@onesi/genesis 0.2.6 → 0.2.7

package/dist/generated/schema.d.ts

@@ -10984,7 +10984,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/clear
-         * @description Calls `POST /v1/assoc/mhn/clear` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:admin` on `memory:mhn`, `assoc_mem` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/clear` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:admin`, `query`, `delete` on `memory:mhn`, `assoc_mem` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnClear"];
         delete?: never;
@@ -11004,7 +11004,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/config
-         * @description Calls `POST /v1/assoc/mhn/config` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/config` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnConfig"];
         delete?: never;
@@ -11024,7 +11024,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/list
-         * @description Calls `POST /v1/assoc/mhn/list` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/list` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnList"];
         delete?: never;
@@ -11044,7 +11044,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/new
-         * @description Calls `POST /v1/assoc/mhn/new` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:admin`, `mhn:write` on `memory:mhn`, `assoc_mem` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/new` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:admin`, `mhn:write`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnNew"];
         delete?: never;
@@ -11064,7 +11064,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/retrieve
-         * @description Calls `POST /v1/assoc/mhn/retrieve` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/retrieve` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnRetrieve"];
         delete?: never;
@@ -11084,7 +11084,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/retrieve_by_key
-         * @description Calls `POST /v1/assoc/mhn/retrieve_by_key` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/retrieve_by_key` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnRetrieveByKey"];
         delete?: never;
@@ -11104,7 +11104,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/retrieve_by_vector
-         * @description Calls `POST /v1/assoc/mhn/retrieve_by_vector` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/retrieve_by_vector` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnRetrieveByVector"];
         delete?: never;
@@ -11124,7 +11124,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/stats
-         * @description Calls `POST /v1/assoc/mhn/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnStats"];
         delete?: never;
@@ -11144,7 +11144,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/store
-         * @description Calls `POST /v1/assoc/mhn/store` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:write` on `memory:mhn`, `assoc_mem` (minds:instances:update). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/store` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:write`, `query`, `read`, `update` on `memory:mhn`, `assoc_mem` (minds:instances:update). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnStore"];
         delete?: never;
@@ -11164,7 +11164,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/system_info
-         * @description Calls `POST /v1/assoc/mhn/system_info` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/system_info` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnSystemInfo"];
         delete?: never;
@@ -11182,13 +11182,13 @@ export interface paths {
         };
         /**
          * cognitive-cycle: GET /v1/cognitive/cycles
-         * @description Calls `GET /v1/cognitive/cycles` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `cognitive_cycle_history` (minds:instances:read). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/cognitive/cycles` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `cognitive_cycle_history` (minds:instances:read). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineCognitiveCycleGetCognitiveCycles"];
         put?: never;
         /**
          * cognitive-cycle: POST /v1/cognitive/cycles
-         * @description Calls `POST /v1/cognitive/cycles` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write` on `cognitive_cycle_history` (minds:instances:update). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/cognitive/cycles` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `query`, `delete` on `cognitive_cycle_history` (minds:instances:update). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineCognitiveCyclePostCognitiveCycles"];
         delete?: never;
@@ -11226,7 +11226,7 @@ export interface paths {
         };
         /**
          * cognitive-cycle: GET /v1/cognitive/stats
-         * @description Calls `GET /v1/cognitive/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `cognitive_cycle_history` (minds:instances:read). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/cognitive/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `cognitive_cycle_history` (minds:instances:read). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineCognitiveCycleGetCognitiveStats"];
         put?: never;
@@ -11532,7 +11532,7 @@ export interface paths {
         put?: never;
         /**
          * forgetting: POST /v1/forgetting/requests
-         * @description Calls `POST /v1/forgetting/requests` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `_system_forgetting_requests` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/forgetting/requests` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read`, `write` on `_system_forgetting_requests` (minds:instances:update). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineForgettingPostForgettingRequests"];
         delete?: never;
@@ -11652,7 +11652,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/cypher
-         * @description Calls `POST /v1/graph/cypher` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/cypher` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `*` (minds:instances:manage). A write (`allow_updates: true`, or a CREATE, MERGE, DELETE, DETACH, SET or REMOVE clause anywhere in the query) is also minted `write` and `update`, plus `delete` for a DELETE or DETACH clause. SET, MERGE and REMOVE are not supported by the engine yet and answer 501 `MINDS_CYPHER_CLAUSE_UNSUPPORTED` (clause names it). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphCypher"];
         delete?: never;
@@ -11672,7 +11672,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/cypher-lite
-         * @description Calls `POST /v1/graph/cypher-lite` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/cypher-lite` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `*` (minds:instances:manage). A write (`allow_updates: true`, which cypher-lite needs before it runs a write clause, or a CREATE, MERGE, DELETE, DETACH, SET or REMOVE clause anywhere in the query) is also minted `write` and `update`, plus `delete` for a DELETE or DETACH clause. SET, MERGE and REMOVE are not supported by the engine yet and answer 501 `MINDS_CYPHER_CLAUSE_UNSUPPORTED` (clause names it). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphCypherLite"];
         delete?: never;
@@ -11712,7 +11712,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/index/ensure/composite
-         * @description Calls `POST /v1/graph/index/ensure/composite` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/index/ensure/composite` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphIndexEnsureComposite"];
         delete?: never;
@@ -11732,7 +11732,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/index/ensure/property
-         * @description Calls `POST /v1/graph/index/ensure/property` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/index/ensure/property` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphIndexEnsureProperty"];
         delete?: never;
@@ -11750,7 +11750,7 @@ export interface paths {
         };
         /**
          * knowledge-graph: GET /v1/graph/index/stats
-         * @description Calls `GET /v1/graph/index/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/graph/index/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineKnowledgeGraphGetGraphIndexStats"];
         put?: never;
@@ -11772,7 +11772,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/microtheory/keyspace
-         * @description Calls `POST /v1/graph/microtheory/keyspace` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/microtheory/keyspace` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphMicrotheoryKeyspace"];
         delete?: never;
@@ -11792,7 +11792,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/microtheory/switch
-         * @description Calls `POST /v1/graph/microtheory/switch` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/microtheory/switch` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphMicrotheorySwitch"];
         delete?: never;
@@ -11810,7 +11810,7 @@ export interface paths {
         };
         /**
          * knowledge-graph: GET /v1/graph/schema
-         * @description Calls `GET /v1/graph/schema` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/graph/schema` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineKnowledgeGraphGetGraphSchema"];
         put?: never;
@@ -11852,7 +11852,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/tx/begin
-         * @description Calls `POST /v1/graph/tx/begin` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/tx/begin` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphTxBegin"];
         delete?: never;
@@ -11872,7 +11872,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/tx/commit
-         * @description Calls `POST /v1/graph/tx/commit` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/tx/commit` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphTxCommit"];
         delete?: never;
@@ -11892,7 +11892,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/tx/rollback
-         * @description Calls `POST /v1/graph/tx/rollback` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/tx/rollback` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphTxRollback"];
         delete?: never;
@@ -12118,7 +12118,7 @@ export interface paths {
         };
         /**
          * lineage: GET /v1/lineage/nodes/:id
-         * @description Calls `GET /v1/lineage/nodes/:id` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/lineage/nodes/:id` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineLineageGetLineageNodesId"];
         put?: never;
@@ -12138,7 +12138,7 @@ export interface paths {
         };
         /**
          * lineage: GET /v1/lineage/stats
-         * @description Calls `GET /v1/lineage/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/lineage/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineLineageGetLineageStats"];
         put?: never;
@@ -12488,7 +12488,7 @@ export interface paths {
         put?: never;
         /**
          * procedural-memory: POST /v1/memory/procedures/delete
-         * @description Calls `POST /v1/memory/procedures/delete` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/procedures/delete` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete`, `read`, `query` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineProceduralMemoryPostMemoryProceduresDelete"];
         delete?: never;
@@ -12508,7 +12508,7 @@ export interface paths {
         put?: never;
         /**
          * procedural-memory: POST /v1/memory/procedures/get
-         * @description Calls `POST /v1/memory/procedures/get` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/procedures/get` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineProceduralMemoryPostMemoryProceduresGet"];
         delete?: never;
@@ -12548,7 +12548,7 @@ export interface paths {
         put?: never;
         /**
          * procedural-memory: POST /v1/memory/procedures/search
-         * @description Calls `POST /v1/memory/procedures/search` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/procedures/search` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineProceduralMemoryPostMemoryProceduresSearch"];
         delete?: never;
@@ -12568,7 +12568,7 @@ export interface paths {
         put?: never;
         /**
          * procedural-memory: POST /v1/memory/procedures/update
-         * @description Calls `POST /v1/memory/procedures/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `update` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/procedures/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `update`, `query` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineProceduralMemoryPostMemoryProceduresUpdate"];
         delete?: never;
@@ -12848,7 +12848,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault
-         * @description Calls `POST /v1/memory/vault` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `read`, `update` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVault"];
         delete?: never;
@@ -12888,7 +12888,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault/delete
-         * @description Calls `POST /v1/memory/vault/delete` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault/delete` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete`, `read`, `write`, `update` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVaultDelete"];
         delete?: never;
@@ -12908,7 +12908,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault/get
-         * @description Calls `POST /v1/memory/vault/get` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:vault` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault/get` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `write`, `update` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVaultGet"];
         delete?: never;
@@ -12928,7 +12928,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault/search
-         * @description Calls `POST /v1/memory/vault/search` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query` on `memory:vault` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault/search` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read`, `write` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVaultSearch"];
         delete?: never;
@@ -12968,7 +12968,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault/update
-         * @description Calls `POST /v1/memory/vault/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `update` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `update`, `read`, `write` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVaultUpdate"];
         delete?: never;
@@ -12988,7 +12988,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/embed
-         * @description Calls `POST /v1/ml/embed` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/embed` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlEmbed"];
         delete?: never;
@@ -13008,7 +13008,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/generate
-         * @description Calls `POST /v1/ml/generate` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/generate` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlGenerate"];
         delete?: never;
@@ -13028,7 +13028,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/metrics
-         * @description Calls `POST /v1/ml/metrics` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/metrics` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlMetrics"];
         delete?: never;
@@ -13046,7 +13046,7 @@ export interface paths {
         };
         /**
          * machine-learning: GET /v1/ml/models
-         * @description Calls `GET /v1/ml/models` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/ml/models` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineMachineLearningGetMlModels"];
         put?: never;
@@ -13068,7 +13068,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/models/load
-         * @description Calls `POST /v1/ml/models/load` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/models/load` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlModelsLoad"];
         delete?: never;
@@ -13088,7 +13088,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/models/unload
-         * @description Calls `POST /v1/ml/models/unload` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/models/unload` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlModelsUnload"];
         delete?: never;
@@ -13108,7 +13108,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/tokenizers/load
-         * @description Calls `POST /v1/ml/tokenizers/load` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/tokenizers/load` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlTokenizersLoad"];
         delete?: never;
@@ -13128,7 +13128,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/train/hrm
-         * @description Calls `POST /v1/ml/train/hrm` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/train/hrm` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlTrainHrm"];
         delete?: never;
@@ -13148,7 +13148,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/train/supervised
-         * @description Calls `POST /v1/ml/train/supervised` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/train/supervised` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlTrainSupervised"];
         delete?: never;
@@ -13166,7 +13166,7 @@ export interface paths {
         };
         /**
          * vectors: GET /v1/ml/vector
-         * @description Calls `GET /v1/ml/vector` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/ml/vector` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineVectorsGetMlVector"];
         put?: never;
@@ -13188,7 +13188,7 @@ export interface paths {
         put?: never;
         /**
          * vectors: POST /v1/ml/vector/add
-         * @description Calls `POST /v1/ml/vector/add` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/vector/add` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVectorsPostMlVectorAdd"];
         delete?: never;
@@ -13208,7 +13208,7 @@ export interface paths {
         put?: never;
         /**
          * vectors: POST /v1/ml/vector/create
-         * @description Calls `POST /v1/ml/vector/create` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/vector/create` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVectorsPostMlVectorCreate"];
         delete?: never;
@@ -13228,7 +13228,7 @@ export interface paths {
         put?: never;
         /**
          * vectors: POST /v1/ml/vector/save
-         * @description Calls `POST /v1/ml/vector/save` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/vector/save` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVectorsPostMlVectorSave"];
         delete?: never;
@@ -13648,7 +13648,7 @@ export interface paths {
         put?: never;
         /**
          * spiking-networks: POST /v1/snn/network/build
-         * @description Calls `POST /v1/snn/network/build` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `snn:admin`, `snn:write` on `memory:snn`, `snn_networks`, `snn_compiled`, `snn_runs` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_snn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/snn/network/build` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `snn:admin`, `snn:write`, `snn:query` on `memory:snn`, `snn_networks`, `snn_compiled`, `snn_runs` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_snn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineSpikingNetworksPostSnnNetworkBuild"];
         delete?: never;
@@ -13688,7 +13688,7 @@ export interface paths {
         put?: never;
         /**
          * spiking-networks: POST /v1/snn/network/state
-         * @description Calls `POST /v1/snn/network/state` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `snn:read` on `memory:snn`, `snn_networks`, `snn_compiled`, `snn_runs` (minds:instances:read). Exists only on Minds created with `enable_snn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/snn/network/state` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `snn:read`, `snn:query` on `memory:snn`, `snn_networks`, `snn_compiled`, `snn_runs` (minds:instances:read). Exists only on Minds created with `enable_snn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineSpikingNetworksPostSnnNetworkState"];
         delete?: never;
@@ -17870,6 +17870,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/auto/mcp": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Send one MCP JSON-RPC message to Auto
+         * @description Auto's own MCP server (streamable HTTP, stateless): one JSON-RPC 2.0 message per request, one JSON-RPC response back. Methods: `initialize`, `ping`, `tools/list`, `tools/call`, `resources/list` and `resources/read` (the approval card, `ui://auto/approval-card.html`). Notifications (no `id`, e.g. `notifications/initialized`) answer 202 with no body. Batches (a JSON array) are refused with 400 (Auto's code `batch_unsupported`; the gateway answers it as `BATCH_UNSUPPORTED`). Scope `auto:read` to reach the endpoint; `tools/list` lists only the tools your scopes allow, and each tool checks its own scope (`auto:read` or `auto:write`): a call without it is a result with `isError: true` ("Requires scope auto:write"). Tool errors (invalid input, not found, conflict) are results with `isError: true` as well; an unknown tool or method is a JSON-RPC error (`-32602`, `-32601`). `auto_decide_approval` is app-only: only the mandate approver may decide, from the approval card. Each tool mirrors a REST operation (`auto_list_orgs` is `listOrgs`, `auto_propose_action` is `proposeAction`). Protocol version `2025-06-18`.
+         */
+        post: operations["auto_callMcp"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/scopes/whoami": {
         parameters: {
             query?: never;
@@ -23144,6 +23164,154 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/boxes/mail/agents": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the project's agent mailboxes
+         * @description Every active agent mailbox in the key's project tenant, One first. One's mailbox is provided by default and is created here if it does not exist yet, even under boxes:read. Org API keys only; a signed-in session gets 404 on every agent mailbox route. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_list"];
+        put?: never;
+        /**
+         * Create an agent's mailbox
+         * @description Gives an agent identity a mailbox in the key's project tenant. agentId is "one" or an OpenAgentID a_<ULID>. It is idempotent; an existing mailbox answers 200, a new or restored one 201. A deleted mailbox comes back with its mail and address. The address is assigned by Boxes on the first-party domain. A project holds at most 500 active agent mailboxes (One not counted), checked on create and on restore. Agent mailboxes are metered per agent-month (boxes.agent_mailbox_months). Needs boxes:write.
+         */
+        post: operations["boxes_mail_agents_create"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an agent's mailbox
+         * @description Needs boxes:read. For "one" the default mailbox is created if missing, so it never answers 404.
+         */
+        get: operations["boxes_mail_agents_get"];
+        put?: never;
+        post?: never;
+        /**
+         * Delete an agent's mailbox
+         * @description Stops the agent's mailbox. Its mail and address are kept, and creating it again restores it. One's default mailbox cannot be deleted (409 DEFAULT_AGENT_MAILBOX). Needs boxes:write.
+         */
+        delete: operations["boxes_mail_agents_delete"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/inbox": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * As the agent, list messages in a folder
+         * @description Messages in a folder of the agent's own mailbox, newest first. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_inbox_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/send": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * As the agent, send an email or save a draft
+         * @description Sends from the agent's own mailbox (or saves a draft with isDraft). Needs boxes:write. At least one of bodyPlain or bodyHtml is required. Mail leaving the organization is checked with Auto as the org API key, not as the agent. Idempotency-Key, if given, must be a UUID (422 otherwise); a replay of the same key returns 200 with the original message.
+         */
+        post: operations["boxes_mail_agents_send"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/threads": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * As the agent, list conversation threads
+         * @description Threads of the agent's own mailbox, newest activity first. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_threads_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/threads/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * As the agent, get a thread with all its messages
+         * @description A thread of the agent's own mailbox. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_threads_get"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/messages/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * As the agent, get a message with its labels
+         * @description A message of the agent's own mailbox. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_messages_get"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/brews/create": {
         parameters: {
             query?: never;
@@ -34373,6 +34541,39 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
+        /** @description One JSON-RPC 2.0 message. Omit `id` for a notification. */
+        "Auto.McpRequest": {
+            /** @enum {string} */
+            jsonrpc: "2.0";
+            id?: string | number;
+            /**
+             * @example initialize
+             * @example ping
+             * @example tools/list
+             * @example tools/call
+             * @example resources/list
+             * @example resources/read
+             */
+            method: string;
+            /** @description For `tools/call`, `{name, arguments}`; for `resources/read`, `{uri}`. */
+            params?: {
+                [key: string]: unknown;
+            };
+        };
+        /** @description A JSON-RPC 2.0 response: `result` (for `tools/call`, `{content, structuredContent?, isError?, _meta?}`; for `tools/list`, `{tools}`) or `error` (`{code, message}`). */
+        "Auto.McpResponse": {
+            /** @enum {string} */
+            jsonrpc: "2.0";
+            /** @description The request's id; absent when a known method was sent without one. */
+            id?: string | number | null;
+            result?: {
+                [key: string]: unknown;
+            };
+            error?: {
+                code: number;
+                message: string;
+            };
+        };
         "Auto.AutoError": {
             error: {
                 code: string;
@@ -37646,6 +37847,32 @@ export interface components {
             /** Format: date-time */
             updatedAt: string;
         };
+        "Boxes.MailAgentCreateRequest": {
+            /** @description "one" or an OpenAgentID a_<ULID> */
+            agentId: string;
+            /** @description Shown as the sender name; defaults to "One" or "Agent" */
+            displayName?: string;
+        };
+        "Boxes.MailAgentMailbox": {
+            agentId: string;
+            /** @description did:oas:one:agent:one for One, did:oas:oneos:agent:<ulid> for an OpenAgentID */
+            agentDid: string;
+            /** @description True for One's default mailbox */
+            default: boolean;
+            displayName: string;
+            /** Format: uuid */
+            mailboxId: string;
+            /** @description The mailbox's primary address */
+            address: string;
+            /** @enum {string} */
+            status: "active" | "deleted";
+            /** Format: date-time */
+            createdAt: string;
+        };
+        "Boxes.MailAgentMailboxResponse": {
+            success: boolean;
+            data: components["schemas"]["Boxes.MailAgentMailbox"];
+        };
         "Boxes.MailMailbox": {
             /** Format: uuid */
             id: string;
@@ -40086,8 +40313,10 @@ export interface components {
         "Garden.IfMatch": string;
         /** @description 8-128 letters, digits or `_.:-`. A retry with the same key returns the first result (200) and never moves money or asks Auto twice. */
         "Garden.IdempotencyKey": string;
-        /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send and agent batch send read it. */
+        /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send, agent batch send and agent mailbox send read it. */
         "Boxes.IdempotencyKey": string;
+        /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+        "Boxes.AgentId": string;
         "Brews.DecisionId": string;
         /** @description Stable key; a retry with it returns the original decision instead of creating another */
         "Brews.RequiredIdempotencyKey": string;
@@ -88461,6 +88690,58 @@ export interface operations {
             422: components["responses"]["Auto.Invalid"];
         };
     };
+    auto_callMcp: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                /**
+                 * @example {
+                 *       "jsonrpc": "2.0",
+                 *       "id": 1,
+                 *       "method": "tools/call",
+                 *       "params": {
+                 *         "name": "auto_list_orgs",
+                 *         "arguments": {}
+                 *       }
+                 *     }
+                 */
+                "application/json": components["schemas"]["Auto.McpRequest"];
+            };
+        };
+        responses: {
+            /** @description The JSON-RPC response, a result or a JSON-RPC error */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Auto.McpResponse"];
+                };
+            };
+            /** @description A notification was accepted; no body */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description A batch (`batch_unsupported` from Auto, `BATCH_UNSUPPORTED` through the gateway) or a body that is not JSON */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Auto.AutoError"];
+                };
+            };
+            403: components["responses"]["Auto.Forbidden"];
+        };
+    };
     scopes_whoami: {
         parameters: {
             query?: never;
@@ -94858,7 +95139,7 @@ export interface operations {
         parameters: {
             query?: never;
             header?: {
-                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send and agent batch send read it. */
+                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send, agent batch send and agent mailbox send read it. */
                 "Idempotency-Key"?: components["parameters"]["Boxes.IdempotencyKey"];
             };
             path?: never;
@@ -95027,7 +95308,7 @@ export interface operations {
         parameters: {
             query?: never;
             header?: {
-                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send and agent batch send read it. */
+                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send, agent batch send and agent mailbox send read it. */
                 "Idempotency-Key"?: components["parameters"]["Boxes.IdempotencyKey"];
             };
             path?: never;
@@ -102993,6 +103274,496 @@ export interface operations {
             };
         };
     };
+    boxes_mail_agents_list: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Agent mailboxes */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailAgentMailbox"][];
+                    };
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing boxes:read */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_create: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Boxes.MailAgentCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description The agent already has a mailbox */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Boxes.MailAgentMailboxResponse"];
+                };
+            };
+            /** @description Mailbox created or restored */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Boxes.MailAgentMailboxResponse"];
+                };
+            };
+            /** @description Malformed body or agentId */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing boxes:write */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description ADDRESS_CONFLICT (the address is already reserved) or AGENT_MAILBOX_LIMIT (the project already has 500 active agent mailboxes; One is not counted) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Agent mailbox */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Boxes.MailAgentMailboxResponse"];
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The agent has no active mailbox in this project */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_delete: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Mailbox deleted (status deleted) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Boxes.MailAgentMailboxResponse"];
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The agent has no active mailbox in this project */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description One's default mailbox cannot be deleted */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_inbox_list: {
+        parameters: {
+            query?: {
+                /** @description Folder name; defaults to inbox */
+                folder?: string;
+                page?: number;
+                /** @description Values outside 1-100 are clamped */
+                limit?: number;
+                /** @description Only unread messages */
+                unreadOnly?: boolean;
+                /** @description Only starred messages */
+                starred?: boolean;
+            };
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Messages page */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailMessage"][];
+                        meta?: components["schemas"]["Boxes.MailListMeta"];
+                    };
+                };
+            };
+            /** @description Malformed JSON body or query parameters */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_send: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send, agent batch send and agent mailbox send read it. */
+                "Idempotency-Key"?: components["parameters"]["Boxes.IdempotencyKey"];
+            };
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Boxes.MailSendRequest"];
+            };
+        };
+        responses: {
+            /** @description Idempotent replay of an earlier send */
+            200: {
+                headers: {
+                    /** @description The request idempotency key (the supplied UUID, or the generated one) under the Resend transport. */
+                    "Idempotency-Key"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailMessage"];
+                    };
+                };
+            };
+            /** @description Message created */
+            201: {
+                headers: {
+                    /** @description The request idempotency key (the supplied UUID, or the generated one) under the Resend transport. */
+                    "Idempotency-Key"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailMessage"];
+                    };
+                };
+            };
+            /** @description Malformed JSON body or query parameters */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Validation error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Rate limited */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_threads_list: {
+        parameters: {
+            query?: {
+                page?: number;
+                /** @description Values outside 1-100 are clamped */
+                limit?: number;
+            };
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Threads page */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailThread"][];
+                        meta?: components["schemas"]["Boxes.MailListMeta"];
+                    };
+                };
+            };
+            /** @description Malformed JSON body or query parameters */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The agent has no active mailbox in this project */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_threads_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Thread detail */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailThreadDetail"];
+                    };
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_messages_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Message and labels */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailMessageWithLabels"];
+                    };
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     brews_createBrew: {
         parameters: {
             query?: never;