@onesi/genesis 0.2.2 → 0.2.4

package/dist/genesis.openapi.json

@@ -1985,7 +1985,7 @@
           "path": "/v1/files",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "post": {
         "operationId": "foundry_uploadFile",
@@ -2037,7 +2037,7 @@
           "path": "/v1/files",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/files/{file_id}": {
@@ -2083,7 +2083,7 @@
           "path": "/v1/files/{file_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "delete": {
         "operationId": "foundry_deleteFile",
@@ -2127,7 +2127,7 @@
           "path": "/v1/files/{file_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/files/{file_id}/content": {
@@ -2174,7 +2174,7 @@
           "path": "/v1/files/{file_id}/content",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/providers": {
@@ -2209,7 +2209,7 @@
           "path": "/v1/fine_tuning/providers",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs": {
@@ -2264,7 +2264,7 @@
           "path": "/v1/fine_tuning/jobs",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "get": {
         "operationId": "foundry_listFineTuningJobs",
@@ -2297,7 +2297,7 @@
           "path": "/v1/fine_tuning/jobs",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs/{job_id}": {
@@ -2343,7 +2343,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "delete": {
         "operationId": "foundry_deleteFineTuningJob",
@@ -2387,7 +2387,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs/{job_id}/events": {
@@ -2433,7 +2433,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}/events",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs/{job_id}/cancel": {
@@ -2479,7 +2479,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}/cancel",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/jobs/{job_id}/checkpoints": {
@@ -2525,7 +2525,7 @@
           "path": "/v1/fine_tuning/jobs/{job_id}/checkpoints",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/models": {
@@ -2560,7 +2560,7 @@
           "path": "/v1/fine_tuning/models",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/fine_tuning/models/{model_id}": {
@@ -2606,7 +2606,7 @@
           "path": "/v1/fine_tuning/models/{model_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/batches": {
@@ -2652,7 +2652,7 @@
           "path": "/api/beta/batches",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/batches/{batch_id}": {
@@ -2699,7 +2699,7 @@
           "path": "/api/beta/batches/{batch_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/generation": {
@@ -2783,7 +2783,7 @@
             }
           }
         ],
-        "description": "Requires Foundry's `admin` (management) scope (openrouter_generations.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this route.",
+        "description": "Retained prompt and output for one of your own generations (`id`), scoped to your organization. Not billed. Foundry admits `foundry:gateway:invoke` or management (openrouter_generations.rs authenticate_invoke_or_management): a Console login session gets the delegated `foundry:gateway:invoke` child, and an organization API key needs the `foundry:invoke` permission. 404 when the id is not yours; 403 `content_not_retained` when Foundry kept no content for it, 410 `content_expired` once retention ends.",
         "x-genesis-service": "foundry",
         "x-upstream": {
           "base": "https://api.fdy.sh",
@@ -2791,7 +2791,7 @@
           "path": "/api/v1/generation/content",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/generation/feedback": {
@@ -2829,7 +2829,21 @@
             }
           }
         },
-        "description": "Requires Foundry's `admin` (management) scope (openrouter_generations.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this route.",
+        "parameters": [
+          {
+            "name": "Idempotency-Key",
+            "in": "header",
+            "required": true,
+            "description": "Stable key, 8-128 characters of A-Z a-z 0-9 - _ . :; Foundry refuses feedback without one (400). Reuse it to retry.",
+            "schema": {
+              "type": "string",
+              "minLength": 8,
+              "maxLength": 128,
+              "pattern": "^[A-Za-z0-9_.:-]{8,128}$"
+            }
+          }
+        ],
+        "description": "Record feedback on one of your own generations (`generation_id`, `category`, optional `comment` up to 1000 characters). Requires an `Idempotency-Key` (8-128 characters of A-Z a-z 0-9 - _ . :): a retry with the same key and body is answered as a success without recording twice, and the same key with a different body is a 409. Not billed. Foundry admits `foundry:gateway:invoke` or management (openrouter_generations.rs authenticate_invoke_or_management): a Console login session gets the delegated `foundry:gateway:invoke` child, and an organization API key needs the `foundry:invoke` permission.",
         "x-genesis-service": "foundry",
         "x-upstream": {
           "base": "https://api.fdy.sh",
@@ -2837,7 +2851,7 @@
           "path": "/api/v1/generation/feedback",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/activity": {
@@ -2873,7 +2887,7 @@
           "path": "/api/v1/activity",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/activity/export": {
@@ -2919,7 +2933,7 @@
           "path": "/api/v1/activity/export",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/analytics/meta": {
@@ -2955,7 +2969,7 @@
           "path": "/api/v1/analytics/meta",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/analytics/query": {
@@ -2993,7 +3007,7 @@
             }
           }
         },
-        "description": "Requires Foundry's `admin` (management) scope (openrouter_compatibility.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this family.",
+        "description": "Aggregate request-log analytics for your own organization (all projects and environments), served by Foundry's native reporting receiver (POST /v1/analytics/query). Read-only and not billed. The query body is bounded (64 KiB) and validated by Foundry, and the result is bound to the caller's organization. Works with a Console login session or an organization API key holding `foundry:read`; either way the gateway delegates a one-scope `foundry:reporting:read` child. gateway/src/foundry-reporting-read.ts.",
         "x-genesis-service": "foundry",
         "x-upstream": {
           "base": "https://api.fdy.sh",
@@ -3001,7 +3015,7 @@
           "path": "/api/v1/analytics/query",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/generations/{receipt_id}": {
@@ -4902,6 +4916,16 @@
             }
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/Foundry.ApiKeyCreateRequest"
+              }
+            }
+          }
+        },
         "x-genesis-service": "foundry",
         "x-upstream": {
           "base": "https://api.fdy.sh",
@@ -4980,7 +5004,7 @@
           "path": "/v1/provider-keys",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "post": {
         "operationId": "foundry_createProviderKey",
@@ -5023,7 +5047,7 @@
           "path": "/v1/provider-keys",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/provider-keys/{provider_id}": {
@@ -5079,7 +5103,7 @@
           "path": "/v1/provider-keys/{provider_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       },
       "delete": {
         "operationId": "foundry_deleteProviderKey",
@@ -5123,7 +5147,7 @@
           "path": "/v1/provider-keys/{provider_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/provider-credential-policies": {
@@ -5158,7 +5182,7 @@
           "path": "/v1/provider-credential-policies",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/provider-credential-policies/{provider_id}": {
@@ -5214,7 +5238,7 @@
           "path": "/v1/provider-credential-policies/{provider_id}",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/billing/profile": {
@@ -5418,7 +5442,7 @@
         "tags": [
           "foundry"
         ],
-        "description": "Original Console human only (foundry:reporting:read, Sandbox). Read-only, newest first; the gateway rejects any query parameter other than the ones below and returns only the listed fields. gateway/src/foundry-reporting-read.ts.",
+        "description": "Console login session or an organization API key holding `foundry:read` (a one-scope `foundry:reporting:read` child, Sandbox). Read-only, newest first; the gateway rejects any query parameter other than the ones below and returns only the listed fields. gateway/src/foundry-reporting-read.ts.",
         "parameters": [
           {
             "name": "start",
@@ -5513,7 +5537,7 @@
         "tags": [
           "foundry"
         ],
-        "description": "Original Console human only (foundry:reporting:read, Sandbox). Configuration metadata only: provider ids, enabled flags, credential modes and timestamps. No secret material, and no health or execution verification. Takes no query. gateway/src/foundry-reporting-read.ts.",
+        "description": "Console login session or an organization API key holding `foundry:read` (a one-scope `foundry:reporting:read` child, Sandbox). Configuration metadata only: provider ids, enabled flags, credential modes and timestamps. No secret material, and no health or execution verification. Takes no query. gateway/src/foundry-reporting-read.ts.",
         "responses": {
           "200": {
             "description": "Provider credential configuration summary",
@@ -64496,7 +64520,14 @@
             "description": "The capability has no server-side executor"
           },
           "503": {
-            "description": "The native executor is not available yet, or the facade is unavailable; retry with the same key"
+            "description": "A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Rigs.SnapshotUnavailable"
+                }
+              }
+            }
           }
         },
         "tags": [
@@ -64873,7 +64904,14 @@
             "description": "The capability has no server-side executor"
           },
           "503": {
-            "description": "The native executor is not available yet, or the facade is unavailable; retry with the same key"
+            "description": "A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Panes.SnapshotUnavailable"
+                }
+              }
+            }
           }
         },
         "tags": [
@@ -65297,7 +65335,14 @@
             "description": "The capability has no server-side executor"
           },
           "503": {
-            "description": "The native executor is not available yet, or the facade is unavailable; retry with the same key"
+            "description": "A native `snapshot` is `SNAPSHOT_UNAVAILABLE` (reason `no_omega_executor`): Omega has no snapshot executor yet, so the facade refuses it before contacting Omega. Nothing is billed or journaled, and a retry gets the same answer. Any other 503 means the native executor for the capability is not available yet or the facade is unavailable; retry with the same key.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Shells.SnapshotUnavailable"
+                }
+              }
+            }
           }
         },
         "tags": [
@@ -82864,7 +82909,7 @@
       "post": {
         "operationId": "boxes_mail_addresses_create",
         "summary": "Reserve a mail address on a verified custom domain",
-        "description": "Requires scope boxes:admin:domains. domainId is required in the body (422 otherwise). The domain must be verified (or, with the resend provider, ready for sending and receiving) and the local part must not already be reserved.",
+        "description": "Requires the boxes:admin key scope. domainId is required in the body (422 otherwise). The domain must be verified (or, with the resend provider, ready for sending and receiving) and the local part must not already be reserved.",
         "requestBody": {
           "required": true,
           "content": {
@@ -82983,7 +83028,7 @@
       "post": {
         "operationId": "boxes_mail_domains_addresses_create",
         "summary": "Reserve a mail address on a specific domain",
-        "description": "Requires scope boxes:admin:domains. Same behavior as POST /v1/mail/addresses but the domain comes from the path; any domainId in the body is ignored.",
+        "description": "Requires the boxes:admin key scope. Same behavior as POST /v1/mail/addresses but the domain comes from the path; any domainId in the body is ignored.",
         "parameters": [
           {
             "name": "domain_id",
@@ -83064,7 +83109,7 @@
       "post": {
         "operationId": "boxes_mail_domains_create",
         "summary": "Register a custom mail domain",
-        "description": "Requires scope boxes:admin:domains. Returns the DNS records to publish before calling verify.",
+        "description": "Requires the boxes:admin key scope. Returns the DNS records to publish before calling verify.",
         "requestBody": {
           "required": true,
           "content": {
@@ -83129,7 +83174,7 @@
       "get": {
         "operationId": "boxes_mail_domains_list",
         "summary": "List custom mail domains",
-        "description": "Requires scope boxes:admin:domains.",
+        "description": "Requires the boxes:admin key scope.",
         "responses": {
           "200": {
             "description": "Domains",
@@ -83180,7 +83225,7 @@
       "post": {
         "operationId": "boxes_mail_domains_verify",
         "summary": "Check DNS and verify a mail domain",
-        "description": "Requires scope boxes:admin:domains. A domain becomes verified only when every expected record passes. The meta block is present only with the built-in verifier, not with the resend provider.",
+        "description": "Requires the boxes:admin key scope. A domain becomes verified only when every expected record passes. The meta block is present only with the built-in verifier, not with the resend provider.",
         "parameters": [
           {
             "name": "domain_id",
@@ -97719,24 +97764,30 @@
       "Foundry.ApiKeyCreateRequest": {
         "type": "object",
         "required": [
-          "api_key"
+          "label",
+          "scopes"
         ],
+        "description": "Body for creating or rotating a Sandbox prepaid native key through Genesis (Console key broker, gateway/src/foundry-key-write.ts). The secret is generated by Foundry and returned once; it is never sent by the caller.",
         "properties": {
-          "api_key": {
-            "type": "string",
-            "writeOnly": true
-          },
           "label": {
             "type": [
               "string",
               "null"
-            ]
+            ],
+            "maxLength": 120,
+            "description": "Display label (UTF-8, at most 120 bytes, no control characters), or null."
           },
           "scopes": {
             "type": "array",
+            "minItems": 1,
+            "maxItems": 1,
             "items": {
-              "type": "string"
-            }
+              "type": "string",
+              "enum": [
+                "foundry:gateway:invoke:prepaid"
+              ]
+            },
+            "description": "Exactly [\"foundry:gateway:invoke:prepaid\"]."
           }
         },
         "additionalProperties": false
@@ -129185,6 +129236,54 @@
           }
         }
       },
+      "Rigs.SnapshotUnavailable": {
+        "type": "object",
+        "description": "The 503 answer to a native `snapshot` while Omega has no snapshot executor.",
+        "required": [
+          "error"
+        ],
+        "properties": {
+          "error": {
+            "type": "object",
+            "required": [
+              "type",
+              "code",
+              "reason",
+              "message"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "const": "service_unavailable"
+              },
+              "code": {
+                "type": "string",
+                "const": "SNAPSHOT_UNAVAILABLE"
+              },
+              "reason": {
+                "type": "string",
+                "const": "no_omega_executor"
+              },
+              "message": {
+                "type": "string",
+                "description": "Snapshots are not available for Rigs yet."
+              },
+              "request_id": {
+                "type": "string",
+                "description": "The gateway request id"
+              },
+              "docs_url": {
+                "type": "string",
+                "format": "uri"
+              },
+              "layer": {
+                "type": "string",
+                "description": "The service that refused (rigs)"
+              }
+            }
+          }
+        }
+      },
       "Rigs.ActionResponse": {
         "type": "object",
         "required": [
@@ -129448,6 +129547,54 @@
           }
         }
       },
+      "Panes.SnapshotUnavailable": {
+        "type": "object",
+        "description": "The 503 answer to a native `snapshot` while Omega has no snapshot executor.",
+        "required": [
+          "error"
+        ],
+        "properties": {
+          "error": {
+            "type": "object",
+            "required": [
+              "type",
+              "code",
+              "reason",
+              "message"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "const": "service_unavailable"
+              },
+              "code": {
+                "type": "string",
+                "const": "SNAPSHOT_UNAVAILABLE"
+              },
+              "reason": {
+                "type": "string",
+                "const": "no_omega_executor"
+              },
+              "message": {
+                "type": "string",
+                "description": "Snapshots are not available for Panes yet."
+              },
+              "request_id": {
+                "type": "string",
+                "description": "The gateway request id"
+              },
+              "docs_url": {
+                "type": "string",
+                "format": "uri"
+              },
+              "layer": {
+                "type": "string",
+                "description": "The service that refused (panes)"
+              }
+            }
+          }
+        }
+      },
       "Panes.ActionResponse": {
         "type": "object",
         "required": [
@@ -129737,6 +129884,54 @@
           }
         }
       },
+      "Shells.SnapshotUnavailable": {
+        "type": "object",
+        "description": "The 503 answer to a native `snapshot` while Omega has no snapshot executor.",
+        "required": [
+          "error"
+        ],
+        "properties": {
+          "error": {
+            "type": "object",
+            "required": [
+              "type",
+              "code",
+              "reason",
+              "message"
+            ],
+            "properties": {
+              "type": {
+                "type": "string",
+                "const": "service_unavailable"
+              },
+              "code": {
+                "type": "string",
+                "const": "SNAPSHOT_UNAVAILABLE"
+              },
+              "reason": {
+                "type": "string",
+                "const": "no_omega_executor"
+              },
+              "message": {
+                "type": "string",
+                "description": "Snapshots are not available for Shells yet."
+              },
+              "request_id": {
+                "type": "string",
+                "description": "The gateway request id"
+              },
+              "docs_url": {
+                "type": "string",
+                "format": "uri"
+              },
+              "layer": {
+                "type": "string",
+                "description": "The service that refused (shells)"
+              }
+            }
+          }
+        }
+      },
       "Shells.ActionResponse": {
         "type": "object",
         "required": [

package/dist/idempotency.js

@@ -2,7 +2,7 @@ import { GenesisError } from './errors.js';
 import { operationTable } from './generated/operations.js';
 const REQUIRED = /^[\x21-\x7e]{8,128}$/;
 const OPTIONAL = /^[\x21-\x7e]{1,256}$/;
-/** Auto's Idempotency-Key grammar (l1felabs/auto src/operating.ts IDEMPOTENCY_KEY). */
+/** Auto's Idempotency-Key grammar (l1felabs/auto src/operating.ts IDEMPOTENCY_KEY); Foundry feedback uses the same. */
 const AUTO_KEY = /^[A-Za-z0-9_.:-]{8,128}$/;
 /** The Idempotency-Key header an operation's spec declares. A required key is refused locally when missing
  * or malformed, before any request is sent; reuse the same key to replay instead of acting twice. */
@@ -25,6 +25,11 @@ export function idempotencyHeaders(operationId, key) {
         throw new GenesisError({ status: 0, type: 'invalid_request', operationId,
             message: `${operationId} idempotency key must be 8-128 characters of A-Z a-z 0-9 _ . : -` });
     }
+    // Foundry generation feedback takes [A-Za-z0-9_.:-] only (openrouter_generations.rs validate_feedback).
+    if (operationId === 'foundry_submitGenerationFeedback' && !AUTO_KEY.test(key)) {
+        throw new GenesisError({ status: 0, type: 'invalid_request', operationId,
+            message: `${operationId} idempotency key must be 8-128 characters of A-Z a-z 0-9 _ . : -` });
+    }
     return { 'idempotency-key': key };
 }
 /** The If-Match header an operation's spec requires (Auto's optimistic concurrency): the resource `version`

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { iamDirectoryOperations, isIamDirectoryOperation, iamDirectoryFailure }
 export { iamModule } from './iam.js';
 export { GenesisError, errorCatalog, errorBody, errorToken, errorOutcome } from './errors.js';
 export { ERROR_BODY_LIMITS, cardNumber, redactErrorBody, redactErrorText, secretField } from './redact.js';
-export { requireSecureUrl } from './urls.js';
+export { requireSecureUrl, redactUserinfo, stripUserinfo } from './urls.js';
 export { operationTable, services, type OperationId } from './generated/operations.js';
 export type { OperationInput, OperationOutput, OperationMeta, ServiceMeta } from './types.js';
 export type { paths, operations, components } from './generated/schema.js';

package/dist/index.js

@@ -4,7 +4,7 @@ export { iamDirectoryOperations, isIamDirectoryOperation, iamDirectoryFailure }
 export { iamModule } from './iam.js';
 export { GenesisError, errorCatalog, errorBody, errorToken, errorOutcome } from './errors.js';
 export { ERROR_BODY_LIMITS, cardNumber, redactErrorBody, redactErrorText, secretField } from './redact.js';
-export { requireSecureUrl } from './urls.js';
+export { requireSecureUrl, redactUserinfo, stripUserinfo } from './urls.js';
 export { operationTable, services } from './generated/operations.js';
 export { hivesUploadBody, MAX_WASM_BYTES } from './hives-upload.js';
 export { validateHivesInvocation, hivesFunctionResponseHeaders, HivesOperationError, MAX_FUNCTION_BODY_BYTES, MAX_FUNCTION_JSON_BYTES } from './hives-functions.js';