@onesi/genesis 0.2.1 → 0.2.3

package/dist/genesis.openapi.json

@@ -1985,7 +1985,7 @@
           "path": "/v1/files",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "post": {
         "operationId": "foundry_uploadFile",
@@ -2037,7 +2037,7 @@
           "path": "/v1/files",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/files/{file_id}": {
@@ -2083,7 +2083,7 @@
           "path": "/v1/files/{file_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "delete": {
         "operationId": "foundry_deleteFile",
@@ -2127,7 +2127,7 @@
           "path": "/v1/files/{file_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/files/{file_id}/content": {
@@ -2174,7 +2174,7 @@
           "path": "/v1/files/{file_id}/content",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/providers": {
@@ -2209,7 +2209,7 @@
           "path": "/v1/fine_tuning/providers",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs": {
@@ -2264,7 +2264,7 @@
           "path": "/v1/fine_tuning/jobs",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "get": {
         "operationId": "foundry_listFineTuningJobs",
@@ -2297,7 +2297,7 @@
           "path": "/v1/fine_tuning/jobs",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs/{job_id}": {
@@ -2343,7 +2343,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "delete": {
         "operationId": "foundry_deleteFineTuningJob",
@@ -2387,7 +2387,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs/{job_id}/events": {
@@ -2433,7 +2433,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}/events",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs/{job_id}/cancel": {
@@ -2479,7 +2479,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}/cancel",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs/{job_id}/checkpoints": {
@@ -2525,7 +2525,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}/checkpoints",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/models": {
@@ -2560,7 +2560,7 @@
           "path": "/v1/fine_tuning/models",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/models/{model_id}": {
@@ -2606,7 +2606,7 @@
           "path": "/v1/fine_tuning/models/{model_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/batches": {
@@ -2652,7 +2652,7 @@
           "path": "/api/beta/batches",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/batches/{batch_id}": {
@@ -2699,7 +2699,7 @@
           "path": "/api/beta/batches/{batch_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/generation": {
@@ -2873,7 +2873,7 @@
           "path": "/api/v1/activity",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/activity/export": {
@@ -2919,7 +2919,7 @@
           "path": "/api/v1/activity/export",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/analytics/meta": {
@@ -2955,7 +2955,7 @@
           "path": "/api/v1/analytics/meta",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/analytics/query": {
@@ -4902,6 +4902,16 @@
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/Foundry.ApiKeyCreateRequest"
+              }
+            }
+          }
+        },
         "x-genesis-service": "foundry",
         "x-upstream": {
           "base": "https://api.fdy.sh",
@@ -4980,7 +4990,7 @@
           "path": "/v1/provider-keys",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "post": {
         "operationId": "foundry_createProviderKey",
@@ -5023,7 +5033,7 @@
           "path": "/v1/provider-keys",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/provider-keys/{provider_id}": {
@@ -5079,7 +5089,7 @@
           "path": "/v1/provider-keys/{provider_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "delete": {
         "operationId": "foundry_deleteProviderKey",
@@ -5123,7 +5133,7 @@
           "path": "/v1/provider-keys/{provider_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/provider-credential-policies": {
@@ -5158,7 +5168,7 @@
           "path": "/v1/provider-credential-policies",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/provider-credential-policies/{provider_id}": {
@@ -5214,7 +5224,7 @@
           "path": "/v1/provider-credential-policies/{provider_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/billing/profile": {
@@ -13564,9 +13574,7 @@
             }
           },
           "404": {
-            "description": "Missing or wrong owner",
-            "actor": null,
-            "binding or queue": null
+            "description": "Missing or wrong owner, actor, binding or queue"
           }
         },
         "x-genesis-service": "hives",
@@ -19500,8 +19508,7 @@
           {
             "name": "search",
             "in": "query",
-            "description": "Substring of the common name",
-            "or an exact SAN": null,
+            "description": "Substring of the common name, or an exact SAN",
             "schema": {
               "type": "string",
               "maxLength": 253
@@ -24423,8 +24430,7 @@
             "name": "q",
             "in": "query",
             "required": true,
-            "description": "Name to search",
-            "at least 2 characters; the part before the first dot is used": null,
+            "description": "Name to search, at least 2 characters; the part before the first dot is used",
             "schema": {
               "type": "string",
               "minLength": 2
@@ -24715,6 +24721,45 @@
         "x-mcp": true
       }
     },
+    "/v1/relays/domains/specials": {
+      "get": {
+        "operationId": "relays_listDomainSpecials",
+        "summary": "List TLDs priced below their 24-hour mean",
+        "description": "Genesis scope relays:read; local scope registrar:read. Needs the selected project's existing Relays account and never provisions it (403 RELAYS_NOT_PROVISIONED until an owner or admin opens Relays). Returns the TLDs whose cheapest current wholesale registration price across Relays' registrars is at least 10% below its 24-hour trailing mean, deepest discount first, at most 50. Prices are integer cents; deltaPercent is the fractional change (-0.25 is 25% below the mean). narrative is present when a recent pricing note exists for the TLD. The data is market pricing shared by every account and is recomputed at most once a minute (cached says whether this answer came from that cache). Nothing is bought.",
+        "responses": {
+          "200": {
+            "description": "Current specials",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Relays.DomSpecials"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Relays.Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Relays.Error"
+          },
+          "500": {
+            "$ref": "#/components/responses/Relays.Error"
+          }
+        },
+        "tags": [
+          "relays"
+        ],
+        "x-genesis-service": "relays",
+        "x-upstream": {
+          "base": "https://relays.one/api",
+          "method": "GET",
+          "path": "/v1/domains/specials",
+          "status": "unverified"
+        },
+        "x-mcp": true
+      }
+    },
     "/v1/relays/domains/forwarding": {
       "get": {
         "operationId": "relays_listDomainForwardingRules",
@@ -24725,8 +24770,7 @@
             "name": "domain",
             "in": "query",
             "required": true,
-            "description": "Hostname",
-            "e.g. example.com": null,
+            "description": "Hostname, e.g. example.com",
             "schema": {
               "type": "string"
             }
@@ -25071,11 +25115,7 @@
             }
           },
           "400": {
-            "description": "Invalid body",
-            "unknown provider": null,
-            "unsupported auth model": null,
-            "an API endpoint off the provider's hosts": null,
-            "or duplicate label": null,
+            "description": "Invalid body, unknown provider, unsupported auth model, an API endpoint off the provider's hosts, or duplicate label",
             "content": {
               "application/json": {
                 "schema": {
@@ -26667,8 +26707,7 @@
             "$ref": "#/components/responses/Iam.NotFound"
           },
           "409": {
-            "description": "Workspaces",
-            "fleets or grants still reference the project": null
+            "description": "Workspaces, fleets or grants still reference the project"
           },
           "503": {
             "$ref": "#/components/responses/Iam.ServiceUnavailable"
@@ -49094,7 +49133,7 @@
       "get": {
         "operationId": "minds_engineForgettingGetForgettingRequests",
         "summary": "forgetting: GET /v1/forgetting/requests",
-        "description": "Calls `GET /v1/forgetting/requests` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `_system_forgetting_requests` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `GET /v1/forgetting/requests` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `_system_forgetting_requests` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -49134,6 +49173,7 @@
           "daemon_method": "GET",
           "daemon_path": "/v1/forgetting/requests",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -49335,7 +49375,7 @@
       "get": {
         "operationId": "minds_engineForgettingGetForgettingStats",
         "summary": "forgetting: GET /v1/forgetting/stats",
-        "description": "Calls `GET /v1/forgetting/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `_system_forgetting_requests` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `GET /v1/forgetting/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `_system_forgetting_requests` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -49375,6 +49415,7 @@
           "daemon_method": "GET",
           "daemon_path": "/v1/forgetting/stats",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -53119,7 +53160,7 @@
       "put": {
         "operationId": "minds_engineEpisodicMemoryPutMemoryEpisodicId",
         "summary": "episodic-memory: PUT /v1/memory/episodic/:id",
-        "description": "Calls `PUT /v1/memory/episodic/:id` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `update` on `memory:episodic` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `PUT /v1/memory/episodic/:id` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `update` on `memory:episodic` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -53168,6 +53209,7 @@
           "daemon_method": "PUT",
           "daemon_path": "/v1/memory/episodic/:id",
           "actions": [
+            "read",
             "update"
           ],
           "keyspaces": [
@@ -53553,7 +53595,7 @@
       "get": {
         "operationId": "minds_engineProceduralMemoryGetMemoryProceduresList",
         "summary": "procedural-memory: GET /v1/memory/procedures/list",
-        "description": "Calls `GET /v1/memory/procedures/list` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `GET /v1/memory/procedures/list` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -53593,6 +53635,7 @@
           "daemon_method": "GET",
           "daemon_path": "/v1/memory/procedures/list",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -53706,7 +53749,7 @@
       "post": {
         "operationId": "minds_engineProceduralMemoryPostMemoryProceduresUpdate",
         "summary": "procedural-memory: POST /v1/memory/procedures/update",
-        "description": "Calls `POST /v1/memory/procedures/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `update` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `POST /v1/memory/procedures/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `update` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -53746,6 +53789,7 @@
           "daemon_method": "POST",
           "daemon_path": "/v1/memory/procedures/update",
           "actions": [
+            "read",
             "update"
           ],
           "keyspaces": [
@@ -53953,7 +53997,7 @@
       "post": {
         "operationId": "minds_engineResourceMemoryPostMemoryResourcesAccess",
         "summary": "resource-memory: POST /v1/memory/resources/access",
-        "description": "Calls `POST /v1/memory/resources/access` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `update` on `memory:resource` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `POST /v1/memory/resources/access` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `update`, `write` on `memory:resource` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -53993,7 +54037,8 @@
           "daemon_method": "POST",
           "daemon_path": "/v1/memory/resources/access",
           "actions": [
-            "update"
+            "update",
+            "write"
           ],
           "keyspaces": [
             "memory:resource"
@@ -54473,7 +54518,7 @@
       "get": {
         "operationId": "minds_engineResourceMemoryGetMemoryResourcesList",
         "summary": "resource-memory: GET /v1/memory/resources/list",
-        "description": "Calls `GET /v1/memory/resources/list` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:resource` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `GET /v1/memory/resources/list` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `memory:resource` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -54513,6 +54558,7 @@
           "daemon_method": "GET",
           "daemon_path": "/v1/memory/resources/list",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -54540,7 +54586,7 @@
       "post": {
         "operationId": "minds_engineResourceMemoryPostMemoryResourcesType",
         "summary": "resource-memory: POST /v1/memory/resources/type",
-        "description": "Calls `POST /v1/memory/resources/type` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:resource` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `POST /v1/memory/resources/type` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `memory:resource` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -54580,6 +54626,7 @@
           "daemon_method": "POST",
           "daemon_path": "/v1/memory/resources/type",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -54626,7 +54673,7 @@
       "post": {
         "operationId": "minds_engineResourceMemoryPostMemoryResourcesUsage",
         "summary": "resource-memory: POST /v1/memory/resources/usage",
-        "description": "Calls `POST /v1/memory/resources/usage` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:resource` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `POST /v1/memory/resources/usage` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `memory:resource` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -54666,6 +54713,7 @@
           "daemon_method": "POST",
           "daemon_path": "/v1/memory/resources/usage",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -55302,7 +55350,7 @@
       "get": {
         "operationId": "minds_engineVaultGetMemoryVaultStats",
         "summary": "vault: GET /v1/memory/vault/stats",
-        "description": "Calls `GET /v1/memory/vault/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:vault` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `GET /v1/memory/vault/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `memory:vault` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -55342,6 +55390,7 @@
           "daemon_method": "GET",
           "daemon_path": "/v1/memory/vault/stats",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -57593,7 +57642,7 @@
       "get": {
         "operationId": "minds_engineLearningIsolationGetQuarantineItems",
         "summary": "learning-isolation: GET /v1/quarantine/items",
-        "description": "Calls `GET /v1/quarantine/items` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `_system_quarantine` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `GET /v1/quarantine/items` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `_system_quarantine` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -57651,6 +57700,7 @@
           "daemon_method": "GET",
           "daemon_path": "/v1/quarantine/items",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -57977,7 +58027,7 @@
       "get": {
         "operationId": "minds_engineLearningIsolationGetQuarantineStats",
         "summary": "learning-isolation: GET /v1/quarantine/stats",
-        "description": "Calls `GET /v1/quarantine/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `_system_quarantine` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
+        "description": "Calls `GET /v1/quarantine/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `_system_quarantine` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.",
         "parameters": [
           {
             "name": "mind_id",
@@ -58017,6 +58067,7 @@
           "daemon_method": "GET",
           "daemon_path": "/v1/quarantine/stats",
           "actions": [
+            "query",
             "read"
           ],
           "keyspaces": [
@@ -64156,7 +64207,12 @@
       "get": {
         "operationId": "rigs_listRigs",
         "summary": "List your Rigs (desktops)",
-        "description": "Rigs in the selected organization and project. Needs `rigs:read` (or `rigs:write`). An inventory of 100 or more is refused rather than shown incomplete.",
+        "description": "Rigs in the selected organization and project. Needs `rigs:read` (or `rigs:write`). Ended Rigs are left out unless `include=ended` is given. Ended means omega-native's set, `cancelled`, `terminated`, `failed` or `succeeded`; `orphaned` counts as active. Omega keeps them for audit. Get-by-id returns an ended Rig either way, with its status. An inventory of 100 or more is refused rather than shown incomplete.",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/Rigs.IncludeEnded"
+          }
+        ],
         "responses": {
           "200": {
             "description": "Rigs in the selected project",
@@ -64171,6 +64227,9 @@
           "403": {
             "description": "RIGS_READ_PERMISSION_REQUIRED, RIGS_CONTEXT_REQUIRED or RIGS_CONTEXT_NOT_ADMITTED"
           },
+          "404": {
+            "description": "Any query other than `include=ended`"
+          },
           "409": {
             "description": "RIGS_CONTEXT_CHANGED (selection changed during the read)"
           },
@@ -64224,7 +64283,7 @@
             }
           },
           "400": {
-            "description": "RIGS_IDEMPOTENCY_KEY_REQUIRED, RIGS_INVALID_IDEMPOTENCY_KEY, RIGS_INVALID_REQUEST (not one JSON object), or RIGS_CREATE_REFUSED (the facade refused the launch input)"
+            "description": "RIGS_IDEMPOTENCY_KEY_REQUIRED, RIGS_INVALID_IDEMPOTENCY_KEY, RIGS_INVALID_REQUEST (not one JSON object), or RIGS_CREATE_REFUSED (the facade refused the launch input, for example a resolution other than 1920x1080)"
           },
           "403": {
             "description": "RIGS_WRITE_PERMISSION_REQUIRED, RIGS_CONTEXT_REQUIRED or RIGS_CONTEXT_NOT_ADMITTED"
@@ -64382,7 +64441,7 @@
       "post": {
         "operationId": "rigs_actOnRig",
         "summary": "Run an action on one Rig",
-        "description": "The facade's action route with its own body form, `{capability, args}`. Capabilities: `stop`, `restart`, `reinstall_os`, `snapshot`, `resize`, `wipe_state`, `logs`. Needs `rigs:write`. Idempotency-Key is required for every capability except `stop`; a retry with the same key replays instead of acting twice. Until Omega's native executor for a capability ships, the facade answers 503 for it.",
+        "description": "The facade's action route with its own body form, `{capability, args}`. Capabilities: `stop`, `restart`, `reinstall_os`, `snapshot`, `wipe_state`, `logs`. Needs `rigs:write`. Idempotency-Key is required for every capability except `stop`; a retry with the same key replays instead of acting twice. Until Omega's native executor for a capability ships, the facade answers 503 for it. A Rig's desktop resolution is fixed at create, so there is no `resize`.",
         "parameters": [
           {
             "$ref": "#/components/parameters/Rigs.IdempotencyKeyOptional"
@@ -64406,7 +64465,6 @@
                       "restart",
                       "reinstall_os",
                       "snapshot",
-                      "resize",
                       "wipe_state",
                       "logs"
                     ]
@@ -64436,9 +64494,7 @@
             "description": "A non-UUID id, an unknown capability, a missing Idempotency-Key (non-stop), or the facade refused the request"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found"
@@ -64450,7 +64506,14 @@
             "description": "The capability has no server-side executor"
           },
           "503": {
-            "description": "The native executor is not available yet, or the facade is unavailable; retry with the same key"
+            "description": "A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Rigs.SnapshotUnavailable"
+                }
+              }
+            }
           }
         },
         "tags": [
@@ -64498,16 +64561,13 @@
             "description": "A non-UUID id or a body other than {}"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found"
           },
           "503": {
-            "description": "The native stream transport is not bound yet",
-            "or the facade is unavailable": null
+            "description": "The native stream transport is not bound yet, or the facade is unavailable"
           }
         },
         "tags": [
@@ -64527,7 +64587,12 @@
       "get": {
         "operationId": "panes_listPanes",
         "summary": "List your Panes (browsers)",
-        "description": "Browser instances in the selected organization and project. Needs `panes:read`.",
+        "description": "Browser instances in the selected organization and project. Needs `panes:read`. Ended Panes are left out unless `include=ended` is given. Ended means omega-native's set, `cancelled`, `terminated`, `failed` or `succeeded`; `orphaned` counts as active. Omega keeps them for audit. Get-by-id returns an ended Pane either way, with its status.",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/Panes.IncludeEnded"
+          }
+        ],
         "responses": {
           "200": {
             "description": "Panes in the selected project",
@@ -64542,6 +64607,9 @@
           "403": {
             "description": "Signed organization and project selection required"
           },
+          "404": {
+            "description": "Any query other than `include=ended`"
+          },
           "503": {
             "description": "Panes private admission unavailable"
           }
@@ -64597,6 +64665,16 @@
           "409": {
             "description": "OPERATION_CONFLICT (the key was used for a different request) or OPERATION_PENDING (retry later with the same key)"
           },
+          "422": {
+            "description": "OMEGA_NATIVE_UNSUPPORTED_PROFILE: a launch value native Panes cannot run (a url other than about:blank, a viewport other than 780x437, or headless false). `field` names it.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Panes.UnsupportedProfileError"
+                }
+              }
+            }
+          },
           "503": {
             "description": "Panes unavailable; the create may or may not have started; retry with the same key"
           }
@@ -64646,9 +64724,7 @@
             "description": "The id is not a UUID, or INVALID_REQUEST (the Pane id was refused)"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the read scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the read scope, required"
           },
           "404": {
             "description": "PANE_NOT_FOUND (also any query)"
@@ -64703,9 +64779,7 @@
             "description": "A non-UUID id, a request body, or the facade refused the request"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found (also any query)"
@@ -64782,7 +64856,7 @@
                   "args": {
                     "type": "object",
                     "additionalProperties": true,
-                    "description": "Capability arguments (default an empty object)"
+                    "description": "Capability arguments (default an empty object). resize takes integer width 320-3840 and height 240-2160, as {width, height} or {viewport: \"WxH\"}; out-of-range values get 400."
                   }
                 }
               }
@@ -64804,9 +64878,7 @@
             "description": "A non-UUID id, an unknown capability, a missing Idempotency-Key (non-stop), or the facade refused the request"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found"
@@ -64818,7 +64890,14 @@
             "description": "The capability has no server-side executor"
           },
           "503": {
-            "description": "The native executor is not available yet, or the facade is unavailable; retry with the same key"
+            "description": "A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Panes.SnapshotUnavailable"
+                }
+              }
+            }
           }
         },
         "tags": [
@@ -64866,16 +64945,13 @@
             "description": "A non-UUID id or a body other than {}"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found"
           },
           "503": {
-            "description": "The native stream transport is not bound yet",
-            "or the facade is unavailable": null
+            "description": "The native stream transport is not bound yet, or the facade is unavailable"
           }
         },
         "tags": [
@@ -64941,16 +65017,13 @@
             "description": "A non-UUID id or artifact id"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the read scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the read scope, required"
           },
           "404": {
             "description": "Not found"
           },
           "503": {
-            "description": "The native artifact store is not available yet",
-            "or the facade is unavailable": null
+            "description": "The native artifact store is not available yet, or the facade is unavailable"
           }
         },
         "tags": [
@@ -64963,14 +65036,19 @@
           "path": "/api/v1/panes/{id}/screenshots/{artifactId}/data",
           "status": "unverified"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/shells/shells": {
       "get": {
         "operationId": "shells_listShells",
         "summary": "List your Shells (sandboxes)",
-        "description": "Sandbox instances in the selected organization and project. Needs `shells:read`.",
+        "description": "Sandbox instances in the selected organization and project. Needs `shells:read`. Ended Shells are left out unless `include=ended` is given. Ended means omega-native's set, `cancelled`, `terminated`, `failed` or `succeeded`; `orphaned` counts as active. Omega keeps them for audit. Get-by-id returns an ended Shell either way, with its status.",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/Shells.IncludeEnded"
+          }
+        ],
         "responses": {
           "200": {
             "description": "Shells in the selected project",
@@ -64985,6 +65063,9 @@
           "403": {
             "description": "Signed organization and project selection required"
           },
+          "404": {
+            "description": "Any query other than `include=ended`"
+          },
           "503": {
             "description": "Shells private admission unavailable"
           }
@@ -65089,9 +65170,7 @@
             "description": "The id is not a UUID, or INVALID_ARGUMENT (the Shell id was refused)"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the read scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the read scope, required"
           },
           "404": {
             "description": "Not found (also any query)"
@@ -65136,9 +65215,7 @@
             "description": "A non-UUID id, a request body, or the facade refused the request"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found (also any query)"
@@ -65232,9 +65309,7 @@
             "description": "A non-UUID id, an unknown capability, a missing Idempotency-Key (non-stop), or the facade refused the request"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found"
@@ -65246,7 +65321,14 @@
             "description": "The capability has no server-side executor"
           },
           "503": {
-            "description": "The native executor is not available yet, or the facade is unavailable; retry with the same key"
+            "description": "A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Shells.SnapshotUnavailable"
+                }
+              }
+            }
           }
         },
         "tags": [
@@ -65294,16 +65376,13 @@
             "description": "A non-UUID id or a body other than {}"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found"
           },
           "503": {
-            "description": "The native stream transport is not bound yet",
-            "or the facade is unavailable": null
+            "description": "The native stream transport is not bound yet, or the facade is unavailable"
           }
         },
         "tags": [
@@ -65366,9 +65445,7 @@
             "description": "INVALID_ARGUMENT, a missing Idempotency-Key, or a non-UUID id"
           },
           "403": {
-            "description": "Signed organization and project selection",
-            "or the write scope": null,
-            "required": null
+            "description": "Signed organization and project selection, or the write scope, required"
           },
           "404": {
             "description": "Not found"
@@ -65882,8 +65959,7 @@
             "description": "Not found in your scope"
           },
           "409": {
-            "description": "Run is already terminal",
-            "or a wait_for_completion child is still running": null
+            "description": "Run is already terminal, or a wait_for_completion child is still running"
           },
           "502": {
             "description": "The Flowers runtime could not complete the execution"
@@ -66139,9 +66215,7 @@
             }
           },
           "400": {
-            "description": "Invalid body",
-            "attempt": null,
-            "or not exactly one of outputRef and errorRef": null
+            "description": "Invalid body, attempt, or not exactly one of outputRef and errorRef"
           },
           "403": {
             "description": "gears.runs.write required"
@@ -66271,8 +66345,7 @@
             "description": "closePolicy is not one of the ChildClosePolicy values; the error lists the allowed values"
           },
           "502": {
-            "description": "The Flowers runtime could not spawn the child; the child run is recorded as Failed",
-            "never left Running": null
+            "description": "The Flowers runtime could not spawn the child; the child run is recorded as Failed, never left Running"
           }
         },
         "tags": [
@@ -77112,8 +77185,7 @@
             }
           },
           "422": {
-            "description": "Unknown status",
-            "unknown or repeated query key": null
+            "description": "Unknown status, unknown or repeated query key"
           }
         },
         "tags": [
@@ -97678,24 +97750,30 @@
       "Foundry.ApiKeyCreateRequest": {
         "type": "object",
         "required": [
-          "api_key"
+          "label",
+          "scopes"
         ],
+        "description": "Body for creating or rotating a Sandbox prepaid native key through Genesis (Console key broker, gateway/src/foundry-key-write.ts). The secret is generated by Foundry and returned once; it is never sent by the caller.",
         "properties": {
-          "api_key": {
-            "type": "string",
-            "writeOnly": true
-          },
           "label": {
             "type": [
               "string",
               "null"
-            ]
+            ],
+            "maxLength": 120,
+            "description": "Display label (UTF-8, at most 120 bytes, no control characters), or null."
           },
           "scopes": {
             "type": "array",
+            "minItems": 1,
+            "maxItems": 1,
             "items": {
-              "type": "string"
-            }
+              "type": "string",
+              "enum": [
+                "foundry:gateway:invoke:prepaid"
+              ]
+            },
+            "description": "Exactly [\"foundry:gateway:invoke:prepaid\"]."
           }
         },
         "additionalProperties": false
@@ -112623,8 +112701,7 @@
           "basis": {
             "type": "string",
             "const": "list",
-            "description": "Relays list price for the TLD",
-            "not a registrar quote": null
+            "description": "Relays list price for the TLD, not a registrar quote"
           }
         }
       },
@@ -113007,6 +113084,57 @@
           }
         }
       },
+      "Relays.DomSpecials": {
+        "type": "object",
+        "required": [
+          "specials"
+        ],
+        "properties": {
+          "specials": {
+            "type": "array",
+            "maxItems": 50,
+            "items": {
+              "type": "object",
+              "required": [
+                "tld",
+                "latestPriceCents",
+                "trailingMeanCents",
+                "deltaPercent",
+                "currency"
+              ],
+              "properties": {
+                "tld": {
+                  "type": "string",
+                  "description": "The TLD without a leading dot, e.g. com"
+                },
+                "latestPriceCents": {
+                  "type": "integer",
+                  "description": "Cheapest current registration price, in cents"
+                },
+                "trailingMeanCents": {
+                  "type": "integer",
+                  "description": "Mean registration price over the last 24 hours, in cents"
+                },
+                "deltaPercent": {
+                  "type": "number",
+                  "description": "Fractional change from the mean; -0.25 is 25% below"
+                },
+                "currency": {
+                  "type": "string"
+                },
+                "narrative": {
+                  "type": "string",
+                  "description": "A recent pricing note for the TLD, when one exists"
+                }
+              }
+            }
+          },
+          "cached": {
+            "type": "boolean",
+            "description": "True when the answer came from the one-minute cache"
+          }
+        }
+      },
       "Relays.DomSuggestResult": {
         "type": "object",
         "properties": {
@@ -113061,8 +113189,7 @@
                   "properties": {
                     "checked": {
                       "type": "boolean",
-                      "description": "true only when the registrar answered; false means unknown",
-                      "not taken": null
+                      "description": "true only when the registrar answered; false means unknown, not taken"
                     },
                     "source": {
                       "type": "string",
@@ -115302,8 +115429,7 @@
           },
           "projectId": {
             "type": "string",
-            "description": "The project this workspace belongs to",
-            "when it has one": null
+            "description": "The project this workspace belongs to, when it has one"
           },
           "name": {
             "type": "string"
@@ -129096,6 +129222,54 @@
           }
         }
       },
+      "Rigs.SnapshotUnavailable": {
+        "type": "object",
+        "description": "The 503 answer to a native `snapshot` while Omega has no snapshot executor.",
+        "required": [
+          "error"
+        ],
+        "properties": {
+          "error": {
+            "type": "object",
+            "required": [
+              "type",
+              "code",
+              "reason",
+              "message"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "const": "service_unavailable"
+              },
+              "code": {
+                "type": "string",
+                "const": "SNAPSHOT_UNAVAILABLE"
+              },
+              "reason": {
+                "type": "string",
+                "const": "no_omega_executor"
+              },
+              "message": {
+                "type": "string",
+                "description": "Snapshots are not available for Rigs yet."
+              },
+              "request_id": {
+                "type": "string",
+                "description": "The gateway request id"
+              },
+              "docs_url": {
+                "type": "string",
+                "format": "uri"
+              },
+              "layer": {
+                "type": "string",
+                "description": "The service that refused (rigs)"
+              }
+            }
+          }
+        }
+      },
       "Rigs.ActionResponse": {
         "type": "object",
         "required": [
@@ -129189,12 +129363,9 @@
           "resolution": {
             "type": "string",
             "enum": [
-              "1366x768",
-              "1440x900",
-              "1920x1080",
-              "2560x1440"
+              "1920x1080"
             ],
-            "description": "Default 1920x1080"
+            "description": "Optional. A Rig's desktop is a fixed 1920x1080 display; any other value is refused (400)."
           },
           "variant": {
             "type": "string",
@@ -129362,6 +129533,54 @@
           }
         }
       },
+      "Panes.SnapshotUnavailable": {
+        "type": "object",
+        "description": "The 503 answer to a native `snapshot` while Omega has no snapshot executor.",
+        "required": [
+          "error"
+        ],
+        "properties": {
+          "error": {
+            "type": "object",
+            "required": [
+              "type",
+              "code",
+              "reason",
+              "message"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "const": "service_unavailable"
+              },
+              "code": {
+                "type": "string",
+                "const": "SNAPSHOT_UNAVAILABLE"
+              },
+              "reason": {
+                "type": "string",
+                "const": "no_omega_executor"
+              },
+              "message": {
+                "type": "string",
+                "description": "Snapshots are not available for Panes yet."
+              },
+              "request_id": {
+                "type": "string",
+                "description": "The gateway request id"
+              },
+              "docs_url": {
+                "type": "string",
+                "format": "uri"
+              },
+              "layer": {
+                "type": "string",
+                "description": "The service that refused (panes)"
+              }
+            }
+          }
+        }
+      },
       "Panes.ActionResponse": {
         "type": "object",
         "required": [
@@ -129436,7 +129655,7 @@
       "Panes.PaneLaunch": {
         "type": "object",
         "additionalProperties": true,
-        "description": "Launch options; the Panes facade validates them.",
+        "description": "Launch options; the Panes facade validates them. A native Pane opens about:blank at 780x437 in headless Chromium; any other url, viewport or headless value is refused with 422 OMEGA_NATIVE_UNSUPPORTED_PROFILE. Set the viewport after create with the resize action.",
         "properties": {
           "name": {
             "type": "string",
@@ -129444,14 +129663,18 @@
           },
           "url": {
             "type": "string",
-            "description": "The first page to open (default about:blank)"
+            "const": "about:blank",
+            "description": "Native Panes open on about:blank. Any other value is refused with 422 OMEGA_NATIVE_UNSUPPORTED_PROFILE; omit it."
           },
           "viewport": {
             "type": "string",
-            "description": "WIDTHxHEIGHT, e.g. 1280x800"
+            "const": "780x437",
+            "description": "Native Panes open at 780x437. Any other value is refused with 422 OMEGA_NATIVE_UNSUPPORTED_PROFILE; omit it and set the viewport after create with the resize action."
           },
           "headless": {
-            "type": "boolean"
+            "type": "boolean",
+            "const": true,
+            "description": "Native Panes run headless Chromium. false is refused with 422 OMEGA_NATIVE_UNSUPPORTED_PROFILE; omit it."
           }
         }
       },
@@ -129519,6 +129742,49 @@
               "string",
               "null"
             ]
+          },
+          "url": {
+            "type": "string",
+            "description": "Panes: the page the browser opened (about:blank); present on the create response"
+          },
+          "viewport": {
+            "type": "string",
+            "pattern": "^[0-9]+x[0-9]+$",
+            "description": "Panes: WIDTHxHEIGHT (780x437 at create); present on the create response"
+          },
+          "headless": {
+            "type": "boolean",
+            "const": true,
+            "description": "Panes: native Panes run headless; present on the create response"
+          }
+        }
+      },
+      "Panes.UnsupportedProfileError": {
+        "type": "object",
+        "required": [
+          "error"
+        ],
+        "properties": {
+          "error": {
+            "type": "object",
+            "required": [
+              "code",
+              "field",
+              "message"
+            ],
+            "properties": {
+              "code": {
+                "type": "string",
+                "const": "OMEGA_NATIVE_UNSUPPORTED_PROFILE"
+              },
+              "field": {
+                "type": "string",
+                "description": "The refused launch field: url, viewport or headless"
+              },
+              "message": {
+                "type": "string"
+              }
+            }
           }
         }
       },
@@ -129604,6 +129870,54 @@
           }
         }
       },
+      "Shells.SnapshotUnavailable": {
+        "type": "object",
+        "description": "The 503 answer to a native `snapshot` while Omega has no snapshot executor.",
+        "required": [
+          "error"
+        ],
+        "properties": {
+          "error": {
+            "type": "object",
+            "required": [
+              "type",
+              "code",
+              "reason",
+              "message"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "const": "service_unavailable"
+              },
+              "code": {
+                "type": "string",
+                "const": "SNAPSHOT_UNAVAILABLE"
+              },
+              "reason": {
+                "type": "string",
+                "const": "no_omega_executor"
+              },
+              "message": {
+                "type": "string",
+                "description": "Snapshots are not available for Shells yet."
+              },
+              "request_id": {
+                "type": "string",
+                "description": "The gateway request id"
+              },
+              "docs_url": {
+                "type": "string",
+                "format": "uri"
+              },
+              "layer": {
+                "type": "string",
+                "description": "The service that refused (shells)"
+              }
+            }
+          }
+        }
+      },
       "Shells.ActionResponse": {
         "type": "object",
         "required": [
@@ -129695,8 +130009,7 @@
           "stdin": {
             "type": "string",
             "contentEncoding": "base64",
-            "description": "Canonical base64",
-            "at most 48128 bytes decoded": null
+            "description": "Canonical base64, at most 48128 bytes decoded"
           },
           "timeoutMs": {
             "type": "integer",
@@ -135884,8 +136197,7 @@
           },
           "identifier": {
             "type": "string",
-            "description": "Project key and number",
-            "e.g. ENG-12": null
+            "description": "Project key and number, e.g. ENG-12"
           },
           "title": {
             "type": "string"
@@ -136323,24 +136635,21 @@
             "items": {
               "$ref": "#/components/schemas/Scopes.Dependency"
             },
-            "description": "Edges whose other task blocks this one",
-            "each with the other task's summary": null
+            "description": "Edges whose other task blocks this one, each with the other task's summary"
           },
           "blocks": {
             "type": "array",
             "items": {
               "$ref": "#/components/schemas/Scopes.Dependency"
             },
-            "description": "Edges whose other task this one blocks",
-            "each with the other task's summary": null
+            "description": "Edges whose other task this one blocks, each with the other task's summary"
           },
           "related": {
             "type": "array",
             "items": {
               "$ref": "#/components/schemas/Scopes.Dependency"
             },
-            "description": "relates and duplicates edges",
-            "each with the other task's summary": null
+            "description": "relates and duplicates edges, each with the other task's summary"
           }
         }
       },
@@ -139047,6 +139356,15 @@
           },
           "email": {
             "$ref": "#/components/schemas/Orgs.Email"
+          },
+          "agent_id": {
+            "type": "string",
+            "maxLength": 64,
+            "description": "The state's id for the agent (for example from WyoBiz's agent search)"
+          },
+          "consent_document_id": {
+            "type": "string",
+            "description": "An `agent_consent` document on this entity: the agent's signed, dated consent to appointment. Only settable with PUT …/registered-agent (refused at entity creation). A formation run attests that consent was obtained only when it is on file."
           }
         }
       },
@@ -139544,6 +139862,7 @@
       "Orgs.DocumentKind": {
         "type": "string",
         "enum": [
+          "agent_consent",
           "articles",
           "certificate",
           "operating_agreement",
@@ -139677,6 +139996,7 @@
           "kind": {
             "type": "string",
             "enum": [
+              "agent_consent",
               "articles",
               "certificate",
               "operating_agreement",
@@ -139862,8 +140182,7 @@
           },
           "receipt": {
             "type": "object",
-            "description": "The state's receipt",
-            "up to 16 KiB of JSON": null
+            "description": "The state's receipt, up to 16 KiB of JSON"
           }
         }
       },
@@ -149902,8 +150221,7 @@
         "name": "zone",
         "in": "path",
         "required": true,
-        "description": "Zone name",
-        "e.g. example.com": null,
+        "description": "Zone name, e.g. example.com",
         "schema": {
           "type": "string"
         }
@@ -150240,6 +150558,18 @@
           "$ref": "#/components/schemas/Runner.SafeOpaqueRef"
         }
       },
+      "Rigs.IncludeEnded": {
+        "name": "include",
+        "in": "query",
+        "required": false,
+        "schema": {
+          "type": "string",
+          "enum": [
+            "ended"
+          ]
+        },
+        "description": "`ended` also lists ended Rigs (`cancelled`, `terminated`, `failed` or `succeeded`; `orphaned` counts as active). Omit it to list live Rigs only."
+      },
       "Rigs.IdempotencyKeyRequired": {
         "name": "Idempotency-Key",
         "in": "header",
@@ -150264,6 +150594,18 @@
         },
         "description": "Optional. With it the stop is one journaled operation; a retry with the same key replays it."
       },
+      "Panes.IncludeEnded": {
+        "name": "include",
+        "in": "query",
+        "required": false,
+        "schema": {
+          "type": "string",
+          "enum": [
+            "ended"
+          ]
+        },
+        "description": "`ended` also lists ended Panes (`cancelled`, `terminated`, `failed` or `succeeded`; `orphaned` counts as active). Omit it to list live Panes only."
+      },
       "Panes.IdempotencyKeyRequired": {
         "name": "Idempotency-Key",
         "in": "header",
@@ -150288,6 +150630,18 @@
         },
         "description": "Optional. With it the stop is one journaled operation; a retry with the same key replays it."
       },
+      "Shells.IncludeEnded": {
+        "name": "include",
+        "in": "query",
+        "required": false,
+        "schema": {
+          "type": "string",
+          "enum": [
+            "ended"
+          ]
+        },
+        "description": "`ended` also lists ended Shells (`cancelled`, `terminated`, `failed` or `succeeded`; `orphaned` counts as active). Omit it to list live Shells only."
+      },
       "Shells.IdempotencyKeyRequired": {
         "name": "Idempotency-Key",
         "in": "header",
@@ -150997,7 +151351,7 @@
       "upstream": "https://relays.one/api",
       "status": "unverified",
       "statusNote": "spec hand-derived from relays-web route files; upstream host for /api/v1 not verified; DNS primary lost with Hivelocity",
-      "operations": 122
+      "operations": 123
     },
     {
       "name": "iam",