@onesi/genesis 0.2.11 → 0.2.13

package/dist/generated/schema.d.ts

@@ -799,23 +799,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/foundry/files/{file_id}/content": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /** Download tenant file content */
-        get: operations["foundry_downloadFile"];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/v1/foundry/fine_tuning/providers": {
         parameters: {
             query?: never;
@@ -2307,41 +2290,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/hives/organizations/{org_id}/sso": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /** Get SSO configuration for an organization */
-        get: operations["hives_get_sso_config"];
-        put?: never;
-        /** Create a new SSO connection */
-        post: operations["hives_create_sso_connection"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/hives/organizations/{org_id}/sso/{connection_id}": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        post?: never;
-        /** Delete an SSO connection */
-        delete: operations["hives_delete_sso_connection"];
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/v1/hives/organizations/{org_id}/usage": {
         parameters: {
             query?: never;
@@ -4335,7 +4283,11 @@ export interface paths {
         get: operations["hives_get_flight"];
         put?: never;
         post?: never;
-        delete?: never;
+        /**
+         * Delete a Flight
+         * @description Tombstones the Flight (status deleted). Its hostname stops routing, it leaves get and list, and it no longer blocks deleting the project. The deployment behind it keeps running until it is stopped; DNS records are not touched. A Flight of another organization, project or environment, or one already deleted, is 404.
+         */
+        delete: operations["hives_delete_flight"];
         options?: never;
         head?: never;
         patch?: never;
@@ -10914,8 +10866,8 @@ export interface paths {
          */
         get: operations["minds_getEpisodicMemory"];
         /**
-         * Update content of the same stored episodic event
-         * @description Original human Console authorization only (Sandbox, or Live). Requires the existing logical event_id and preserves all other stored metadata. No delete/recreate, automatic retry or atomic compare-and-swap guarantee. Reconcile an unknown result with get. Org API keys with a Sandbox or Live binding are admitted with `minds:write`. Live selections reach Live Minds only when the gateway lists Minds as Live (GENESIS_LIVE_SERVICES); the verified environment is forwarded and never falls back to Sandbox. Until then a Live selection answers 409 ENVIRONMENT_NOT_AVAILABLE before any delegation.
+         * Update content of a stored episodic event; event_id must equal storage_id
+         * @description Original human Console authorization only (Sandbox, or Live). Requires `event_id` equal to the path `storage_id` (the persisted storage UUID that insert returns as `id`, not the caller event UUID); any other value answers 409 EVENT_ID_MISMATCH. Preserves all other stored metadata. No delete/recreate, automatic retry or atomic compare-and-swap guarantee. Reconcile an unknown result with get. Org API keys with a Sandbox or Live binding are admitted with `minds:write`. Live selections reach Live Minds only when the gateway lists Minds as Live (GENESIS_LIVE_SERVICES); the verified environment is forwarded and never falls back to Sandbox. Until then a Live selection answers 409 ENVIRONMENT_NOT_AVAILABLE before any delegation.
          */
         put: operations["minds_updateEpisodicMemory"];
         post?: never;
@@ -17017,6 +16969,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/flares/choreography/workflows/{workflow_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete a tenant-scoped choreography workflow definition
+         * @description Needs `flares:write` at the gateway (service scope `choreography.write`). Deletes one of the caller's workflow definitions in the caller's own organization, project and environment and returns it as `{id, deleted, workflow}`. Another organization's or environment's workflow is 404. A workflow with a pending, running or compensating execution is 409; cancel or finish those first. Finished, failed and cancelled executions stay readable.
+         */
+        delete: operations["flares_deleteChoreographyWorkflow"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/flares/choreography/executions": {
         parameters: {
             query?: never;
@@ -19290,6 +19262,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/credits/catalog": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The One credits catalog
+         * @description Every price of the catalog (version `one-plans-20261021`) with its credits, computer hours, amount in US cents and interval, the pack rate (60 credits per dollar), the payment methods Checkout offers per mode (Apple Pay and Google Pay ride on `card`; `crypto` is USDC hosted by Stripe and offered for packs only), the `return_to` a checkout may use and the wallet-payment terms. Needs genesis.billing.read and no credits account: an organization that is not a One tenant can read it. Takes no query.
+         */
+        get: operations["gateway_getCreditCatalog"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/credits/entries": {
         parameters: {
             query?: never;
@@ -19361,7 +19353,7 @@ export interface paths {
         put?: never;
         /**
          * Start a Stripe Checkout for a plan, seats or a credit pack
-         * @description Returns the hosted Stripe Checkout URL (test mode) for the items: a plan or seat price (`one_one_monthly`, `one_pro_monthly`, `one_operator_monthly`, ...) or a credit pack (`one_pack_10`, `one_pack_25`, `one_pack_50`). The URL is always on https://checkout.stripe.com and never a live-mode session. Nothing is charged until you pay on that page. Needs genesis.billing.manage and an Idempotency-Key.
+         * @description Returns the hosted Stripe Checkout URL (test mode) for the items: a plan or seat price (`one_one_monthly`, `one_pro_monthly`, `one_operator_monthly`, ...) or a credit pack (`one_pack_10`, `one_pack_25`, `one_pack_50`). The URL is always on https://checkout.stripe.com and never a live-mode session. Nothing is charged until you pay on that page. Plans and seats take card, Link and ACH; packs also take crypto (USDC hosted by Stripe), and Apple Pay and Google Pay come with card. Pack credits are minted once the payment is paid: at once for card and Link, later for ACH and crypto. `return_to` (optional) sends the person back to https://chat.one.ml/pay or a path below it, with `?checkout=success&session_id=...` or `?checkout=cancel`. Needs genesis.billing.manage and an Idempotency-Key.
          */
         post: operations["gateway_createCreditCheckout"];
         delete?: never;
@@ -19370,6 +19362,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/credits/wallet-payment": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Pay for a credit pack in USDC from a wallet
+         * @description A pack ($10, $25 or $50) paid in USDC (1:1 with USD) on Base or Solana through a Stripe deposit-mode PaymentIntent (Stripe test mode: Base Sepolia, Solana devnet). Send exactly `amount_usdc_atomic` (6-decimal USDC units) of the token at `token_contract_address` to `deposit_address` before `expires_at` (30 minutes); after that the intent is canceled. Stripe matches a transfer by its exact amount, so when the pack's amount is already open the lowest free amount up to 99 cents higher is used (`jitter_cents`), and those cents buy credits at 60 per dollar, rounded down (`credits`). Credits are minted when the payment succeeds, as a pack lot that expires after 12 months. A payment from another wallet than `payer_address` is still credited and flagged for review. Refunds go back to the sending wallet. Needs genesis.billing.manage and an Idempotency-Key.
+         */
+        post: operations["gateway_createCreditWalletPayment"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/credits/subscription": {
         parameters: {
             query?: never;
@@ -24148,6 +24160,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/brews/exchange/uninstall": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Uninstall an exchange Brew from the selected project
+         * @description Needs `brews:write`. Removes a Brew that installBrew put in the caller's organization, project and environment, and drops the source listing's install count. A Brew in another scope is 404 BREWS_E_NOT_FOUND; a Brew that was not installed from the exchange is 409 BREWS_E_NOT_AN_INSTALL.
+         */
+        post: operations["brews_uninstallBrew"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/brews/delete": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Delete a Brew from the selected project
+         * @description Needs `brews:write`. Deletes one Brew version from the caller's organization, project and environment and returns its digest; the version can be created again afterwards. A Brew in another scope is 404 BREWS_E_NOT_FOUND; an exchange install is 409 BREWS_E_EXCHANGE_INSTALL (use uninstallBrew).
+         */
+        post: operations["brews_deleteBrew"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/brews/mcp": {
         parameters: {
             query?: never;
@@ -24159,7 +24211,7 @@ export interface paths {
         put?: never;
         /**
          * Call a Brews MCP tool
-         * @description One Brews tool call: brews.create, brews.run, brews.eval, brews.list, brews.get, brews.card, brews.compile, brews.bench.run, brews.exchange.list, brews.exchange.get, brews.exchange.install, or a typed brews.decision.v1 / brews.selection.v1 tool. Needs `brews:read`; tools that write need `brews:write`, checked by Brews per tool. `arguments.scope` is filled from the selection.
+         * @description One Brews tool call: brews.create, brews.run, brews.eval, brews.list, brews.get, brews.card, brews.compile, brews.bench.run, brews.exchange.list, brews.exchange.get, brews.exchange.install, brews.exchange.uninstall, brews.delete, or a typed brews.decision.v1 / brews.selection.v1 tool. Needs `brews:read`; tools that write need `brews:write`, checked by Brews per tool. `arguments.scope` is filled from the selection.
          */
         post: operations["brews_callTool"];
         delete?: never;
@@ -24308,6 +24360,238 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/connections/catalog": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List verified MCP servers in the catalog
+         * @description Scope `connections:read`. Filter by OneOS plugin category (`plugin`, e.g. `scopes`). Suspended servers are listed with their `reason`.
+         */
+        get: operations["connections_listCatalog"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/connections/catalog/{server}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Catalog server id, e.g. linear, neon, sentry */
+                server: components["parameters"]["Connections.Server"];
+            };
+            cookie?: never;
+        };
+        /**
+         * Get a catalog server with its pinned tool manifest
+         * @description Scope `connections:read`.
+         */
+        get: operations["connections_getCatalogServer"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/connections": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List your organization's connections
+         * @description Scope `connections:read`. Connections of the selected environment, newest first (at most 200), optionally of one `status`.
+         */
+        get: operations["connections_list"];
+        put?: never;
+        /**
+         * Connect a catalog server
+         * @description Scope `connections:write`. Creates a `pending_auth` connection and returns the `authorize_url` a person opens to consent at the vendor. `tools` picks the tools to enable (default: the manifest's defaults); only their scopes are requested. Unknown fields are refused (422). Enabling any `send`, `spend` or `destructive` tool needs an owner's approval (428). `auto_org` names the Auto org that governs the connection (its authority checks and approvals); a connect carrying `auto_org` always answers `428 APPROVAL_REQUIRED` first, so a person approves binding the connection to that Auto org.
+         */
+        post: operations["connections_connect"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/connections/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        /**
+         * Get a connection
+         * @description Scope `connections:read`. Status, granted scopes and the pinned manifest hash.
+         */
+        get: operations["connections_get"];
+        put?: never;
+        post?: never;
+        /**
+         * Revoke a connection
+         * @description Scope `connections:write`. Never needs an approval. Blinds deletes the stored tokens and asks the vendor to revoke them (best effort, reported as `vendor_revoked`; `tokens_deleted` is false when Blinds did not confirm, and repeating the DELETE retries). The connection stays listed as `revoked`.
+         */
+        delete: operations["connections_revoke"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/connections/{id}/authorize": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Get a new authorize URL for a person to open
+         * @description Scope `connections:write`. Returns a fresh `authorize_url` (its `state` is single use and valid for 10 minutes). Human step: a person opens it in a browser. The hosted MCP refuses this operation for agents (human consent); use the CLI (`genesis connections authorize <id>`) or the Console.
+         */
+        post: operations["connections_authorize"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/connections/{id}/tools": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        /**
+         * List a connection's tools with their policy
+         * @description Scope `connections:read`. The pinned manifest's tools, each with its effect, scopes, policy mode and the vendor's description and input schema (untrusted).
+         */
+        get: operations["connections_listTools"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Set tool policies (allow, approve or deny)
+         * @description Scope `connections:write`. `tools` maps tool names to `allow`, `approve` or `deny`; `send`, `spend` and `destructive` tools take `approve` or `deny` only (422 for `allow`). Narrowing never needs an approval; widening (deny to approve or allow, approve to allow) needs an owner's approval (428) and Auto's `connections.widen` check. When the change needs scopes not yet granted, the answer carries `reauthorize`.
+         */
+        patch: operations["connections_setToolPolicy"];
+        trace?: never;
+    };
+    "/v1/connections/{id}/tools/{tool}/call": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+                /** @description The tool's name in the pinned manifest */
+                tool: components["parameters"]["Connections.Tool"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Call a connected tool
+         * @description Scope `connections:write`. Runs Auto's `connections.call` check, then calls the tool through Blinds. The result is third-party content inside the `untrusted` wrapper. A tool whose policy is `approve`, or a write to another connection after this session read untrusted content, answers 428; retry with `OneOS-Approval`.
+         */
+        post: operations["connections_call"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/connections/{id}/activity": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        /**
+         * Read a connection's activity ledger
+         * @description Scope `connections:read`. Append-only, hash-chained rows, oldest first; hashes only, never payloads. Page with `after` = `next_after`.
+         */
+        get: operations["connections_activity"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/connections/tools": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Search the connected tools your organization may call
+         * @description Scope `connections:read`. Connected tools of the selected environment whose policy is not `deny`, matched against `q` (at most 100). genesis-mcp's `genesis_search_tools` lists them by `name` (`conn.<connection>.<tool>`). `session_tainted` says whether this principal has read untrusted content.
+         */
+        get: operations["connections_searchTools"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/connections/oauth/callback": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * OAuth redirect target for a person's browser (anonymous)
+         * @description Human browser only; anonymous. The vendor redirects the person here after consent. The gateway forwards it with no identity envelope and no credential; Connections authenticates it only by the single-use `state` (10 minutes, bound to the connection and its PKCE verifier) and hands the code to Blinds. Not an API for agents.
+         */
+        get: operations["connections_oauthCallback"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
 }
 export type webhooks = Record<string, never>;
 export interface components {
@@ -25421,16 +25705,6 @@ export interface components {
              */
             ttl_secs?: number;
         };
-        "Hives.CreateSsoConnectionRequest": {
-            /** @description IdP type hint */
-            idp_type?: string | null;
-            /** @description Raw IdP metadata XML (alternative to URL) */
-            metadata_raw?: string | null;
-            /** @description IdP metadata URL (e.g. Okta, Azure AD metadata endpoint) */
-            metadata_url?: string | null;
-            /** @description Connection name/label */
-            name: string;
-        };
         /** @description Create terminal session request */
         "Hives.CreateTerminalSessionRequest": {
             /**
@@ -28677,7 +28951,8 @@ export interface components {
             escalation_policy_id?: string | null;
             /** @default true */
             enabled?: boolean;
-            members: string[];
+            /** @description Tenant user ids, at least one for a signed-in caller. An org API key has no users row: it must send [] (or omit members) and gets 400 for any user id; a signed-in member adds people later. */
+            members?: string[];
             /** @description Accepted but not stored */
             allow_self_coverage?: boolean;
             /** @description Accepted but not stored */
@@ -28686,7 +28961,7 @@ export interface components {
             acknowledgement_timeout_minutes?: number;
             /** @description Accepted but not stored */
             auto_escalate?: boolean;
-            /** @description Accepted but not stored */
+            /** @description Not supported on on-call schedules: send [] or omit it; a non-empty list is 400 (relays#53) */
             alert_channel_ids?: string[];
         };
         "Relays.OncallOverrideInput": {
@@ -28710,7 +28985,7 @@ export interface components {
             /** Format: uuid */
             escalation_policy_id?: string | null;
             enabled?: boolean;
-            /** @description Replaces the whole rotation */
+            /** @description Replaces the whole rotation (at least one member). Signed-in callers only: an org API key gets 400 for members (even []) and for create_override. */
             members?: string[];
             create_override?: components["schemas"]["Relays.OncallOverrideInput"];
             /** Format: uuid */
@@ -37115,6 +37390,11 @@ export interface components {
             pack: number | null;
             monthly_ceiling_credits: number | null;
             used_this_month_credits?: number;
+            /**
+             * @description Auto-refill is paused while a dispute on one of your charges is open
+             * @enum {unknown}
+             */
+            paused_reason?: "dispute_open" | null;
         };
         "Gateway.CreditBalance": {
             org: string;
@@ -37219,6 +37499,103 @@ export interface components {
              */
             url: string;
         };
+        "Gateway.CreditCheckoutRequest": {
+            items: components["schemas"]["Gateway.CreditItem"][];
+            /** @description Where Checkout sends the person back: https://chat.one.ml/pay or a path below it */
+            return_to?: string;
+        };
+        "Gateway.CreditCatalogPrice": {
+            lookup_key: string;
+            /** @enum {string} */
+            kind: "plan" | "seat" | "bundle" | "pack" | "refill";
+            plan: string;
+            /** @description Credits per unit per period (plans */
+            credits: number;
+            computer_hours: number;
+            /** @description US cents */
+            unit_amount: number;
+            /** @enum {string|null} */
+            interval: "month" | "year" | null;
+            team: {
+                [key: string]: number;
+            } | null;
+            /** @description false for the free price and the refill prices (auto-refill buys those) */
+            purchasable: boolean;
+        };
+        "Gateway.CreditCatalog": {
+            /** @constant */
+            object: "credits_catalog";
+            /** @description one-plans-20261021 */
+            version: string;
+            /** @enum {string} */
+            billing_environment: "sandbox" | "live";
+            test_mode: boolean;
+            /** @constant */
+            currency: "usd";
+            /** @description Credits per dollar for packs */
+            pack_credits_per_usd: number;
+            prices: components["schemas"]["Gateway.CreditCatalogPrice"][];
+            payment_methods: {
+                /** @description card, link, us_bank_account, crypto */
+                payment: string[];
+                /** @description card, link, us_bank_account */
+                subscription: string[];
+            };
+            return_to: {
+                origin?: string;
+                path_prefix?: string;
+            };
+            /** @description The terms of POST /v1/credits/wallet-payment */
+            wallet?: {
+                /** @constant */
+                token?: "usdc";
+                networks?: ("base" | "solana")[];
+                packs?: (10 | 25 | 50)[];
+                usdc_per_usd?: number;
+                intent_minutes?: number;
+                jitter_max_cents?: number;
+                test_networks?: {
+                    [key: string]: string;
+                };
+            };
+        };
+        "Gateway.CreditWalletPaymentRequest": {
+            /**
+             * @description The pack in US dollars
+             * @enum {integer}
+             */
+            pack: 10 | 25 | 50;
+            /** @enum {string} */
+            network: "base" | "solana";
+            /** @description The wallet you pay from. Base: 0x and 40 hex characters. Solana: base58, 32 to 44 characters. */
+            payer_address: string;
+        };
+        "Gateway.CreditWalletPayment": {
+            payment_intent: string;
+            /** @constant */
+            status: "requires_action";
+            /** @enum {integer} */
+            pack: 10 | 25 | 50;
+            /** @enum {string} */
+            network: "base" | "solana";
+            /** @constant */
+            token: "usdc";
+            deposit_address: string;
+            token_contract_address: string;
+            /** @description The exact amount to send */
+            amount_cents: number;
+            /** @description amount_cents as dollars, for example 10.03 */
+            amount_usd: string;
+            /** @description amount_cents x 10^4: the exact 6-decimal USDC units to send, for example 10030000 */
+            amount_usdc_atomic: string;
+            /** @description Cents added to the pack's amount so Stripe can match the transfer */
+            jitter_cents: number;
+            /** @description The pack's credits plus jitter_cents x 0.6, rounded down */
+            credits: number;
+            payer_address: string;
+            /** Format: date-time */
+            expires_at: string;
+        };
         "Gateway.CreditSubscriptionResult": {
             plan?: string;
             subscription: components["schemas"]["Gateway.CreditSubscription"] | null;
@@ -40766,6 +41143,19 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
+        "Brews.DeleteBrew": {
+            scope?: components["schemas"]["Brews.Scope"];
+            brewUri: string;
+            reason?: string;
+        } & {
+            [key: string]: unknown;
+        };
+        "Brews.UninstallBrew": {
+            scope?: components["schemas"]["Brews.Scope"];
+            installedUri: string;
+        } & {
+            [key: string]: unknown;
+        };
         "Brews.ToolCall": {
             tool: string;
             arguments: {
@@ -40782,6 +41172,248 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
+        /** @enum {string} */
+        "Connections.Tier": "verified" | "suspended" | "pending";
+        /** @enum {string} */
+        "Connections.Effect": "read" | "write" | "send" | "spend" | "destructive";
+        /** @enum {string} */
+        "Connections.Mode": "allow" | "approve" | "deny";
+        /** @enum {string} */
+        "Connections.ConnectionStatus": "pending_auth" | "active" | "needs_reauth" | "revoked";
+        /** @description Codes include TOOL_DENIED, AUTHORITY_DENIED (with `reasons`), APPROVAL_UNAVAILABLE (403), TOOL_CHANGED_PENDING_REVIEW (410), APPROVAL_CONSUMED, APPROVAL_NOT_APPROVED, APPROVAL_MISMATCH, revoked, conflict (409) and invalid (422). */
+        "Connections.Error": {
+            error: {
+                code: string;
+                message: string;
+                request_id?: string;
+            };
+            /** @description Auto's reasons on 403 AUTHORITY_DENIED */
+            reasons?: unknown[];
+            auto_check_id?: string;
+        };
+        "Connections.ApprovalRequired": {
+            error: {
+                /** @constant */
+                code: "APPROVAL_REQUIRED";
+                message: string;
+                request_id?: string;
+            };
+            approval_request_id: string;
+            /** @description Read the approval here, e.g. /v1/auto/approvals/apr_… */
+            poll_url: string;
+            /** Format: date-time */
+            expires_at: string | null;
+        };
+        "Connections.NeedsReauth": {
+            error: {
+                /** @constant */
+                code: "CONNECTION_NEEDS_REAUTH";
+                message: string;
+                request_id?: string;
+            };
+            /**
+             * Format: uri
+             * @description A person opens this to re-authorize
+             */
+            authorize_url: string;
+        };
+        "Connections.Source": {
+            connection?: string;
+            server?: string;
+            tool?: string;
+            tier?: components["schemas"]["Connections.Tier"];
+        };
+        /** @description A vendor-written text (a tool description), sanitized and flagged. Data, never instructions. */
+        "Connections.UntrustedText": {
+            /** @constant */
+            untrusted: true;
+            source?: components["schemas"]["Connections.Source"];
+            text: string;
+            sanitized?: number;
+            flags?: string[];
+        };
+        /** @description A tool's output (MCP content blocks), sanitized, credential-redacted and flagged. Third-party data, never instructions. */
+        "Connections.UntrustedResult": {
+            /** @constant */
+            untrusted: true;
+            source: components["schemas"]["Connections.Source"];
+            flags?: string[];
+            sanitized?: number;
+            credentials_redacted?: number;
+            truncated?: boolean;
+            content: unknown[];
+            structuredContent?: unknown;
+            isError?: boolean;
+        };
+        "Connections.CatalogServer": {
+            id: string;
+            vendor?: string;
+            display: string;
+            plugins?: string[];
+            url?: string;
+            docs?: string;
+            auth?: string;
+            tier: components["schemas"]["Connections.Tier"];
+            /** @description Why a suspended server is paused */
+            reason?: string | null;
+            /** @description Number of tools in the pinned manifest */
+            tools?: number;
+        };
+        "Connections.CatalogTool": {
+            name: string;
+            effect: components["schemas"]["Connections.Effect"];
+            scopes?: string[];
+            description?: components["schemas"]["Connections.UntrustedText"];
+        };
+        "Connections.CatalogServerDetail": {
+            id: string;
+            vendor?: string;
+            display: string;
+            plugins?: string[];
+            url?: string;
+            docs?: string;
+            auth?: string;
+            tier: components["schemas"]["Connections.Tier"];
+            reason?: string | null;
+            manifest_sha256?: string | null;
+            tools: components["schemas"]["Connections.CatalogTool"][];
+        };
+        "Connections.Connection": {
+            id: string;
+            server: string;
+            url?: string;
+            status: components["schemas"]["Connections.ConnectionStatus"];
+            /** @description The Auto org that governs the connection, if one was named at connect */
+            auto_org?: string | null;
+            tier?: components["schemas"]["Connections.Tier"];
+            server_status?: components["schemas"]["Connections.Tier"];
+            policy?: {
+                [key: string]: components["schemas"]["Connections.Mode"];
+            };
+            scopes_requested?: string[];
+            scopes_granted?: string[];
+            /** Format: date-time */
+            token_expires_at?: string | null;
+            created_by?: string;
+            /** Format: date-time */
+            created_at?: string;
+            /** Format: date-time */
+            updated_at?: string;
+            /** Format: date-time */
+            revoked_at?: string | null;
+        };
+        "Connections.ConnectRequest": {
+            server: string;
+            /** @description Tools to enable (default: the manifest defaults) */
+            tools?: string[];
+            /** @description The Auto org that governs the connection. A connect carrying it always answers 428 APPROVAL_REQUIRED first. */
+            auto_org?: string;
+        };
+        "Connections.ConnectResponse": {
+            connection: components["schemas"]["Connections.Connection"];
+            /**
+             * Format: uri
+             * @description A person opens this to consent at the vendor
+             */
+            authorize_url: string;
+            next?: string;
+        };
+        "Connections.AuthorizeResponse": {
+            /** Format: uri */
+            authorize_url: string;
+            next?: string;
+        };
+        "Connections.ConnectionTool": {
+            name: string;
+            effect: components["schemas"]["Connections.Effect"];
+            mode: components["schemas"]["Connections.Mode"];
+            stored_mode?: components["schemas"]["Connections.Mode"];
+            scopes?: string[];
+            description?: components["schemas"]["Connections.UntrustedText"];
+            inputSchema?: unknown;
+            schema_flags?: string[];
+        };
+        "Connections.ToolList": {
+            connection: string;
+            server: string;
+            tier?: components["schemas"]["Connections.Tier"];
+            server_status?: components["schemas"]["Connections.Tier"];
+            manifest_sha256?: string | null;
+            tools: components["schemas"]["Connections.ConnectionTool"][];
+        };
+        "Connections.ToolPolicyRequest": {
+            /** @description Tool name to mode, e.g. {"create_issue": "approve"} */
+            tools: {
+                [key: string]: components["schemas"]["Connections.Mode"];
+            };
+        };
+        "Connections.ToolPolicyResponse": {
+            connection: components["schemas"]["Connections.Connection"];
+            changed: {
+                name?: string;
+                effect?: components["schemas"]["Connections.Effect"];
+                from?: components["schemas"]["Connections.Mode"];
+                to?: components["schemas"]["Connections.Mode"];
+            }[];
+            reauthorize?: {
+                missing_scopes?: string[];
+                /** Format: uri */
+                authorize_url?: string;
+            };
+        };
+        "Connections.CallRequest": {
+            /** @description The tool's arguments, as its inputSchema describes */
+            arguments: {
+                [key: string]: unknown;
+            };
+        };
+        "Connections.CallResult": {
+            call_id: string;
+            /** @enum {string} */
+            outcome: "ok" | "tool_error";
+            result: components["schemas"]["Connections.UntrustedResult"];
+            auto_check_id?: string | null;
+            /** @description Auto's signed receipt (JWS) */
+            auto_receipt?: string | null;
+            approval_id?: string | null;
+        };
+        "Connections.RevokeResponse": {
+            connection: components["schemas"]["Connections.Connection"];
+            vendor_revoked?: boolean;
+            tokens_deleted?: boolean;
+        };
+        "Connections.ActivityRow": {
+            seq: number;
+            /** Format: date-time */
+            at?: string;
+            kind: string;
+            connection_id?: string | null;
+            principal?: string | null;
+            tool?: string | null;
+            args_sha256?: string | null;
+            result_sha256?: string | null;
+            outcome: string;
+            prev_hash?: string;
+            hash: string;
+        } & {
+            [key: string]: unknown;
+        };
+        "Connections.ConnectedTool": {
+            /** @description conn.<connection>.<tool> */
+            name: string;
+            connection: string;
+            server: string;
+            tool: string;
+            effect: components["schemas"]["Connections.Effect"];
+            mode?: components["schemas"]["Connections.Mode"];
+            description?: components["schemas"]["Connections.UntrustedText"];
+            inputSchema?: unknown;
+            schema_flags?: string[];
+        };
+        "Connections.SearchToolsResponse": {
+            data: components["schemas"]["Connections.ConnectedTool"][];
+            session_tainted?: boolean;
+        };
     };
     responses: {
         /** @description Foundry API error. */
@@ -41252,6 +41884,69 @@ export interface components {
                 "application/json": components["schemas"]["Garden.Disbursement"];
             };
         };
+        /** @description Missing scope; `TOOL_DENIED` (policy deny or not in the manifest); `AUTHORITY_DENIED` with `reasons` (Auto denied); `APPROVAL_UNAVAILABLE` (an approval is needed but the org has no Auto org) */
+        "Connections.Forbidden": {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                "application/json": components["schemas"]["Connections.Error"];
+            };
+        };
+        /** @description Not found in your organization and environment */
+        "Connections.NotFound": {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                "application/json": components["schemas"]["Connections.Error"];
+            };
+        };
+        /** @description `revoked`, `conflict` (the policy changed meanwhile), or an approval refusal: `APPROVAL_CONSUMED`, `APPROVAL_NOT_APPROVED`, `APPROVAL_MISMATCH` */
+        "Connections.Conflict": {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                "application/json": components["schemas"]["Connections.Error"];
+            };
+        };
+        /** @description `CONNECTION_NEEDS_REAUTH`: a person opens the fresh `authorize_url` (an approval refusal or `revoked` is also a 409, without it) */
+        "Connections.NeedsReauth": {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                "application/json": components["schemas"]["Connections.NeedsReauth"];
+            };
+        };
+        /** @description `TOOL_CHANGED_PENDING_REVIEW`: the server's live tools differ from its pinned manifest; it is suspended for every organization until re-verified */
+        "Connections.ToolChanged": {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                "application/json": components["schemas"]["Connections.Error"];
+            };
+        };
+        /** @description Invalid request body or parameters */
+        "Connections.Invalid": {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                "application/json": components["schemas"]["Connections.Error"];
+            };
+        };
+        /** @description `APPROVAL_REQUIRED`: a human approves `approval_request_id` in Auto; then retry the same request with `OneOS-Approval` */
+        "Connections.ApprovalRequired": {
+            headers: {
+                [name: string]: unknown;
+            };
+            content: {
+                "application/json": components["schemas"]["Connections.ApprovalRequired"];
+            };
+        };
     };
     parameters: {
         /** @description Zone name, e.g. example.com */
@@ -41442,6 +42137,14 @@ export interface components {
         "Brews.DecisionId": string;
         /** @description Stable key; a retry with it returns the original decision instead of creating another */
         "Brews.RequiredIdempotencyKey": string;
+        /** @description Connection id (conn_ followed by 32 hex) */
+        "Connections.Id": string;
+        /** @description Catalog server id, e.g. linear, neon, sentry */
+        "Connections.Server": string;
+        /** @description The tool's name in the pinned manifest */
+        "Connections.Tool": string;
+        /** @description An approved approval id (`apr_…`) from an earlier 428, to retry the same request */
+        "Connections.Approval": string;
     };
     requestBodies: never;
     headers: {
@@ -42535,29 +43238,6 @@ export interface operations {
             default: components["responses"]["Foundry.Error"];
         };
     };
-    foundry_downloadFile: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                file_id: string;
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description File bytes. */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": string;
-                };
-            };
-            default: components["responses"]["Foundry.Error"];
-        };
-    };
     foundry_listFineTuningProviders: {
         parameters: {
             query?: never;
@@ -45183,7 +45863,7 @@ export interface operations {
             };
         };
     };
-    hives_get_sso_config: {
+    hives_get_org_usage: {
         parameters: {
             query?: never;
             header?: never;
@@ -45195,7 +45875,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description SSO configuration */
+            /** @description Organization usage summary */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -45218,7 +45898,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description SSO service unavailable */
+            /** @description Billing service unavailable */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -45227,23 +45907,20 @@ export interface operations {
             };
         };
     };
-    hives_create_sso_connection: {
+    hives_create_checkout: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Organization ID */
-                org_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["Hives.CreateSsoConnectionRequest"];
+                "application/json": components["schemas"]["Hives.CreateCheckoutRequest"];
             };
         };
         responses: {
-            /** @description SSO connection created */
+            /** @description Checkout session created */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -45259,14 +45936,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Organization not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description SSO service unavailable */
+            /** @description Payments service unavailable */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -45275,21 +45945,16 @@ export interface operations {
             };
         };
     };
-    hives_delete_sso_connection: {
+    hives_list_payment_methods: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Organization ID */
-                org_id: string;
-                /** @description SSO connection ID */
-                connection_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description SSO connection deleted */
+            /** @description Payment methods */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -45305,14 +45970,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Organization or connection not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description SSO service unavailable */
+            /** @description Payments service unavailable */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -45321,19 +45979,20 @@ export interface operations {
             };
         };
     };
-    hives_get_org_usage: {
+    hives_add_payment_method: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Organization ID */
-                org_id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Hives.AddPaymentMethodRequest"];
+            };
+        };
         responses: {
-            /** @description Organization usage summary */
+            /** @description Payment method added */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -45349,14 +46008,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Organization not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Billing service unavailable */
+            /** @description Payments service unavailable */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -45365,126 +46017,16 @@ export interface operations {
             };
         };
     };
-    hives_create_checkout: {
+    hives_get_billing_portal: {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["Hives.CreateCheckoutRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Checkout session created */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": Record<string, never>;
-                };
-            };
-            /** @description Unauthorized */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Payments service unavailable */
-            503: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-        };
-    };
-    hives_list_payment_methods: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Payment methods */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": Record<string, never>;
-                };
-            };
-            /** @description Unauthorized */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Payments service unavailable */
-            503: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-        };
-    };
-    hives_add_payment_method: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["Hives.AddPaymentMethodRequest"];
-            };
-        };
-        responses: {
-            /** @description Payment method added */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": Record<string, never>;
-                };
-            };
-            /** @description Unauthorized */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Payments service unavailable */
-            503: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-        };
-    };
-    hives_get_billing_portal: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Billing portal URL */
+            /** @description Billing portal URL */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -54333,6 +54875,52 @@ export interface operations {
             };
         };
     };
+    hives_delete_flight: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+                /** @description Flight ID */
+                flight_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The deleted Flight (status deleted) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.FlightResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Permission denied */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Project or Flight not found, or already deleted */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     hives_list_flight_files: {
         parameters: {
             query?: {
@@ -90144,6 +90732,75 @@ export interface operations {
             };
         };
     };
+    flares_deleteChoreographyWorkflow: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Stable key; reuse it to replay instead of acting twice */
+                "Idempotency-Key": components["parameters"]["Flares.IdempotencyKey"];
+            };
+            path: {
+                workflow_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Deleted */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** Format: uuid */
+                        id: string;
+                        deleted: boolean;
+                        workflow: {
+                            [key: string]: unknown;
+                        };
+                    } & {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Noncanonical request, invalid JSON or missing Idempotency-Key */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Interactive One account login with a current Sandbox selection required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Flares grant missing or a scope hint names another organization or project */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description No workflow with this id in the caller's organization, project and environment */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The workflow has a pending, running or compensating execution */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     flares_listChoreographyExecutions: {
         parameters: {
             query?: never;
@@ -95082,6 +95739,68 @@ export interface operations {
             };
         };
     };
+    gateway_getCreditCatalog: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The catalog */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.CreditCatalog"];
+                };
+            };
+            /** @description invalid_request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description forbidden (an M2M token, or a key without genesis.billing.read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description ENVIRONMENT_NOT_AVAILABLE (a Live selection) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description invalid_response */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description credits_unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     gateway_listCreditEntries: {
         parameters: {
             query?: {
@@ -95323,7 +96042,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["Gateway.CreditItems"];
+                "application/json": components["schemas"]["Gateway.CreditCheckoutRequest"];
             };
         };
         responses: {
@@ -95394,6 +96113,89 @@ export interface operations {
             };
         };
     };
+    gateway_createCreditWalletPayment: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Stable key (8-128 letters, digits, - _ : or .); reuse it to replay instead of acting twice */
+                "Idempotency-Key": components["parameters"]["Gateway.IdempotencyKey"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Gateway.CreditWalletPaymentRequest"];
+            };
+        };
+        responses: {
+            /** @description The deposit instructions */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.CreditWalletPayment"];
+                };
+            };
+            /** @description invalid_request, idempotency_key_required or a pack, network or address the service refuses */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description forbidden (needs genesis.billing.manage) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description credits_account_not_found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description wallet_amount_busy (every amount from the pack's up to 99 cents higher is open), the Idempotency-Key was used for a different request, or ENVIRONMENT_NOT_AVAILABLE (a Live selection) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description body_too_large (16 KiB) */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description invalid_response */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description credits_unavailable, billing_unavailable or wallet_unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     gateway_changeCreditSubscription: {
         parameters: {
             query?: never;
@@ -108834,7 +109636,125 @@ export interface operations {
             };
         };
     };
-    brews_getExchangeListing: {
+    brews_getExchangeListing: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Brews.BrewRef"];
+            };
+        };
+        responses: {
+            /** @description Brews result envelope */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Brews.Result"];
+                };
+            };
+            /** @description BREWS_E_BAD_REQUEST or a scope error */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Credential missing or invalid */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description SCOPE_MISSING, BREWS_E_ACCESS_DENIED or BREWS_E_SCOPE_MISMATCH */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Brews unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    brews_installBrew: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Brews.InstallBrew"];
+            };
+        };
+        responses: {
+            /** @description Brews result envelope */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Brews.Result"];
+                };
+            };
+            /** @description BREWS_E_BAD_REQUEST or a scope error */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Credential missing or invalid */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description SCOPE_MISSING, BREWS_E_ACCESS_DENIED or BREWS_E_SCOPE_MISMATCH */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Brews unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    brews_uninstallBrew: {
         parameters: {
             query?: never;
             header?: never;
@@ -108843,7 +109763,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["Brews.BrewRef"];
+                "application/json": components["schemas"]["Brews.UninstallBrew"];
             };
         };
         responses: {
@@ -108856,7 +109776,7 @@ export interface operations {
                     "application/json": components["schemas"]["Brews.Result"];
                 };
             };
-            /** @description BREWS_E_BAD_REQUEST or a scope error */
+            /** @description BREWS_E_BAD_REQUEST */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -108877,13 +109797,20 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Not found */
+            /** @description BREWS_E_NOT_FOUND: no such Brew in the selected organization, project and environment */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description BREWS_E_EXCHANGE_INSTALL or BREWS_E_NOT_AN_INSTALL: the other removal applies */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             /** @description Brews unavailable */
             503: {
                 headers: {
@@ -108893,7 +109820,7 @@ export interface operations {
             };
         };
     };
-    brews_installBrew: {
+    brews_deleteBrew: {
         parameters: {
             query?: never;
             header?: never;
@@ -108902,7 +109829,7 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["Brews.InstallBrew"];
+                "application/json": components["schemas"]["Brews.DeleteBrew"];
             };
         };
         responses: {
@@ -108915,7 +109842,7 @@ export interface operations {
                     "application/json": components["schemas"]["Brews.Result"];
                 };
             };
-            /** @description BREWS_E_BAD_REQUEST or a scope error */
+            /** @description BREWS_E_BAD_REQUEST */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -108936,13 +109863,20 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Not found */
+            /** @description BREWS_E_NOT_FOUND: no such Brew in the selected organization, project and environment */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description BREWS_E_EXCHANGE_INSTALL or BREWS_E_NOT_AN_INSTALL: the other removal applies */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             /** @description Brews unavailable */
             503: {
                 headers: {
@@ -109436,4 +110370,376 @@ export interface operations {
             };
         };
     };
+    connections_listCatalog: {
+        parameters: {
+            query?: {
+                /** @description OneOS plugin category the server competes in, e.g. scopes, silos, traces */
+                plugin?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Catalog servers */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        data: components["schemas"]["Connections.CatalogServer"][];
+                    };
+                };
+            };
+            403: components["responses"]["Connections.Forbidden"];
+        };
+    };
+    connections_getCatalogServer: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Catalog server id, e.g. linear, neon, sentry */
+                server: components["parameters"]["Connections.Server"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The server and its pinned manifest */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.CatalogServerDetail"];
+                };
+            };
+            404: components["responses"]["Connections.NotFound"];
+        };
+    };
+    connections_list: {
+        parameters: {
+            query?: {
+                status?: "pending_auth" | "active" | "needs_reauth" | "revoked";
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Connections */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        data: components["schemas"]["Connections.Connection"][];
+                    };
+                };
+            };
+            403: components["responses"]["Connections.Forbidden"];
+        };
+    };
+    connections_connect: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description An approved approval id (`apr_…`) from an earlier 428, to retry the same request */
+                "OneOS-Approval"?: components["parameters"]["Connections.Approval"];
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Connections.ConnectRequest"];
+            };
+        };
+        responses: {
+            /** @description Connection created, waiting for a person to authorize it */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.ConnectResponse"];
+                };
+            };
+            403: components["responses"]["Connections.Forbidden"];
+            404: components["responses"]["Connections.NotFound"];
+            409: components["responses"]["Connections.Conflict"];
+            410: components["responses"]["Connections.ToolChanged"];
+            422: components["responses"]["Connections.Invalid"];
+            428: components["responses"]["Connections.ApprovalRequired"];
+        };
+    };
+    connections_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The connection */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.Connection"];
+                };
+            };
+            404: components["responses"]["Connections.NotFound"];
+        };
+    };
+    connections_revoke: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Revoked */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.RevokeResponse"];
+                };
+            };
+            403: components["responses"]["Connections.Forbidden"];
+            404: components["responses"]["Connections.NotFound"];
+        };
+    };
+    connections_authorize: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The URL a person opens to consent at the vendor */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.AuthorizeResponse"];
+                };
+            };
+            403: components["responses"]["Connections.Forbidden"];
+            404: components["responses"]["Connections.NotFound"];
+            409: components["responses"]["Connections.Conflict"];
+        };
+    };
+    connections_listTools: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Tools */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.ToolList"];
+                };
+            };
+            404: components["responses"]["Connections.NotFound"];
+            410: components["responses"]["Connections.ToolChanged"];
+        };
+    };
+    connections_setToolPolicy: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description An approved approval id (`apr_…`) from an earlier 428, to retry the same request */
+                "OneOS-Approval"?: components["parameters"]["Connections.Approval"];
+            };
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Connections.ToolPolicyRequest"];
+            };
+        };
+        responses: {
+            /** @description The connection with its new policy and the changes made */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.ToolPolicyResponse"];
+                };
+            };
+            403: components["responses"]["Connections.Forbidden"];
+            404: components["responses"]["Connections.NotFound"];
+            409: components["responses"]["Connections.Conflict"];
+            422: components["responses"]["Connections.Invalid"];
+            428: components["responses"]["Connections.ApprovalRequired"];
+        };
+    };
+    connections_call: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description An approved approval id (`apr_…`) from an earlier 428, to retry the same request */
+                "OneOS-Approval"?: components["parameters"]["Connections.Approval"];
+            };
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+                /** @description The tool's name in the pinned manifest */
+                tool: components["parameters"]["Connections.Tool"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Connections.CallRequest"];
+            };
+        };
+        responses: {
+            /** @description The call's outcome and its wrapped result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.CallResult"];
+                };
+            };
+            403: components["responses"]["Connections.Forbidden"];
+            404: components["responses"]["Connections.NotFound"];
+            409: components["responses"]["Connections.NeedsReauth"];
+            410: components["responses"]["Connections.ToolChanged"];
+            422: components["responses"]["Connections.Invalid"];
+            428: components["responses"]["Connections.ApprovalRequired"];
+        };
+    };
+    connections_activity: {
+        parameters: {
+            query?: {
+                /** @description Return rows with a larger `seq` (default 0) */
+                after?: number;
+                /** @description Page size, 1-500 (default 100) */
+                limit?: number;
+            };
+            header?: never;
+            path: {
+                /** @description Connection id (conn_ followed by 32 hex) */
+                id: components["parameters"]["Connections.Id"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Ledger rows */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        data: components["schemas"]["Connections.ActivityRow"][];
+                        next_after?: number | null;
+                    };
+                };
+            };
+            404: components["responses"]["Connections.NotFound"];
+        };
+    };
+    connections_searchTools: {
+        parameters: {
+            query?: {
+                /** @description Keywords */
+                q?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Matching connected tools */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Connections.SearchToolsResponse"];
+                };
+            };
+            403: components["responses"]["Connections.Forbidden"];
+        };
+    };
+    connections_oauthCallback: {
+        parameters: {
+            query?: {
+                state?: string;
+                code?: string;
+                iss?: string;
+                error?: string;
+                error_description?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description A page telling the person the connection is ready (or what failed) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "text/html": string;
+                };
+            };
+            /** @description Unknown, used or expired state */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "text/html": string;
+                };
+            };
+        };
+    };
 }