@onesi/genesis 0.2.2 → 0.2.4

package/dist/generated/schema.d.ts

@@ -1023,7 +1023,7 @@ export interface paths {
         };
         /**
          * Get retained generation content
-         * @description Requires Foundry's `admin` (management) scope (openrouter_generations.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this route.
+         * @description Retained prompt and output for one of your own generations (`id`), scoped to your organization. Not billed. Foundry admits `foundry:gateway:invoke` or management (openrouter_generations.rs authenticate_invoke_or_management): a Console login session gets the delegated `foundry:gateway:invoke` child, and an organization API key needs the `foundry:invoke` permission. 404 when the id is not yours; 403 `content_not_retained` when Foundry kept no content for it, 410 `content_expired` once retention ends.
          */
         get: operations["foundry_getGenerationContent"];
         put?: never;
@@ -1045,7 +1045,7 @@ export interface paths {
         put?: never;
         /**
          * Submit idempotent generation feedback
-         * @description Requires Foundry's `admin` (management) scope (openrouter_generations.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this route.
+         * @description Record feedback on one of your own generations (`generation_id`, `category`, optional `comment` up to 1000 characters). Requires an `Idempotency-Key` (8-128 characters of A-Z a-z 0-9 - _ . :): a retry with the same key and body is answered as a success without recording twice, and the same key with a different body is a 409. Not billed. Foundry admits `foundry:gateway:invoke` or management (openrouter_generations.rs authenticate_invoke_or_management): a Console login session gets the delegated `foundry:gateway:invoke` child, and an organization API key needs the `foundry:invoke` permission.
          */
         post: operations["foundry_submitGenerationFeedback"];
         delete?: never;
@@ -1125,7 +1125,7 @@ export interface paths {
         put?: never;
         /**
          * Query tenant analytics
-         * @description Requires Foundry's `admin` (management) scope (openrouter_compatibility.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this family.
+         * @description Aggregate request-log analytics for your own organization (all projects and environments), served by Foundry's native reporting receiver (POST /v1/analytics/query). Read-only and not billed. The query body is bounded (64 KiB) and validated by Foundry, and the result is bound to the caller's organization. Works with a Console login session or an organization API key holding `foundry:read`; either way the gateway delegates a one-scope `foundry:reporting:read` child. gateway/src/foundry-reporting-read.ts.
          */
         post: operations["foundry_queryAnalytics"];
         delete?: never;
@@ -1974,7 +1974,7 @@ export interface paths {
         };
         /**
          * Read your organization's inference request logs
-         * @description Original Console human only (foundry:reporting:read, Sandbox). Read-only, newest first; the gateway rejects any query parameter other than the ones below and returns only the listed fields. gateway/src/foundry-reporting-read.ts.
+         * @description Console login session or an organization API key holding `foundry:read` (a one-scope `foundry:reporting:read` child, Sandbox). Read-only, newest first; the gateway rejects any query parameter other than the ones below and returns only the listed fields. gateway/src/foundry-reporting-read.ts.
          */
         get: operations["foundry_listRequestLogs"];
         put?: never;
@@ -1994,7 +1994,7 @@ export interface paths {
         };
         /**
          * Summarise your provider credentials and credential policies
-         * @description Original Console human only (foundry:reporting:read, Sandbox). Configuration metadata only: provider ids, enabled flags, credential modes and timestamps. No secret material, and no health or execution verification. Takes no query. gateway/src/foundry-reporting-read.ts.
+         * @description Console login session or an organization API key holding `foundry:read` (a one-scope `foundry:reporting:read` child, Sandbox). Configuration metadata only: provider ids, enabled flags, credential modes and timestamps. No secret material, and no health or execution verification. Takes no query. gateway/src/foundry-reporting-read.ts.
          */
         get: operations["foundry_getProviderCredentialSummary"];
         put?: never;
@@ -20652,7 +20652,7 @@ export interface paths {
         put?: never;
         /**
          * Reserve a mail address on a verified custom domain
-         * @description Requires scope boxes:admin:domains. domainId is required in the body (422 otherwise). The domain must be verified (or, with the resend provider, ready for sending and receiving) and the local part must not already be reserved.
+         * @description Requires the boxes:admin key scope. domainId is required in the body (422 otherwise). The domain must be verified (or, with the resend provider, ready for sending and receiving) and the local part must not already be reserved.
          */
         post: operations["boxes_mail_addresses_create"];
         delete?: never;
@@ -20672,7 +20672,7 @@ export interface paths {
         put?: never;
         /**
          * Reserve a mail address on a specific domain
-         * @description Requires scope boxes:admin:domains. Same behavior as POST /v1/mail/addresses but the domain comes from the path; any domainId in the body is ignored.
+         * @description Requires the boxes:admin key scope. Same behavior as POST /v1/mail/addresses but the domain comes from the path; any domainId in the body is ignored.
          */
         post: operations["boxes_mail_domains_addresses_create"];
         delete?: never;
@@ -20690,13 +20690,13 @@ export interface paths {
         };
         /**
          * List custom mail domains
-         * @description Requires scope boxes:admin:domains.
+         * @description Requires the boxes:admin key scope.
          */
         get: operations["boxes_mail_domains_list"];
         put?: never;
         /**
          * Register a custom mail domain
-         * @description Requires scope boxes:admin:domains. Returns the DNS records to publish before calling verify.
+         * @description Requires the boxes:admin key scope. Returns the DNS records to publish before calling verify.
          */
         post: operations["boxes_mail_domains_create"];
         delete?: never;
@@ -20716,7 +20716,7 @@ export interface paths {
         put?: never;
         /**
          * Check DNS and verify a mail domain
-         * @description Requires scope boxes:admin:domains. A domain becomes verified only when every expected record passes. The meta block is present only with the built-in verifier, not with the resend provider.
+         * @description Requires the boxes:admin key scope. A domain becomes verified only when every expected record passes. The meta block is present only with the built-in verifier, not with the resend provider.
          */
         post: operations["boxes_mail_domains_verify"];
         delete?: never;
@@ -23928,10 +23928,12 @@ export interface components {
             /** @description Retired keys that still verify receipts signed before a rotation. Empty when no rotation has happened. */
             retired: components["schemas"]["Foundry.ReceiptVerificationKey"][];
         };
+        /** @description Body for creating or rotating a Sandbox prepaid native key through Genesis (Console key broker, gateway/src/foundry-key-write.ts). The secret is generated by Foundry and returned once; it is never sent by the caller. */
         "Foundry.ApiKeyCreateRequest": {
-            api_key: string;
-            label?: string | null;
-            scopes?: string[];
+            /** @description Display label (UTF-8, at most 120 bytes, no control characters), or null. */
+            label: string | null;
+            /** @description Exactly ["foundry:gateway:invoke:prepaid"]. */
+            scopes: "foundry:gateway:invoke:prepaid"[];
         };
         "Foundry.ProviderKeyRequest": {
             provider_id: string;
@@ -33608,6 +33610,25 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
+        /** @description The 503 answer to a native `snapshot` while Omega has no snapshot executor. */
+        "Rigs.SnapshotUnavailable": {
+            error: {
+                /** @constant */
+                type: "service_unavailable";
+                /** @constant */
+                code: "SNAPSHOT_UNAVAILABLE";
+                /** @constant */
+                reason: "no_omega_executor";
+                /** @description Snapshots are not available for Rigs yet. */
+                message: string;
+                /** @description The gateway request id */
+                request_id?: string;
+                /** Format: uri */
+                docs_url?: string;
+                /** @description The service that refused (rigs) */
+                layer?: string;
+            };
+        };
         "Rigs.ActionResponse": {
             ok: boolean;
             product: string;
@@ -33699,6 +33720,25 @@ export interface components {
                 bridge?: boolean;
             };
         };
+        /** @description The 503 answer to a native `snapshot` while Omega has no snapshot executor. */
+        "Panes.SnapshotUnavailable": {
+            error: {
+                /** @constant */
+                type: "service_unavailable";
+                /** @constant */
+                code: "SNAPSHOT_UNAVAILABLE";
+                /** @constant */
+                reason: "no_omega_executor";
+                /** @description Snapshots are not available for Panes yet. */
+                message: string;
+                /** @description The gateway request id */
+                request_id?: string;
+                /** Format: uri */
+                docs_url?: string;
+                /** @description The service that refused (panes) */
+                layer?: string;
+            };
+        };
         "Panes.ActionResponse": {
             ok: boolean;
             product: string;
@@ -33817,6 +33857,25 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
+        /** @description The 503 answer to a native `snapshot` while Omega has no snapshot executor. */
+        "Shells.SnapshotUnavailable": {
+            error: {
+                /** @constant */
+                type: "service_unavailable";
+                /** @constant */
+                code: "SNAPSHOT_UNAVAILABLE";
+                /** @constant */
+                reason: "no_omega_executor";
+                /** @description Snapshots are not available for Shells yet. */
+                message: string;
+                /** @description The gateway request id */
+                request_id?: string;
+                /** Format: uri */
+                docs_url?: string;
+                /** @description The service that refused (shells) */
+                layer?: string;
+            };
+        };
         "Shells.ActionResponse": {
             ok: boolean;
             product: string;
@@ -41453,7 +41512,10 @@ export interface operations {
     foundry_submitGenerationFeedback: {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description Stable key, 8-128 characters of A-Z a-z 0-9 - _ . :; Foundry refuses feedback without one (400). Reuse it to retry. */
+                "Idempotency-Key": string;
+            };
             path?: never;
             cookie?: never;
         };
@@ -42469,7 +42531,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Foundry.ApiKeyCreateRequest"];
+            };
+        };
         responses: {
             /** @description Successful response. */
             200: {
@@ -81667,12 +81733,14 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The native executor is not available yet, or the facade is unavailable; retry with the same key */
+            /** @description A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key. */
             503: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    "application/json": components["schemas"]["Rigs.SnapshotUnavailable"];
+                };
             };
         };
     };
@@ -82033,12 +82101,14 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The native executor is not available yet, or the facade is unavailable; retry with the same key */
+            /** @description A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key. */
             503: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    "application/json": components["schemas"]["Panes.SnapshotUnavailable"];
+                };
             };
         };
     };
@@ -82428,12 +82498,14 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The native executor is not available yet, or the facade is unavailable; retry with the same key */
+            /** @description A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key. */
             503: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    "application/json": components["schemas"]["Shells.SnapshotUnavailable"];
+                };
             };
         };
     };

package/dist/genesis.d.ts

@@ -8917,7 +8917,7 @@ export declare class Genesis extends GenesisClient {
             content: (id: string) => Promise<{
                 [key: string]: unknown;
             }>;
-            feedback: (body: In<"foundry_submitGenerationFeedback">["body"]) => Promise<{
+            feedback: (body: In<"foundry_submitGenerationFeedback">["body"], idempotencyKey: string) => Promise<{
                 [key: string]: unknown;
             }>;
         };