stela ops usage fixes roles propagation and timoeut, one account to support multi tenants, migrations consolidation, search to support documentation, doctor and open api vector db search

docs/modules/timeline-indexer/architecture.md

@@ -59,9 +59,16 @@ src/TimelineIndexer/StellaOps.TimelineIndexer/
 ## 4) REST API
 
 ```
-GET  /timeline?subject={id}&from={date}&to={date}  → { events[] }
-GET  /timeline/{eventId}                            → { event }
-GET  /timeline/stats?subject={id}                   → { statistics }
+GET  /timeline?eventType=&source=&correlationId=&traceId=&severity=&since=&after=&limit=
+GET  /timeline/{eventId}
+GET  /timeline/{eventId}/evidence
+POST /timeline/events
+
+# Gateway microservice aliases
+GET  /api/v1/timeline
+GET  /api/v1/timeline/{eventId}
+GET  /api/v1/timeline/{eventId}/evidence
+POST /api/v1/timeline/events
 
 GET  /healthz | /readyz | /metrics
 ```
@@ -72,3 +79,5 @@ GET  /healthz | /readyz | /metrics
 
 * Signals: `../signals/architecture.md`
 * Scanner: `../scanner/architecture.md`
+
+

docs/modules/timeline-indexer/guides/timeline.md

@@ -29,9 +29,16 @@ Events are stored append-only with tenant-specific partitions. Producers include
 
 ## 2. APIs
 
-- `GET /api/v1/timeline/events` – paginated event stream with filters (tenant, category, time window, correlation IDs).
-- `GET /api/v1/timeline/events/{id}` – fetch single event payload.
-- `GET /api/v1/timeline/export` – NDJSON export for offline review.
+- Native endpoints:
+- `GET /timeline` - query timeline entries with filter parameters.
+- `GET /timeline/{eventId}` - fetch a single timeline entry.
+- `GET /timeline/{eventId}/evidence` - fetch evidence linked to a timeline entry.
+- `POST /timeline/events` - ingestion ack endpoint.
+- Router/Gateway aliases for microservice transport routing:
+- `GET /api/v1/timeline`
+- `GET /api/v1/timeline/{eventId}`
+- `GET /api/v1/timeline/{eventId}/evidence`
+- `POST /api/v1/timeline/events`
 
 API headers: `X-Stella-Tenant`, optional `X-Stella-TraceId`, and `If-None-Match` for cache revalidation.
 
@@ -73,3 +80,4 @@ Privacy/PII: producers must redact PII before emission; once emitted, redactions
 - `docs/modules/zastava/architecture.md`
 - `docs/modules/export-center/architecture.md`
 - `src/TimelineIndexer/StellaOps.TimelineIndexer`
+