@onesi/genesis 0.2.3 → 0.2.4

package/README.md

@@ -3,7 +3,7 @@
 The TypeScript SDK for OneOS. One typed client for every Genesis service, through the Genesis API at `https://os.one.ml/api`.
 
 ```sh
-npm install @onesi/genesis@0.2.3
+npm install @onesi/genesis@0.2.4
 ```
 
 ```ts

package/dist/boxes.d.ts

@@ -3,7 +3,7 @@ import type { OperationInput as In } from './types.js';
 /** Boxes (mail, docs, files, sheets, slides, calendar, identity, MCP): one method per operation, grouped as the
  * Boxes resource tree. Path parameters come first, then the body, then query options, then an optional
  * idempotency key on the operations that take one. Operations that stream or download bytes return the raw Response;
- * uploads take a FormData body. GET needs boxes:read, everything else boxes:write. Generated from the Boxes spec. */
+ * uploads take a FormData body. GET needs boxes:read, everything else boxes:write; mail domain administration needs boxes:admin. Generated from the Boxes spec. */
 export declare function boxesModule(client: GenesisClient): {
     mail: {
         addresses: {

package/dist/boxes.js

@@ -2,7 +2,7 @@ import { idempotencyHeaders } from './idempotency.js';
 /** Boxes (mail, docs, files, sheets, slides, calendar, identity, MCP): one method per operation, grouped as the
  * Boxes resource tree. Path parameters come first, then the body, then query options, then an optional
  * idempotency key on the operations that take one. Operations that stream or download bytes return the raw Response;
- * uploads take a FormData body. GET needs boxes:read, everything else boxes:write. Generated from the Boxes spec. */
+ * uploads take a FormData body. GET needs boxes:read, everything else boxes:write; mail domain administration needs boxes:admin. Generated from the Boxes spec. */
 export function boxesModule(client) {
     return {
         mail: {

package/dist/client.d.ts

@@ -25,8 +25,15 @@ export interface GenesisOptions {
     headers?: Record<string, string>;
     userAgent?: string;
 }
+/**
+ * Redact URL userinfo from an error's message, stack and cause chain (bounded). If the error is frozen or any of
+ * those properties cannot be rewritten, return a new sanitized Error instead of the original.
+ */
+export declare function scrubError(e: unknown, depth?: number): unknown;
 export declare class GenesisClient {
-    readonly baseUrl: string;
+    /** The configured gateway root, kept without userinfo so it is safe to log or print. */
+    get baseUrl(): string;
+    private readonly root;
     readonly routing: 'gateway' | 'direct';
     private readonly opts;
     private readonly fetchImpl;

package/dist/client.js

@@ -8,7 +8,7 @@ import { blindsOperationKey, blindsOwnerTransport, isBlindsOwnerOperation } from
 import { isHivesObjectUpload, hivesObjectBody, hivesContentType, isHivesResourceOperation, resourceError, resourceErrorFromResponse } from './hives-resources-transport.js';
 import { operationTable, services } from './generated/operations.js';
 import { GenesisError } from './errors.js';
-import { requireSecureUrl } from './urls.js';
+import { requireSecureUrl, redactUserinfo, stripUserinfo } from './urls.js';
 import { iamDirectoryFailure, isIamDirectoryOperation } from './iam-directory.js';
 import { validateHivesInvocation, hivesFunctionResponseHeaders, hivesFunctionMetadata, hivesOperationError } from './hives-functions.js';
 import { validateHivesEnvironment, validateHivesEnvironmentNames, hivesEnvironmentSetNames, hivesEnvironmentMetadata, hivesEnvironmentReveal } from './hives-environment.js';
@@ -21,20 +21,57 @@ const ENDLESS_STREAMS = {
     hives_stream_logs: 'genesis.hives.logs.stream() or genesis.hives.logs.window()',
     hives_stream_deployment_logs: 'hivesSseWindow(await genesis.raw(...))',
 };
+const SCRUB_DEPTH = 5;
+/**
+ * Redact URL userinfo from an error's message, stack and cause chain (bounded). If the error is frozen or any of
+ * those properties cannot be rewritten, return a new sanitized Error instead of the original.
+ */
+export function scrubError(e, depth = 0) {
+    if (typeof e === 'string')
+        return redactUserinfo(e);
+    if (!(e instanceof Error))
+        return e;
+    if (depth >= SCRUB_DEPTH)
+        return undefined;
+    const message = redactUserinfo(String(e.message));
+    const stack = typeof e.stack === 'string' ? redactUserinfo(e.stack) : e.stack;
+    const hasCause = 'cause' in e;
+    const cause = hasCause ? scrubError(e.cause, depth + 1) : undefined;
+    if (message === e.message && stack === e.stack && cause === e.cause)
+        return e;
+    try {
+        if (Object.isFrozen(e))
+            throw e;
+        Object.defineProperty(e, 'message', { value: message, writable: true, configurable: true, enumerable: false });
+        Object.defineProperty(e, 'stack', { value: stack, writable: true, configurable: true, enumerable: false });
+        if (hasCause)
+            Object.defineProperty(e, 'cause', { value: cause, writable: true, configurable: true, enumerable: false });
+        if (e.message === message && e.stack === stack && (!hasCause || e.cause === cause))
+            return e;
+    }
+    catch { /* fall through to a fresh error */ }
+    const fresh = new (e instanceof TypeError ? TypeError : Error)(message, hasCause ? { cause } : undefined);
+    fresh.name = redactUserinfo(String(e.name));
+    fresh.stack = stack;
+    return fresh;
+}
 export class GenesisClient {
-    baseUrl;
+    /** The configured gateway root, kept without userinfo so it is safe to log or print. */
+    get baseUrl() { return stripUserinfo(this.root); }
+    root;
     routing;
     opts;
     fetchImpl;
     get contextFetch() { return this.fetchImpl; }
     constructor(opts = {}) {
         this.opts = opts;
-        this.baseUrl = requireSecureUrl(opts.baseUrl ?? env.GENESIS_BASE_URL ?? DEFAULT_BASE_URL, 'baseUrl').replace(/\/+$/, '');
+        this.root = requireSecureUrl(opts.baseUrl ?? env.GENESIS_BASE_URL ?? DEFAULT_BASE_URL, 'baseUrl').replace(/\/+$/, '');
         this.routing = opts.routing ?? (env.GENESIS_ROUTING === 'direct' ? 'direct' : 'gateway');
         const f = opts.fetch ?? globalThis.fetch;
         if (!f)
             throw new Error('No fetch available; pass options.fetch');
-        this.fetchImpl = f.bind(globalThis);
+        // fetch errors can quote the request URL (and its userinfo); scrub them before they surface.
+        this.fetchImpl = ((input, init) => f.call(globalThis, input, init).catch((e) => { throw scrubError(e); }));
     }
     static operations = operationTable;
     static services = services;
@@ -68,7 +105,7 @@ export class GenesisClient {
             p = fill(op.upstream.path);
         }
         else {
-            base = this.baseUrl;
+            base = this.root;
             p = fill(op.path);
         }
         const qs = new URLSearchParams();
@@ -189,7 +226,7 @@ export class GenesisClient {
         const url = this.url(operationId, input);
         const headers = {
             accept: 'application/json',
-            'user-agent': this.opts.userAgent ?? '@onesi/genesis/0.2.3',
+            'user-agent': this.opts.userAgent ?? '@onesi/genesis/0.2.4',
             ...this.opts.headers, ...init.headers,
         };
         if (op.service === 'blinds' && !['GET', 'HEAD', 'OPTIONS'].includes(op.method))

package/dist/errors.d.ts

@@ -1,3 +1,7 @@
+/** An error body is read to at most this many bytes, before any parsing or redaction; the rest is dropped. */
+export declare const ERROR_BODY_READ_LIMIT: number;
+/** Read at most `limit` bytes of a response body as text, cancelling the stream once the limit is reached. */
+export declare function readCappedText(res: Response, limit?: number): Promise<string>;
 /** Normalized error for every Genesis service (gateway `{error:{type,message}}`, IAM `{error,error_description}`, Relays `{error}`, Foundry/OpenAI shape). */
 export declare class GenesisError extends Error {
     readonly status: number;

package/dist/errors.js

@@ -1,4 +1,33 @@
 import { authorizationCode, redactErrorBody } from './redact.js';
+/** An error body is read to at most this many bytes, before any parsing or redaction; the rest is dropped. */
+export const ERROR_BODY_READ_LIMIT = 64 * 1024;
+/** Read at most `limit` bytes of a response body as text, cancelling the stream once the limit is reached. */
+export async function readCappedText(res, limit = ERROR_BODY_READ_LIMIT) {
+    const reader = res.body?.getReader();
+    if (!reader)
+        return (await res.text()).slice(0, limit);
+    const decoder = new TextDecoder();
+    let text = '';
+    let bytes = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            const room = limit - bytes;
+            text += decoder.decode(value.byteLength > room ? value.subarray(0, room) : value, { stream: true });
+            bytes += Math.min(value.byteLength, room);
+            if (bytes >= limit) {
+                void reader.cancel().catch(() => { });
+                break;
+            }
+        }
+        return text + decoder.decode();
+    }
+    finally {
+        reader.releaseLock?.();
+    }
+}
 /** Normalized error for every Genesis service (gateway `{error:{type,message}}`, IAM `{error,error_description}`, Relays `{error}`, Foundry/OpenAI shape). */
 export class GenesisError extends Error {
     status;
@@ -16,7 +45,7 @@ export class GenesisError extends Error {
         this.body = init.body;
     }
     static async fromResponse(res, operationId) {
-        const text = await res.text().catch(() => '');
+        const text = await readCappedText(res).catch(() => '');
         let body = text;
         try {
             body = text ? JSON.parse(text) : undefined;

package/dist/foundry.d.ts

@@ -266,7 +266,8 @@ export declare function foundryModule(client: GenesisClient): {
             [key: string]: unknown;
         }>;
     };
-    /** OpenRouter-style generation lookup by request id; content and feedback need Foundry `admin` (refused today). */
+    /** OpenRouter-style generation lookup by request id, retained content and feedback for your own generations (not billed).
+     * Feedback requires an idempotency key (8-128 characters of A-Z a-z 0-9 _ . : -); reuse it to retry. */
     generation: {
         get: (id: string) => Promise<{
             data: {
@@ -286,7 +287,7 @@ export declare function foundryModule(client: GenesisClient): {
         content: (id: string) => Promise<{
             [key: string]: unknown;
         }>;
-        feedback: (body: In<"foundry_submitGenerationFeedback">["body"]) => Promise<{
+        feedback: (body: In<"foundry_submitGenerationFeedback">["body"], idempotencyKey: string) => Promise<{
             [key: string]: unknown;
         }>;
     };

package/dist/foundry.js

@@ -85,11 +85,12 @@ export function foundryModule(client) {
             status: (workload_id) => client.request('foundry_getWorkloadStatus', { workload_id }),
             terminate: (workload_id) => client.request('foundry_terminateWorkload', { workload_id }),
         },
-        /** OpenRouter-style generation lookup by request id; content and feedback need Foundry `admin` (refused today). */
+        /** OpenRouter-style generation lookup by request id, retained content and feedback for your own generations (not billed).
+         * Feedback requires an idempotency key (8-128 characters of A-Z a-z 0-9 _ . : -); reuse it to retry. */
         generation: {
             get: (id) => client.request('foundry_getGeneration', { id }),
             content: (id) => client.request('foundry_getGenerationContent', { id }),
-            feedback: (body) => client.request('foundry_submitGenerationFeedback', { body }),
+            feedback: async (body, idempotencyKey) => client.request('foundry_submitGenerationFeedback', { body }, { headers: idempotencyHeaders('foundry_submitGenerationFeedback', idempotencyKey) }),
         },
         batches: {
             create: (body) => client.request('foundry_createBatch', { body }),

package/dist/generated/operations.js

@@ -2995,7 +2995,7 @@ export const operationTable = {
             "method": "GET",
             "path": "/api/v1/generation/content"
         },
-        "mcp": false,
+        "mcp": true,
         "internal": false,
         "public": false,
         "pathParams": [],
@@ -3026,13 +3026,14 @@ export const operationTable = {
             "method": "POST",
             "path": "/api/v1/generation/feedback"
         },
-        "mcp": false,
+        "mcp": true,
         "internal": false,
         "public": false,
         "pathParams": [],
         "queryParams": [],
         "hasBody": true,
         "requestContentType": "application/json",
+        "idempotencyKey": "required",
         "inputSchema": {
             "type": "object",
             "properties": {
@@ -3158,7 +3159,7 @@ export const operationTable = {
             "method": "POST",
             "path": "/api/v1/analytics/query"
         },
-        "mcp": false,
+        "mcp": true,
         "internal": false,
         "public": false,
         "pathParams": [],

package/dist/generated/schema.d.ts

@@ -1023,7 +1023,7 @@ export interface paths {
         };
         /**
          * Get retained generation content
-         * @description Requires Foundry's `admin` (management) scope (openrouter_generations.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this route.
+         * @description Retained prompt and output for one of your own generations (`id`), scoped to your organization. Not billed. Foundry admits `foundry:gateway:invoke` or management (openrouter_generations.rs authenticate_invoke_or_management): a Console login session gets the delegated `foundry:gateway:invoke` child, and an organization API key needs the `foundry:invoke` permission. 404 when the id is not yours; 403 `content_not_retained` when Foundry kept no content for it, 410 `content_expired` once retention ends.
          */
         get: operations["foundry_getGenerationContent"];
         put?: never;
@@ -1045,7 +1045,7 @@ export interface paths {
         put?: never;
         /**
          * Submit idempotent generation feedback
-         * @description Requires Foundry's `admin` (management) scope (openrouter_generations.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this route.
+         * @description Record feedback on one of your own generations (`generation_id`, `category`, optional `comment` up to 1000 characters). Requires an `Idempotency-Key` (8-128 characters of A-Z a-z 0-9 - _ . :): a retry with the same key and body is answered as a success without recording twice, and the same key with a different body is a 409. Not billed. Foundry admits `foundry:gateway:invoke` or management (openrouter_generations.rs authenticate_invoke_or_management): a Console login session gets the delegated `foundry:gateway:invoke` child, and an organization API key needs the `foundry:invoke` permission.
          */
         post: operations["foundry_submitGenerationFeedback"];
         delete?: never;
@@ -1125,7 +1125,7 @@ export interface paths {
         put?: never;
         /**
          * Query tenant analytics
-         * @description Requires Foundry's `admin` (management) scope (openrouter_compatibility.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this family.
+         * @description Aggregate request-log analytics for your own organization (all projects and environments), served by Foundry's native reporting receiver (POST /v1/analytics/query). Read-only and not billed. The query body is bounded (64 KiB) and validated by Foundry, and the result is bound to the caller's organization. Works with a Console login session or an organization API key holding `foundry:read`; either way the gateway delegates a one-scope `foundry:reporting:read` child. gateway/src/foundry-reporting-read.ts.
          */
         post: operations["foundry_queryAnalytics"];
         delete?: never;
@@ -1974,7 +1974,7 @@ export interface paths {
         };
         /**
          * Read your organization's inference request logs
-         * @description Original Console human only (foundry:reporting:read, Sandbox). Read-only, newest first; the gateway rejects any query parameter other than the ones below and returns only the listed fields. gateway/src/foundry-reporting-read.ts.
+         * @description Console login session or an organization API key holding `foundry:read` (a one-scope `foundry:reporting:read` child, Sandbox). Read-only, newest first; the gateway rejects any query parameter other than the ones below and returns only the listed fields. gateway/src/foundry-reporting-read.ts.
          */
         get: operations["foundry_listRequestLogs"];
         put?: never;
@@ -1994,7 +1994,7 @@ export interface paths {
         };
         /**
          * Summarise your provider credentials and credential policies
-         * @description Original Console human only (foundry:reporting:read, Sandbox). Configuration metadata only: provider ids, enabled flags, credential modes and timestamps. No secret material, and no health or execution verification. Takes no query. gateway/src/foundry-reporting-read.ts.
+         * @description Console login session or an organization API key holding `foundry:read` (a one-scope `foundry:reporting:read` child, Sandbox). Configuration metadata only: provider ids, enabled flags, credential modes and timestamps. No secret material, and no health or execution verification. Takes no query. gateway/src/foundry-reporting-read.ts.
          */
         get: operations["foundry_getProviderCredentialSummary"];
         put?: never;
@@ -20652,7 +20652,7 @@ export interface paths {
         put?: never;
         /**
          * Reserve a mail address on a verified custom domain
-         * @description Requires scope boxes:admin:domains. domainId is required in the body (422 otherwise). The domain must be verified (or, with the resend provider, ready for sending and receiving) and the local part must not already be reserved.
+         * @description Requires the boxes:admin key scope. domainId is required in the body (422 otherwise). The domain must be verified (or, with the resend provider, ready for sending and receiving) and the local part must not already be reserved.
          */
         post: operations["boxes_mail_addresses_create"];
         delete?: never;
@@ -20672,7 +20672,7 @@ export interface paths {
         put?: never;
         /**
          * Reserve a mail address on a specific domain
-         * @description Requires scope boxes:admin:domains. Same behavior as POST /v1/mail/addresses but the domain comes from the path; any domainId in the body is ignored.
+         * @description Requires the boxes:admin key scope. Same behavior as POST /v1/mail/addresses but the domain comes from the path; any domainId in the body is ignored.
          */
         post: operations["boxes_mail_domains_addresses_create"];
         delete?: never;
@@ -20690,13 +20690,13 @@ export interface paths {
         };
         /**
          * List custom mail domains
-         * @description Requires scope boxes:admin:domains.
+         * @description Requires the boxes:admin key scope.
          */
         get: operations["boxes_mail_domains_list"];
         put?: never;
         /**
          * Register a custom mail domain
-         * @description Requires scope boxes:admin:domains. Returns the DNS records to publish before calling verify.
+         * @description Requires the boxes:admin key scope. Returns the DNS records to publish before calling verify.
          */
         post: operations["boxes_mail_domains_create"];
         delete?: never;
@@ -20716,7 +20716,7 @@ export interface paths {
         put?: never;
         /**
          * Check DNS and verify a mail domain
-         * @description Requires scope boxes:admin:domains. A domain becomes verified only when every expected record passes. The meta block is present only with the built-in verifier, not with the resend provider.
+         * @description Requires the boxes:admin key scope. A domain becomes verified only when every expected record passes. The meta block is present only with the built-in verifier, not with the resend provider.
          */
         post: operations["boxes_mail_domains_verify"];
         delete?: never;
@@ -41512,7 +41512,10 @@ export interface operations {
     foundry_submitGenerationFeedback: {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description Stable key, 8-128 characters of A-Z a-z 0-9 - _ . :; Foundry refuses feedback without one (400). Reuse it to retry. */
+                "Idempotency-Key": string;
+            };
             path?: never;
             cookie?: never;
         };

package/dist/genesis.d.ts

@@ -8917,7 +8917,7 @@ export declare class Genesis extends GenesisClient {
             content: (id: string) => Promise<{
                 [key: string]: unknown;
             }>;
-            feedback: (body: In<"foundry_submitGenerationFeedback">["body"]) => Promise<{
+            feedback: (body: In<"foundry_submitGenerationFeedback">["body"], idempotencyKey: string) => Promise<{
                 [key: string]: unknown;
             }>;
         };

package/dist/genesis.openapi.json

@@ -2783,7 +2783,7 @@
             }
           }
         ],
-        "description": "Requires Foundry's `admin` (management) scope (openrouter_generations.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this route.",
+        "description": "Retained prompt and output for one of your own generations (`id`), scoped to your organization. Not billed. Foundry admits `foundry:gateway:invoke` or management (openrouter_generations.rs authenticate_invoke_or_management): a Console login session gets the delegated `foundry:gateway:invoke` child, and an organization API key needs the `foundry:invoke` permission. 404 when the id is not yours; 403 `content_not_retained` when Foundry kept no content for it, 410 `content_expired` once retention ends.",
         "x-genesis-service": "foundry",
         "x-upstream": {
           "base": "https://api.fdy.sh",
@@ -2791,7 +2791,7 @@
           "path": "/api/v1/generation/content",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/generation/feedback": {
@@ -2829,7 +2829,21 @@
             }
           }
         },
-        "description": "Requires Foundry's `admin` (management) scope (openrouter_generations.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this route.",
+        "parameters": [
+          {
+            "name": "Idempotency-Key",
+            "in": "header",
+            "required": true,
+            "description": "Stable key, 8-128 characters of A-Z a-z 0-9 - _ . :; Foundry refuses feedback without one (400). Reuse it to retry.",
+            "schema": {
+              "type": "string",
+              "minLength": 8,
+              "maxLength": 128,
+              "pattern": "^[A-Za-z0-9_.:-]{8,128}$"
+            }
+          }
+        ],
+        "description": "Record feedback on one of your own generations (`generation_id`, `category`, optional `comment` up to 1000 characters). Requires an `Idempotency-Key` (8-128 characters of A-Z a-z 0-9 - _ . :): a retry with the same key and body is answered as a success without recording twice, and the same key with a different body is a 409. Not billed. Foundry admits `foundry:gateway:invoke` or management (openrouter_generations.rs authenticate_invoke_or_management): a Console login session gets the delegated `foundry:gateway:invoke` child, and an organization API key needs the `foundry:invoke` permission.",
         "x-genesis-service": "foundry",
         "x-upstream": {
           "base": "https://api.fdy.sh",
@@ -2837,7 +2851,7 @@
           "path": "/api/v1/generation/feedback",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/activity": {
@@ -2993,7 +3007,7 @@
             }
           }
         },
-        "description": "Requires Foundry's `admin` (management) scope (openrouter_compatibility.rs authenticate_management). The gateway delegates only `foundry:gateway:invoke`, so it answers every caller 403 SCOPE_MISSING (required_scope `admin`) until Foundry grants tenant callers this family.",
+        "description": "Aggregate request-log analytics for your own organization (all projects and environments), served by Foundry's native reporting receiver (POST /v1/analytics/query). Read-only and not billed. The query body is bounded (64 KiB) and validated by Foundry, and the result is bound to the caller's organization. Works with a Console login session or an organization API key holding `foundry:read`; either way the gateway delegates a one-scope `foundry:reporting:read` child. gateway/src/foundry-reporting-read.ts.",
         "x-genesis-service": "foundry",
         "x-upstream": {
           "base": "https://api.fdy.sh",
@@ -3001,7 +3015,7 @@
           "path": "/api/v1/analytics/query",
           "status": "live"
         },
-        "x-mcp": false
+        "x-mcp": true
       }
     },
     "/v1/foundry/generations/{receipt_id}": {
@@ -5428,7 +5442,7 @@
         "tags": [
           "foundry"
         ],
-        "description": "Original Console human only (foundry:reporting:read, Sandbox). Read-only, newest first; the gateway rejects any query parameter other than the ones below and returns only the listed fields. gateway/src/foundry-reporting-read.ts.",
+        "description": "Console login session or an organization API key holding `foundry:read` (a one-scope `foundry:reporting:read` child, Sandbox). Read-only, newest first; the gateway rejects any query parameter other than the ones below and returns only the listed fields. gateway/src/foundry-reporting-read.ts.",
         "parameters": [
           {
             "name": "start",
@@ -5523,7 +5537,7 @@
         "tags": [
           "foundry"
         ],
-        "description": "Original Console human only (foundry:reporting:read, Sandbox). Configuration metadata only: provider ids, enabled flags, credential modes and timestamps. No secret material, and no health or execution verification. Takes no query. gateway/src/foundry-reporting-read.ts.",
+        "description": "Console login session or an organization API key holding `foundry:read` (a one-scope `foundry:reporting:read` child, Sandbox). Configuration metadata only: provider ids, enabled flags, credential modes and timestamps. No secret material, and no health or execution verification. Takes no query. gateway/src/foundry-reporting-read.ts.",
         "responses": {
           "200": {
             "description": "Provider credential configuration summary",
@@ -82895,7 +82909,7 @@
       "post": {
         "operationId": "boxes_mail_addresses_create",
         "summary": "Reserve a mail address on a verified custom domain",
-        "description": "Requires scope boxes:admin:domains. domainId is required in the body (422 otherwise). The domain must be verified (or, with the resend provider, ready for sending and receiving) and the local part must not already be reserved.",
+        "description": "Requires the boxes:admin key scope. domainId is required in the body (422 otherwise). The domain must be verified (or, with the resend provider, ready for sending and receiving) and the local part must not already be reserved.",
         "requestBody": {
           "required": true,
           "content": {
@@ -83014,7 +83028,7 @@
       "post": {
         "operationId": "boxes_mail_domains_addresses_create",
         "summary": "Reserve a mail address on a specific domain",
-        "description": "Requires scope boxes:admin:domains. Same behavior as POST /v1/mail/addresses but the domain comes from the path; any domainId in the body is ignored.",
+        "description": "Requires the boxes:admin key scope. Same behavior as POST /v1/mail/addresses but the domain comes from the path; any domainId in the body is ignored.",
         "parameters": [
           {
             "name": "domain_id",
@@ -83095,7 +83109,7 @@
       "post": {
         "operationId": "boxes_mail_domains_create",
         "summary": "Register a custom mail domain",
-        "description": "Requires scope boxes:admin:domains. Returns the DNS records to publish before calling verify.",
+        "description": "Requires the boxes:admin key scope. Returns the DNS records to publish before calling verify.",
         "requestBody": {
           "required": true,
           "content": {
@@ -83160,7 +83174,7 @@
       "get": {
         "operationId": "boxes_mail_domains_list",
         "summary": "List custom mail domains",
-        "description": "Requires scope boxes:admin:domains.",
+        "description": "Requires the boxes:admin key scope.",
         "responses": {
           "200": {
             "description": "Domains",
@@ -83211,7 +83225,7 @@
       "post": {
         "operationId": "boxes_mail_domains_verify",
         "summary": "Check DNS and verify a mail domain",
-        "description": "Requires scope boxes:admin:domains. A domain becomes verified only when every expected record passes. The meta block is present only with the built-in verifier, not with the resend provider.",
+        "description": "Requires the boxes:admin key scope. A domain becomes verified only when every expected record passes. The meta block is present only with the built-in verifier, not with the resend provider.",
         "parameters": [
           {
             "name": "domain_id",

package/dist/idempotency.js

@@ -2,7 +2,7 @@ import { GenesisError } from './errors.js';
 import { operationTable } from './generated/operations.js';
 const REQUIRED = /^[\x21-\x7e]{8,128}$/;
 const OPTIONAL = /^[\x21-\x7e]{1,256}$/;
-/** Auto's Idempotency-Key grammar (l1felabs/auto src/operating.ts IDEMPOTENCY_KEY). */
+/** Auto's Idempotency-Key grammar (l1felabs/auto src/operating.ts IDEMPOTENCY_KEY); Foundry feedback uses the same. */
 const AUTO_KEY = /^[A-Za-z0-9_.:-]{8,128}$/;
 /** The Idempotency-Key header an operation's spec declares. A required key is refused locally when missing
  * or malformed, before any request is sent; reuse the same key to replay instead of acting twice. */
@@ -25,6 +25,11 @@ export function idempotencyHeaders(operationId, key) {
         throw new GenesisError({ status: 0, type: 'invalid_request', operationId,
             message: `${operationId} idempotency key must be 8-128 characters of A-Z a-z 0-9 _ . : -` });
     }
+    // Foundry generation feedback takes [A-Za-z0-9_.:-] only (openrouter_generations.rs validate_feedback).
+    if (operationId === 'foundry_submitGenerationFeedback' && !AUTO_KEY.test(key)) {
+        throw new GenesisError({ status: 0, type: 'invalid_request', operationId,
+            message: `${operationId} idempotency key must be 8-128 characters of A-Z a-z 0-9 _ . : -` });
+    }
     return { 'idempotency-key': key };
 }
 /** The If-Match header an operation's spec requires (Auto's optimistic concurrency): the resource `version`

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { iamDirectoryOperations, isIamDirectoryOperation, iamDirectoryFailure }
 export { iamModule } from './iam.js';
 export { GenesisError, errorCatalog, errorBody, errorToken, errorOutcome } from './errors.js';
 export { ERROR_BODY_LIMITS, cardNumber, redactErrorBody, redactErrorText, secretField } from './redact.js';
-export { requireSecureUrl } from './urls.js';
+export { requireSecureUrl, redactUserinfo, stripUserinfo } from './urls.js';
 export { operationTable, services, type OperationId } from './generated/operations.js';
 export type { OperationInput, OperationOutput, OperationMeta, ServiceMeta } from './types.js';
 export type { paths, operations, components } from './generated/schema.js';

package/dist/index.js

@@ -4,7 +4,7 @@ export { iamDirectoryOperations, isIamDirectoryOperation, iamDirectoryFailure }
 export { iamModule } from './iam.js';
 export { GenesisError, errorCatalog, errorBody, errorToken, errorOutcome } from './errors.js';
 export { ERROR_BODY_LIMITS, cardNumber, redactErrorBody, redactErrorText, secretField } from './redact.js';
-export { requireSecureUrl } from './urls.js';
+export { requireSecureUrl, redactUserinfo, stripUserinfo } from './urls.js';
 export { operationTable, services } from './generated/operations.js';
 export { hivesUploadBody, MAX_WASM_BYTES } from './hives-upload.js';
 export { validateHivesInvocation, hivesFunctionResponseHeaders, HivesOperationError, MAX_FUNCTION_BODY_BYTES, MAX_FUNCTION_JSON_BYTES } from './hives-functions.js';

package/dist/redact.d.ts

@@ -1,9 +1,3 @@
-/**
- * Redaction for service error bodies and messages before the CLI or MCP prints them. The design is
- * conservative: when a key or value might be a secret, it is replaced with `[redacted]`. Field names are
- * matched after normalisation (camelCase split, `-`/`.`/space to `_`, lower-cased), so `x-api-key`,
- * `privateKey`, `Set-Cookie` and `client_secret` are all the same kind of name.
- */
 export declare const REDACTED = "[redacted]";
 /** Bounds of the printed body: serialized bytes, per string, per array/object, nesting and the oversize preview. */
 export declare const ERROR_BODY_LIMITS: {

package/dist/redact.js

@@ -4,6 +4,7 @@
  * matched after normalisation (camelCase split, `-`/`.`/space to `_`, lower-cased), so `x-api-key`,
  * `privateKey`, `Set-Cookie` and `client_secret` are all the same kind of name.
  */
+import { redactUserinfo } from './urls.js';
 export const REDACTED = '[redacted]';
 /** Bounds of the printed body: serialized bytes, per string, per array/object, nesting and the oversize preview. */
 export const ERROR_BODY_LIMITS = { bytes: 16384, string: 2048, items: 100, depth: 8, preview: 4096 };
@@ -174,8 +175,8 @@ const SECRET_TEXT = [
     [/(?<![A-Za-z0-9])ek_(?:live|test)_[A-Za-z0-9_-]{8,}/g, REDACTED],
     // PEM private keys (whole block, or to the end when cut).
     [/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g, REDACTED],
-    // URL userinfo: scheme://user:pass@host.
-    [/\b([a-z][a-z0-9+.-]{0,31}:\/\/)[^\s/?#@]+@/gi, `$1${REDACTED}@`],
+    // URL userinfo: scheme://user:pass@host, and the scheme-less, protocol-relative, percent-encoded and JSON-escaped forms.
+    [/^[\s\S]*$/, (t) => redactUserinfo(t, REDACTED)],
     // An Authorization / Proxy-Authorization header in text, any scheme.
     [/\b((?:proxy[-_ ]?)?authorization["']?\s*[:=]\s*["']?)(?!\[redacted\])(?:[A-Za-z][A-Za-z0-9_-]*\s+)?[^\s"',;]{8,}/gi, `$1${REDACTED}`],
     // Auth schemes followed by a credential.

package/dist/urls.d.ts

@@ -4,3 +4,12 @@
  * Credentials ride on every request, so a plain-http endpoint off the local machine is refused.
  */
 export declare function requireSecureUrl(value: string, what: string): string;
+/**
+ * Replace the userinfo of every URL in `text` with `mask` (default `***`): `https://user:pass@host` becomes
+ * `https://***@host` and `user:pass@host` becomes `***@host`, including scheme-less, protocol-relative,
+ * percent-encoded (also double-encoded) and JSON-escaped forms, and passwords holding an unencoded `@`.
+ * Linear time on any input. Use on error and status text only, never on data the user asked to see.
+ */
+export declare function redactUserinfo(text: string, mask?: string): string;
+/** `url` without its userinfo (`https://u:p@host/x` becomes `https://host/x`); text that is not an absolute URL passes through redactUserinfo. */
+export declare function stripUserinfo(url: string): string;

package/dist/urls.js

@@ -29,3 +29,64 @@ export function requireSecureUrl(value, what) {
         return value;
     throw new Error(`${what} must use https (http is allowed only on loopback hosts)`);
 }
+// The scheme before the slashes is left as it is, so it is never matched. Every quantifier is bounded (userinfo 512, bare user 64 / password 128) and none is nested or overlaps
+// another, so one start position costs O(1). On top of that, only the stretches within WINDOW characters before an
+// `@` (or `%40`) are scanned at all: a userinfo cannot end anywhere else. Redaction is therefore linear in the text
+// length times a constant, and text with no `@`, fullwidth `＠` or `%40` is returned as it is.
+// scheme://userinfo@, //userinfo@, https:/\userinfo@ and JSON-escaped :\/\/userinfo@ (greedy to the last @ before the path).
+const USERINFO = /([/\\]{2}|\\\/\\\/)[^\s/?#\\"'<>]{0,512}[@＠]/gi;
+// The same, percent-encoded (also double-encoded): https%3A%2F%2Fuser%3Apass%40host, https%253A%252F%252Fuser%2540host.
+const ENCODED_USERINFO = /(%(?:25){0,2}2F%(?:25){0,2}2F)(?:(?!%(?:25){0,2}2F)[^\s/?#&"'<>]){0,512}%(?:25){0,2}40/gi;
+// Scheme-less user:pass@host (a colon is required, so plain addresses like user@host are left alone).
+const BARE_USERINFO = /(^|[\s"'(<=,;[{])[^\s/?#@＠:"'<>\\]{1,64}:[^\s/?#"'<>\\]{0,128}[@＠](?=[\w[])/g;
+/** Every place a userinfo can end: `@`, fullwidth `＠`, or an encoded `%40` / `%2540`. */
+const AT_HITS = /[@＠]|%(?:25){0,2}40/gi;
+/** The longest URL-form match (slashes and userinfo, encoded) is under 640 characters; the bare form is under 200. */
+const URL_WINDOW = 700;
+const BARE_WINDOW = 200;
+/** Apply `fn` to the stretches of `text` within `window` characters before an `@`-like hit, and copy the rest as it is. */
+function overHits(text, window, fn) {
+    AT_HITS.lastIndex = 0;
+    let hit = AT_HITS.exec(text);
+    if (!hit)
+        return text;
+    let out = '';
+    let copied = 0;
+    let start = Math.max(0, hit.index - window);
+    let end = hit.index + hit[0].length + 1;
+    const flush = () => {
+        // A sentinel before a window that does not start the text keeps `^` (start of text) from matching mid-text.
+        const piece = start > 0 ? fn(`x${text.slice(start, end)}`).slice(1) : fn(text.slice(start, end));
+        out += text.slice(copied, start) + piece;
+        copied = Math.min(end, text.length);
+    };
+    for (hit = AT_HITS.exec(text); hit; hit = AT_HITS.exec(text)) {
+        const s = Math.max(0, hit.index - window);
+        if (s <= end) {
+            end = hit.index + hit[0].length + 1;
+            continue;
+        }
+        flush();
+        start = s;
+        end = hit.index + hit[0].length + 1;
+    }
+    flush();
+    return out + text.slice(copied);
+}
+/**
+ * Replace the userinfo of every URL in `text` with `mask` (default `***`): `https://user:pass@host` becomes
+ * `https://***@host` and `user:pass@host` becomes `***@host`, including scheme-less, protocol-relative,
+ * percent-encoded (also double-encoded) and JSON-escaped forms, and passwords holding an unencoded `@`.
+ * Linear time on any input. Use on error and status text only, never on data the user asked to see.
+ */
+export function redactUserinfo(text, mask = '***') {
+    // Pre-check: no `@`, `＠` or `%40` means no userinfo in any form.
+    if (!/[@＠]|%(?:25){0,2}40/i.test(text))
+        return text;
+    const urlForms = overHits(text, URL_WINDOW, (t) => t.replace(ENCODED_USERINFO, `$1${mask}%40`).replace(USERINFO, `$1${mask}@`));
+    return overHits(urlForms, BARE_WINDOW, (t) => t.replace(BARE_USERINFO, `$1${mask}@`));
+}
+/** `url` without its userinfo (`https://u:p@host/x` becomes `https://host/x`); text that is not an absolute URL passes through redactUserinfo. */
+export function stripUserinfo(url) {
+    return /^[a-z][a-z0-9+.-]*:\/\//i.test(url) ? url.replace(/^([a-z][a-z0-9+.-]*:\/\/)[^/?#]*@/i, '$1') : redactUserinfo(url);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onesi/genesis",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/l1felabs/genesis-api.git",