:
-          description: 'One of "gps", "triangulated", or "tower"'
+          description: One of "gps", "triangulated", or "tower"
           type: string
         best_location_when:
           description: Unix timestamp
@@ -4725,7 +4890,7 @@ components:
           description: Unix timestamp
           type: number
         transport:
-          description: 'The transport used for this event, e.g., "cellular", "wifi", ", etc.'
+          description: The transport used for this event, e.g., "cellular", "wifi", ", etc.
           type: string
         tri_country:
           description: Country
@@ -4917,7 +5082,7 @@ components:
         enabled: true
       nullable: true
     FleetRule:
-      description: 'JSONata expression that will be evaluated to determine device membership into this fleet, if the expression evaluates to a 1, the device will be included, if it evaluates to -1 it will be removed, and if it evaluates to 0 or errors it will be left unchanged.'
+      description: JSONata expression that will be evaluated to determine device membership into this fleet, if the expression evaluates to a 1, the device will be included, if it evaluates to -1 it will be removed, and if it evaluates to 0 or errors it will be left unchanged.
       type: string
       properties: {}
     FleetsUIDList:
@@ -4925,6 +5090,15 @@ components:
       items:
         type: string
       properties: {}
+    GetProjectSecretsResponse:
+      type: object
+      properties:
+        secrets:
+          type: array
+          items:
+            $ref: '#/components/schemas/ProjectSecret'
+      required:
+        - secrets
     GoogleRoute:
       type: object
       properties:
@@ -4954,7 +5128,7 @@ components:
         filter:
           $ref: '#/components/schemas/Filter'
         fleets:
-          description: 'If non-empty, applies only to the listed fleets.'
+          description: If non-empty, applies only to the listed fleets.
           type: array
           items:
             type: string
@@ -5031,7 +5205,7 @@ components:
           type: integer
           format: int64
         status:
-          description: 'Current status (submitted, running, completed, cancelled, failed)'
+          description: Current status (submitted, running, completed, cancelled, failed)
           type: string
         submitted:
           description: Unix timestamp when submitted
@@ -5082,7 +5256,7 @@ components:
       type: object
       properties:
         aggregate_function:
-          description: 'Aggregate function to apply to the selected values before applying the condition. [none, sum, average, max, min]'
+          description: Aggregate function to apply to the selected values before applying the condition. [none, sum, average, max, min]
           type: string
           enum:
             - none
@@ -5094,9 +5268,9 @@ components:
           description: The time window to aggregate the selected values. It follows the format of a number followed by a time unit
           type: string
           example: 10m or 5h30m40s
-          pattern: '^[0-9]+[smh]$'
+          pattern: ^[0-9]+[smh]$
         alert:
-          description: 'If true, the monitor is in alert state.'
+          description: If true, the monitor is in alert state.
           type: boolean
         alert_routes:
           type: array
@@ -5106,7 +5280,7 @@ components:
               - $ref: '#/components/schemas/SlackBearerNotification'
               - $ref: '#/components/schemas/EmailNotification'
         condition_type:
-          description: 'A comparison operation to apply to the value selected by the source_selector [greater_than, greater_than_or_equal_to, less_than, less_than_or_equal_to, equal_to, not_equal_to]'
+          description: A comparison operation to apply to the value selected by the source_selector [greater_than, greater_than_or_equal_to, less_than, less_than_or_equal_to, equal_to, not_equal_to]
           type: string
           enum:
             - greater_than
@@ -5119,7 +5293,7 @@ components:
         description:
           type: string
         disabled:
-          description: 'If true, the monitor will not be evaluated.'
+          description: If true, the monitor will not be evaluated.
           type: boolean
         fleet_filter:
           type: array
@@ -5135,18 +5309,18 @@ components:
           items:
             type: string
         per_device:
-          description: 'Only relevant when using an aggregate_function. If true, the monitor will be evaluated per device, | rather than across the set of selected devices. If true then if a single device matches the specified criteria, | and alert will be created, otherwise the aggregate function will be applied across all devices.'
+          description: Only relevant when using an aggregate_function. If true, the monitor will be evaluated per device, | rather than across the set of selected devices. If true then if a single device matches the specified criteria, | and alert will be created, otherwise the aggregate function will be applied across all devices.
           type: boolean
         routing_cooldown_period:
           description: The time period to wait before routing another event after the monitor | has been triggered. It follows the format of a number followed by a time unit.
           type: string
           example: 10m or 5h30m40s
-          pattern: '^[0-9]+[smh]$'
+          pattern: ^[0-9]+[smh]$
         silenced:
-          description: 'If true, alerts will be created, but no notifications will be sent.'
+          description: If true, alerts will be created, but no notifications will be sent.
           type: boolean
         source_selector:
-          description: 'A valid JSONata expression that selects the value to monitor from the source. | It should return a single, numeric value.'
+          description: A valid JSONata expression that selects the value to monitor from the source. | It should return a single, numeric value.
           type: string
           example: body.temperature
         source_type:
@@ -5206,7 +5380,7 @@ components:
           description: True if originated from an edge source.
           type: boolean
         id:
-          description: 'Note name/identifier (e.g., "1:435", "my_note").'
+          description: Note name/identifier (e.g., "1:435", "my_note").
           type: string
         payload:
           description: Optional base64-encoded payload.
@@ -5241,7 +5415,7 @@ components:
       type: object
       properties:
         id:
-          description: 'Notefile id (e.g., "test.qi", "config.db").'
+          description: Notefile id (e.g., "test.qi", "config.db").
           type: string
         notes:
           type: array
@@ -5254,7 +5428,7 @@ components:
         - id
         - notes
     NotefileList:
-      description: 'Array of notefiles, each containing its notes.'
+      description: Array of notefiles, each containing its notes.
       type: array
       items:
         $ref: '#/components/schemas/Notefile'
@@ -5341,7 +5515,7 @@ components:
           default: http
         uid:
           type: string
-          default: 'route:8d65a087d5d290ce5bdf03aeff2becc0'
+          default: route:8d65a087d5d290ce5bdf03aeff2becc0
     OAuth2Error:
       type: object
       properties:
@@ -5408,7 +5582,7 @@ components:
           format: date-time
           nullable: true
         last_used:
-          description: 'When it was last used, if ever'
+          description: When it was last used, if ever
           type: string
           format: date-time
           nullable: true
@@ -5416,7 +5590,7 @@ components:
           description: Name for this API Key
           type: string
         suspended:
-          description: 'if true, this token cannot be used'
+          description: if true, this token cannot be used
           type: boolean
         uid:
           description: Unique and public identifier
@@ -5434,7 +5608,7 @@ components:
         name:
           type: string
         suspended:
-          description: 'if true, the token is temporarily suspended'
+          description: if true, the token is temporarily suspended
           type: boolean
       required:
         - expiresAt
@@ -5501,6 +5675,31 @@ components:
         - name
         - email
         - role
+    ProjectSecret:
+      description: Metadata for a project secret. The value is never returned.
+      type: object
+      properties:
+        created:
+          description: When the secret was first created.
+          type: string
+          format: date-time
+        created_by:
+          description: The actor who created the secret.
+          type: string
+        modified:
+          description: When the secret was last updated.
+          type: string
+          format: date-time
+        modified_by:
+          description: The actor who last updated the secret.
+          type: string
+        name:
+          description: The secret name (alphanumeric and underscores only).
+          type: string
+      required:
+        - name
+        - created
+        - created_by
     ProxyRoute:
       type: object
       properties:
@@ -5590,7 +5789,7 @@ components:
       type: object
       properties:
         attn:
-          description: 'If true, an error was returned when routing'
+          description: If true, an error was returned when routing
           type: boolean
         date:
           description: The date of the logs.
@@ -5620,7 +5819,7 @@ components:
       type: object
       properties:
         format:
-          description: 'Output format for transformed data (e.g., "json", "xml", "text").'
+          description: Output format for transformed data (e.g., "json", "xml", "text").
           type: string
           example: json
         jsonata:
@@ -5725,7 +5924,7 @@ components:
         psid:
           description: Provider-specific identifier for the satellite subscription
           type: string
-          example: 'skylo:5746354465786'
+          example: skylo:5746354465786
         satellite_data_usage:
           $ref: '#/components/schemas/SatelliteDataUsage'
       nullable: true
@@ -5799,7 +5998,7 @@ components:
             - text
             - blocks
         text:
-          description: 'The text of the message, or the blocks definition'
+          description: The text of the message, or the blocks definition
           type: string
         token:
           description: The bearer token for the Slack app.
@@ -5841,7 +6040,7 @@ components:
             - text
             - blocks
         text:
-          description: 'The text of the message, or the blocks definition'
+          description: The text of the message, or the blocks definition
           type: string
         url:
           description: The URL of the Slack webhook.
@@ -5950,7 +6149,7 @@ components:
         mnc:
           description: Mobile Network Code
           type: integer
-        'n':
+        n:
           description: Name of the location
           type: string
         source:
@@ -5994,6 +6193,29 @@ components:
         to:
           type: string
       additionalProperties: false
+    UpdateHostFirmwareRequest:
+      description: |
+        Request body for updating host firmware metadata. All fields are optional; only provided fields will be updated.
+      type: object
+      properties:
+        info:
+          description: Arbitrary JSON metadata associated with this firmware entry.
+          type: object
+          additionalProperties: true
+        notes:
+          description: Notes describing this firmware version.
+          type: string
+        version:
+          description: The firmware version string.
+          type: string
+    UpdateProjectSecretRequest:
+      type: object
+      properties:
+        value:
+          description: The new secret value (encrypted at rest, never returned).
+          type: string
+      required:
+        - value
     UploadMetadata:
       type: object
       properties:
@@ -6048,7 +6270,7 @@ components:
         period:
           type: string
           format: date-time
-          example: '2025-07-23T00:00:00Z'
+          example: 2025-07-23T00:00:00Z
         total_bytes:
           type: integer
           format: int64
@@ -6072,16 +6294,16 @@ components:
       type: object
       properties:
         billable_events:
-          description: 'Events that are billable, this include all events except platform events'
+          description: Events that are billable, this include all events except platform events
           type: integer
           format: int64
           example: 10
         device:
           type: string
-          example: 'dev:123456789012345'
+          example: dev:123456789012345
         fleet:
           type: string
-          example: 'fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d'
+          example: fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d
         notefiles:
           description: Count of events per notefile. Only present when includeNotefiles=true is specified.
           type: object
@@ -6095,14 +6317,14 @@ components:
         period:
           type: string
           format: date-time
-          example: '2025-07-23T00:00:00Z'
+          example: 2025-07-23T00:00:00Z
         platform_events:
-          description: 'Total platform events. Platform events are _log, _session, _health, and _geolocate events some of which are send from the device, some generated by notehub. These events are not billed.'
+          description: Total platform events. Platform events are _log, _session, _health, and _geolocate events some of which are send from the device, some generated by notehub. These events are not billed.
           type: integer
           format: int64
           example: 15
         total_days_in_period:
-          description: 'The total number of days in this period. Useful for calculating daily averages for month period. Note that the current period will be the total number of days in the current period, including days in the future.'
+          description: The total number of days in this period. Useful for calculating daily averages for month period. Note that the current period will be the total number of days in the current period, including days in the future.
           type: integer
           format: int32
         total_devices:
@@ -6110,7 +6332,7 @@ components:
           type: integer
           format: int64
         total_events:
-          description: 'Total events the device sent to notehub, including associated notehub generated events'
+          description: Total events the device sent to notehub, including associated notehub generated events
           type: integer
           format: int64
           example: 42
@@ -6127,7 +6349,7 @@ components:
           example: 2
           nullable: true
         watchdog_events:
-          description: 'Watchdog events are events generated by notehub when a watchdog timer is configured for a device to indicate is has not been online for a period of time. These events are billed but should not be used to indicate a device is active, or connected, at this time.'
+          description: Watchdog events are events generated by notehub when a watchdog timer is configured for a device to indicate is has not been online for a period of time. These events are billed but should not be used to indicate a device is active, or connected, at this time.
           type: integer
           format: int64
           example: 10
@@ -6164,11 +6386,11 @@ components:
         period:
           type: string
           format: date-time
-          example: '2025-07-23T00:00:00Z'
+          example: 2025-07-23T00:00:00Z
         route:
           description: The route UID (only present when aggregate is 'route')
           type: string
-          example: 'route:cbd20093cba58392c9f9bbdd0cdeb1a0'
+          example: route:cbd20093cba58392c9f9bbdd0cdeb1a0
         successful_routes:
           type: integer
           format: int64
@@ -6187,7 +6409,7 @@ components:
       properties:
         device:
           type: string
-          example: 'dev:123456789012345'
+          example: dev:123456789012345
         first_sync_sessions:
           description: Number of first sync sessions in this period
           type: integer
@@ -6195,17 +6417,17 @@ components:
           example: 2
         fleet:
           type: string
-          example: 'fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d'
+          example: fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d
         period:
           type: string
           format: date-time
-          example: '2025-07-23T00:00:00Z'
+          example: 2025-07-23T00:00:00Z
         sessions:
           type: integer
           format: int64
           example: 12
         sessions_by_transport:
-          description: 'Count of sessions grouped by transport type prefix (e.g. cell, wifi, ntn, lorawan)'
+          description: Count of sessions grouped by transport type prefix (e.g. cell, wifi, ntn, lorawan)
           type: object
           example:
             cell: 8
@@ -6235,7 +6457,7 @@ components:
         - total_bytes
         - total_devices
     UsageTruncatedField:
-      description: 'If the data is truncated that means that the parameters selected resulted in a response of over | the requested limit of data points, in order to ensure'
+      description: If the data is truncated that means that the parameters selected resulted in a response of over | the requested limit of data points, in order to ensure
       type: boolean
       properties: {}
     UserDfuStateMachine:
@@ -6407,7 +6629,7 @@ components:
               - has_more
           example:
             events:
-              - app: 'app:218f6217-9f78-432e-9fe0-02ca8b5a216c'
+              - app: app:218f6217-9f78-432e-9fe0-02ca8b5a216c
                 best_country: US
                 best_id: My Device
                 best_lat: 34.82476372
@@ -6421,15 +6643,15 @@ components:
                   pressure: 97705.66
                   temperature: 24.0625
                   voltage: 2.598
-                device: 'dev:5c0272311928'
+                device: dev:5c0272311928
                 event: dfa3747d-688b-4250-935b-5dd60354313c
                 file: air.qo
-                product: 'product:com.blues.project.demo'
+                product: product:com.blues.project.demo
                 received: 1656011227.006928
                 req: note.add
                 session: b623132c-6afb-4740-bc39-e3634e38f064
                 sn: My Device
-                tower_id: '0,0,0,0'
+                tower_id: 0,0,0,0
                 tri_country: US
                 tri_lat: 34.82475372
                 tri_location: Atlanta GA
@@ -6468,7 +6690,7 @@ components:
               - has_more
           example:
             events:
-              - app: 'app:218f6217-9f78-432e-9fe0-02ca8b5a216c'
+              - app: app:218f6217-9f78-432e-9fe0-02ca8b5a216c
                 best_country: US
                 best_id: My Device
                 best_lat: 34.82476372
@@ -6482,15 +6704,15 @@ components:
                   pressure: 97705.66
                   temperature: 24.0625
                   voltage: 2.598
-                device: 'dev:5c0272311928'
+                device: dev:5c0272311928
                 event: dfa3747d-688b-4250-935b-5dd60354313c
                 file: air.qo
-                product: 'product:com.blues.project.demo'
+                product: product:com.blues.project.demo
                 received: 1656011227.006928
                 req: note.add
                 session: b623132c-6afb-4740-bc39-e3634e38f064
                 sn: My Device
-                tower_id: '0,0,0,0'
+                tower_id: 0,0,0,0
                 tri_country: US
                 tri_lat: 34.82475372
                 tri_location: Atlanta GA
@@ -6537,7 +6759,7 @@ components:
                 additionalProperties:
                   type: string
               environment_variables_effective:
-                description: 'The environment variables as they will be seen by the device, fully resolved with project/fleet/device prioritization rules.'
+                description: The environment variables as they will be seen by the device, fully resolved with project/fleet/device prioritization rules.
                 type: object
                 additionalProperties:
                   type: string
@@ -6591,6 +6813,14 @@ components:
                   $ref: '#/components/schemas/Job'
             required:
               - jobs
+    GetProjectSecretsResponse:
+      description: The response body from a get project secrets request.
+      content:
+        application/json:
+          schema:
+            type: ''
+            properties: {}
+            $ref: '#/components/schemas/GetProjectSecretsResponse'
     LatestResponse:
       description: The response body for a Latest Events request.
       content:
@@ -6605,59 +6835,59 @@ components:
                   $ref: '#/components/schemas/Event'
           example:
             latest_events:
-              - app: 'app:2e49f10a-76a9-4e2d-8b18-cef0b8b46446'
+              - app: app:2e49f10a-76a9-4e2d-8b18-cef0b8b46446
                 body:
                   why: sensors.qo requested sync (sensors.qo) (TLS)
-                device: 'dev:864475040523995'
+                device: dev:864475040523995
                 event: 81bd2bf1-0399-4978-bc46-8f779b4af350
                 file: _session.qo
-                product: 'product:com.blues.app:myapp'
+                product: product:com.blues.app:myapp
                 received: 1669667707.564694
                 req: session.begin
                 session: ed18884b-f2a6-419f-b856-d28dc8f0892b
                 tls: true
                 tower_country: US
-                tower_id: '310,410,20483,184692495'
+                tower_id: 310,410,20483,184692495
                 tower_lat: 43.769062500000004
                 tower_location: Waverly MI
                 tower_lon: -83.657359375
                 tower_timezone: America/Detroit
                 tower_when: 1669667691
                 when: 1669667707
-              - app: 'app:2e49f10a-76a9-4e2d-8b18-cef0b8b46446'
+              - app: app:2e49f10a-76a9-4e2d-8b18-cef0b8b46446
                 body:
                   humid: 56.23
                   temp: 35.5
-                device: 'dev:864475040523995'
+                device: dev:864475040523995
                 event: 916d4c81-06ae-4263-9b55-7a3a0f73cb5a
                 file: data.qo
-                product: 'product:com.blues.app:myapp'
+                product: product:com.blues.app:myapp
                 received: 1669667713.221659
                 req: note.add
                 session: 28cdc39f-9f62-4789-b0a3-2f35f9448ced
                 sn: tj-1
                 tower_country: US
-                tower_id: '310,410,20483,184692495'
+                tower_id: 310,410,20483,184692495
                 tower_lat: 43.769062500000004
                 tower_location: Waverly MI
                 tower_lon: -83.657359375
                 tower_timezone: America/Detroit
                 tower_when: 1669667677
                 when: 1669667689
-              - app: 'app:2e49f10a-76a9-4e2d-8b18-cef0b8b46446'
+              - app: app:2e49f10a-76a9-4e2d-8b18-cef0b8b46446
                 body:
                   humidity: 69.88647200683693
                   pressure: 993.6294496104914
                   temp: 21.273027181770885
-                device: 'dev:864475040523995'
+                device: dev:864475040523995
                 event: e98c2c3b-edbe-4fe7-af57-2196cc843eb7
                 file: sensors.qo
-                product: 'product:com.blues.app:myapp'
+                product: product:com.blues.app:myapp
                 received: 1669667711.85316
                 req: note.add
                 session: 7211392c-6895-43f8-9256-790655348be5
                 tower_country: US
-                tower_id: '310,410,20483,184692496'
+                tower_id: 310,410,20483,184692496
                 tower_lat: 43.747037500000005
                 tower_location: Waverly MI
                 tower_lon: -83.665859375
@@ -6722,12 +6952,12 @@ components:
               - apn: a-notehub.com.attz
                 bars: 2
                 bearer: LTE FDD
-                cell: '310,410,17169,77315594'
+                cell: 310,410,17169,77315594
                 continuous: true
-                device: 'dev:000000000000000'
+                device: dev:000000000000000
                 events: 14
                 fleets:
-                  - 'fleet:46be9834-5te6-42c1-0000-b5ea05e248d7'
+                  - fleet:46be9834-5te6-42c1-0000-b5ea05e248d7
                 hp_cycles_data: 3
                 hp_cycles_total: 3
                 hp_secs_data: 7659
@@ -6743,7 +6973,7 @@ components:
                   notes_sent: 12
                   sessions_tls: 1
                   since: 1667250832
-                product: 'product:com.blues.demo:project'
+                product: product:com.blues.demo:project
                 rat: lte
                 rsrp: -91
                 rsrq: -13
@@ -6762,7 +6992,7 @@ components:
                   lon: -89.44239062499999
                   mcc: 310
                   mnc: 410
-                  'n': Shorewood Hills WI
+                  n: Shorewood Hills WI
                   time: 1667250835
                   towers: 1
                   zone: America/Chicago
@@ -6789,14 +7019,14 @@ components:
                     device:
                       description: The device UID this usage data belongs to (only present when aggregate is 'device')
                       type: string
-                      example: 'dev:123456789012345'
+                      example: dev:123456789012345
                     device_count:
                       description: the number of devices represented by this data point
                       type: integer
                     fleet:
                       description: The fleet UID this usage data belongs to (only present when aggregate is 'fleet')
                       type: string
-                      example: 'fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d'
+                      example: fleet:1042ddc5-3b2c-4cec-b1fb-d3040538094d
                     iccid:
                       description: The ICCID of the cellular SIM card (only present when type is 'cellular')
                       type: string
@@ -6804,7 +7034,7 @@ components:
                     psid:
                       description: The PSID (Packet Service ID) of the satellite (or other packet-based device)
                       type: string
-                      example: 'skylo:5746354465786'
+                      example: skylo:5746354465786
                     type:
                       description: The type of connectivity
                       type: string
@@ -6873,10 +7103,10 @@ tags:
     name: webhook
   - description: APIs for events and sessions for external devices
     name: external devices
-  - description: 'Project Usage information related to events, route logs, sessions, and data usage'
+  - description: Project Usage information related to events, route logs, sessions, and data usage
     name: usage
   - description: Batch job operations
     name: jobs
 externalDocs:
   description: Find out more about Blues
-  url: 'https://blues.io'
+  url: https://blues.io