{
  "$defs": {
    "VaultRouteEntry": {
      "additionalProperties": false,
      "description": "One entry in the generated ``routes.json`` consumed by the sandbox vault.\n\nThe on-disk file is a top-level ``{provider_name: VaultRouteEntry}`` dict.\nEmpty optional fields (``path_upstreams``, ``oauth_extra_headers``,\n``oauth_refresh``) are dropped from the serialized output via\n``exclude_none``, keeping the produced file small and diff-friendly.",
      "properties": {
        "upstream": {
          "description": "Upstream API base URL",
          "title": "Upstream",
          "type": "string"
        },
        "auth_header": {
          "description": "HTTP header name for the real credential",
          "title": "Auth Header",
          "type": "string"
        },
        "auth_prefix": {
          "description": "Prefix prepended to the token (e.g. ``\"Bearer \"``)",
          "title": "Auth Prefix",
          "type": "string"
        },
        "path_upstreams": {
          "anyOf": [
            {
              "additionalProperties": {
                "type": "string"
              },
              "type": "object"
            },
            {
              "type": "null"
            }
          ],
          "default": null,
          "description": "Path-prefix \u2192 upstream-base overrides",
          "title": "Path Upstreams"
        },
        "oauth_extra_headers": {
          "anyOf": [
            {
              "additionalProperties": {
                "type": "string"
              },
              "type": "object"
            },
            {
              "type": "null"
            }
          ],
          "default": null,
          "description": "Headers added when forwarding OAuth credentials",
          "title": "Oauth Extra Headers"
        },
        "oauth_refresh": {
          "anyOf": [
            {
              "additionalProperties": {
                "type": "string"
              },
              "type": "object"
            },
            {
              "type": "null"
            }
          ],
          "default": null,
          "description": "Token-refresh endpoint config (``token_url``, ``client_id``, optional ``scope``)",
          "title": "Oauth Refresh"
        }
      },
      "required": [
        "upstream",
        "auth_header",
        "auth_prefix"
      ],
      "title": "VaultRouteEntry",
      "type": "object"
    }
  },
  "additionalProperties": {
    "$ref": "#/$defs/VaultRouteEntry"
  },
  "type": "object",
  "title": "terok-executor generated routes.json"
}