"/event":
    post:
        tags: [Analytics]
        operationId: createEvent
        summary: Ingest an analytics event
        description: |
            Records a single analytics event. Access token is **optional** —
            anonymous events are accepted (with the bearer key still
            required for app identification).
        security:
            - apiKey: []
        requestBody:
            required: true
            content:
                application/json:
                    schema:
                        type: object
                        required: [name]
                        properties:
                            name:
                                type: string
                                description: Event name — namespaced by convention (e.g. `app.media.start`).
                            properties:
                                type: object
                                description: Event-specific payload.
                                additionalProperties: true
                            timestamp:
                                type: integer
                                description: Optional Unix-millisecond timestamp; server-default when omitted.
        responses:
            "200":
                description: Accepted.
            "401": { $ref: "../public-api.yaml#/components/responses/Unauthorized" }
