# Generated by API Evangelist (build-phrasing.py). Our phrasing, not observed demand.
overlay: 1.0.0
info:
  title: API Evangelist conversational phrasing for Microsoft Azure Codesigningaccounts API
  version: 1.0.0
extends: openapi/microsoft-azure-codesigningaccounts-api-openapi.yml
actions:
- target: $.info
  update:
    x-apievangelist-phrasing:
      method: generated
      generated: '2026-09-26'
      generator: build-phrasing.py
      label: Generated by API Evangelist
      operations: 11
- target: $.paths['/codesigningaccounts/{accountName}/certificateprofiles/{certificateProfile}:sign'].post
  update:
    x-apievangelist-phrasing:
      intent: Sign a file digest with a certificate profile
      effect: write
      questions:
      - How do I sign a build artifact's digest with Azure Trusted Signing?
      - Which signature algorithm do I have to pass when submitting a sign request?
      instructions:
      - text: Sign digest {digest} with algorithm {algorithm} using profile {profile} in account {account}.
        slots:
          digest: requestBody.digest
          algorithm: requestBody.signatureAlgorithm
          profile: path.certificateProfile
          account: path.accountName
      - text: Submit a sign operation on account {account}, profile {profile} for file hashes {hashes}.
        slots:
          account: path.accountName
          profile: path.certificateProfile
          hashes: requestBody.fileHashList
      method: generated
      generated: '2026-09-26'
- target: $.paths['/codesigningaccounts/{accountName}/certificateprofiles/{certificateProfile}/sign/{operationId}'].get
  update:
    x-apievangelist-phrasing:
      intent: Check the status of a signing operation
      effect: read
      questions:
      - Has my submitted code signing request finished yet?
      - How do I get the signature back after a sign request completes?
      instructions:
      - text: Get the status of signing operation {operation} for profile {profile} in account {account}.
        slots:
          operation: path.operationId
          profile: path.certificateProfile
          account: path.accountName
      - text: Poll sign request {operation} on account {account}, certificate profile {profile}.
        slots:
          operation: path.operationId
          account: path.accountName
          profile: path.certificateProfile
      method: generated
      generated: '2026-09-26'
- target: $.paths['/codesigningaccounts/{accountName}/certificateprofiles/{certificateProfile}/sign/eku'].get
  update:
    x-apievangelist-phrasing:
      intent: List allowed extended key usages for a profile
      effect: read
      questions:
      - Which extended key usage OIDs is my certificate profile allowed to sign with?
      - What purposes can signatures from a Trusted Signing profile be used for?
      instructions:
      - text: List the extended key usages for profile {profile} in account {account}.
        slots:
          profile: path.certificateProfile
          account: path.accountName
      - text: Show the EKU object identifiers allowed on signing account {account}, profile {profile}.
        slots:
          account: path.accountName
          profile: path.certificateProfile
      method: generated
      generated: '2026-09-26'
- target: $.paths['/codesigningaccounts/{accountName}/certificateprofiles/{certificateProfile}/sign/rootcert'].get
  update:
    x-apievangelist-phrasing:
      intent: Get the signing root certificate
      effect: read
      questions:
      - How do I download the root certificate that my signing profile chains to?
      - Where does the root cert used to sign my binaries come from?
      instructions:
      - text: Get the signing root certificate for profile {profile} in account {account}.
        slots:
          profile: path.certificateProfile
          account: path.accountName
      - text: Download the root cert on the chain of account {account}, certificate profile {profile}.
        slots:
          account: path.accountName
          profile: path.certificateProfile
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/Microsoft.CodeSigning/checkNameAvailability'].post
  update:
    x-apievangelist-phrasing:
      intent: Check if a trusted signing account name is free
      effect: read
      questions:
      - Is the trusted signing account name I want already taken?
      - Can I validate a signing account name before creating it?
      instructions:
      - text: Check whether trusted signing account name {name} is available.
        slots:
          name: requestBody.name
      - text: Validate {name} as a new code signing account name.
        slots:
          name: requestBody.name
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/providers/Microsoft.CodeSigning/codeSigningAccounts'].get
  update:
    x-apievangelist-phrasing:
      intent: List trusted signing accounts in a subscription
      effect: read
      questions:
      - Which trusted signing accounts exist across my whole subscription?
      - How can I inventory every code signing account I pay for?
      instructions:
      - text: List all trusted signing accounts in my subscription.
      - text: Show every code signing account across the subscription.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CodeSigning/codeSigningAccounts'].get
  update:
    x-apievangelist-phrasing:
      intent: List trusted signing accounts in a resource group
      effect: read
      questions:
      - What trusted signing accounts live in this resource group?
      - Can I narrow the signing account list to one resource group?
      instructions:
      - text: List the trusted signing accounts in my resource group.
      - text: Show code signing accounts scoped to the current resource group only.
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CodeSigning/codeSigningAccounts/{accountName}'].get
  update:
    x-apievangelist-phrasing:
      intent: Get a trusted signing account
      effect: read
      questions:
      - What SKU and endpoint does my trusted signing account use?
      - How do I look up one code signing account's details?
      instructions:
      - text: Get trusted signing account {account}.
        slots:
          account: path.accountName
      - text: Show the configuration of code signing account {account}.
        slots:
          account: path.accountName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CodeSigning/codeSigningAccounts/{accountName}'].put
  update:
    x-apievangelist-phrasing:
      intent: Create a trusted signing account
      effect: write
      questions:
      - How do I create a new Trusted Signing account for signing my releases?
      - Can I pick the SKU when setting up a code signing account?
      instructions:
      - text: Create trusted signing account {account}.
        slots:
          account: path.accountName
      - text: Set up code signing account {account} with properties {properties}.
        slots:
          account: path.accountName
          properties: requestBody.properties
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CodeSigning/codeSigningAccounts/{accountName}'].delete
  update:
    x-apievangelist-phrasing:
      intent: Delete a trusted signing account
      effect: destructive
      questions:
      - How do I delete a trusted signing account I no longer use?
      - What happens to my certificate profiles if I remove the signing account?
      instructions:
      - text: Delete trusted signing account {account}.
        slots:
          account: path.accountName
      - text: Remove the code signing account {account} permanently.
        slots:
          account: path.accountName
      method: generated
      generated: '2026-09-26'
- target: $.paths['/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.CodeSigning/codeSigningAccounts/{accountName}'].patch
  update:
    x-apievangelist-phrasing:
      intent: Update a trusted signing account
      effect: write
      questions:
      - How do I change the tags or SKU on an existing signing account?
      - Can I patch a trusted signing account after it is created?
      instructions:
      - text: Update tags on trusted signing account {account} to {tags}.
        slots:
          account: path.accountName
          tags: requestBody.tags
      - text: Patch code signing account {account} with {properties}.
        slots:
          account: path.accountName
          properties: requestBody.properties
      method: generated
      generated: '2026-09-26'