weft-sdk 0.9.1 → 0.14.1

data/docs/SearchCuratedExecution.md

@@ -0,0 +1,17 @@
+# Weft::SearchCuratedExecution
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **mode** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'weft-sdk'
+
+instance = Weft::SearchCuratedExecution.new(
+  mode: null
+)
+```

data/docs/SearchCuratedOperation.md

@@ -0,0 +1,21 @@
+# Weft::SearchCuratedOperation
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **id** | **String** |  |  |
+| **name** | **String** |  |  |
+| **description** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'weft-sdk'
+
+instance = Weft::SearchCuratedOperation.new(
+  id: null,
+  name: null,
+  description: null
+)
+```

data/docs/SearchCuratedService.md

@@ -0,0 +1,19 @@
+# Weft::SearchCuratedService
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **id** | **String** |  |  |
+| **name** | **String** |  |  |
+
+## Example
+
+```ruby
+require 'weft-sdk'
+
+instance = Weft::SearchCuratedService.new(
+  id: null,
+  name: null
+)
+```

data/docs/SearchCuratedSource.md

@@ -0,0 +1,21 @@
+# Weft::SearchCuratedSource
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **catalog** | **String** |  |  |
+| **snapshot_version** | **Integer** |  |  |
+| **captured_at** | **Time** |  |  |
+
+## Example
+
+```ruby
+require 'weft-sdk'
+
+instance = Weft::SearchCuratedSource.new(
+  catalog: null,
+  snapshot_version: null,
+  captured_at: null
+)
+```

data/docs/SearchEndpointHit.md

@@ -11,6 +11,15 @@
 | **call** | [**SearchEndpointCall**](SearchEndpointCall.md) |  | [optional] |
 | **price** | [**SearchEndpointPrice**](SearchEndpointPrice.md) |  | [optional] |
 | **payment** | [**Array<SearchPaymentOffer>**](SearchPaymentOffer.md) | The settlement routes this endpoint's own 402 challenge published — one entry per rail × network × asset × payee it accepts. Sibling of `call`: that block says how to shape the request, this says how to pay for it, so a caller can settle with its OWN x402/mpp SDK instead of guessing. A list because rails are irreducibly plural. Order is the provider's own preference order. Honest-empty when the pipeline observed no challenge.  | [optional] |
+| **access_methods** | [**Array<SearchAccessMethod>**](SearchAccessMethod.md) |  | [optional] |
+| **service** | [**SearchCuratedService**](SearchCuratedService.md) |  | [optional] |
+| **operation** | [**SearchCuratedOperation**](SearchCuratedOperation.md) |  | [optional] |
+| **output_schema** | **Object** |  | [optional] |
+| **output** | **Object** |  | [optional] |
+| **execution** | [**SearchCuratedExecution**](SearchCuratedExecution.md) |  | [optional] |
+| **callability** | [**SearchCuratedCallability**](SearchCuratedCallability.md) |  | [optional] |
+| **compatibility** | **Object** |  | [optional] |
+| **source** | [**SearchCuratedSource**](SearchCuratedSource.md) |  | [optional] |
 | **operator_type** | **String** | Who you are actually paying. `first_party` = operated by the provider that makes the capability; `reseller` = resold, so the price carries someone else's margin. Null until the platform resolves the operator.  | [optional] |
 | **operated_by_id** | **String** |  | [optional] |
 | **settled_via_facilitator_id** | **String** |  | [optional] |
@@ -31,6 +40,15 @@ instance = Weft::SearchEndpointHit.new(
   call: null,
   price: null,
   payment: null,
+  access_methods: null,
+  service: null,
+  operation: null,
+  output_schema: null,
+  output: null,
+  execution: null,
+  callability: null,
+  compatibility: null,
+  source: null,
   operator_type: null,
   operated_by_id: null,
   settled_via_facilitator_id: null,

data/docs/SearchExecutionModeFilter.md

@@ -0,0 +1,19 @@
+# Weft::SearchExecutionModeFilter
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **eq** | **String** |  | [optional] |
+| **_in** | **Array<String>** |  | [optional] |
+
+## Example
+
+```ruby
+require 'weft-sdk'
+
+instance = Weft::SearchExecutionModeFilter.new(
+  eq: null,
+  _in: null
+)
+```

data/docs/SearchFilterSpec.md

@@ -8,6 +8,11 @@
 | **price_atomic** | [**SearchPriceAtomicFilter**](SearchPriceAtomicFilter.md) |  | [optional] |
 | **type** | [**SearchResourceTypeFilter**](SearchResourceTypeFilter.md) |  | [optional] |
 | **protocol** | [**SearchProtocolFilter**](SearchProtocolFilter.md) |  | [optional] |
+| **category** | [**SearchStringSetFilter**](SearchStringSetFilter.md) |  | [optional] |
+| **method** | [**SearchMethodFilter**](SearchMethodFilter.md) |  | [optional] |
+| **execution_mode** | [**SearchExecutionModeFilter**](SearchExecutionModeFilter.md) |  | [optional] |
+| **weft_fetch_compatible** | **Boolean** | True requires at least one access method whose paid request is supported by the current Weft fetch runtime. For async operations this can mean submission-only coverage followed by the provider workflow. | [optional] |
+| **include_unknown_prices** | **Boolean** | With a price constraint, also retain dynamic and unknown prices. | [optional][default to false] |
 
 ## Example
 
@@ -18,6 +23,11 @@ instance = Weft::SearchFilterSpec.new(
   price: null,
   price_atomic: null,
   type: null,
-  protocol: null
+  protocol: null,
+  category: null,
+  method: null,
+  execution_mode: null,
+  weft_fetch_compatible: null,
+  include_unknown_prices: null
 )
 ```

data/docs/SearchMethodFilter.md

@@ -0,0 +1,19 @@
+# Weft::SearchMethodFilter
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **eq** | **String** |  | [optional] |
+| **_in** | **Array<String>** |  | [optional] |
+
+## Example
+
+```ruby
+require 'weft-sdk'
+
+instance = Weft::SearchMethodFilter.new(
+  eq: null,
+  _in: null
+)
+```

data/docs/SearchResponse.md

@@ -22,7 +22,6 @@
 | **reason** | **String** | Machine-readable cause of an empty result set, non-null exactly when `match_quality` is `none`. `below_relevance_floor`: candidates ranked but the best scored under the floor. `filter_collapsed_pool`: a caller filter cut the pool before ranking and nothing relevant survived — relax the filter. `no_catalog_coverage`: recall returned no candidates at all on an unfiltered query. `unsupported_filter_value`: a CATEGORICAL filter value (`type` / `protocol`) matches zero stored values, so it could never have matched — categorical only, since a continuous bound like `price` that matches nothing is reported as `filter_collapsed_pool` instead (the bound needs raising, the dimension is not unsupported). `index_unavailable`: no active index — an operational fault, paired with the `EMPTY_INDEX` warning.  | [optional] |
 | **suggestion** | **String** | Human/agent-readable explanation of `reason`, carrying the concrete numbers behind it (pool sizes, the best discarded score against the floor, the values actually stored for a filter). Non-null exactly when `reason` is.  | [optional] |
 | **results** | [**Array<SearchResult>**](SearchResult.md) | Ranked `(Provider + Capability)` results; empty when the index is empty or nothing cleared the relevance floor. Results BELOW the floor are never returned — an empty list plus a `reason` is the honest answer, not a list of near-misses in the same shape as a genuine match.  |  |
-| **_mock** | **Boolean** | Present and `true` only when served by the mock backend. | [optional] |
 
 ## Example
 
@@ -47,7 +46,6 @@ instance = Weft::SearchResponse.new(
   match_quality: null,
   reason: null,
   suggestion: null,
-  results: null,
-  _mock: null
+  results: null
 )
 ```

data/docs/SearchStringSetFilter.md

@@ -0,0 +1,19 @@
+# Weft::SearchStringSetFilter
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **eq** | **String** |  | [optional] |
+| **_in** | **Array<String>** |  | [optional] |
+
+## Example
+
+```ruby
+require 'weft-sdk'
+
+instance = Weft::SearchStringSetFilter.new(
+  eq: null,
+  _in: null
+)
+```

data/docs/SearchWeftFetchCompatibility.md

@@ -0,0 +1,21 @@
+# Weft::SearchWeftFetchCompatibility
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **state** | **String** |  |  |
+| **reason** | **String** |  |  |
+| **contract_version** | **Integer** |  |  |
+
+## Example
+
+```ruby
+require 'weft-sdk'
+
+instance = Weft::SearchWeftFetchCompatibility.new(
+  state: null,
+  reason: null,
+  contract_version: null
+)
+```

data/docs/Wallet.md

@@ -4,11 +4,13 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **address** | **String** | EVM address of the buyer's Privy-managed wallet. Null if no wallet provisioned. |  |
-| **balance_usdc** | **String** | Live Base USDC balance, exact to the micro-dollar (up to 6 decimals, minimum 2). Returns \"0.00\" if the upstream wallet provider is unreachable. |  |
+| **provider** | **String** | Crossmint is the only buyer-wallet provider. |  |
+| **address** | **String** | Base smart-wallet address. Null only when Crossmint is unavailable. |  |
+| **tempo_address** | **String** | Paired Tempo smart-wallet address. Null only when Crossmint is unavailable. |  |
+| **balance_usdc** | **String** | Live Base USDC balance, exact to the micro-dollar (up to 6 decimals, minimum 2). Null when Crossmint is unreachable; consumers must not interpret null as zero.  |  |
 | **tempo_usd** | **String** | Aggregated USD value of the allowlisted Tempo TIP-20 dollar tokens on the wallet's paired Tempo chain, exact to the micro-dollar. `null` when the value is UNKNOWN — the Tempo RPC read failed, or no dollar token is allowlisted for that chain yet (e.g. Tempo mainnet pre-launch). A null here is never \"0.00\"; it means \"we couldn't determine it\", and `total_usd` then reflects the Base component only.  |  |
 | **total_usd** | **String** | Single aggregated USD balance = Base USDC + Tempo dollar tokens, exact to the micro-dollar. When `tempo_usd` is null (unavailable/unallowlisted) this equals `balance_usdc` alone. Null when the Base USDC provider is unreachable, because the surface never claims zero for a component it could not read.  |  |
-| **network** | **String** | Wallet network (e.g. `base-sepolia`). |  |
+| **network** | **String** | Selected Crossmint environment (`base_sepolia` or `base_mainnet`).  |  |
 
 ## Example
 
@@ -16,7 +18,9 @@
 require 'weft-sdk'
 
 instance = Weft::Wallet.new(
+  provider: null,
   address: null,
+  tempo_address: null,
   balance_usdc: 12.34,
   tempo_usd: 3.00,
   total_usd: 15.34,

data/lib/weft/generated/api/account_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API is the buyer-runtime surface that powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and any third-party agent that wants to discover and pay for paid resources on Weft. v1 covers five buyer concerns:    1. Account onboarding (`/api/v1/auth/*`, `/api/v1/me`)   2. CLI authentication (`/api/v1/api_keys`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Seller-side concerns (agent management, payout analytics, webhook delivery, the public storefront for `data_api` resources) live in the dashboard and are intentionally not documented here. They will be split out into a separate, dashboard-scoped spec when they need to be SDK-consumable.  All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.9.1
+The version of the OpenAPI document: 0.14.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0
@@ -20,7 +20,7 @@ module Weft
       @api_client = api_client
     end
     # Get the current credential principal
-    # Returns the Organization represented by a resource API key, or the User represented by an account API key or OAuth access token. Branch on `data.principal_type`; existing Organization fields remain unchanged.
+    # Returns the seller Organization represented by an `ax_live_*` resource key, or the buyer User represented by a `wk_*` account key, OAuth access token, or claimed `wbt_*` bearer. Branch on `data.principal_type`.
     # @param [Hash] opts the optional parameters
     # @return [MeResponse]
     def get_me(opts = {})
@@ -29,7 +29,7 @@ module Weft
     end
 
     # Get the current credential principal
-    # Returns the Organization represented by a resource API key, or the User represented by an account API key or OAuth access token. Branch on `data.principal_type`; existing Organization fields remain unchanged.
+    # Returns the seller Organization represented by an `ax_live_*` resource key, or the buyer User represented by a `wk_*` account key, OAuth access token, or claimed `wbt_*` bearer. Branch on `data.principal_type`.
     # @param [Hash] opts the optional parameters
     # @return [Array<(MeResponse, Integer, Hash)>] MeResponse data, response status code and response headers
     def get_me_with_http_info(opts = {})

data/lib/weft/generated/api/agent_bootstrap_api.rb

@@ -0,0 +1,224 @@
+=begin
+#Weft API
+
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+
+The version of the OpenAPI document: 0.14.1
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.19.0
+
+=end
+
+require 'cgi'
+
+module Weft
+  class AgentBootstrapApi
+    attr_accessor :api_client
+
+    def initialize(api_client = ApiClient.default)
+      @api_client = api_client
+    end
+    # Cancel or revoke a bootstrap credential
+    # A pending bootstrap becomes rejected. A claimed promoted credential becomes revoked and fails every subsequent request immediately.
+    # @param id [String]
+    # @param [Hash] opts the optional parameters
+    # @return [AccountBootstrapStatusResponse]
+    def cancel_account_bootstrap(id, opts = {})
+      data, _status_code, _headers = cancel_account_bootstrap_with_http_info(id, opts)
+      data
+    end
+
+    # Cancel or revoke a bootstrap credential
+    # A pending bootstrap becomes rejected. A claimed promoted credential becomes revoked and fails every subsequent request immediately.
+    # @param id [String]
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(AccountBootstrapStatusResponse, Integer, Hash)>] AccountBootstrapStatusResponse data, response status code and response headers
+    def cancel_account_bootstrap_with_http_info(id, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AgentBootstrapApi.cancel_account_bootstrap ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling AgentBootstrapApi.cancel_account_bootstrap"
+      end
+      pattern = Regexp.new(/^boot_[A-Za-z0-9_-]+$/)
+      if @api_client.config.client_side_validation && id !~ pattern
+        fail ArgumentError, "invalid value for 'id' when calling AgentBootstrapApi.cancel_account_bootstrap, must conform to the pattern #{pattern}."
+      end
+
+      # resource path
+      local_var_path = '/api/v1/account_bootstraps/{id}'.sub('{' + 'id' + '}', CGI.escape(id.to_s))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'AccountBootstrapStatusResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bootstrapAuth']
+
+      new_options = opts.merge(
+        :operation => :"AgentBootstrapApi.cancel_account_bootstrap",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:DELETE, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AgentBootstrapApi#cancel_account_bootstrap\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Create a temporary agent bootstrap
+    # Creates a 30-minute, search-only bootstrap and emails a separate claim link to the supplied address. Human approval binds the same `wbt_*` bearer to the account and promotes it to the fixed durable capability set. The response is deliberately identical for new and existing account emails and never contains the claim token. Rate limits apply per IP and normalized email; request bodies over 4 KiB are rejected before parsing. The bootstrap row and one-time credentials are committed only after the mail relay accepts the claim email. A retryable 503 leaves no bootstrap row behind.
+    # @param account_bootstrap_request [AccountBootstrapRequest]
+    # @param [Hash] opts the optional parameters
+    # @return [AccountBootstrapCreatedResponse]
+    def create_account_bootstrap(account_bootstrap_request, opts = {})
+      data, _status_code, _headers = create_account_bootstrap_with_http_info(account_bootstrap_request, opts)
+      data
+    end
+
+    # Create a temporary agent bootstrap
+    # Creates a 30-minute, search-only bootstrap and emails a separate claim link to the supplied address. Human approval binds the same &#x60;wbt_*&#x60; bearer to the account and promotes it to the fixed durable capability set. The response is deliberately identical for new and existing account emails and never contains the claim token. Rate limits apply per IP and normalized email; request bodies over 4 KiB are rejected before parsing. The bootstrap row and one-time credentials are committed only after the mail relay accepts the claim email. A retryable 503 leaves no bootstrap row behind.
+    # @param account_bootstrap_request [AccountBootstrapRequest]
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(AccountBootstrapCreatedResponse, Integer, Hash)>] AccountBootstrapCreatedResponse data, response status code and response headers
+    def create_account_bootstrap_with_http_info(account_bootstrap_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AgentBootstrapApi.create_account_bootstrap ...'
+      end
+      # verify the required parameter 'account_bootstrap_request' is set
+      if @api_client.config.client_side_validation && account_bootstrap_request.nil?
+        fail ArgumentError, "Missing the required parameter 'account_bootstrap_request' when calling AgentBootstrapApi.create_account_bootstrap"
+      end
+      # resource path
+      local_var_path = '/api/v1/account_bootstraps'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(account_bootstrap_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'AccountBootstrapCreatedResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || []
+
+      new_options = opts.merge(
+        :operation => :"AgentBootstrapApi.create_account_bootstrap",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AgentBootstrapApi#create_account_bootstrap\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Read bootstrap lifecycle status
+    # @param id [String]
+    # @param [Hash] opts the optional parameters
+    # @return [AccountBootstrapStatusResponse]
+    def get_account_bootstrap(id, opts = {})
+      data, _status_code, _headers = get_account_bootstrap_with_http_info(id, opts)
+      data
+    end
+
+    # Read bootstrap lifecycle status
+    # @param id [String]
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(AccountBootstrapStatusResponse, Integer, Hash)>] AccountBootstrapStatusResponse data, response status code and response headers
+    def get_account_bootstrap_with_http_info(id, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AgentBootstrapApi.get_account_bootstrap ...'
+      end
+      # verify the required parameter 'id' is set
+      if @api_client.config.client_side_validation && id.nil?
+        fail ArgumentError, "Missing the required parameter 'id' when calling AgentBootstrapApi.get_account_bootstrap"
+      end
+      pattern = Regexp.new(/^boot_[A-Za-z0-9_-]+$/)
+      if @api_client.config.client_side_validation && id !~ pattern
+        fail ArgumentError, "invalid value for 'id' when calling AgentBootstrapApi.get_account_bootstrap, must conform to the pattern #{pattern}."
+      end
+
+      # resource path
+      local_var_path = '/api/v1/account_bootstraps/{id}'.sub('{' + 'id' + '}', CGI.escape(id.to_s))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'AccountBootstrapStatusResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bootstrapAuth']
+
+      new_options = opts.merge(
+        :operation => :"AgentBootstrapApi.get_account_bootstrap",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AgentBootstrapApi#get_account_bootstrap\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+  end
+end

data/lib/weft/generated/api/api_keys_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API is the buyer-runtime surface that powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and any third-party agent that wants to discover and pay for paid resources on Weft. v1 covers five buyer concerns:    1. Account onboarding (`/api/v1/auth/*`, `/api/v1/me`)   2. CLI authentication (`/api/v1/api_keys`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Seller-side concerns (agent management, payout analytics, webhook delivery, the public storefront for `data_api` resources) live in the dashboard and are intentionally not documented here. They will be split out into a separate, dashboard-scoped spec when they need to be SDK-consumable.  All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.9.1
+The version of the OpenAPI document: 0.14.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0
@@ -20,6 +20,7 @@ module Weft
       @api_client = api_client
     end
     # Create an API key
+    # Create an `ax_live_*` resource key for the authenticated seller Organization. Buyer `wk_*` keys are created in the buyer dashboard.
     # @param create_api_key_request [CreateApiKeyRequest]
     # @param [Hash] opts the optional parameters
     # @return [ApiKeyCreatedResponse]
@@ -29,6 +30,7 @@ module Weft
     end
 
     # Create an API key
+    # Create an `ax_live_*` resource key for the authenticated seller Organization. Buyer `wk_*` keys are created in the buyer dashboard.
     # @param create_api_key_request [CreateApiKeyRequest]
     # @param [Hash] opts the optional parameters
     # @return [Array<(ApiKeyCreatedResponse, Integer, Hash)>] ApiKeyCreatedResponse data, response status code and response headers
@@ -86,6 +88,7 @@ module Weft
     end
 
     # List API keys
+    # List `ax_live_*` resource keys for the seller Organization.
     # @param [Hash] opts the optional parameters
     # @return [ApiKeyListResponse]
     def list_api_keys(opts = {})
@@ -94,6 +97,7 @@ module Weft
     end
 
     # List API keys
+    # List &#x60;ax_live_*&#x60; resource keys for the seller Organization.
     # @param [Hash] opts the optional parameters
     # @return [Array<(ApiKeyListResponse, Integer, Hash)>] ApiKeyListResponse data, response status code and response headers
     def list_api_keys_with_http_info(opts = {})

data/lib/weft/generated/api/auth_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API is the buyer-runtime surface that powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and any third-party agent that wants to discover and pay for paid resources on Weft. v1 covers five buyer concerns:    1. Account onboarding (`/api/v1/auth/*`, `/api/v1/me`)   2. CLI authentication (`/api/v1/api_keys`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Seller-side concerns (agent management, payout analytics, webhook delivery, the public storefront for `data_api` resources) live in the dashboard and are intentionally not documented here. They will be split out into a separate, dashboard-scoped spec when they need to be SDK-consumable.  All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.9.1
+The version of the OpenAPI document: 0.14.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0

data/lib/weft/generated/api/balance_api.rb

@@ -1,9 +1,9 @@
 =begin
 #Weft API
 
-#The Weft API is the buyer-runtime surface that powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and any third-party agent that wants to discover and pay for paid resources on Weft. v1 covers five buyer concerns:    1. Account onboarding (`/api/v1/auth/*`, `/api/v1/me`)   2. CLI authentication (`/api/v1/api_keys`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Seller-side concerns (agent management, payout analytics, webhook delivery, the public storefront for `data_api` resources) live in the dashboard and are intentionally not documented here. They will be split out into a separate, dashboard-scoped spec when they need to be SDK-consumable.  All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
+#The Weft API powers the `weft` CLI, the hosted MCP server (`weft.network/mcp`), and third-party applications that discover and pay for resources on Weft. The buyer runtime covers six concerns:    1. Account creation and recovery (`/api/v1/auth/*`)   2. Credential identity (`/api/v1/me`)   3. Wallet visibility (`/api/v1/balance`)   4. Discovery (`/api/v1/search`)   5. Paid execution (`/api/v1/fetch`)   6. Purchase history (`/api/v1/purchases`)  Buyer runtime calls require a dashboard-created `wk_*` account key, an OAuth access token with the relevant scope, or a claimed `wbt_*` bearer on its fixed allowlist. The organization-scoped API key and payment operations in this document are seller administration surfaces and require an `ax_live_*` resource key. These credential types are not interchangeable.  Before claim, a `wbt_*` bearer is temporary and permits only search plus its own status/cancel operations for 30 minutes. Human approval binds it to the User and promotes the same secret to durable identity, search, balance, fetch, purchase-history, status, and revocation capabilities. It remains valid until revoked. Seller, organization, API-key administration, dashboard-session, transfer, withdrawal, and MCP surfaces always refuse it.  Bootstrap lifecycle successes follow the API-standard `{ \"data\": ... }` envelope. All errors share the envelope defined by `ErrorResponse`, except the buyer-runtime endpoints (`/search`, `/fetch`) which use bespoke envelopes carrying additional context — see `SearchErrorResponse` and `FetchErrorResponse`.
 
-The version of the OpenAPI document: 0.9.1
+The version of the OpenAPI document: 0.14.1
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.19.0
@@ -20,7 +20,7 @@ module Weft
       @api_client = api_client
     end
     # Get wallet, spending policy, and current-window spend
-    # Read-only snapshot for the buyer behind the bearer token. The response always includes a `promo` block — values are zero in v1 and fill in once the freemium promo ledger ships, without a shape change. `wallet.balance_usdc` is fetched live from Privy; if Privy is unreachable the field returns `\"0.00\"` rather than erroring the whole call.  Account-scoped: the bearer must be a buyer-scoped API key.
+    # Read-only snapshot for the buyer behind the bearer token. The response always includes a `promo` block — values are zero in v1 and fill in once the freemium promo ledger ships, without a shape change. Base USDC and Tempo balances are fetched server-side through Crossmint. If Crossmint is unreachable, the balance fields are `null`; consumers must not interpret that as zero.  Account-scoped: the bearer must be a buyer-scoped API key, an OAuth access token carrying `balance`, or a claimed `wbt_*` bearer.
     # @param [Hash] opts the optional parameters
     # @return [BalanceResponse]
     def get_balance(opts = {})
@@ -29,7 +29,7 @@ module Weft
     end
 
     # Get wallet, spending policy, and current-window spend
-    # Read-only snapshot for the buyer behind the bearer token. The response always includes a `promo` block — values are zero in v1 and fill in once the freemium promo ledger ships, without a shape change. `wallet.balance_usdc` is fetched live from Privy; if Privy is unreachable the field returns `\"0.00\"` rather than erroring the whole call.  Account-scoped: the bearer must be a buyer-scoped API key.
+    # Read-only snapshot for the buyer behind the bearer token. The response always includes a `promo` block — values are zero in v1 and fill in once the freemium promo ledger ships, without a shape change. Base USDC and Tempo balances are fetched server-side through Crossmint. If Crossmint is unreachable, the balance fields are `null`; consumers must not interpret that as zero.  Account-scoped: the bearer must be a buyer-scoped API key, an OAuth access token carrying `balance`, or a claimed `wbt_*` bearer.
     # @param [Hash] opts the optional parameters
     # @return [Array<(BalanceResponse, Integer, Hash)>] BalanceResponse data, response status code and response headers
     def get_balance_with_http_info(opts = {})