{"endpoints":{"admin_access_keys":"POST /admin/access-keys (bootstrap the first key; admin auth required)","health":"GET /healthz","s3_delete_object":"DELETE /{bucket}/{key...} (sigv4 required)","s3_get_object":"GET /{bucket}/{key...} (sigv4 required)","s3_head_object":"HEAD /{bucket}/{key...} (sigv4 required)","s3_put_object":"PUT /{bucket}/{key...} (sigv4 required)"},"note":"S3 clients: use path-style addressing. Standard AWS/Wasabi uploads work with default settings over HTTPS: unsigned streaming payloads with a trailing x-amz-checksum-* (aws-chunked, payload_signing_enabled=false is the client default over HTTPS) are decoded and verified server-side. Signed streaming payloads (STREAMING-AWS4-HMAC-SHA256-PAYLOAD and the SigV4A ECDSA variants) are not supported. Presigned (query-string signed) URLs are supported when the Authorization header is absent; aws-chunked and every STREAMING-* sentinel are rejected on that path.","service":"fleeet-node","status":"ok","version":"v0.8-pilot"}