@onesi/genesis 0.2.13 → 0.2.15

package/dist/generated/schema.d.ts

@@ -2434,6 +2434,113 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/hives/projects/{project_id}/timers": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List one-shot timers
+         * @description Lists this project's timers in the caller's environment, newest first. Hives answers 404 until its timers engine is enabled.
+         */
+        get: operations["hives_listTimers"];
+        put?: never;
+        /**
+         * Create a one-shot timer
+         * @description Schedules one signed callback to a registered target at `at`. The same idempotency_key with the same body returns the same timer (200); with a different body it is 409 idempotency_conflict. Hives answers 404 until its timers engine is enabled.
+         */
+        post: operations["hives_createTimer"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/hives/projects/{project_id}/timers/{timer_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get a timer */
+        get: operations["hives_getTimer"];
+        put?: never;
+        post?: never;
+        /**
+         * Cancel a timer
+         * @description Cancels a scheduled timer. A timer already fired or failed is returned unchanged, so cancelling twice is safe.
+         */
+        delete: operations["hives_cancelTimer"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/hives/projects/{project_id}/timer-targets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List timer targets
+         * @description Lists the registered callback targets. The signing secret is never part of a list or get.
+         */
+        get: operations["hives_listTimerTargets"];
+        put?: never;
+        /**
+         * Register a timer target
+         * @description Registers an https callback URL and returns its signing secret. The signing secret is shown ONCE in this answer and never again; store it immediately. Hives signs every callback with it (hives-callback-v1).
+         */
+        post: operations["hives_createTimerTarget"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/hives/projects/{project_id}/timer-targets/{target_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get a timer target */
+        get: operations["hives_getTimerTarget"];
+        put?: never;
+        post?: never;
+        /** Delete a timer target */
+        delete: operations["hives_deleteTimerTarget"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/hives/projects/{project_id}/timer-targets/{target_id}/rotate": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Rotate a timer target's signing secret
+         * @description Issues a new signing secret, shown ONCE in this answer. Hives signs with the new secret immediately; receivers may still verify the old one until previous_valid_until (24 hours).
+         */
+        post: operations["hives_rotateTimerTarget"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/hives/projects/{project_id}/deployments": {
         parameters: {
             query?: never;
@@ -8444,6 +8551,31 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/fleets/web-connection": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read whether the organization's seat web credential is set
+         * @description Secret-free status with the key's scopes. The credential is never returned. This is its own slot, never the computer credential.
+         */
+        get: operations["fleets_getWebConnection"];
+        /**
+         * Store the organization's seat web credential, encrypted with Genesis KMS
+         * @description A key of this organization and environment whose scopes are exactly traces:read. Seat research tasks use it to search and read public pages through Traces, so Traces meters each call to this organization. Encrypted like the Foundry connection and never returned. Dark until Fleets turns seat web on.
+         */
+        put: operations["fleets_putWebConnection"];
+        post?: never;
+        /** Remove the organization's seat web credential */
+        delete: operations["fleets_deleteWebConnection"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/flocks/nodes/enroll": {
         parameters: {
             query?: never;
@@ -9950,6 +10082,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/dials/workflows/{workflow_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete an owned workflow and its routing descriptor
+         * @description Needs `dials:write`. Deletes the workflow with this id (the `id` you deployed it with) and every routing-rule descriptor row it was deployed as, in the verified org/workspace/project/environment only, and records a `workflows.delete` audit event whose actor is the verified gateway identity. Another organization's, workspace's, project's or environment's workflow, and a repeat delete, are 404 `workflow_not_found`. If a held (not released) number is assigned to the workflow (kind `workflow` or `routing_rule`), the delete is refused with 409 `workflow_number_attached` and nothing changes: unassign the number first with `assignNumber` and no resource. Managed inbound policies (`/v1/routing/rules`) are never deleted here. Scope is required in the JSON body, not query parameters.
+         */
+        delete: operations["dials_deleteWorkflow"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/dials/numbers/{number_id}": {
         parameters: {
             query?: never;
@@ -10034,6 +10186,90 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/dials/numbers/voice-handler": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Set which voice handler answers an owned number
+         * @description Needs `dials:write`. Points the inbound voice webhook of one owned SignalWire number at a Dials handler: `one_phone` (the One phone line, `POST /v1/webhooks/signalwire/voice/one-phone`) or `default` (the deployment's configured handler). Dials updates that number's `call_handler` (`laml_webhooks`) and `call_request_url` at SignalWire, in the verified org/workspace/project/environment only. SignalWire numbers only: a number held through another carrier (BulkVS) is refused with 409. Repeating the same handler is idempotent. Backend: Dials D3 (ONE-PHONE-DESIGN, contract C-3).
+         */
+        put: operations["dials_setNumberVoiceHandler"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/dials/one-numbers/suggestions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Suggest phone numbers for your One
+         * @description Up to five available local numbers the person can choose for their own One. The body is a JSON object `{areaCode?, text?, lat?, lng?}`; `lat` and `lng` travel in the body, never in the URL or query, and a lone `lat` or `lng` is 400. With an empty body (`{}`) Dials uses the area code of the person's verified phone, then the city of the sign-in IP address (resolved from the request and never stored), else answers `none_found`; `areaCode` searches that area code; `text` searches numbers matching the text; `lat` with `lng` uses device coordinates only when the app sends them after the operating system's permission. Searches the carrier only: nothing is ordered or held. A person's own One number: the gateway admits the person's own token (a signed-in person, scope as the generic Dials lane forwards: `dials:write` for a POST); Dials keys the number to the verified person. Backend: Dials D5 (ONE-PHONE-CONTRACTS Delta 2); Dials must accept this POST body.
+         */
+        post: operations["dials_listOneNumberSuggestions"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/dials/one-numbers/choose": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Choose the phone number for your One
+         * @description Makes `e164` (a number from the suggestions) the person's own One number. One active number per person and one person per number; choosing again replaces the person's number once the new one is active. Idempotent on `idempotencyKey`. While Dials number provisioning is off (`DIALS_ONE_NUMBERS_PROVISION_ENABLED`), the choice is recorded as `reserved_intent` (202) and no order is placed. 409 `taken`, 429 `provisioning_cap`, 503 `carrier_limit`. The person chooses; an agent never chooses for them (the MCP refuses this operation as human consent). A person's own One number: the gateway admits the person's own token (a signed-in person, scope as the generic Dials lane forwards: `dials:read` for GET, `dials:write` otherwise); Dials keys the number to the verified person. Backend: Dials D5 (ONE-PHONE-CONTRACTS Delta 2).
+         */
+        post: operations["dials_chooseOneNumber"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/dials/one-numbers/mine": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get the phone number of your One
+         * @description The person's own One number (or null), their plan, days since the last call, and when an idle Free number is released. A person's own One number: the gateway admits the person's own token (a signed-in person, scope as the generic Dials lane forwards: `dials:read` for GET, `dials:write` otherwise); Dials keys the number to the verified person. Backend: Dials D5 (ONE-PHONE-CONTRACTS Delta 2).
+         */
+        get: operations["dials_getMyOneNumber"];
+        put?: never;
+        post?: never;
+        /**
+         * Release the phone number of your One
+         * @description Releases the person's own One number at the carrier. The number cannot be recovered once released. The person releases it; an agent never does (the MCP refuses this operation as human consent). A person's own One number: the gateway admits the person's own token (a signed-in person, scope as the generic Dials lane forwards: `dials:read` for GET, `dials:write` otherwise); Dials keys the number to the verified person. Backend: Dials D5 (ONE-PHONE-CONTRACTS Delta 2).
+         */
+        delete: operations["dials_releaseMyOneNumber"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/silos/instances": {
         parameters: {
             query?: never;
@@ -11229,6 +11465,70 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/minds/profiles": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the Mind instance profiles, with the plans and environments each is offered in
+         * @description Served only when the gateway enables MINDS_SCALING_V1 (default off; until then this path answers 404 NOT_FOUND like any unknown Minds path) and the Minds controller enables MINDS_SCALING_POLICY. An original human One account session with a verified pf_console selection (Sandbox, or Live), or an org API key with a Sandbox or Live binding and `minds:read` (or `minds:write`). The fixed profiles a Mind can run (F1, D1, D2) with their vCPU, memory and disk, the plans and environments that may request each (Live is F1 only today), and whether changing it restarts the Mind. `price` is null until the profile is live-metered in that environment. P1 is not listed, because no plan can request it. Size changes stay on `minds_resizeMind`. Live selections reach Live Minds only when the gateway lists Minds as Live (GENESIS_LIVE_SERVICES); the verified environment is forwarded and never falls back to Sandbox. Until then a Live selection answers 409 ENVIRONMENT_NOT_AVAILABLE before any delegation. A Mind in another organization, project or environment answers 404.
+         */
+        get: operations["minds_listProfiles"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/minds/services/{mind_id}/scaling": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read a Mind's scaling policy and current scaling state
+         * @description Served only when the gateway enables MINDS_SCALING_V1 (default off; until then this path answers 404 NOT_FOUND like any unknown Minds path) and the Minds controller enables MINDS_SCALING_POLICY. An original human One account session with a verified pf_console selection (Sandbox, or Live), or an org API key with a Sandbox or Live binding and `minds:read` (or `minds:write`). With no stored policy the answer is the effective default: generation 0, the current profile and disk, the global idle window, and scale_to_zero false only for an always-on Mind. `state.bodies` is 1 while the Mind runs and 0 while it is stopped. `budget` and `burn_usd_per_hour` are null until scaling budgets arrive. Live selections reach Live Minds only when the gateway lists Minds as Live (GENESIS_LIVE_SERVICES); the verified environment is forwarded and never falls back to Sandbox. Until then a Live selection answers 409 ENVIRONMENT_NOT_AVAILABLE before any delegation. A Mind in another organization, project or environment answers 404.
+         */
+        get: operations["minds_getScaling"];
+        /**
+         * Set a Mind's scaling policy (idle window, scale to zero), guarded by its policy generation
+         * @description Served only when the gateway enables MINDS_SCALING_V1 (default off; until then this path answers 404 NOT_FOUND like any unknown Minds path) and the Minds controller enables MINDS_SCALING_POLICY. Org API keys with `minds:manage` only (Sandbox or Live binding); Console sessions get 403 MINDS_MANAGE_KEY_REQUIRED before any delegation, exactly as for resize. `minds:manage` does not imply read. `generation` must equal the stored policy generation (0 when none is stored), otherwise 409 SCALING_GENERATION_CONFLICT with the stored generation as the integer `current_generation`. The body is at most 8 KiB. What this release accepts: `vertical.mode` manual with the current profile and disk (a different profile or disk is 422 SCALING_USE_RESIZE: use `minds_resizeMind`); `vertical.mode` auto is 422 SCALING_BUDGET_REQUIRED; `horizontal.min` 0 or 1 and `horizontal.max` 1 (a larger max, `horizontal.targets` or a `schedule` is 422 SCALING_FIELD_UNSUPPORTED with `field`); any `budget` is 422 SCALING_BUDGET_UNAVAILABLE; `idle.idle_seconds` 60 to 86400 replaces the global idle window for this Mind; `idle.scale_to_zero` false and `horizontal.min` 1 need an always-on Mind (422 SCALING_ALWAYS_ON_REQUIRED); `idle.wake` is on_request. An unknown field is 422 SCALING_FIELD_UNKNOWN and a value out of range or of the wrong type 422 SCALING_FIELD_INVALID, both with `field`. `vertical.apply` is stored and has no effect yet. Every applied or refused set is recorded as a scaling event. An optional Idempotency-Key (UUID4) is forwarded; the generation already makes a repeated set a conflict rather than a second change. Live selections reach Live Minds only when the gateway lists Minds as Live (GENESIS_LIVE_SERVICES); the verified environment is forwarded and never falls back to Sandbox. Until then a Live selection answers 409 ENVIRONMENT_NOT_AVAILABLE before any delegation. A Mind in another organization, project or environment answers 404.
+         */
+        put: operations["minds_setScaling"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/minds/services/{mind_id}/scaling/events": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List a Mind's scaling decisions, newest first
+         * @description Served only when the gateway enables MINDS_SCALING_V1 (default off; until then this path answers 404 NOT_FOUND like any unknown Minds path) and the Minds controller enables MINDS_SCALING_POLICY. An original human One account session with a verified pf_console selection (Sandbox, or Live), or an org API key with a Sandbox or Live binding and `minds:read` (or `minds:write`). Every policy set (applied or refused), idle stop, wake and manual resize, newest first, kept for 90 days. `limit` is 1 to 100 (default 50); pass `next_cursor` back as `cursor` for the next page. Live selections reach Live Minds only when the gateway lists Minds as Live (GENESIS_LIVE_SERVICES); the verified environment is forwarded and never falls back to Sandbox. Until then a Live selection answers 409 ENVIRONMENT_NOT_AVAILABLE before any delegation. A Mind in another organization, project or environment answers 404.
+         */
+        get: operations["minds_listScalingEvents"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/minds/services/{mind_id}/engine/v1/{keyspace}": {
         parameters: {
             query?: never;
@@ -15716,6 +16016,123 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/shells/shells/{id}/egress": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+            };
+            cookie?: never;
+        };
+        /**
+         * Read a Shell's network access
+         * @description The Shell's egress state: its tier (`sealed`, `packages`, `custom` or `internet`), the extra hosts it was widened to and until when, today's usage and the limits. Read only. Needs `shells:write` (the same permission as a Shell action). Answers 404 until the owner switches Shells egress operations on.
+         */
+        get: operations["shells_getShellEgress"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/shells/shells/{id}/egress/log": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+            };
+            cookie?: never;
+        };
+        /**
+         * Read a Shell's recent network decisions
+         * @description The proxy's most recent decisions for this Shell (allowed, refused and why). Hosts the Shell was refused are shown so you can see what to ask for; no payload is ever recorded. `limit` is 1 to 100 (default the proxy's page). Needs `shells:write`.
+         */
+        get: operations["shells_getShellEgressLog"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/shells/shells/{id}/egress/requests": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Ask for more network access for a Shell
+         * @description Files a request to let this one Shell reach up to 8 extra hosts for at most 59 minutes. Nothing is widened by this call: Shells creates a confirmation for the person who created the Shell, they decide in Taps or the Console, and the widening is applied when the confirmed request is read (`getShellEgressRequest`). Only the Shell's creator can ask. Needs `shells:write`. Idempotency-Key is required.
+         */
+        post: operations["shells_requestShellEgress"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/shells/shells/{id}/egress/requests/{requestId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+                /** @description The request id returned when it was filed */
+                requestId: string;
+            };
+            cookie?: never;
+        };
+        /**
+         * Read a network access request
+         * @description The request's status: `pending`, `approved`, `declined`, `expired` or `applied`. If the person confirmed it and nobody has applied it yet, this read applies it once (`applied_now`). A declined or expired request stays final. Needs `shells:write`.
+         */
+        get: operations["shells_getShellEgressRequest"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/shells/shells/{id}/egress/revoke": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Take a Shell's extra network access away
+         * @description Removes any widening now: the Shell goes back to its default tier and its open tunnels close. Needs `shells:write`. Idempotency-Key is required. The body is empty or `{}`.
+         */
+        post: operations["shells_revokeShellEgress"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/gears/workflows": {
         parameters: {
             query?: never;
@@ -19118,6 +19535,70 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/orgs/{org}/billing/payment-methods/setup-session": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Start a card setup on your billing account
+         * @description Hosted Stripe Checkout in setup mode on your billing account's customer; the card is set up for off-session payments (the SetupIntent it creates has usage off_session), so a card that needs your bank's approval is approved here, once. Send the customer to `url`. `return_url` and `cancel_url` must be os.one.ml Console billing/payment-methods pages (https; `return_url` may carry only `session_id={CHECKOUT_SESSION_ID}` and `setup`). Create the billing account first. Needs genesis.billing.manage and an Idempotency-Key.
+         */
+        post: operations["gateway_createBillingCardSetupSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/orgs/{org}/billing/payment-methods/default": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Make the card from a completed setup the default
+         * @description After the customer returns from the hosted page, send the `session_id` from the return URL. The session must be complete, on your billing account's customer, and its SetupIntent must have succeeded with usage off_session; only then is the card made the default. Answers the card's brand, last four digits and expiry only. Needs genesis.billing.manage and an Idempotency-Key.
+         */
+        post: operations["gateway_setBillingDefaultPaymentMethod"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/orgs/{org}/billing/subscription": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Your Genesis Pro subscription and entitlement
+         * @description The OneOS Pro subscription for your organization in the environment of your credentials (status, prices, period, latest invoice) and whether Pro is entitled. subscription is null until you subscribe. Needs genesis.billing.read. Takes no query. 503 billing_unavailable while Genesis Pro is not switched on in the environment.
+         */
+        get: operations["gateway_getGenesisProSubscription"];
+        put?: never;
+        /**
+         * Subscribe to OneOS Pro
+         * @description Starts the OneOS Pro subscription on your billing account (create it first with updateBillingAccount): the plan price plus the per-meter prices for inference, computer time, runner job time and browser time. If an open subscription exists it is returned (200) instead of a second one. With no saved payment method the subscription stays incomplete and latest_invoice carries the hosted invoice to pay; entitlement follows only Stripe's verified webhook. Sandbox is test money. Stripe ids (account, customer, subscription, invoice) and Stripe-hosted URLs are never returned; they come back null. Needs genesis.billing.manage and an Idempotency-Key.
+         */
+        post: operations["gateway_createGenesisProSubscription"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/orgs/{org}/quotas": {
         parameters: {
             query?: never;
@@ -19242,6 +19723,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/billing/pricing": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The OneOS Pro pricing catalog
+         * @description Public, no credential (any credential is ignored and never forwarded). The OneOS Pro plans (Hobby, OneOS Pro monthly and annual, Enterprise), the usage each includes, and every meter's rate, built from genesis-billing's code catalog. `live_metered` on a rate (and `live_priced` on a plan price) is true only when that price is billed in Live: Stripe live mode, OneOS Pro on in Live, and the exact price active in the live account. Render a rate only when `live_metered` is true. Cached for 5 minutes with an ETag; a matching If-None-Match answers 304. Answers 404 until public pricing is switched on.
+         */
+        get: operations["gateway_getBillingPricing"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/credits": {
         parameters: {
             query?: never;
@@ -19337,7 +19838,7 @@ export interface paths {
         head?: never;
         /**
          * Change your borrow ceiling and auto-refill
-         * @description Changes only the settings you send: `borrow_ceiling_credits` (how many credits your agents' seats may borrow from your balance in a period) and `auto_refill` (`enabled`, `pack` 10, 25 or 50, `monthly_ceiling_credits`). Unknown fields are refused. Needs genesis.billing.manage and an Idempotency-Key; reuse the key to replay.
+         * @description Changes only the settings you send: `borrow_ceiling_credits` (how many credits your agents' seats may borrow from your balance in a period), `auto_refill` (`enabled`, `pack` 10, 25 or 50, `monthly_ceiling_credits`) and, once One plans are on, `daily_limit_credits` (paid plans; null clears it) and `always_on_one`. Unknown fields are refused. Needs genesis.billing.manage and an Idempotency-Key; reuse the key to replay.
          */
         patch: operations["gateway_updateCreditSettings"];
         trace?: never;
@@ -24592,6 +25093,150 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/agents/search": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Search public agents
+         * @description Public, no credential. Ranked full-text search over public Live agents: matches in the name rank above the organization name, then the description, then the agent id; every word must match, as a prefix. An exact agent id ranks that agent first. GET only, no body, no other query key. Cached at the edge for up to 30 seconds. Rate limited per client address (429 RATE_LIMITED with Retry-After).
+         */
+        get: operations["agents_search"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/agents/sitemap": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List every public agent for crawlers
+         * @description Public, no credential. Every public Live agent id (at most 50,000) with when its public content last changed, for sitemaps and spiders. GET only, no query string, no body. Cached at the edge for up to 5 minutes. Rate limited per client address.
+         */
+        get: operations["agents_sitemap"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/one/instance": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read your own One instance
+         * @description Your One's state, goals, bound connections, heartbeat and newest checkpoint. `instance` is null before your One exists. Snapshot contents are never returned. Needs `one:read`.
+         */
+        get: operations["one_getInstance"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/one/instance/stop": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Stop your One
+         * @description "Stop One", by the person only. Halts your One, stops the reply being written and asks Henry to cancel every run of yours from the last 24 hours that may still be going. While halted your own messages are still answered, but One starts no agents. Works even when you are signed out of One (Henry's runs are then reported unconfirmed). Needs `one:write`. Human consent: the MCP never calls it for an agent.
+         */
+        post: operations["one_stopInstance"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/one/instance/resume": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Resume your halted One
+         * @description Resumes your halted One (state `asleep`); `resumed` is false when it was not halted. Only you can resume it. Needs `one:write`. Human consent: the MCP never calls it for an agent.
+         */
+        post: operations["one_resumeInstance"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/one/instance/wakeups": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List your One's wakes
+         * @description What is still to come, then what each wake did (ran, parked for sign-in, halted, failed). Needs `one:read`.
+         */
+        get: operations["one_listWakeups"];
+        put?: never;
+        /**
+         * Set a wake for your One
+         * @description At `at`, your One runs with your words as a structured event (never as your message) and its reply shows "Woken by your schedule". Only you set wakes. A wake that finds no live One sign-in is `needs_sign_in` and runs again after your next turn; a halted One runs none. Needs `one:write`. Human consent: the MCP never calls it for an agent.
+         */
+        post: operations["one_createWakeup"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/one/instance/wakeups/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Cancel one of your wakes
+         * @description Cancels a wake of yours that has not run. Needs `one:write`.
+         */
+        delete: operations["one_cancelWakeup"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
 }
 export type webhooks = Record<string, never>;
 export interface components {
@@ -25580,12 +26225,102 @@ export interface components {
             plan_id: string;
             success_url?: string | null;
         };
+        /** @description A cron handler that fires the signed hives-callback-v1 callback at a registered timer target instead of running a function. */
+        "Hives.CallbackCronHandler": {
+            /** @enum {string} */
+            type: "callback";
+            /** @description Timer target ID (tgt_…) in the same project and environment */
+            target_id: string;
+            /** @description Opaque JSON object, at most 1024 bytes serialized */
+            payload?: Record<string, never>;
+        };
+        "Hives.CreateTimerRequest": {
+            /**
+             * Format: date-time
+             * @description RFC 3339 with offset; after now and at most 400 days ahead
+             */
+            at: string;
+            /** @description Timer target ID (tgt_…) in the same project and environment */
+            target_id: string;
+            /** @description Opaque JSON object, at most 1024 bytes serialized */
+            payload?: Record<string, never>;
+            /** @description Unique per project and environment */
+            idempotency_key: string;
+        };
+        "Hives.Timer": {
+            /** @description tmr_ plus a UUIDv7 */
+            id: string;
+            project_id: string;
+            /** @enum {string} */
+            environment: "sandbox" | "live";
+            target_id: string;
+            /** Format: date-time */
+            at: string;
+            /** @enum {string} */
+            state: "scheduled" | "firing" | "fired" | "failed" | "cancelled";
+            attempts: number;
+            last_status?: number | null;
+            /** Format: date-time */
+            fired_at?: string | null;
+            /** Format: date-time */
+            cancelled_at?: string | null;
+            /** Format: date-time */
+            created_at: string;
+            idempotency_key: string;
+            payload?: Record<string, never>;
+        };
+        "Hives.TimerList": {
+            timers: components["schemas"]["Hives.Timer"][];
+            next_cursor?: string | null;
+        };
+        "Hives.CreateTimerTargetRequest": {
+            /** @description https URL, no userinfo, port 443 or none, public host. Checked again when a callback fires. */
+            url: string;
+            name?: string;
+        };
+        /** @description A registered callback target. It never carries the signing secret. */
+        "Hives.TimerTarget": {
+            /** @description tgt_ plus a UUIDv7 */
+            id: string;
+            project_id: string;
+            /** @enum {string} */
+            environment: "sandbox" | "live";
+            url: string;
+            name?: string | null;
+            /** Format: date-time */
+            created_at: string;
+            /** Format: date-time */
+            rotated_at?: string | null;
+        };
+        "Hives.TimerTargetList": {
+            targets: components["schemas"]["Hives.TimerTarget"][];
+        };
+        /** @description The created target with its signing secret. The secret is shown once and never again. */
+        "Hives.TimerTargetCreated": {
+            target_id: string;
+            url: string;
+            name?: string | null;
+            /** Format: date-time */
+            created_at: string;
+            /** @description hcs_ plus base64url of 32 random bytes. Shown once; store it immediately. Never logged by Genesis. */
+            signing_secret: string;
+        };
+        "Hives.TimerTargetRotated": {
+            target_id: string;
+            /** @description The new signing secret. Shown once; store it immediately. Never logged by Genesis. */
+            signing_secret: string;
+            /**
+             * Format: date-time
+             * @description Receivers may still verify the previous secret until this time (24 hours)
+             */
+            previous_valid_until: string;
+        };
         /** @description Create cron job request */
         "Hives.CreateCronRequest": {
             /** @description Whether the job is enabled */
             enabled?: boolean;
-            /** @description Handler function ID or name */
-            handler: string;
+            /** @description Handler function ID or name (a string), or a callback handler object that fires the signed hives-callback-v1 callback at a timer target on every occurrence */
+            handler: string | components["schemas"]["Hives.CallbackCronHandler"];
             /** @description Job name */
             name: string;
             /** @description Cron schedule expression */
@@ -26650,8 +27385,8 @@ export interface components {
         "Hives.UpdateCronRequest": {
             /** @description Whether the job is enabled */
             enabled?: boolean | null;
-            /** @description Handler function */
-            handler?: string | null;
+            /** @description Handler function ID (a string), or a callback handler object */
+            handler?: string | components["schemas"]["Hives.CallbackCronHandler"] | null;
             /** @description Job name */
             name?: string | null;
             /** @description Cron schedule expression */
@@ -32359,6 +33094,15 @@ export interface components {
             /** @description Genesis key of this organization with panes:write and shells:write; 1-4096 UTF-8 bytes without CR, LF or NUL. Never returned. */
             api_key: string;
         };
+        "Fleets.WebConnection": {
+            connected: boolean;
+            updated_at?: number;
+            scopes?: "traces:read"[];
+        };
+        "Fleets.WebConnectionInput": {
+            /** @description Genesis key of this organization whose scopes are exactly traces:read; 1-4096 UTF-8 bytes without CR, LF or NUL. Never returned. */
+            api_key: string;
+        };
         "Flocks.NativeCredential": {
             /** Format: uuid */
             node_id: string;
@@ -33144,9 +33888,9 @@ export interface components {
              */
             platformId?: "dials";
             organizationId: string;
-            workspaceId: string;
-            projectId: string;
-            environmentId: string;
+            workspaceId?: string;
+            projectId?: string;
+            environmentId?: string;
         };
         "Dials.Number": {
             id: string;
@@ -33795,6 +34539,24 @@ export interface components {
             actorId: string;
             workflow: components["schemas"]["Dials.WorkflowDocument"];
         };
+        "Dials.DeleteWorkflow": {
+            scope: components["schemas"]["Dials.Scope"];
+            /** @description Optional compatibility field; the actual actor comes from the verified gateway identity. */
+            actorId?: string | null;
+        };
+        /** @description The deleted workflow as it was, with status "deleted". */
+        "Dials.DeleteWorkflowReceipt": {
+            /** @constant */
+            ok: true;
+            /** @constant */
+            deleted: true;
+            workflow: components["schemas"]["Dials.WorkflowDocument"];
+            /** @description The routing-rule descriptor ids that were deleted. */
+            routeIds: string[];
+            auditId: string;
+            /** @constant */
+            next: "workflow_deleted";
+        };
         /** @description Saved call session. Admission/recovery receipts return this session without the separate carrier outcome fields in calls.list. */
         "Dials.CallSession": {
             id: string;
@@ -33877,6 +34639,87 @@ export interface components {
             auditId: string | null;
             idempotentReplay: boolean;
         };
+        "Dials.SetNumberVoiceHandler": {
+            scope: components["schemas"]["Dials.Scope"];
+            phoneNumberId: string;
+            /** @enum {string} */
+            handler: "one_phone" | "default";
+        };
+        "Dials.NumberVoiceHandlerReceipt": {
+            /** @constant */
+            ok: true;
+            phoneNumberId: string;
+            /** @enum {string} */
+            handler: "one_phone" | "default";
+            auditId?: string;
+            next?: string;
+        } & {
+            [key: string]: unknown;
+        };
+        "Dials.OneNumberCandidate": {
+            /** @description E.164 North American number. */
+            e164: string;
+            display: string;
+            locality?: string;
+            region?: string;
+        };
+        "Dials.OneNumberSuggestions": {
+            /** @enum {string} */
+            state: "suggestions" | "none_found";
+            /** @enum {string} */
+            source: "verified_phone" | "ip_city" | "device" | "search";
+            areaCode?: string | null;
+            city?: string | null;
+            numbers: components["schemas"]["Dials.OneNumberCandidate"][];
+        };
+        "Dials.ChooseOneNumber": {
+            /** @description E.164 North American number. */
+            e164: string;
+            idempotencyKey: string;
+        };
+        "Dials.OneNumber": {
+            /** @description E.164 North American number. */
+            e164: string;
+            display?: string;
+            locality?: string;
+            region?: string;
+            /** @enum {string} */
+            state: "reserved_intent" | "active" | "releasing" | "released";
+            /** Format: date-time */
+            chosenAt?: string | null;
+        } & {
+            [key: string]: unknown;
+        };
+        "Dials.OneNumberChoice": {
+            /** @enum {string} */
+            state: "chosen" | "reserved_intent";
+            number?: components["schemas"]["Dials.OneNumber"];
+        } & {
+            [key: string]: unknown;
+        };
+        "Dials.MyOneNumber": {
+            number: components["schemas"]["Dials.OneNumber"] | null;
+            plan?: string;
+            idleDays?: number | null;
+            /** Format: date-time */
+            releaseAt?: string | null;
+        } & {
+            [key: string]: unknown;
+        };
+        "Dials.OneNumberRelease": {
+            /** @enum {string} */
+            state: "releasing" | "released";
+            number?: components["schemas"]["Dials.OneNumber"] | null;
+        } & {
+            [key: string]: unknown;
+        };
+        /** @description All fields optional. `lat` and `lng` go together: one without the other is 400. Coordinates are never sent in the URL. */
+        "Dials.OneNumberSuggestionsRequest": {
+            areaCode?: string;
+            text?: string;
+            lat?: number;
+            lng?: number;
+        };
         "Silos.Instance": {
             /** Format: uuid */
             id: string;
@@ -34794,6 +35637,159 @@ export interface components {
              */
             profile_id: "F1" | "D1" | "D2";
         };
+        "Minds.MindsProfile": {
+            /** @enum {string} */
+            profile_id: "F1" | "D1" | "D2";
+            vcpu: number;
+            memory_mb: number;
+            base_disk_gb: number;
+            max_disk_gb: number;
+            plans: ("free" | "pro")[];
+            /** @description Environments where this profile may be requested. */
+            environments: ("sandbox" | "live")[];
+            /** @description Whether changing each dimension applies live or restarts the Mind. */
+            apply_class: {
+                /** @enum {string} */
+                vcpu: "live" | "restart";
+                /** @enum {string} */
+                memory: "live" | "restart";
+                /** @enum {string} */
+                disk: "live" | "restart";
+            };
+            /** @description Null until the profile is live-metered in this environment. */
+            price: null;
+        };
+        "Minds.MindsProfiles": {
+            profiles: components["schemas"]["Minds.MindsProfile"][];
+        };
+        "Minds.Scaling": {
+            policy: components["schemas"]["Minds.ScalingPolicy"];
+            state: components["schemas"]["Minds.ScalingState"];
+        };
+        "Minds.SetScaling": {
+            /** @description The stored policy generation from a fresh getScaling (0 when none is stored). */
+            generation: number;
+            policy: components["schemas"]["Minds.ScalingPolicyInput"];
+        };
+        "Minds.ScalingDecisionPage": {
+            items: components["schemas"]["Minds.ScalingDecision"][];
+            next_cursor: string | null;
+        };
+        "Minds.ScalingPolicy": {
+            /** @description Optimistic generation; 0 when no policy is stored (the effective default). */
+            generation: number;
+            vertical: {
+                /**
+                 * @description manual: size changes only through resize. auto is refused (422 SCALING_BUDGET_REQUIRED) until scaling budgets arrive.
+                 * @enum {string}
+                 */
+                mode: "manual" | "auto";
+                /**
+                 * @description Must equal the current profile; change it with resize (otherwise 422 SCALING_USE_RESIZE).
+                 * @enum {string}
+                 */
+                profile: "F1" | "D1" | "D2";
+                /** @description Must equal the current disk; change it with resize (otherwise 422 SCALING_USE_RESIZE). */
+                disk_gb: number;
+                /**
+                 * @description When a size change may apply. Stored; no effect yet.
+                 * @enum {string}
+                 */
+                apply: "idle_only" | "window" | "restart_ok";
+            };
+            horizontal: {
+                /** @description 1 means never idle-stop, and needs an always-on Mind (422 SCALING_ALWAYS_ON_REQUIRED). */
+                min: number;
+                /** @description 1 today; more bodies are refused (422 SCALING_FIELD_UNSUPPORTED). */
+                max: number;
+            };
+            idle: {
+                /** @description false needs an always-on Mind (422 SCALING_ALWAYS_ON_REQUIRED). */
+                scale_to_zero: boolean;
+                /** @description Idle window before the Mind is stopped; replaces the global window for this Mind. */
+                idle_seconds: number;
+                /** @enum {string} */
+                wake: "on_request";
+            };
+        };
+        /** @description The policy to store. Fields beyond these (budget, schedule, horizontal.targets) are refused with a coded 422 in this release. */
+        "Minds.ScalingPolicyInput": {
+            vertical: {
+                /**
+                 * @description manual: size changes only through resize. auto is refused (422 SCALING_BUDGET_REQUIRED) until scaling budgets arrive.
+                 * @enum {string}
+                 */
+                mode: "manual" | "auto";
+                /**
+                 * @description Must equal the current profile; change it with resize (otherwise 422 SCALING_USE_RESIZE).
+                 * @enum {string}
+                 */
+                profile: "F1" | "D1" | "D2";
+                /** @description Must equal the current disk; change it with resize (otherwise 422 SCALING_USE_RESIZE). */
+                disk_gb: number;
+                /**
+                 * @description When a size change may apply. Stored; no effect yet.
+                 * @enum {string}
+                 */
+                apply: "idle_only" | "window" | "restart_ok";
+            };
+            horizontal: {
+                /** @description 1 means never idle-stop, and needs an always-on Mind (422 SCALING_ALWAYS_ON_REQUIRED). */
+                min: number;
+                /** @description 1 today; more bodies are refused (422 SCALING_FIELD_UNSUPPORTED). */
+                max: number;
+            };
+            idle: {
+                /** @description false needs an always-on Mind (422 SCALING_ALWAYS_ON_REQUIRED). */
+                scale_to_zero: boolean;
+                /** @description Idle window before the Mind is stopped; replaces the global window for this Mind. */
+                idle_seconds: number;
+                /** @enum {string} */
+                wake: "on_request";
+            };
+        };
+        "Minds.ScalingState": {
+            current: {
+                /** @enum {string} */
+                profile: "F1" | "D1" | "D2";
+                disk_gb: number;
+                /** @description 1 while running, 0 while stopped. */
+                bodies: number;
+                region: string;
+                /** @enum {string} */
+                desired_state: "running" | "stopped" | "deleted";
+            };
+            blocked_reason: string | null;
+            last_decision: components["schemas"]["Minds.ScalingDecision"] | null;
+            /** @description Null until scaling budgets arrive. */
+            budget: null;
+            /** @description Null until the instance is live-metered. */
+            burn_usd_per_hour: null;
+        };
+        "Minds.ScalingDecision": {
+            decision_id: string;
+            /** Format: uuid */
+            mind_id: string;
+            organization_id: string;
+            project_id: string;
+            /** @enum {string} */
+            environment: "sandbox" | "live";
+            /** Format: date-time */
+            at: string;
+            /** @enum {string} */
+            trigger: "policy" | "idle" | "wake" | "manual";
+            inputs: Record<string, never>;
+            /** @description The state before the decision; null on a refused policy set. */
+            from: Record<string, never> | null;
+            /** @description The state after the decision (or the requested policy on a refusal). */
+            to: Record<string, never> | null;
+            /** @enum {string} */
+            outcome: "applied" | "refused" | "deferred" | "failed";
+            reason_code: string | null;
+            /** @description The principal id, or autoscaler for the idle sweep. */
+            actor: string;
+            approval_request_id: string | null;
+        };
         "Minds.EngineError": {
             error: {
                 type: string;
@@ -35305,6 +36301,87 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
+        "Shells.EgressStateResponse": {
+            ok: boolean;
+            product: string;
+            id: string;
+            /** @description The Shell's tier, extra hosts, expiry, usage and limits as the proxy reports them */
+            egress: {
+                [key: string]: unknown;
+            } | null;
+        } & {
+            [key: string]: unknown;
+        };
+        "Shells.EgressLogResponse": {
+            ok: boolean;
+            product: string;
+            id: string;
+            /** @description The recent decisions */
+            log: {
+                [key: string]: unknown;
+            } | unknown[] | null;
+        } & {
+            [key: string]: unknown;
+        };
+        "Shells.EgressRequestBody": {
+            hosts: string[];
+            ttl_seconds: number;
+            reason: string;
+        };
+        "Shells.EgressRequestFiled": {
+            ok: boolean;
+            product: string;
+            request: {
+                /** Format: uuid */
+                request_id: string;
+                /** @constant */
+                status: "pending";
+                shell_id: string;
+                hosts: string[];
+                /** Format: date-time */
+                expires_at: string;
+                expires_at_epoch?: number;
+                reason?: string;
+                digest: string;
+                /** @description The exact sentence the person is asked to confirm */
+                sentence: string;
+            } & {
+                [key: string]: unknown;
+            };
+        } & {
+            [key: string]: unknown;
+        };
+        "Shells.EgressRequestStatus": {
+            ok: boolean;
+            product: string;
+            request: {
+                /** Format: uuid */
+                request_id: string;
+                shell_id: string;
+                hosts: string[];
+                /** Format: date-time */
+                expires_at: string;
+                digest: string;
+                /** @enum {string} */
+                status: "pending" | "approved" | "declined" | "expired" | "applied";
+                /** Format: date-time */
+                applied_at?: string | null;
+            } & {
+                [key: string]: unknown;
+            };
+        } & {
+            [key: string]: unknown;
+        };
+        "Shells.EgressRevokeResponse": {
+            ok: boolean;
+            product: string;
+            id: string;
+            result?: {
+                [key: string]: unknown;
+            } | null;
+        } & {
+            [key: string]: unknown;
+        };
         /** @description The 503 answer to a native `snapshot` while Omega has no snapshot executor. */
         "Shells.SnapshotUnavailable": {
             error: {
@@ -35384,15 +36461,17 @@ export interface components {
         /** @description Launch options; the Shells facade validates them. */
         "Shells.ShellLaunch": {
             name?: string;
-            /** @description wasm (default), container or microvm */
+            /** @description container (the default; the only runtime the native producer runs). Anything else is 422 OMEGA_NATIVE_UNSUPPORTED_PROFILE. */
             runtime?: string;
-            /** @description Default bash */
+            /** @description bash (default), node or python */
             language?: string;
             /**
-             * @description Default sealed
+             * @description Default sealed. The native producer runs sealed only until per-tenant egress ships; anything else is 422 OMEGA_NATIVE_UNSUPPORTED_PROFILE.
              * @enum {string}
              */
             network?: "sealed" | "localhost" | "internet";
+            /** @description Sandbox lifetime in seconds, 60 to 1800 (default 1800). Omega stops the Shell when it runs out. Anything else is 422 OMEGA_NATIVE_UNSUPPORTED_PROFILE. */
+            timeoutSeconds?: number;
         } & {
             [key: string]: unknown;
         };
@@ -36923,6 +38002,8 @@ export interface components {
             ref: components["schemas"]["Scopes.Ref"];
             principal?: components["schemas"]["Scopes.Ref"];
             name?: string;
+            /** @description The agent's OpenAgentID DID */
+            did?: string;
         } | {
             /** @enum {string} */
             kind: "person";
@@ -36939,6 +38020,13 @@ export interface components {
             /** @description The linked Auto org; assignments then pass Auto's authority check */
             auto_org_id: string | null;
             lead: string | null;
+            /** @description The signed principal that created the project. Only the owner can read or change it; anyone else in the organization */
+            readonly owner: string | null;
+            /**
+             * @description 'one' when the gateway's signed selected context named One's platform when the project was created; set by the server, never from a request body
+             * @enum {string|null}
+             */
+            readonly origin: "one" | null;
             /** Format: date */
             target_on: string | null;
             task_count: number;
@@ -37142,6 +38230,77 @@ export interface components {
             /** @description The projects the assignee's open tasks are in */
             projects: unknown;
         };
+        "Gateway.BillingPricing": {
+            /** @constant */
+            object: "billing_pricing";
+            /** @description Bumps on any change; compare before using an older copy */
+            version: string;
+            /** Format: date-time */
+            generated_at: string;
+            source: {
+                service: string;
+                commit: string | null;
+                /** @enum {string} */
+                stripe_mode: "live" | "test" | "off";
+            };
+            /** @constant */
+            currency: "usd";
+            plans: {
+                /** @enum {string} */
+                id: "hobby" | "genesis_pro" | "enterprise";
+                name: string;
+                /** @description Decimal string in USD */
+                price_usd_month: string | null;
+                /** @description Usage included each month */
+                included_usage_usd?: string;
+                card_required?: boolean;
+                stripe_lookup_key?: string;
+                live_priced?: boolean;
+                annual?: {
+                    price_usd_year?: string;
+                    stripe_lookup_key?: string;
+                    live_priced?: boolean;
+                };
+                limits?: {
+                    [key: string]: unknown;
+                };
+                contact?: string;
+            }[];
+            rates: {
+                service: string;
+                service_name: string;
+                category?: string | null;
+                meters: string[];
+                label: string;
+                unit?: string | null;
+                granularity?: string | null;
+                /** @description Null for a meter with no price. Otherwise fixed (usd_per_unit per `per`) or list_plus_bps (provider list price plus bps). */
+                rate: {
+                    /** @enum {string} */
+                    kind?: "fixed" | "list_plus_bps";
+                    /** @constant */
+                    currency?: "usd";
+                    usd_per_unit?: string;
+                    per?: string;
+                    bps?: number;
+                    base?: string;
+                } | null;
+                included?: {
+                    [key: string]: unknown;
+                };
+                allowance?: {
+                    [key: string]: unknown;
+                };
+                stripe_lookup_key?: string | null;
+                /** @description Stripe unit amount in cents */
+                stripe_unit_amount_decimal?: string | null;
+                /** @description True only when this rate is billed in Live */
+                live_metered: boolean;
+                example?: {
+                    [key: string]: unknown;
+                } | null;
+            }[];
+        };
         "Gateway.StatusReport": {
             /** @constant */
             object: "gateway_status";
@@ -37223,7 +38382,9 @@ export interface components {
                 memo?: string | null;
             };
             stripe?: {
-                account_id?: string;
+                /** @description Always null: Stripe ids are never returned */
+                account_id?: string | null;
+                /** @description Always null: Stripe ids are never returned */
                 customer_id?: string | null;
                 livemode?: boolean;
             };
@@ -37261,6 +38422,23 @@ export interface components {
             object: "list";
             data: components["schemas"]["Gateway.BillingContact"][];
         };
+        "Gateway.BillingSetupSession": {
+            /** @constant */
+            object: "billing_setup_session";
+            /** @description The hosted Stripe page where the customer enters the card. The one Stripe URL this API returns. */
+            url: string;
+            expires_at: string;
+        };
+        "Gateway.BillingPaymentMethod": {
+            /** @constant */
+            object: "billing_payment_method";
+            brand?: string | null;
+            last4?: string | null;
+            exp_month?: number | null;
+            exp_year?: number | null;
+            /** @constant */
+            default: true;
+        };
         "Gateway.BillingTaxId": {
             /** @constant */
             object: "billing_tax_id";
@@ -37302,6 +38480,41 @@ export interface components {
                 stripe_request_id?: string | null;
             }[];
         };
+        "Gateway.GenesisProSubscription": {
+            /** @constant */
+            object: "genesis_pro_subscription";
+            org_id: string;
+            /** @enum {string} */
+            environment: "sandbox" | "live";
+            /** @constant */
+            plan: "genesis_pro";
+            created?: boolean;
+            enabled?: boolean;
+            stripe?: {
+                /** @description Always null: Stripe ids are never returned on this resource */
+                account_id?: string | null;
+                mode?: string;
+                livemode?: boolean;
+                test_mode?: boolean;
+            };
+            subscription: {
+                /** @description Always null: Stripe ids are never returned on this resource */
+                id: string | null;
+                status: string;
+                prices: string[];
+                current_period_start?: string | null;
+                current_period_end?: string | null;
+                latest_invoice?: {
+                    id?: string | null;
+                    status?: string | null;
+                    hosted_invoice_url?: string | null;
+                    amount_due?: number | null;
+                } | null;
+            } | null;
+            entitlement: {
+                [key: string]: unknown;
+            };
+        };
         "Gateway.OrgQuotas": {
             /** @constant */
             object: "org_quotas";
@@ -37437,6 +38650,57 @@ export interface components {
                 status: string;
                 granted_micro_usd: number;
             };
+            one_plan?: components["schemas"]["Gateway.CreditOnePlan"];
+        };
+        /** @description What your plan includes and where you stand (catalog one-plans-20261025). Present once One plans v2 is on. Agents at once counts every agent working at the same moment, One included; the daily limit resets at midnight UTC. */
+        "Gateway.CreditOnePlan": {
+            /** @description one-plans-20261025 */
+            catalog_version: string;
+            /** @enum {string} */
+            plan: "free" | "one" | "pro" | "max";
+            agents_at_once: {
+                limit: number;
+                working: number;
+            };
+            always_on_one: {
+                /** @description The plan includes it (Max) */
+                included: boolean;
+                /** @description The plan includes it */
+                available: boolean;
+                active: boolean;
+                /** @enum {string|null} */
+                source: "plan" | "agent" | null;
+            };
+            always_on_agents: {
+                total: number;
+                used_by_one: number;
+            };
+            memory: {
+                limit_gb: number;
+            };
+            devices: {
+                limit: number;
+            };
+            computer: {
+                /** @constant */
+                draws_from_allowance: true;
+                /** @description Plan computer hours this period (Pro 60, Max 150); null: bounded by the allowance only */
+                ceiling_hours: number | null;
+                used_seconds: number;
+                remaining_seconds: number | null;
+            };
+            daily_limit: {
+                limit_credits: number | null;
+                used_today_credits: number;
+                resets_at: string;
+                reached: boolean;
+            };
+            schedules: {
+                limit: number | null;
+            };
+            top_ups: {
+                available: boolean;
+            };
         };
         "Gateway.CreditEntry": {
             id: string;
@@ -37486,11 +38750,16 @@ export interface components {
                 pack?: 10 | 25 | 50;
                 monthly_ceiling_credits?: number;
             };
+            /** @description One plans: a daily limit for everything One and your agents do (paid plans); null clears it */
+            daily_limit_credits?: number | null;
+            /** @description One plans: make your One always on (Max includes it; otherwise with an Always-on agent) */
+            always_on_one?: boolean;
         };
         "Gateway.CreditSettings": {
             org: string;
             borrow: components["schemas"]["Gateway.CreditBorrow"];
             auto_refill: components["schemas"]["Gateway.CreditAutoRefill"];
+            one_plan?: components["schemas"]["Gateway.CreditOnePlan"];
         };
         "Gateway.CreditCheckout": {
             /**
@@ -41414,6 +42683,116 @@ export interface components {
             data: components["schemas"]["Connections.ConnectedTool"][];
             session_tainted?: boolean;
         };
+        "Agents.AgentSearchResults": {
+            results: components["schemas"]["Agents.AgentSearchHit"][];
+        };
+        /** @description One public agent. Optional keys are omitted when the owner did not disclose them. */
+        "Agents.AgentSearchHit": {
+            /** @description The agent's IAM id (a_...) */
+            agentId: string;
+            /** @description The agent's canonical DID (did:oas:agent:...) */
+            did: string;
+            /**
+             * @description IAM vouches for this public identity
+             * @constant
+             */
+            verified: true;
+            /**
+             * @description Always live; Sandbox agents are never indexed
+             * @constant
+             */
+            environment: "live";
+            /** @description The agent's name (when disclosed) */
+            name?: string;
+            /** @description The owning organization (when its name is disclosed). Never a person. */
+            owner?: {
+                name: string;
+            };
+            /** @description The owner's public description (when disclosed) */
+            description?: string;
+            /** @description When the agent was created */
+            createdAt?: number;
+        };
+        "Agents.AgentSitemap": {
+            agents: {
+                agentId: string;
+                /** @description When the agent's public content last changed */
+                updatedAt: number;
+            }[];
+        };
+        /** @enum {string} */
+        "One.InstanceState": "asleep" | "waking" | "awake" | "always_on" | "halted";
+        "One.Goal": {
+            id: string;
+            words: string;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        "One.Checkpoint": {
+            seq: number;
+            sha256: string;
+            /** Format: date-time */
+            at: string;
+        };
+        "One.Instance": {
+            state: components["schemas"]["One.InstanceState"];
+            goals: components["schemas"]["One.Goal"][];
+            /** @description Connections bound to your One (names only) */
+            bound: string[];
+            /** Format: date-time */
+            heartbeatAt: string | null;
+            checkpoint: components["schemas"]["One.Checkpoint"] | null;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        "One.InstanceEnvelope": {
+            instance: components["schemas"]["One.Instance"] | null;
+        };
+        "One.StopReport": {
+            /** @enum {string} */
+            state: "halted";
+            /** @description The reply One was writing was stopped (what was written is kept) */
+            replyStopped: boolean;
+            /** @description Henry runs cancelled */
+            runsCancelled: number;
+            /** @description Runs whose cancel Henry did not confirm */
+            runsUnconfirmed: number;
+        };
+        "One.ResumeResult": {
+            /** @enum {string|null} */
+            state: "asleep" | null;
+            resumed: boolean;
+        };
+        "One.CreateWakeRequest": {
+            /**
+             * Format: date-time
+             * @description When to wake, an ISO time with offset, in the future
+             */
+            at: string;
+            /** @description What One should do when it wakes */
+            words: string;
+            /** @description IANA time zone, for example America/Chicago */
+            timeZone?: string;
+        };
+        /** @enum {string} */
+        "One.WakeStatus": "pending" | "claiming" | "done" | "cancelled" | "needs_sign_in" | "halted" | "failed";
+        "One.Wake": {
+            /** @description wk_ followed by a UUID v4 */
+            id: string;
+            /** @enum {string} */
+            source: "schedule" | "callback";
+            words: string;
+            /** Format: date-time */
+            dueAt: string;
+            status: components["schemas"]["One.WakeStatus"];
+            outcome: string | null;
+            replyId: string | null;
+            /** Format: date-time */
+            doneAt: string | null;
+        };
+        "One.WakeList": {
+            wakeups: components["schemas"]["One.Wake"][];
+        };
     };
     responses: {
         /** @description Foundry API error. */
@@ -46486,6 +47865,471 @@ export interface operations {
             };
         };
     };
+    hives_listTimers: {
+        parameters: {
+            query?: {
+                /** @description Only the timer created with this idempotency key */
+                idempotency_key?: string;
+                /** @description Only timers in this state */
+                state?: "scheduled" | "firing" | "fired" | "failed" | "cancelled";
+                /** @description Page size, 1 to 100 (default 50) */
+                limit?: number;
+                /** @description next_cursor from the previous page */
+                cursor?: string;
+            };
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description A page of timers */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.TimerList"];
+                };
+            };
+            /** @description Invalid filter or cursor */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Project not found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_createTimer: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Hives.CreateTimerRequest"];
+            };
+        };
+        responses: {
+            /** @description The timer already created with this idempotency key and body */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.Timer"];
+                };
+            };
+            /** @description Timer created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.Timer"];
+                };
+            };
+            /** @description invalid_at or payload_too_large or invalid fields */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Project or target_not_found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description idempotency_conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_getTimer: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+                /** @description Timer ID (tmr_…) */
+                timer_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The timer */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.Timer"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Timer not found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_cancelTimer: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+                /** @description Timer ID (tmr_…) */
+                timer_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The timer (cancelled, or unchanged when already fired or failed) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.Timer"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Timer not found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_listTimerTargets: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The targets */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.TimerTargetList"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Project not found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_createTimerTarget: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Hives.CreateTimerTargetRequest"];
+            };
+        };
+        responses: {
+            /** @description Target created; signing_secret is shown once */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.TimerTargetCreated"];
+                };
+            };
+            /** @description Invalid url */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Project not found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_getTimerTarget: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+                /** @description Target ID (tgt_…) */
+                target_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The target (no signing secret) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.TimerTarget"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Target not found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_deleteTimerTarget: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+                /** @description Target ID (tgt_…) */
+                target_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Deleted */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Target not found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description target_in_use, while a scheduled timer or an enabled cron references it */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_rotateTimerTarget: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+                /** @description Target ID (tgt_…) */
+                target_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The new signing secret, shown once */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.TimerTargetRotated"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Target not found, or timers are not enabled */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Scheduler unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     hives_list_deployments: {
         parameters: {
             query?: {
@@ -52295,14 +54139,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Exact empty acknowledgement */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Empty compatible acknowledgement */
+            /** @description Exact empty acknowledgement; no response body (the object is deleted, or was already absent) */
             204: {
                 headers: {
                     [name: string]: unknown;
@@ -52561,114 +54398,13 @@ export interface operations {
             };
         };
     };
-    hives_upload_object: {
-        parameters: {
-            query?: never;
-            header?: {
-                /** @description Required for a funded object write (Genesis-required mode). Printable ASCII, 1-128 bytes; a retry with the same key and bytes returns the original operation. The SDK, CLI and MCP send a fresh key when none is given. */
-                "Idempotency-Key"?: string;
-            };
-            path: {
-                /** @description Hives project id (prj_…) */
-                project_id: string;
-                /** @description Bucket ID */
-                bucket_id: string;
-                /** @description Object key */
-                key: string;
-            };
-            cookie?: never;
-        };
-        /** @description Object body */
-        requestBody: {
-            content: {
-                "application/octet-stream": string;
-            };
-        };
-        responses: {
-            /** @description Object uploaded (unfunded mode), or the original settled receipt without `result` for a same-key replay */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Hives.CloudResource_GenesisCellsObjectAcknowledgement"] | components["schemas"]["Hives.CloudResource_GenesisCellsStorageWriteReceipt"];
-                };
-            };
-            /** @description Funded write settled; the receipt carries the object acknowledgement as `result` */
-            201: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Hives.CloudResource_GenesisCellsStorageWriteReceipt"];
-                };
-            };
-            /** @description Funded write not settled yet; replay the same Idempotency-Key to read its outcome */
-            202: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Hives.CloudResource_GenesisCellsStorageWriteReceipt"];
-                };
-            };
-            /** @description Unauthorized */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Funded write denied; the receipt's state is final */
-            402: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Hives.CloudResource_GenesisCellsStorageWriteReceipt"];
-                };
-            };
-            /** @description Bucket not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Idempotency-Key reused with a different body, or the write conflicted with admission */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Payload too large */
-            413: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Internal server error */
-            500: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Object storage provider is unavailable */
-            503: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-        };
-    };
-    hives_delete_object: {
+    hives_upload_object: {
         parameters: {
             query?: never;
-            header?: never;
+            header?: {
+                /** @description Required for a funded object write (Genesis-required mode). Printable ASCII, 1-128 bytes; a retry with the same key and bytes returns the original operation. The SDK, CLI and MCP send a fresh key when none is given. */
+                "Idempotency-Key"?: string;
+            };
             path: {
                 /** @description Hives project id (prj_…) */
                 project_id: string;
@@ -52679,16 +54415,110 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        /** @description Object body */
+        requestBody: {
+            content: {
+                "application/octet-stream": string;
+            };
+        };
         responses: {
-            /** @description Exact empty acknowledgement */
+            /** @description Object uploaded (unfunded mode), or the original settled receipt without `result` for a same-key replay */
             200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.CloudResource_GenesisCellsObjectAcknowledgement"] | components["schemas"]["Hives.CloudResource_GenesisCellsStorageWriteReceipt"];
+                };
+            };
+            /** @description Funded write settled; the receipt carries the object acknowledgement as `result` */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.CloudResource_GenesisCellsStorageWriteReceipt"];
+                };
+            };
+            /** @description Funded write not settled yet; replay the same Idempotency-Key to read its outcome */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.CloudResource_GenesisCellsStorageWriteReceipt"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Empty compatible acknowledgement */
+            /** @description Funded write denied; the receipt's state is final */
+            402: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Hives.CloudResource_GenesisCellsStorageWriteReceipt"];
+                };
+            };
+            /** @description Bucket not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Idempotency-Key reused with a different body, or the write conflicted with admission */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Payload too large */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Object storage provider is unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    hives_delete_object: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Hives project id (prj_…) */
+                project_id: string;
+                /** @description Bucket ID */
+                bucket_id: string;
+                /** @description Object key */
+                key: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Exact empty acknowledgement; no response body (the object is deleted, or was already absent) */
             204: {
                 headers: {
                     [name: string]: unknown;
@@ -64957,6 +66787,140 @@ export interface operations {
             };
         };
     };
+    fleets_getWebConnection: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Secret-free status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.WebConnection"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Connection storage unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_putWebConnection: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Fleets.WebConnectionInput"];
+            };
+        };
+        responses: {
+            /** @description Secret-free status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.WebConnection"];
+                };
+            };
+            /** @description Invalid body (invalid_request), a key the gateway refused (web_credential_invalid), scopes other than exactly traces:read (web_credential_scope), or a key of another organization or environment (web_credential_org) */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Connection storage unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_deleteWebConnection: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Secret-free status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.WebConnection"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Connection storage unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     flocks_exchangeJoinToken: {
         parameters: {
             query?: never;
@@ -68626,12 +70590,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -68679,12 +70643,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
                 areaCode?: string;
                 exchangeCode?: string;
                 /** @description At least three national digits; SignalWire receives at most seven and the full requested prefix is checked locally. */
@@ -68900,12 +70864,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -69225,12 +71189,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -69278,12 +71242,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -69331,12 +71295,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -69381,12 +71345,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -69438,12 +71402,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -69549,12 +71513,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -69660,12 +71624,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
             };
             header?: never;
             path?: never;
@@ -69771,12 +71735,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
                 /** @description Selected data platform. Omitted defaults to dials in the backend; selection does not grant organization authority. */
                 platformId?: string;
             };
@@ -69953,12 +71917,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
                 /** @description Selected data platform. Omitted defaults to dials in the backend; selection does not grant organization authority. */
                 platformId?: string;
             };
@@ -70116,12 +72080,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
                 /** @description Selected data platform. Omitted defaults to dials in the backend; selection does not grant organization authority. */
                 platformId?: string;
             };
@@ -70287,12 +72251,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
                 /** @description Selected data platform. Omitted defaults to dials in the backend; selection does not grant organization authority. */
                 platformId?: string;
             };
@@ -70562,12 +72526,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
                 /** @description Selected data platform. Omitted defaults to dials in the backend; selection does not grant organization authority. */
                 platformId?: string;
             };
@@ -70721,17 +72685,106 @@ export interface operations {
             };
         };
     };
+    dials_deleteWorkflow: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                workflow_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Dials.DeleteWorkflow"];
+            };
+        };
+        responses: {
+            /** @description Deleted. The descriptor rows are gone; audit records are kept. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.DeleteWorkflowReceipt"];
+                };
+            };
+            /** @description Invalid scope or request shape. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Missing or invalid verified identity. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Selected scope is not authorized by signed identity or lacks the required Dials grant. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description No workflow with this id in the authorized scope (workflow_not_found). */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description A held number is assigned to this workflow (workflow_number_attached); unassign it first. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Durable store failed. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Backend is not ready. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+        };
+    };
     dials_deleteNumber: {
         parameters: {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
                 actorId: string;
                 reason?: string;
                 /** @description Selected data platform. Omitted defaults to dials in the backend; selection does not grant organization authority. */
@@ -70953,12 +73006,12 @@ export interface operations {
             query: {
                 /** @description Must match the authenticated organization. */
                 organizationId: string;
-                /** @description Selected Dials scope. */
-                workspaceId: string;
-                /** @description Selected Dials scope. */
-                projectId: string;
-                /** @description Selected Dials scope. */
-                environmentId: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                workspaceId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                projectId?: string;
+                /** @description Optional with an org API key: Dials fills it from the key's signed binding, and a value that differs from the binding is refused. A login session with a selected project is pinned to that selection. */
+                environmentId?: string;
                 /** @description Selected data platform. Omitted defaults to dials in the backend; selection does not grant organization authority. */
                 platformId?: string;
             };
@@ -71181,6 +73234,334 @@ export interface operations {
             };
         };
     };
+    dials_setNumberVoiceHandler: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Dials.SetNumberVoiceHandler"];
+            };
+        };
+        responses: {
+            /** @description The number's voice handler as Dials set it at SignalWire. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.NumberVoiceHandlerReceipt"];
+                };
+            };
+            /** @description Invalid scope, number id or handler. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Missing or invalid verified identity. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Selected scope is not authorized by signed identity or lacks dials:write. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description No number with this id in the authorized scope. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description The number is not a SignalWire number (for example BulkVS), or it is released. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Backend or carrier unavailable. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+        };
+    };
+    dials_listOneNumberSuggestions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Dials.OneNumberSuggestionsRequest"];
+            };
+        };
+        responses: {
+            /** @description Suggestions, or none_found. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.OneNumberSuggestions"];
+                };
+            };
+            /** @description Invalid area code, text or coordinates (a lone lat or lng, or any coordinate outside the range). */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Missing or invalid verified identity. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Not a person's own token, or the Dials grant is missing. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Backend or carrier unavailable. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+        };
+    };
+    dials_chooseOneNumber: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Dials.ChooseOneNumber"];
+            };
+        };
+        responses: {
+            /** @description Chosen and active. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.OneNumberChoice"];
+                };
+            };
+            /** @description Recorded as reserved_intent while provisioning is off; no order was placed. */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.OneNumberChoice"];
+                };
+            };
+            /** @description Invalid e164 or idempotency key. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Missing or invalid verified identity. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Not a person's own token, or the Dials grant is missing. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description The number was taken (taken). */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description The daily provisioning cap is reached (provisioning_cap). */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description The carrier account's number limit is reached (carrier_limit), or the backend is unavailable. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+        };
+    };
+    dials_getMyOneNumber: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Your One number, or null. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.MyOneNumber"];
+                };
+            };
+            /** @description Missing or invalid verified identity. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Not a person's own token, or the Dials grant is missing. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Backend unavailable. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+        };
+    };
+    dials_releaseMyOneNumber: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Releasing or released. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.OneNumberRelease"];
+                };
+            };
+            /** @description Missing or invalid verified identity. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Not a person's own token, or the Dials grant is missing. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description The person has no One number. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+            /** @description Backend or carrier unavailable. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dials.CustomerError"];
+                };
+            };
+        };
+    };
     silos_listInstances: {
         parameters: {
             query?: never;
@@ -75081,6 +77462,112 @@ export interface operations {
             403: components["responses"]["Minds.MindsHumanSelectionRequired"];
         };
     };
+    minds_listProfiles: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The profile list. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Minds.MindsProfiles"];
+                };
+            };
+            403: components["responses"]["Minds.MindsHumanSelectionRequired"];
+        };
+    };
+    minds_getScaling: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                mind_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The stored (or effective default) policy and the read-only state. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Minds.Scaling"];
+                };
+            };
+            403: components["responses"]["Minds.MindsHumanSelectionRequired"];
+            404: components["responses"]["Minds.MindsRefusal"];
+        };
+    };
+    minds_setScaling: {
+        parameters: {
+            query?: never;
+            header?: {
+                "idempotency-key"?: string;
+            };
+            path: {
+                mind_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Minds.SetScaling"];
+            };
+        };
+        responses: {
+            /** @description The policy was applied; the answer carries the stored policy with its new generation and the state. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Minds.Scaling"];
+                };
+            };
+            403: components["responses"]["Minds.MindsHumanSelectionRequired"];
+            404: components["responses"]["Minds.MindsRefusal"];
+            409: components["responses"]["Minds.MindsRefusal"];
+            413: components["responses"]["Minds.MindsRefusal"];
+            422: components["responses"]["Minds.MindsRefusal"];
+        };
+    };
+    minds_listScalingEvents: {
+        parameters: {
+            query?: {
+                /** @description Opaque next_cursor from the previous page. */
+                cursor?: string;
+                limit?: number;
+            };
+            header?: never;
+            path: {
+                mind_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description One page of scaling decisions. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Minds.ScalingDecisionPage"];
+                };
+            };
+            403: components["responses"]["Minds.MindsHumanSelectionRequired"];
+            404: components["responses"]["Minds.MindsRefusal"];
+        };
+    };
     minds_engineKeyValuePostKeyspace: {
         parameters: {
             query?: never;
@@ -87615,6 +90102,289 @@ export interface operations {
             };
         };
     };
+    shells_getShellEgress: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The egress state */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Shells.EgressStateResponse"];
+                };
+            };
+            /** @description A non-UUID id */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Signed organization and project selection */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found, or egress operations are not on */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The Shell is not routed or not reachable */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The Shells facade or Omega is unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    shells_getShellEgressLog: {
+        parameters: {
+            query?: {
+                limit?: number;
+            };
+            header?: never;
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The recent decisions */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Shells.EgressLogResponse"];
+                };
+            };
+            /** @description A non-UUID id or a limit outside 1 to 100 */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Signed organization and project selection */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found, or egress operations are not on */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The Shells facade or Omega is unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    shells_requestShellEgress: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Required. A stable key for this one create. The gateway derives the operation key from it (with your organization, principal, method and path); reuse the same key to retry and the original result is replayed instead of creating twice. */
+                "Idempotency-Key": components["parameters"]["Shells.IdempotencyKeyRequired"];
+            };
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Shells.EgressRequestBody"];
+            };
+        };
+        responses: {
+            /** @description The request is filed and waiting for the person */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Shells.EgressRequestFiled"];
+                };
+            };
+            /** @description INVALID_ARGUMENT, a missing Idempotency-Key, or a non-UUID id */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Signed selection or write scope required, or the caller is not the Shell's creator (EGRESS_NOT_CREATOR) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found, or egress operations are not on */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The Shell has no network access to widen (EGRESS_NOT_ROUTED) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Taps or the Shells facade is unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    shells_getShellEgressRequest: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+                /** @description The request id returned when it was filed */
+                requestId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The request and its status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Shells.EgressRequestStatus"];
+                };
+            };
+            /** @description A non-UUID id */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Signed selection or write scope required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found, or egress operations are not on */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Taps or the Shells facade is unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    shells_revokeShellEgress: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Required. A stable key for this one create. The gateway derives the operation key from it (with your organization, principal, method and path); reuse the same key to retry and the original result is replayed instead of creating twice. */
+                "Idempotency-Key": components["parameters"]["Shells.IdempotencyKeyRequired"];
+            };
+            path: {
+                /** @description The Shell's id (an Omega deployment UUID) */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The result */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Shells.EgressRevokeResponse"];
+                };
+            };
+            /** @description A non-UUID id, a body other than {}, or a missing Idempotency-Key */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Signed selection or write scope required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found, or egress operations are not on */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The Shells facade or Omega is unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     gears_listWorkflows: {
         parameters: {
             query?: never;
@@ -94838,28 +97608,348 @@ export interface operations {
             };
         };
     };
-    gateway_listBillingContacts: {
+    gateway_listBillingContacts: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Your organization id (must be your login session's or your API key's organization) */
+                org: components["parameters"]["Gateway.Org"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Billing contacts */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.BillingContactList"];
+                };
+            };
+            /** @description invalid_request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description billing_unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    gateway_createBillingContact: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Stable key (8-128 letters, digits, - _ : or .); reuse it to replay instead of acting twice */
+                "Idempotency-Key": components["parameters"]["Gateway.IdempotencyKey"];
+            };
+            path: {
+                /** @description Your organization id (must be your login session's or your API key's organization) */
+                org: components["parameters"]["Gateway.Org"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    email: string;
+                    name?: string | null;
+                };
+            };
+        };
+        responses: {
+            /** @description The new contact */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.BillingContact"];
+                };
+            };
+            /** @description invalid_request, idempotency_key_required or bad_request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description forbidden (needs genesis.billing.manage) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description conflict (contact limit, or the Idempotency-Key was used for a different request) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description body_too_large (16 KiB) */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description billing_unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    gateway_deleteBillingContact: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Stable key (8-128 letters, digits, - _ : or .); reuse it to replay instead of acting twice */
+                "Idempotency-Key": components["parameters"]["Gateway.IdempotencyKey"];
+            };
+            path: {
+                /** @description Your organization id (must be your login session's or your API key's organization) */
+                org: components["parameters"]["Gateway.Org"];
+                /** @description The contact id (bc_...) */
+                contact_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The removed contact */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.BillingDeleted"];
+                };
+            };
+            /** @description invalid_request or idempotency_key_required */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description forbidden (needs genesis.billing.manage) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description not_found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description billing_unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    gateway_listBillingTaxIds: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Your organization id (must be your login session's or your API key's organization) */
+                org: components["parameters"]["Gateway.Org"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Tax IDs */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.BillingTaxIdList"];
+                };
+            };
+            /** @description invalid_request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description billing_unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    gateway_createBillingTaxId: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Stable key (8-128 letters, digits, - _ : or .); reuse it to replay instead of acting twice */
+                "Idempotency-Key": components["parameters"]["Gateway.IdempotencyKey"];
+            };
+            path: {
+                /** @description Your organization id (must be your login session's or your API key's organization) */
+                org: components["parameters"]["Gateway.Org"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    type: string;
+                    value: string;
+                };
+            };
+        };
+        responses: {
+            /** @description The new tax ID */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.BillingTaxId"];
+                };
+            };
+            /** @description invalid_request, idempotency_key_required, bad_request or rejected_by_stripe */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description forbidden (needs genesis.billing.manage) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description conflict (tax ID limit, or the Idempotency-Key was used for a different request) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description body_too_large (16 KiB) */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description billing_unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    gateway_deleteBillingTaxId: {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description Stable key (8-128 letters, digits, - _ : or .); reuse it to replay instead of acting twice */
+                "Idempotency-Key": components["parameters"]["Gateway.IdempotencyKey"];
+            };
             path: {
                 /** @description Your organization id (must be your login session's or your API key's organization) */
                 org: components["parameters"]["Gateway.Org"];
+                /** @description The tax ID id (txi_...) */
+                tax_id: string;
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Billing contacts */
+            /** @description The removed tax ID */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Gateway.BillingContactList"];
+                    "application/json": components["schemas"]["Gateway.BillingDeleted"];
                 };
             };
-            /** @description invalid_request */
+            /** @description invalid_request or idempotency_key_required */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -94873,13 +97963,20 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description forbidden */
+            /** @description forbidden (needs genesis.billing.manage) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description not_found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             /** @description billing_unavailable */
             503: {
                 headers: {
@@ -94889,38 +97986,28 @@ export interface operations {
             };
         };
     };
-    gateway_createBillingContact: {
+    gateway_listBillingActivity: {
         parameters: {
             query?: never;
-            header: {
-                /** @description Stable key (8-128 letters, digits, - _ : or .); reuse it to replay instead of acting twice */
-                "Idempotency-Key": components["parameters"]["Gateway.IdempotencyKey"];
-            };
+            header?: never;
             path: {
                 /** @description Your organization id (must be your login session's or your API key's organization) */
                 org: components["parameters"]["Gateway.Org"];
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": {
-                    email: string;
-                    name?: string | null;
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The new contact */
-            201: {
+            /** @description Activity, newest first */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Gateway.BillingContact"];
+                    "application/json": components["schemas"]["Gateway.BillingActivityList"];
                 };
             };
-            /** @description invalid_request, idempotency_key_required or bad_request */
+            /** @description invalid_request */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -94934,27 +98021,13 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description forbidden (needs genesis.billing.manage) */
+            /** @description forbidden */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description conflict (contact limit, or the Idempotency-Key was used for a different request) */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description body_too_large (16 KiB) */
-            413: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
             /** @description billing_unavailable */
             503: {
                 headers: {
@@ -94964,7 +98037,7 @@ export interface operations {
             };
         };
     };
-    gateway_deleteBillingContact: {
+    gateway_createBillingCardSetupSession: {
         parameters: {
             query?: never;
             header: {
@@ -94974,23 +98047,28 @@ export interface operations {
             path: {
                 /** @description Your organization id (must be your login session's or your API key's organization) */
                 org: components["parameters"]["Gateway.Org"];
-                /** @description The contact id (bc_...) */
-                contact_id: string;
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": {
+                    return_url: string;
+                    cancel_url: string;
+                };
+            };
+        };
         responses: {
-            /** @description The removed contact */
-            200: {
+            /** @description The hosted card setup page */
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Gateway.BillingDeleted"];
+                    "application/json": components["schemas"]["Gateway.BillingSetupSession"];
                 };
             };
-            /** @description invalid_request or idempotency_key_required */
+            /** @description invalid_request, idempotency_key_required or bad_request (a URL outside the allow-list) */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -95011,59 +98089,15 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description not_found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description billing_unavailable */
-            503: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-        };
-    };
-    gateway_listBillingTaxIds: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                /** @description Your organization id (must be your login session's or your API key's organization) */
-                org: components["parameters"]["Gateway.Org"];
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Tax IDs */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Gateway.BillingTaxIdList"];
-                };
-            };
-            /** @description invalid_request */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description unauthorized */
-            401: {
+            /** @description billing_account_required, or the Idempotency-Key was used for a different request */
+            409: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description forbidden */
-            403: {
+            /** @description body_too_large (16 KiB) */
+            413: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -95078,7 +98112,7 @@ export interface operations {
             };
         };
     };
-    gateway_createBillingTaxId: {
+    gateway_setBillingDefaultPaymentMethod: {
         parameters: {
             query?: never;
             header: {
@@ -95094,22 +98128,21 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    type: string;
-                    value: string;
+                    session_id: string;
                 };
             };
         };
         responses: {
-            /** @description The new tax ID */
-            201: {
+            /** @description The default card */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Gateway.BillingTaxId"];
+                    "application/json": components["schemas"]["Gateway.BillingPaymentMethod"];
                 };
             };
-            /** @description invalid_request, idempotency_key_required, bad_request or rejected_by_stripe */
+            /** @description invalid_request, idempotency_key_required or bad_request */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -95130,15 +98163,15 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description conflict (tax ID limit, or the Idempotency-Key was used for a different request) */
-            409: {
+            /** @description not_found (no such card setup) */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description body_too_large (16 KiB) */
-            413: {
+            /** @description billing_account_required, setup_incomplete, setup_mismatch, setup_not_off_session, or the Idempotency-Key was used for a different request */
+            409: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -95153,33 +98186,28 @@ export interface operations {
             };
         };
     };
-    gateway_deleteBillingTaxId: {
+    gateway_getGenesisProSubscription: {
         parameters: {
             query?: never;
-            header: {
-                /** @description Stable key (8-128 letters, digits, - _ : or .); reuse it to replay instead of acting twice */
-                "Idempotency-Key": components["parameters"]["Gateway.IdempotencyKey"];
-            };
+            header?: never;
             path: {
                 /** @description Your organization id (must be your login session's or your API key's organization) */
                 org: components["parameters"]["Gateway.Org"];
-                /** @description The tax ID id (txi_...) */
-                tax_id: string;
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description The removed tax ID */
+            /** @description The subscription view */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Gateway.BillingDeleted"];
+                    "application/json": components["schemas"]["Gateway.GenesisProSubscription"];
                 };
             };
-            /** @description invalid_request or idempotency_key_required */
+            /** @description invalid_request */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -95193,20 +98221,13 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description forbidden (needs genesis.billing.manage) */
+            /** @description forbidden */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description not_found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
             /** @description billing_unavailable */
             503: {
                 headers: {
@@ -95216,28 +98237,52 @@ export interface operations {
             };
         };
     };
-    gateway_listBillingActivity: {
+    gateway_createGenesisProSubscription: {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description Stable key (8-128 letters, digits, - _ : or .); reuse it to replay instead of acting twice */
+                "Idempotency-Key": components["parameters"]["Gateway.IdempotencyKey"];
+            };
             path: {
                 /** @description Your organization id (must be your login session's or your API key's organization) */
                 org: components["parameters"]["Gateway.Org"];
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @constant */
+                    plan: "genesis_pro";
+                    /**
+                     * @description year only where the annual plan is switched on
+                     * @enum {string}
+                     */
+                    interval?: "month" | "year";
+                };
+            };
+        };
         responses: {
-            /** @description Activity, newest first */
+            /** @description An open subscription already exists (or the Idempotency-Key replayed) */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Gateway.BillingActivityList"];
+                    "application/json": components["schemas"]["Gateway.GenesisProSubscription"];
                 };
             };
-            /** @description invalid_request */
+            /** @description The new subscription */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.GenesisProSubscription"];
+                };
+            };
+            /** @description invalid_request, idempotency_key_required or bad_request */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -95251,13 +98296,34 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description forbidden */
+            /** @description payment_failed: the card on file was declined; nothing is left open */
+            402: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description forbidden (needs genesis.billing.manage) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description billing_account_required, payment_method_required, payment_action_required (finish the payment in the Console under Billing), environment_mismatch, or the Idempotency-Key was used for a different request */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description body_too_large (16 KiB) */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             /** @description billing_unavailable */
             503: {
                 headers: {
@@ -95670,6 +98736,65 @@ export interface operations {
             };
         };
     };
+    gateway_getBillingPricing: {
+        parameters: {
+            query?: never;
+            header?: {
+                "If-None-Match"?: string;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The catalog */
+            200: {
+                headers: {
+                    ETag?: string;
+                    "Cache-Control"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Gateway.BillingPricing"];
+                };
+            };
+            /** @description Not modified (the ETag matched) */
+            304: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description invalid_request (a query string) */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description not_found (public pricing is not switched on) */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description rate_limited */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description billing_unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     gateway_getCredits: {
         parameters: {
             query?: never;
@@ -110742,4 +113867,349 @@ export interface operations {
             };
         };
     };
+    agents_search: {
+        parameters: {
+            query: {
+                /** @description What to search for, 1 to 200 characters. */
+                q: string;
+                /** @description Most results to return, 1 to 20 (default 20). */
+                limit?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Matching public agents, best first */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Agents.AgentSearchResults"];
+                };
+            };
+            /** @description INVALID_QUERY (q or limit out of range) or INVALID_REQUEST (another query key */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description METHOD_NOT_ALLOWED (after a credential verifies; without one */
+            405: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description RATE_LIMITED */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description BAD_GATEWAY (the index answered outside its contract; nothing is passed through) */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description AGENT_INDEX_UNAVAILABLE or SERVICE_DISABLED */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    agents_sitemap: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Public agent ids */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Agents.AgentSitemap"];
+                };
+            };
+            /** @description INVALID_REQUEST (a query string or a body) */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description METHOD_NOT_ALLOWED (after a credential verifies; without one */
+            405: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description RATE_LIMITED */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description BAD_GATEWAY */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description AGENT_INDEX_UNAVAILABLE or SERVICE_DISABLED */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    one_getInstance: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Your One instance (or null) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["One.InstanceEnvelope"];
+                };
+            };
+            /** @description person_required (not a person signed in with genesis login) or one_sign_in_required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description instances_off */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    one_stopInstance: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Your One is halted */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["One.StopReport"];
+                };
+            };
+            /** @description person_required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description instances_off */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    one_resumeInstance: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Resume outcome */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["One.ResumeResult"];
+                };
+            };
+            /** @description person_required or one_sign_in_required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description instances_off */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    one_listWakeups: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Your wakes */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["One.WakeList"];
+                };
+            };
+            /** @description person_required or one_sign_in_required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description instances_off */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    one_createWakeup: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["One.CreateWakeRequest"];
+            };
+        };
+        responses: {
+            /** @description Wake set */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["One.Wake"];
+                };
+            };
+            /** @description invalid_request, wake_past or wake_empty */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description person_required or one_sign_in_required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description instances_off */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description wake_too_many (50 waiting) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    one_cancelWakeup: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Wake id: wk_ followed by a lowercase UUID v4 */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Cancelled */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description person_required or one_sign_in_required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description wake_not_found or instances_off */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description wake_not_pending */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
 }