@onesi/genesis 0.2.6 → 0.2.8

package/dist/generated/schema.d.ts

@@ -8040,6 +8040,410 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/fleets/seats/plans": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the seat plans (helper, operator, always_on)
+         * @description Display data only. Each plan names its credit allowance and computer entitlement; the price is shown for information and is never charged by Fleets.
+         */
+        get: operations["fleets_listSeatPlans"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List the organization's agent seats */
+        get: operations["fleets_listSeats"];
+        put?: never;
+        /**
+         * Hire an agent seat
+         * @description Creates a persistent Henry agent (files memory, the organization's connection model) with a Henry purse and the plan's computer entitlement. With fund omitted or true the purse opens at the plan's credits; with fund false it opens empty and is funded by top-up. With pool_id the seat's purse is carved under that pool (uncapped, bounded by the pool) and its computer minutes count against the pool; a pooled seat takes no borrow_ceiling_credits (422). Reusing idempotency_key with the same body returns the first seat; with a different body it is a 409 (code idempotency_conflict).
+         */
+        post: operations["fleets_hireSeat"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        /** Read an agent seat, its purse and its computer use */
+        get: operations["fleets_getSeat"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Rename a seat or change its borrow ceiling
+         * @description Raising borrow_ceiling_credits on a seat paused with purse_empty un-parks it. A pooled seat takes no borrow_ceiling_credits (422).
+         */
+        patch: operations["fleets_updateSeat"];
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/top-up": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Add credits to a seat's purse
+         * @description Repays any overdraft first, then adds to the available credits. A seat's computer minutes come from its plan (upgrade it, or use a pool). A seat paused with purse_empty resumes when credits are available again. Reusing idempotency_key returns the first result. A pooled seat answers 409 (code pooled_seat); top up the pool.
+         */
+        post: operations["fleets_topUpSeat"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/upgrade": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Upgrade a seat to a larger plan
+         * @description Adds the allowance difference and the larger computer entitlement. There is no downgrade (409).
+         */
+        post: operations["fleets_upgradeSeat"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/hold": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Hold a seat (no new work; a running task is cancelled with a signed receipt) */
+        post: operations["fleets_holdSeat"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/resume": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Resume a held or killed seat */
+        post: operations["fleets_resumeSeat"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/kill": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Kill a seat (cancel running work now and stop the agent; resume is allowed) */
+        post: operations["fleets_killSeat"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/release": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Release a seat (settle the purse, delete the agent; terminal)
+         * @description Answers the settlement (returned_credits, returned_computer_minutes, unpaid_overdraft_credits, spent_credits, agent_deleted, released_at). Idempotent by seat ID; a repeat returns the same settlement. While it runs the seat is releasing, and every other write answers 409. 409 tasks_settling while work is outstanding; retry.
+         */
+        post: operations["fleets_releaseSeat"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/tasks": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        /** List a seat's tasks */
+        get: operations["fleets_listSeatTasks"];
+        put?: never;
+        /**
+         * Give a seat a task
+         * @description Reserves the task's expected credits and runs it on the seat's agent. A computer task opens a Panes or Shells session through the Genesis gateway and needs an approval unless approve_computer is true. 402 (code purse_empty) when the purse and borrow ceiling are exhausted; 403 (code computer_not_entitled) for a computer task on a helper seat; 409 (code seat_not_active) when the seat is held, killed, releasing or released. Other codes: computer_minutes_exhausted, computer_not_connected, model_unpriced. kind defaults to research. A computer task reserves its credits when its open_computer approval is granted.
+         */
+        post: operations["fleets_submitSeatTask"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/tasks/{task_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+                task_id: components["parameters"]["Fleets.SeatTaskId"];
+            };
+            cookie?: never;
+        };
+        /**
+         * Read a seat task, its approvals and its credits
+         * @description The signed Henry receipt is at receipt_url (GET /v1/fleets/tasks/{task_id}/receipt).
+         */
+        get: operations["fleets_getSeatTask"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/tasks/{task_id}/approvals/{approval_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+                task_id: components["parameters"]["Fleets.SeatTaskId"];
+                approval_id: string;
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Approve or deny an action a seat task is waiting on
+         * @description An approval that is already decided answers 200 with the task.
+         */
+        post: operations["fleets_decideSeatTaskApproval"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/seats/{seat_id}/ledger": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        /** Read a seat's purse ledger (hire, reserve, commit, top_up, borrow, release) */
+        get: operations["fleets_getSeatLedger"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/pools": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List the organization's seat pools */
+        get: operations["fleets_listPools"];
+        put?: never;
+        /**
+         * Create a seat pool (a shared top purse and computer minutes)
+         * @description Seats hired with this pool_id draw credits and computer minutes from it. Reusing idempotency_key with the same body returns the first pool.
+         */
+        post: operations["fleets_createPool"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/pools/{pool_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: components["parameters"]["Fleets.PoolId"];
+            };
+            cookie?: never;
+        };
+        /** Read a seat pool */
+        get: operations["fleets_getPool"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/pools/{pool_id}/top-up": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: components["parameters"]["Fleets.PoolId"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Add credits (and optionally computer minutes) to a pool
+         * @description At least one of credits and computer_minutes must be above 0 (422 otherwise).
+         */
+        post: operations["fleets_topUpPool"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/pools/{pool_id}/release": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: components["parameters"]["Fleets.PoolId"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Release a pool (settle its purse; terminal)
+         * @description Answers the settlement (returned_credits, returned_computer_minutes, unpaid_overdraft_credits, spent_credits, released_at). Idempotent by pool ID. 409 pool_has_seats while seats under it are not released.
+         */
+        post: operations["fleets_releasePool"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/pools/{pool_id}/ledger": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: components["parameters"]["Fleets.PoolId"];
+            };
+            cookie?: never;
+        };
+        /** Read a pool's purse ledger */
+        get: operations["fleets_getPoolLedger"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/fleets/computer-connection": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read whether the organization's computer credential is set
+         * @description Secret-free status. The credential is never returned.
+         */
+        get: operations["fleets_getComputerConnection"];
+        /**
+         * Store the organization's computer credential, encrypted with Genesis KMS
+         * @description The key that seat computer tasks use to call Panes and Shells through the Genesis gateway. It is encrypted like the Foundry connection and never returned.
+         */
+        put: operations["fleets_putComputerConnection"];
+        post?: never;
+        /** Remove the organization's computer credential */
+        delete: operations["fleets_deleteComputerConnection"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/flocks/nodes/enroll": {
         parameters: {
             query?: never;
@@ -10984,7 +11388,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/clear
-         * @description Calls `POST /v1/assoc/mhn/clear` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:admin` on `memory:mhn`, `assoc_mem` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/clear` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:admin`, `query`, `delete` on `memory:mhn`, `assoc_mem` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnClear"];
         delete?: never;
@@ -11004,7 +11408,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/config
-         * @description Calls `POST /v1/assoc/mhn/config` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/config` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnConfig"];
         delete?: never;
@@ -11024,7 +11428,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/list
-         * @description Calls `POST /v1/assoc/mhn/list` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/list` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnList"];
         delete?: never;
@@ -11044,7 +11448,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/new
-         * @description Calls `POST /v1/assoc/mhn/new` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:admin`, `mhn:write` on `memory:mhn`, `assoc_mem` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/new` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:admin`, `mhn:write`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnNew"];
         delete?: never;
@@ -11064,7 +11468,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/retrieve
-         * @description Calls `POST /v1/assoc/mhn/retrieve` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/retrieve` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnRetrieve"];
         delete?: never;
@@ -11084,7 +11488,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/retrieve_by_key
-         * @description Calls `POST /v1/assoc/mhn/retrieve_by_key` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/retrieve_by_key` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnRetrieveByKey"];
         delete?: never;
@@ -11104,7 +11508,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/retrieve_by_vector
-         * @description Calls `POST /v1/assoc/mhn/retrieve_by_vector` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/retrieve_by_vector` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnRetrieveByVector"];
         delete?: never;
@@ -11124,7 +11528,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/stats
-         * @description Calls `POST /v1/assoc/mhn/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnStats"];
         delete?: never;
@@ -11144,7 +11548,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/store
-         * @description Calls `POST /v1/assoc/mhn/store` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:write` on `memory:mhn`, `assoc_mem` (minds:instances:update). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/store` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:write`, `query`, `read`, `update` on `memory:mhn`, `assoc_mem` (minds:instances:update). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnStore"];
         delete?: never;
@@ -11164,7 +11568,7 @@ export interface paths {
         put?: never;
         /**
          * associative-memory: POST /v1/assoc/mhn/system_info
-         * @description Calls `POST /v1/assoc/mhn/system_info` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/assoc/mhn/system_info` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `mhn:read`, `query` on `memory:mhn`, `assoc_mem` (minds:instances:read). Exists only on Minds created with `enable_mhn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineAssociativeMemoryPostAssocMhnSystemInfo"];
         delete?: never;
@@ -11182,13 +11586,13 @@ export interface paths {
         };
         /**
          * cognitive-cycle: GET /v1/cognitive/cycles
-         * @description Calls `GET /v1/cognitive/cycles` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `cognitive_cycle_history` (minds:instances:read). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/cognitive/cycles` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `cognitive_cycle_history` (minds:instances:read). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineCognitiveCycleGetCognitiveCycles"];
         put?: never;
         /**
          * cognitive-cycle: POST /v1/cognitive/cycles
-         * @description Calls `POST /v1/cognitive/cycles` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write` on `cognitive_cycle_history` (minds:instances:update). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/cognitive/cycles` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `query`, `delete` on `cognitive_cycle_history` (minds:instances:update). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineCognitiveCyclePostCognitiveCycles"];
         delete?: never;
@@ -11226,7 +11630,7 @@ export interface paths {
         };
         /**
          * cognitive-cycle: GET /v1/cognitive/stats
-         * @description Calls `GET /v1/cognitive/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `cognitive_cycle_history` (minds:instances:read). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/cognitive/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `cognitive_cycle_history` (minds:instances:read). Exists only on Minds created with `enable_cognitive_cycle` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineCognitiveCycleGetCognitiveStats"];
         put?: never;
@@ -11532,7 +11936,7 @@ export interface paths {
         put?: never;
         /**
          * forgetting: POST /v1/forgetting/requests
-         * @description Calls `POST /v1/forgetting/requests` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `_system_forgetting_requests` (minds:instances:read). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/forgetting/requests` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read`, `write` on `_system_forgetting_requests` (minds:instances:update). Registered on every Mind with a storage service (kv, graph, analytics, ml, inference, vector or memory) enabled. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineForgettingPostForgettingRequests"];
         delete?: never;
@@ -11652,7 +12056,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/cypher
-         * @description Calls `POST /v1/graph/cypher` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/cypher` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `*` (minds:instances:manage). A write (`allow_updates: true`, or a CREATE, MERGE, DELETE, DETACH, SET or REMOVE clause anywhere in the query) is also minted `write` and `update`, plus `delete` for a DELETE or DETACH clause. SET, MERGE and REMOVE are not supported by the engine yet and answer 501 `MINDS_CYPHER_CLAUSE_UNSUPPORTED` (clause names it). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphCypher"];
         delete?: never;
@@ -11672,7 +12076,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/cypher-lite
-         * @description Calls `POST /v1/graph/cypher-lite` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/cypher-lite` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `*` (minds:instances:manage). A write (`allow_updates: true`, which cypher-lite needs before it runs a write clause, or a CREATE, MERGE, DELETE, DETACH, SET or REMOVE clause anywhere in the query) is also minted `write` and `update`, plus `delete` for a DELETE or DETACH clause. SET, MERGE and REMOVE are not supported by the engine yet and answer 501 `MINDS_CYPHER_CLAUSE_UNSUPPORTED` (clause names it). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphCypherLite"];
         delete?: never;
@@ -11712,7 +12116,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/index/ensure/composite
-         * @description Calls `POST /v1/graph/index/ensure/composite` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/index/ensure/composite` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphIndexEnsureComposite"];
         delete?: never;
@@ -11732,7 +12136,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/index/ensure/property
-         * @description Calls `POST /v1/graph/index/ensure/property` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/index/ensure/property` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphIndexEnsureProperty"];
         delete?: never;
@@ -11750,7 +12154,7 @@ export interface paths {
         };
         /**
          * knowledge-graph: GET /v1/graph/index/stats
-         * @description Calls `GET /v1/graph/index/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/graph/index/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineKnowledgeGraphGetGraphIndexStats"];
         put?: never;
@@ -11772,7 +12176,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/microtheory/keyspace
-         * @description Calls `POST /v1/graph/microtheory/keyspace` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/microtheory/keyspace` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphMicrotheoryKeyspace"];
         delete?: never;
@@ -11792,7 +12196,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/microtheory/switch
-         * @description Calls `POST /v1/graph/microtheory/switch` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/microtheory/switch` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphMicrotheorySwitch"];
         delete?: never;
@@ -11810,7 +12214,7 @@ export interface paths {
         };
         /**
          * knowledge-graph: GET /v1/graph/schema
-         * @description Calls `GET /v1/graph/schema` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/graph/schema` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineKnowledgeGraphGetGraphSchema"];
         put?: never;
@@ -11852,7 +12256,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/tx/begin
-         * @description Calls `POST /v1/graph/tx/begin` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/tx/begin` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphTxBegin"];
         delete?: never;
@@ -11872,7 +12276,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/tx/commit
-         * @description Calls `POST /v1/graph/tx/commit` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/tx/commit` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphTxCommit"];
         delete?: never;
@@ -11892,7 +12296,7 @@ export interface paths {
         put?: never;
         /**
          * knowledge-graph: POST /v1/graph/tx/rollback
-         * @description Calls `POST /v1/graph/tx/rollback` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/graph/tx/rollback` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineKnowledgeGraphPostGraphTxRollback"];
         delete?: never;
@@ -12118,7 +12522,7 @@ export interface paths {
         };
         /**
          * lineage: GET /v1/lineage/nodes/:id
-         * @description Calls `GET /v1/lineage/nodes/:id` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/lineage/nodes/:id` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineLineageGetLineageNodesId"];
         put?: never;
@@ -12138,7 +12542,7 @@ export interface paths {
         };
         /**
          * lineage: GET /v1/lineage/stats
-         * @description Calls `GET /v1/lineage/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/lineage/stats` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_graph` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineLineageGetLineageStats"];
         put?: never;
@@ -12488,7 +12892,7 @@ export interface paths {
         put?: never;
         /**
          * procedural-memory: POST /v1/memory/procedures/delete
-         * @description Calls `POST /v1/memory/procedures/delete` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/procedures/delete` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete`, `read`, `query` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineProceduralMemoryPostMemoryProceduresDelete"];
         delete?: never;
@@ -12508,7 +12912,7 @@ export interface paths {
         put?: never;
         /**
          * procedural-memory: POST /v1/memory/procedures/get
-         * @description Calls `POST /v1/memory/procedures/get` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/procedures/get` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineProceduralMemoryPostMemoryProceduresGet"];
         delete?: never;
@@ -12548,7 +12952,7 @@ export interface paths {
         put?: never;
         /**
          * procedural-memory: POST /v1/memory/procedures/search
-         * @description Calls `POST /v1/memory/procedures/search` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/procedures/search` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read` on `memory:procedural` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineProceduralMemoryPostMemoryProceduresSearch"];
         delete?: never;
@@ -12568,7 +12972,7 @@ export interface paths {
         put?: never;
         /**
          * procedural-memory: POST /v1/memory/procedures/update
-         * @description Calls `POST /v1/memory/procedures/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `update` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/procedures/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `update`, `query` on `memory:procedural` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineProceduralMemoryPostMemoryProceduresUpdate"];
         delete?: never;
@@ -12848,7 +13252,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault
-         * @description Calls `POST /v1/memory/vault` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `read`, `update` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVault"];
         delete?: never;
@@ -12888,7 +13292,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault/delete
-         * @description Calls `POST /v1/memory/vault/delete` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault/delete` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete`, `read`, `write`, `update` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVaultDelete"];
         delete?: never;
@@ -12908,7 +13312,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault/get
-         * @description Calls `POST /v1/memory/vault/get` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `memory:vault` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault/get` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `write`, `update` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVaultGet"];
         delete?: never;
@@ -12928,7 +13332,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault/search
-         * @description Calls `POST /v1/memory/vault/search` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query` on `memory:vault` (minds:instances:read). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault/search` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `query`, `read`, `write` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVaultSearch"];
         delete?: never;
@@ -12968,7 +13372,7 @@ export interface paths {
         put?: never;
         /**
          * vault: POST /v1/memory/vault/update
-         * @description Calls `POST /v1/memory/vault/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `update` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/memory/vault/update` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `update`, `read`, `write` on `memory:vault` (minds:instances:update). Exists only on Minds created with `enable_memory` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:write`. Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVaultPostMemoryVaultUpdate"];
         delete?: never;
@@ -12988,7 +13392,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/embed
-         * @description Calls `POST /v1/ml/embed` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/embed` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlEmbed"];
         delete?: never;
@@ -13008,7 +13412,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/generate
-         * @description Calls `POST /v1/ml/generate` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/generate` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlGenerate"];
         delete?: never;
@@ -13028,7 +13432,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/metrics
-         * @description Calls `POST /v1/ml/metrics` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/metrics` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlMetrics"];
         delete?: never;
@@ -13046,7 +13450,7 @@ export interface paths {
         };
         /**
          * machine-learning: GET /v1/ml/models
-         * @description Calls `GET /v1/ml/models` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/ml/models` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineMachineLearningGetMlModels"];
         put?: never;
@@ -13068,7 +13472,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/models/load
-         * @description Calls `POST /v1/ml/models/load` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/models/load` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlModelsLoad"];
         delete?: never;
@@ -13088,7 +13492,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/models/unload
-         * @description Calls `POST /v1/ml/models/unload` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/models/unload` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `delete`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlModelsUnload"];
         delete?: never;
@@ -13108,7 +13512,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/tokenizers/load
-         * @description Calls `POST /v1/ml/tokenizers/load` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/tokenizers/load` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlTokenizersLoad"];
         delete?: never;
@@ -13128,7 +13532,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/train/hrm
-         * @description Calls `POST /v1/ml/train/hrm` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/train/hrm` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlTrainHrm"];
         delete?: never;
@@ -13148,7 +13552,7 @@ export interface paths {
         put?: never;
         /**
          * machine-learning: POST /v1/ml/train/supervised
-         * @description Calls `POST /v1/ml/train/supervised` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/train/supervised` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_ml` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineMachineLearningPostMlTrainSupervised"];
         delete?: never;
@@ -13166,7 +13570,7 @@ export interface paths {
         };
         /**
          * vectors: GET /v1/ml/vector
-         * @description Calls `GET /v1/ml/vector` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `GET /v1/ml/vector` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         get: operations["minds_engineVectorsGetMlVector"];
         put?: never;
@@ -13188,7 +13592,7 @@ export interface paths {
         put?: never;
         /**
          * vectors: POST /v1/ml/vector/add
-         * @description Calls `POST /v1/ml/vector/add` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/vector/add` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVectorsPostMlVectorAdd"];
         delete?: never;
@@ -13208,7 +13612,7 @@ export interface paths {
         put?: never;
         /**
          * vectors: POST /v1/ml/vector/create
-         * @description Calls `POST /v1/ml/vector/create` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/vector/create` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVectorsPostMlVectorCreate"];
         delete?: never;
@@ -13228,7 +13632,7 @@ export interface paths {
         put?: never;
         /**
          * vectors: POST /v1/ml/vector/save
-         * @description Calls `POST /v1/ml/vector/save` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/ml/vector/save` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `write`, `update`, `read`, `query` on `*` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_vector` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineVectorsPostMlVectorSave"];
         delete?: never;
@@ -13648,7 +14052,7 @@ export interface paths {
         put?: never;
         /**
          * spiking-networks: POST /v1/snn/network/build
-         * @description Calls `POST /v1/snn/network/build` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `snn:admin`, `snn:write` on `memory:snn`, `snn_networks`, `snn_compiled`, `snn_runs` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_snn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/snn/network/build` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `snn:admin`, `snn:write`, `snn:query` on `memory:snn`, `snn_networks`, `snn_compiled`, `snn_runs` (minds:instances:manage). Human sessions: Genesis cannot mint minds:instances:manage on the Sandbox delegation path yet, so this route answers 403 `MINDS_ENGINE_MANAGE_REQUIRED` (required_scope minds:instances:manage) until it can. Exists only on Minds created with `enable_snn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` and `minds:manage` (minds:manage does not imply read). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineSpikingNetworksPostSnnNetworkBuild"];
         delete?: never;
@@ -13688,7 +14092,7 @@ export interface paths {
         put?: never;
         /**
          * spiking-networks: POST /v1/snn/network/state
-         * @description Calls `POST /v1/snn/network/state` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `snn:read` on `memory:snn`, `snn_networks`, `snn_compiled`, `snn_runs` (minds:instances:read). Exists only on Minds created with `enable_snn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
+         * @description Calls `POST /v1/snn/network/state` on the selected Sandbox Mind's engine with a capability minted for this request only. Grant: actions `snn:read`, `snn:query` on `memory:snn`, `snn_networks`, `snn_compiled`, `snn_runs` (minds:instances:read). Exists only on Minds created with `enable_snn` set; elsewhere the Mind answers 404. Requires a `genesis login` session with a Console Sandbox selection, or an org API key. Org API keys with a Sandbox binding are admitted with `minds:read` (or `minds:write`). Missing scopes answer 403 `SCOPE_MISSING` with required_scope.
          */
         post: operations["minds_engineSpikingNetworksPostSnnNetworkState"];
         delete?: never;
@@ -17870,6 +18274,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/auto/mcp": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Send one MCP JSON-RPC message to Auto
+         * @description Auto's own MCP server (streamable HTTP, stateless): one JSON-RPC 2.0 message per request, one JSON-RPC response back. Methods: `initialize`, `ping`, `tools/list`, `tools/call`, `resources/list` and `resources/read` (the approval card, `ui://auto/approval-card.html`). Notifications (no `id`, e.g. `notifications/initialized`) answer 202 with no body. Batches (a JSON array) are refused with 400 (Auto's code `batch_unsupported`; the gateway answers it as `BATCH_UNSUPPORTED`). Scope `auto:read` to reach the endpoint; `tools/list` lists only the tools your scopes allow, and each tool checks its own scope (`auto:read` or `auto:write`): a call without it is a result with `isError: true` ("Requires scope auto:write"). Tool errors (invalid input, not found, conflict) are results with `isError: true` as well; an unknown tool or method is a JSON-RPC error (`-32602`, `-32601`). `auto_decide_approval` is app-only: only the mandate approver may decide, from the approval card. Each tool mirrors a REST operation (`auto_list_orgs` is `listOrgs`, `auto_propose_action` is `proposeAction`). Protocol version `2025-06-18`.
+         */
+        post: operations["auto_callMcp"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/scopes/whoami": {
         parameters: {
             query?: never;
@@ -23144,6 +23568,154 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/boxes/mail/agents": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the project's agent mailboxes
+         * @description Every active agent mailbox in the key's project tenant, One first. One's mailbox is provided by default and is created here if it does not exist yet, even under boxes:read. Org API keys only; a signed-in session gets 404 on every agent mailbox route. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_list"];
+        put?: never;
+        /**
+         * Create an agent's mailbox
+         * @description Gives an agent identity a mailbox in the key's project tenant. agentId is "one" or an OpenAgentID a_<ULID>. It is idempotent; an existing mailbox answers 200, a new or restored one 201. A deleted mailbox comes back with its mail and address. The address is assigned by Boxes on the first-party domain. A project holds at most 500 active agent mailboxes (One not counted), checked on create and on restore. Agent mailboxes are metered per agent-month (boxes.agent_mailbox_months). Needs boxes:write.
+         */
+        post: operations["boxes_mail_agents_create"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an agent's mailbox
+         * @description Needs boxes:read. For "one" the default mailbox is created if missing, so it never answers 404.
+         */
+        get: operations["boxes_mail_agents_get"];
+        put?: never;
+        post?: never;
+        /**
+         * Delete an agent's mailbox
+         * @description Stops the agent's mailbox. Its mail and address are kept, and creating it again restores it. One's default mailbox cannot be deleted (409 DEFAULT_AGENT_MAILBOX). Needs boxes:write.
+         */
+        delete: operations["boxes_mail_agents_delete"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/inbox": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * As the agent, list messages in a folder
+         * @description Messages in a folder of the agent's own mailbox, newest first. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_inbox_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/send": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * As the agent, send an email or save a draft
+         * @description Sends from the agent's own mailbox (or saves a draft with isDraft). Needs boxes:write. At least one of bodyPlain or bodyHtml is required. Mail leaving the organization is checked with Auto as the org API key, not as the agent. Idempotency-Key, if given, must be a UUID (422 otherwise); a replay of the same key returns 200 with the original message.
+         */
+        post: operations["boxes_mail_agents_send"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/threads": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * As the agent, list conversation threads
+         * @description Threads of the agent's own mailbox, newest activity first. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_threads_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/threads/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * As the agent, get a thread with all its messages
+         * @description A thread of the agent's own mailbox. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_threads_get"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/boxes/mail/agents/{agentId}/messages/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * As the agent, get a message with its labels
+         * @description A message of the agent's own mailbox. Needs boxes:read.
+         */
+        get: operations["boxes_mail_agents_messages_get"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/brews/create": {
         parameters: {
             query?: never;
@@ -29682,6 +30254,28 @@ export interface components {
             custody?: "reveal" | "blinds";
             /** Format: date-time */
             expires_at?: string;
+            binding?: components["schemas"]["Iam.ApiKeyBindingRequest"];
+        };
+        /** @description The tenant the key is bound to, chosen once at creation. Omitted fields mean the organization's default project, its workspace and sandbox. A key's environment never changes: a Live key needs resourceEnvironment live here. */
+        "Iam.ApiKeyBindingRequest": {
+            projectId?: string;
+            workspaceId?: string;
+            /** @enum {string} */
+            resourceEnvironment?: "sandbox" | "live";
+        };
+        "Iam.ApiKeyBinding": {
+            organizationId: string;
+            projectId: string;
+            platformId: string;
+            workspaceId?: string | null;
+            fleetId?: string | null;
+            /** @enum {string} */
+            resourceEnvironment: "sandbox" | "live";
+            /**
+             * @description key: recorded at creation. organization_default: no recorded binding; the organization default project in sandbox.
+             * @enum {string}
+             */
+            source: "key" | "organization_default";
         };
         "Iam.CreateApiKeyResponse": {
             id: string;
@@ -29694,6 +30288,7 @@ export interface components {
             expires_at?: string | null;
             /** Format: date-time */
             created_at: string;
+            binding?: components["schemas"]["Iam.ApiKeyBinding"] | null;
         };
         "Iam.ApiKeyMetadata": {
             id: string;
@@ -29708,6 +30303,7 @@ export interface components {
             created_at: string;
             /** Format: date-time */
             updated_at: string;
+            binding?: components["schemas"]["Iam.ApiKeyBinding"] | null;
         };
         "Iam.ApiKeyList": {
             /** @enum {string} */
@@ -30929,6 +31525,253 @@ export interface components {
             /** @description Pass as after to read the next page */
             next_after: number | null;
         };
+        /** @enum {string} */
+        "Fleets.SeatType": "helper" | "operator" | "always_on";
+        /** @description Stable key (required); reuse it to replay instead of acting twice */
+        "Fleets.IdempotencyKey": string;
+        "Fleets.SeatPlan": {
+            type: components["schemas"]["Fleets.SeatType"];
+            /** @description Purse allowance in credits (1 credit = 1 US cent of cost) */
+            credits: number;
+            /** @description Computer entitlement in minutes (0 for helper) */
+            computer_minutes: number;
+            /** @description Whether the plan includes a computer */
+            computer?: boolean;
+            /** @description Display only; Fleets never charges money */
+            price_usd?: number;
+        };
+        "Fleets.SeatPlanList": {
+            plans: components["schemas"]["Fleets.SeatPlan"][];
+            /** @description What one credit is */
+            credit?: {
+                unit?: string;
+                value_usd?: number;
+                meaning?: string;
+            };
+        };
+        "Fleets.Purse": {
+            /** @description Plan allowance in credits (seats) */
+            allowance?: number;
+            /** @description Credits granted so far (hire and top-ups; 0 for a pooled seat) */
+            granted?: number;
+            /** @description Credits available now (for a pooled seat, the pool's) */
+            available: number;
+            reserved: number;
+            spent: number;
+            /** @description Credits borrowed and not yet repaid */
+            overdraft: number;
+            /** @description Overdraft allowed */
+            borrow_ceiling?: number;
+            /** @description Credits carved out to seats (pools) */
+            carved?: number;
+            /** @description The pool a pooled seat draws on */
+            pool_id?: string;
+        };
+        "Fleets.Computer": {
+            entitled_minutes: number;
+            used_minutes: number;
+        };
+        "Fleets.Seat": {
+            id: string;
+            /** @enum {string} */
+            object: "fleets.seat";
+            type: components["schemas"]["Fleets.SeatType"];
+            name?: string;
+            /**
+             * @description releasing: between release start and released; every write but release answers 409
+             * @enum {string}
+             */
+            state: "active" | "paused" | "held" | "killed" | "releasing" | "released";
+            /** @description Why the seat is paused, for example purse_empty */
+            pause_reason?: string;
+            agent_id?: string | null;
+            pool_id?: string | null;
+            purse: components["schemas"]["Fleets.Purse"];
+            computer: components["schemas"]["Fleets.Computer"];
+            release?: components["schemas"]["Fleets.SeatRelease"];
+            created_at?: string;
+            updated_at?: string;
+        };
+        "Fleets.SeatStop": components["schemas"]["Fleets.Seat"] & {
+            /** @description Tasks cancelled with a signed cancelled receipt */
+            cancelled_tasks: string[];
+            /** @description The agent's state after kill (kill only) */
+            agent_state?: string;
+        };
+        "Fleets.SeatRelease": {
+            id: string;
+            /** @enum {string} */
+            object: "fleets.seat.release";
+            seat_id?: string;
+            /** @enum {string} */
+            state: "released";
+            /** @description Credits returned when the purse was settled */
+            returned_credits: number;
+            returned_computer_minutes: number;
+            /** @description Overdraft left unpaid at release; the billing ledger settles it */
+            unpaid_overdraft_credits?: number;
+            spent_credits?: number;
+            pool_id?: string | null;
+            agent_deleted?: boolean;
+            released_at?: string;
+        };
+        "Fleets.SeatList": {
+            seats: components["schemas"]["Fleets.Seat"][];
+        };
+        "Fleets.SeatHireInput": {
+            type: components["schemas"]["Fleets.SeatType"];
+            name?: string;
+            /**
+             * @description Overdraft the seat may run up before it pauses; not with pool_id (422)
+             * @default 0
+             */
+            borrow_ceiling_credits?: number;
+            /** @description Carve the seat's purse under this pool; a pooled seat is funded by its pool, so fund: true with pool_id is a 422 */
+            pool_id?: string;
+            /**
+             * @description false opens the purse empty, to be funded by top-up
+             * @default true
+             */
+            fund?: boolean;
+            idempotency_key: components["schemas"]["Fleets.IdempotencyKey"];
+        };
+        "Fleets.SeatUpdateInput": {
+            name?: string;
+            /** @description Not for a pooled seat (422) */
+            borrow_ceiling_credits?: number;
+        };
+        "Fleets.SeatTopUpInput": {
+            credits: number;
+            idempotency_key: components["schemas"]["Fleets.IdempotencyKey"];
+        };
+        "Fleets.SeatUpgradeInput": {
+            type: components["schemas"]["Fleets.SeatType"];
+        };
+        "Fleets.SeatTaskInput": {
+            /** @description Task text: 1-65536 UTF-8 bytes without NUL. */
+            input: string;
+            /**
+             * @default research
+             * @enum {string}
+             */
+            kind?: "research" | "computer";
+            timeout_seconds?: number;
+            /**
+             * @description Open the computer without a separate approval
+             * @default false
+             */
+            approve_computer?: boolean;
+            idempotency_key: components["schemas"]["Fleets.IdempotencyKey"];
+        };
+        "Fleets.SeatApproval": {
+            id: string;
+            /** @description For example open_computer */
+            action?: string;
+            detail?: string;
+            status: string;
+        };
+        "Fleets.SeatTask": {
+            /** Format: uuid */
+            task_id: string;
+            /** @enum {string} */
+            object?: "fleets.seat.task";
+            seat_id: string;
+            /** @enum {string} */
+            kind: "research" | "computer";
+            /** @enum {string} */
+            state: "pending" | "running" | "awaiting_approval" | "completed" | "failed" | "cancelled" | "timed_out";
+            output?: string | null;
+            error?: string | null;
+            approvals?: components["schemas"]["Fleets.SeatApproval"][];
+            credits?: {
+                reserved?: number;
+                /** @description null until the task settles */
+                charged?: number | null;
+                borrowed?: number;
+            };
+            computer_minutes?: number;
+            computer_minutes_allowed?: number;
+            /** @description The task's credits are committed and the rest returned */
+            settled?: boolean;
+            receipt_url?: string;
+            submitted_at?: string;
+            completed_at?: string | null;
+        };
+        "Fleets.SeatTaskList": {
+            tasks: components["schemas"]["Fleets.SeatTask"][];
+        };
+        "Fleets.SeatApprovalDecision": {
+            /** @enum {string} */
+            decision: "approve" | "deny";
+        };
+        "Fleets.SeatLedgerEntry": {
+            seq: number;
+            at_ms?: number;
+            /** @description hire, pool_open, reserve, commit, top_up, borrow, repay, upgrade, hold, resume, kill or release */
+            kind: string;
+            credits: number;
+            minutes?: number;
+            task_id?: string;
+            available?: number;
+            reserved?: number;
+            spent?: number;
+            overdraft?: number;
+        };
+        "Fleets.SeatLedger": {
+            /** @description The seat or pool ID */
+            id?: string;
+            entries: components["schemas"]["Fleets.SeatLedgerEntry"][];
+        };
+        "Fleets.Pool": {
+            id: string;
+            /** @enum {string} */
+            object: "fleets.pool";
+            name?: string;
+            state?: string;
+            purse: components["schemas"]["Fleets.Purse"];
+            computer: components["schemas"]["Fleets.Computer"];
+            /** @description Seats under the pool that are not released */
+            seats?: string[];
+            release?: components["schemas"]["Fleets.PoolRelease"];
+            created_at?: string;
+            updated_at?: string;
+        };
+        "Fleets.PoolRelease": {
+            id: string;
+            /** @enum {string} */
+            object: "fleets.pool.release";
+            pool_id?: string;
+            /** @enum {string} */
+            state: "released";
+            returned_credits: number;
+            returned_computer_minutes: number;
+            unpaid_overdraft_credits?: number;
+            spent_credits?: number;
+            released_at?: string;
+        };
+        "Fleets.PoolList": {
+            pools: components["schemas"]["Fleets.Pool"][];
+        };
+        "Fleets.PoolCreateInput": {
+            name?: string;
+            credits: number;
+            /** @default 0 */
+            computer_minutes?: number;
+            idempotency_key: components["schemas"]["Fleets.IdempotencyKey"];
+        };
+        "Fleets.PoolTopUpInput": {
+            credits: number;
+            computer_minutes?: number;
+            idempotency_key: components["schemas"]["Fleets.IdempotencyKey"];
+        };
+        "Fleets.ComputerConnection": {
+            connected: boolean;
+            updated_at?: number;
+        };
+        "Fleets.ComputerConnectionInput": {
+            /** @description Genesis key of this organization with panes:write and shells:write; 1-4096 UTF-8 bytes without CR, LF or NUL. Never returned. */
+            api_key: string;
+        };
         "Flocks.NativeCredential": {
             /** Format: uuid */
             node_id: string;
@@ -34373,6 +35216,39 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
+        /** @description One JSON-RPC 2.0 message. Omit `id` for a notification. */
+        "Auto.McpRequest": {
+            /** @enum {string} */
+            jsonrpc: "2.0";
+            id?: string | number;
+            /**
+             * @example initialize
+             * @example ping
+             * @example tools/list
+             * @example tools/call
+             * @example resources/list
+             * @example resources/read
+             */
+            method: string;
+            /** @description For `tools/call`, `{name, arguments}`; for `resources/read`, `{uri}`. */
+            params?: {
+                [key: string]: unknown;
+            };
+        };
+        /** @description A JSON-RPC 2.0 response: `result` (for `tools/call`, `{content, structuredContent?, isError?, _meta?}`; for `tools/list`, `{tools}`) or `error` (`{code, message}`). */
+        "Auto.McpResponse": {
+            /** @enum {string} */
+            jsonrpc: "2.0";
+            /** @description The request's id; absent when a known method was sent without one. */
+            id?: string | number | null;
+            result?: {
+                [key: string]: unknown;
+            };
+            error?: {
+                code: number;
+                message: string;
+            };
+        };
         "Auto.AutoError": {
             error: {
                 code: string;
@@ -37646,6 +38522,32 @@ export interface components {
             /** Format: date-time */
             updatedAt: string;
         };
+        "Boxes.MailAgentCreateRequest": {
+            /** @description "one" or an OpenAgentID a_<ULID> */
+            agentId: string;
+            /** @description Shown as the sender name; defaults to "One" or "Agent" */
+            displayName?: string;
+        };
+        "Boxes.MailAgentMailbox": {
+            agentId: string;
+            /** @description did:oas:one:agent:one for One, did:oas:oneos:agent:<ulid> for an OpenAgentID */
+            agentDid: string;
+            /** @description True for One's default mailbox */
+            default: boolean;
+            displayName: string;
+            /** Format: uuid */
+            mailboxId: string;
+            /** @description The mailbox's primary address */
+            address: string;
+            /** @enum {string} */
+            status: "active" | "deleted";
+            /** Format: date-time */
+            createdAt: string;
+        };
+        "Boxes.MailAgentMailboxResponse": {
+            success: boolean;
+            data: components["schemas"]["Boxes.MailAgentMailbox"];
+        };
         "Boxes.MailMailbox": {
             /** Format: uuid */
             id: string;
@@ -39955,6 +40857,9 @@ export interface components {
         "Beacons.DashboardResourceFamily": "gateways" | "private-gateways" | "sims";
         /** @description Nonzero lowercase record UUID returned by create or list. */
         "Beacons.DashboardResourceId": string;
+        "Fleets.SeatId": string;
+        "Fleets.SeatTaskId": string;
+        "Fleets.PoolId": string;
         "Runner.JobId": components["schemas"]["Runner.SafeOpaqueRef"];
         /** @description `ended` also lists ended Rigs (`cancelled`, `terminated`, `failed` or `succeeded`; `orphaned` counts as active). Omit it to list live Rigs only. */
         "Rigs.IncludeEnded": "ended";
@@ -40086,8 +40991,10 @@ export interface components {
         "Garden.IfMatch": string;
         /** @description 8-128 letters, digits or `_.:-`. A retry with the same key returns the first result (200) and never moves money or asks Auto twice. */
         "Garden.IdempotencyKey": string;
-        /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send and agent batch send read it. */
+        /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send, agent batch send and agent mailbox send read it. */
         "Boxes.IdempotencyKey": string;
+        /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+        "Boxes.AgentId": string;
         "Brews.DecisionId": string;
         /** @description Stable key; a retry with it returns the original decision instead of creating another */
         "Brews.RequiredIdempotencyKey": string;
@@ -58354,7 +59261,7 @@ export interface operations {
             path: {
                 /** @description The organization you are signed in to */
                 org_id: components["parameters"]["Iam.DirectoryOrgIdPath"];
-                /** @description The agent DID (did:oas:<kind>:<ulid>) */
+                /** @description The agent's DID (did:oas:<kind>:<ulid>) or its IAM id (a_<ulid>, the `id` every agent list returns); both name the same agent. */
                 agent_did: string;
             };
             cookie?: never;
@@ -58384,7 +59291,7 @@ export interface operations {
             path: {
                 /** @description The organization you are signed in to */
                 org_id: components["parameters"]["Iam.DirectoryOrgIdPath"];
-                /** @description The agent DID (did:oas:<kind>:<ulid>) */
+                /** @description The agent's DID (did:oas:<kind>:<ulid>) or its IAM id (a_<ulid>, the `id` every agent list returns); both name the same agent. */
                 agent_did: string;
             };
             cookie?: never;
@@ -58414,7 +59321,7 @@ export interface operations {
             path: {
                 /** @description The organization you are signed in to */
                 org_id: components["parameters"]["Iam.DirectoryOrgIdPath"];
-                /** @description The agent DID (did:oas:<kind>:<ulid>) */
+                /** @description The agent's DID (did:oas:<kind>:<ulid>) or its IAM id (a_<ulid>, the `id` every agent list returns); both name the same agent. */
                 agent_did: string;
             };
             cookie?: never;
@@ -58444,7 +59351,7 @@ export interface operations {
             path: {
                 /** @description The organization you are signed in to */
                 org_id: components["parameters"]["Iam.DirectoryOrgIdPath"];
-                /** @description The agent DID (did:oas:<kind>:<ulid>) */
+                /** @description The agent's DID (did:oas:<kind>:<ulid>) or its IAM id (a_<ulid>, the `id` every agent list returns); both name the same agent. */
                 agent_did: string;
             };
             cookie?: never;
@@ -58474,7 +59381,7 @@ export interface operations {
             path: {
                 /** @description The organization you are signed in to */
                 org_id: components["parameters"]["Iam.DirectoryOrgIdPath"];
-                /** @description The agent DID (did:oas:<kind>:<ulid>) */
+                /** @description The agent DID (did:oas:<kind>:<ulid>). This operation answers with the DID only, so it takes only the DID, not the a_ id. */
                 agent_did: string;
             };
             cookie?: never;
@@ -58508,7 +59415,7 @@ export interface operations {
             path: {
                 /** @description The organization you are signed in to */
                 org_id: components["parameters"]["Iam.DirectoryOrgIdPath"];
-                /** @description The agent DID (did:oas:<kind>:<ulid>) */
+                /** @description The agent's DID (did:oas:<kind>:<ulid>) or its IAM id (a_<ulid>, the `id` every agent list returns); both name the same agent. */
                 agent_did: string;
             };
             cookie?: never;
@@ -58538,7 +59445,7 @@ export interface operations {
             path: {
                 /** @description The organization you are signed in to */
                 org_id: components["parameters"]["Iam.DirectoryOrgIdPath"];
-                /** @description The agent DID (did:oas:<kind>:<ulid>) */
+                /** @description The agent DID (did:oas:<kind>:<ulid>). This operation answers with the DID only, so it takes only the DID, not the a_ id. */
                 agent_did: string;
             };
             cookie?: never;
@@ -61640,47 +62547,33 @@ export interface operations {
             };
         };
     };
-    flocks_exchangeJoinToken: {
+    fleets_listSeatPlans: {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": {
-                    token: string;
-                    node_nonce: string;
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Credential shown once; save privately before activation */
-            201: {
+            /** @description Seat plans */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Flocks.NativeCredential"];
-                };
-            };
-            /** @description Invalid closed body or unexpected bearer */
-            400: {
-                headers: {
-                    [name: string]: unknown;
+                    "application/json": components["schemas"]["Fleets.SeatPlanList"];
                 };
-                content?: never;
             };
-            /** @description Expired or used join */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Native issuance unavailable */
-            503: {
+            /** @description Insufficient scope (fleets:read) */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -61688,61 +62581,33 @@ export interface operations {
             };
         };
     };
-    flocks_activateNode: {
+    fleets_listSeats: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": {
-                    node_nonce: string;
-                    name: string;
-                    platform: string;
-                    cpu_count: number;
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The same enrolled node, without reusable secrets */
+            /** @description Seats */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        node: components["schemas"]["Flocks.Node"];
-                        activated: boolean;
-                    };
+                    "application/json": components["schemas"]["Fleets.SeatList"];
                 };
             };
-            /** @description Inactive node credential */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Unknown or foreign node/nonce */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Conflicting or revoked reservation */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Native receiver unavailable */
-            503: {
+            /** @description Insufficient scope (fleets:read) */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -61750,68 +62615,64 @@ export interface operations {
             };
         };
     };
-    flocks_rotateNodeCredential: {
+    fleets_hireSeat: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                id: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": {
-                    /** @enum {string} */
-                    action: "prepare" | "commit" | "cancel";
-                    node_nonce: string;
-                    operation_nonce: string;
-                };
+                "application/json": components["schemas"]["Fleets.SeatHireInput"];
             };
         };
         responses: {
-            /** @description Committed or cancelled */
-            200: {
+            /** @description Seat hired */
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        accepted: boolean;
-                    };
+                    "application/json": components["schemas"]["Fleets.Seat"];
                 };
             };
-            /** @description Prepared key shown once; persist before commit */
-            201: {
+            /** @description Verified Genesis identity required */
+            401: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["Flocks.NativeCredential"];
-                };
+                content?: never;
             };
-            /** @description Inactive key version */
-            401: {
+            /** @description Insufficient scope (fleets:write) */
+            403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Unknown or foreign node/nonce */
+            /** @description Pool is missing or belongs to another organization */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Pending, terminal or premature rotation */
+            /** @description Idempotency conflict */
             409: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Rotation unavailable; retain recovery state */
+            /** @description Invalid input */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Henry runtime or seat storage unavailable */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -61820,40 +62681,42 @@ export interface operations {
             };
         };
     };
-    flocks_getEnrollmentReadiness: {
+    fleets_getSeat: {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Enrollment readiness */
+            /** @description Seat */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Flocks.EnrollmentReadiness"];
+                    "application/json": components["schemas"]["Fleets.Seat"];
                 };
             };
-            /** @description Invalid One account credential */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Insufficient permission */
+            /** @description Insufficient scope (fleets:read) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description The configured durable inventory store is unavailable */
-            503: {
+            /** @description Seat is missing or belongs to another organization */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -61861,295 +62724,1584 @@ export interface operations {
             };
         };
     };
-    flocks_listNodes: {
+    fleets_updateSeat: {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Fleets.SeatUpdateInput"];
+            };
+        };
         responses: {
-            /** @description Success */
+            /** @description Seat */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Flocks.Node"][];
+                    "application/json": components["schemas"]["Fleets.Seat"];
                 };
             };
-            /** @description Invalid One account credential or node binding */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Insufficient permission */
+            /** @description Insufficient scope (fleets:write) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Unknown resource in verified org */
+            /** @description Seat is missing or belongs to another organization */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description Seat is releasing or released (code seat_released) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid input */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
-    flocks_createJoinToken: {
+    fleets_topUpSeat: {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": {
-                    /** @default 600 */
-                    ttl_seconds?: number;
-                };
+                "application/json": components["schemas"]["Fleets.SeatTopUpInput"];
             };
         };
         responses: {
-            /** @description Success */
+            /** @description Seat */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Flocks.JoinToken"];
+                    "application/json": components["schemas"]["Fleets.Seat"];
                 };
             };
-            /** @description Invalid One account credential or node binding */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Insufficient permission */
+            /** @description Insufficient scope (fleets:write) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Unknown resource in verified org */
+            /** @description Seat is missing or belongs to another organization */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description Seat is releasing or released */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid input */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
-    flocks_enrollNode: {
+    fleets_upgradeSeat: {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": {
-                    token: string;
-                    name: string;
-                    platform: string;
-                    cpu_count: number;
-                };
+                "application/json": components["schemas"]["Fleets.SeatUpgradeInput"];
             };
         };
         responses: {
-            /** @description Success */
+            /** @description Seat */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Flocks.Enrollment"];
+                    "application/json": components["schemas"]["Fleets.Seat"];
                 };
             };
-            /** @description Invalid One account credential or node binding */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Insufficient permission */
+            /** @description Insufficient scope (fleets:write) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Unknown resource in verified org */
+            /** @description Seat is missing or belongs to another organization */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description Not an upgrade */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid input */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
-    flocks_revokeNode: {
+    fleets_holdSeat: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                id: string;
+                seat_id: components["parameters"]["Fleets.SeatId"];
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Success */
+            /** @description Seat with the tasks it cancelled */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Flocks.Node"];
+                    "application/json": components["schemas"]["Fleets.SeatStop"];
                 };
             };
-            /** @description Invalid One account credential or node binding */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Insufficient permission */
+            /** @description Insufficient scope (fleets:write) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Unknown resource in verified org */
+            /** @description Seat is missing or belongs to another organization */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description Seat is releasing or released (code seat_released) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
-    flocks_renameNode: {
+    fleets_resumeSeat: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                id: string;
+                seat_id: components["parameters"]["Fleets.SeatId"];
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": {
-                    nickname?: string;
-                    /** @description Up to 32 labels; keys [a-z0-9._/-]{1,63}, values up to 128 printable characters. */
-                    labels?: {
-                        [key: string]: string;
-                    };
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Success */
+            /** @description Seat */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Flocks.Node"];
+                    "application/json": components["schemas"]["Fleets.Seat"];
                 };
             };
-            /** @description Invalid One account credential or node binding */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Insufficient permission */
+            /** @description Insufficient scope (fleets:write) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Unknown resource in verified org */
+            /** @description Seat is missing or belongs to another organization */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description Seat is releasing or released (code seat_released) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
-    flocks_heartbeatNode: {
+    fleets_killSeat: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                id: string;
+                seat_id: components["parameters"]["Fleets.SeatId"];
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": {
-                    node_binding: string;
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Success */
+            /** @description Seat with the tasks it cancelled and the agent state */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        accepted: boolean;
-                    };
+                    "application/json": components["schemas"]["Fleets.SeatStop"];
                 };
             };
-            /** @description Invalid One account credential or node binding */
+            /** @description Verified Genesis identity required */
             401: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Insufficient permission */
+            /** @description Insufficient scope (fleets:write) */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Unknown resource in verified org */
+            /** @description Seat is missing or belongs to another organization */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description Seat is releasing or released (code seat_released) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
-    flocks_getNodeActivity: {
+    fleets_releaseSeat: {
         parameters: {
-            query?: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Released seat */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.SeatRelease"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seat is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Work is still settling (code tasks_settling); retry */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_listSeatTasks: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Seat tasks */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.SeatTaskList"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seat is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_submitSeatTask: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Fleets.SeatTaskInput"];
+            };
+        };
+        responses: {
+            /** @description Task accepted */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.SeatTask"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Purse empty (code purse_empty) */
+            402: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seat is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seat is held */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid input */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_getSeatTask: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+                task_id: components["parameters"]["Fleets.SeatTaskId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Seat task */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.SeatTask"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seat or task is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_decideSeatTaskApproval: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+                task_id: components["parameters"]["Fleets.SeatTaskId"];
+                approval_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Fleets.SeatApprovalDecision"];
+            };
+        };
+        responses: {
+            /** @description Seat task */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.SeatTask"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Granting open_computer could not reserve credits (code purse_empty) */
+            402: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seat */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seat is held */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid input */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_getSeatLedger: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                seat_id: components["parameters"]["Fleets.SeatId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Purse entries */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.SeatLedger"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seat is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_listPools: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Pools */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.PoolList"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_createPool: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Fleets.PoolCreateInput"];
+            };
+        };
+        responses: {
+            /** @description Pool created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.Pool"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Idempotency conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid input */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_getPool: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: components["parameters"]["Fleets.PoolId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Pool */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.Pool"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Pool is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_topUpPool: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: components["parameters"]["Fleets.PoolId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Fleets.PoolTopUpInput"];
+            };
+        };
+        responses: {
+            /** @description Pool */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.Pool"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Pool is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Pool is released (code pool_released) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid input */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_releasePool: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: components["parameters"]["Fleets.PoolId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Released pool */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.PoolRelease"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Pool is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Seats under the pool are not released (code pool_has_seats) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_getPoolLedger: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                pool_id: components["parameters"]["Fleets.PoolId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Purse entries */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.SeatLedger"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Pool is missing or belongs to another organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_getComputerConnection: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Secret-free status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.ComputerConnection"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:read) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Connection storage unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_putComputerConnection: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Fleets.ComputerConnectionInput"];
+            };
+        };
+        responses: {
+            /** @description Secret-free status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.ComputerConnection"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Invalid or foreign-organization credential */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Connection storage unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    fleets_deleteComputerConnection: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Secret-free status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Fleets.ComputerConnection"];
+                };
+            };
+            /** @description Verified Genesis identity required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient scope (fleets:write) */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Connection storage unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_exchangeJoinToken: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    token: string;
+                    node_nonce: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Credential shown once; save privately before activation */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Flocks.NativeCredential"];
+                };
+            };
+            /** @description Invalid closed body or unexpected bearer */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Expired or used join */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Native issuance unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_activateNode: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    node_nonce: string;
+                    name: string;
+                    platform: string;
+                    cpu_count: number;
+                };
+            };
+        };
+        responses: {
+            /** @description The same enrolled node, without reusable secrets */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        node: components["schemas"]["Flocks.Node"];
+                        activated: boolean;
+                    };
+                };
+            };
+            /** @description Inactive node credential */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unknown or foreign node/nonce */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Conflicting or revoked reservation */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Native receiver unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_rotateNodeCredential: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @enum {string} */
+                    action: "prepare" | "commit" | "cancel";
+                    node_nonce: string;
+                    operation_nonce: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Committed or cancelled */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        accepted: boolean;
+                    };
+                };
+            };
+            /** @description Prepared key shown once; persist before commit */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Flocks.NativeCredential"];
+                };
+            };
+            /** @description Inactive key version */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unknown or foreign node/nonce */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Pending, terminal or premature rotation */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Rotation unavailable; retain recovery state */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_getEnrollmentReadiness: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Enrollment readiness */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Flocks.EnrollmentReadiness"];
+                };
+            };
+            /** @description Invalid One account credential */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient permission */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The configured durable inventory store is unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_listNodes: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Flocks.Node"][];
+                };
+            };
+            /** @description Invalid One account credential or node binding */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient permission */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unknown resource in verified org */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_createJoinToken: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @default 600 */
+                    ttl_seconds?: number;
+                };
+            };
+        };
+        responses: {
+            /** @description Success */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Flocks.JoinToken"];
+                };
+            };
+            /** @description Invalid One account credential or node binding */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient permission */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unknown resource in verified org */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_enrollNode: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    token: string;
+                    name: string;
+                    platform: string;
+                    cpu_count: number;
+                };
+            };
+        };
+        responses: {
+            /** @description Success */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Flocks.Enrollment"];
+                };
+            };
+            /** @description Invalid One account credential or node binding */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient permission */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unknown resource in verified org */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_revokeNode: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Success */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Flocks.Node"];
+                };
+            };
+            /** @description Invalid One account credential or node binding */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient permission */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unknown resource in verified org */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_renameNode: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    nickname?: string;
+                    /** @description Up to 32 labels; keys [a-z0-9._/-]{1,63}, values up to 128 printable characters. */
+                    labels?: {
+                        [key: string]: string;
+                    };
+                };
+            };
+        };
+        responses: {
+            /** @description Success */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Flocks.Node"];
+                };
+            };
+            /** @description Invalid One account credential or node binding */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient permission */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unknown resource in verified org */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_heartbeatNode: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    node_binding: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Success */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        accepted: boolean;
+                    };
+                };
+            };
+            /** @description Invalid One account credential or node binding */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Insufficient permission */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unknown resource in verified org */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    flocks_getNodeActivity: {
+        parameters: {
+            query?: {
                 /** @description Runs per page, 1-100 (default 50) */
                 limit?: number;
                 /** @description Opaque next_cursor from the previous page */
@@ -88461,6 +90613,58 @@ export interface operations {
             422: components["responses"]["Auto.Invalid"];
         };
     };
+    auto_callMcp: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                /**
+                 * @example {
+                 *       "jsonrpc": "2.0",
+                 *       "id": 1,
+                 *       "method": "tools/call",
+                 *       "params": {
+                 *         "name": "auto_list_orgs",
+                 *         "arguments": {}
+                 *       }
+                 *     }
+                 */
+                "application/json": components["schemas"]["Auto.McpRequest"];
+            };
+        };
+        responses: {
+            /** @description The JSON-RPC response, a result or a JSON-RPC error */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Auto.McpResponse"];
+                };
+            };
+            /** @description A notification was accepted; no body */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description A batch (`batch_unsupported` from Auto, `BATCH_UNSUPPORTED` through the gateway) or a body that is not JSON */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Auto.AutoError"];
+                };
+            };
+            403: components["responses"]["Auto.Forbidden"];
+        };
+    };
     scopes_whoami: {
         parameters: {
             query?: never;
@@ -94858,7 +97062,7 @@ export interface operations {
         parameters: {
             query?: never;
             header?: {
-                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send and agent batch send read it. */
+                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send, agent batch send and agent mailbox send read it. */
                 "Idempotency-Key"?: components["parameters"]["Boxes.IdempotencyKey"];
             };
             path?: never;
@@ -95027,7 +97231,7 @@ export interface operations {
         parameters: {
             query?: never;
             header?: {
-                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send and agent batch send read it. */
+                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send, agent batch send and agent mailbox send read it. */
                 "Idempotency-Key"?: components["parameters"]["Boxes.IdempotencyKey"];
             };
             path?: never;
@@ -102993,6 +105197,496 @@ export interface operations {
             };
         };
     };
+    boxes_mail_agents_list: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Agent mailboxes */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailAgentMailbox"][];
+                    };
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing boxes:read */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_create: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Boxes.MailAgentCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description The agent already has a mailbox */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Boxes.MailAgentMailboxResponse"];
+                };
+            };
+            /** @description Mailbox created or restored */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Boxes.MailAgentMailboxResponse"];
+                };
+            };
+            /** @description Malformed body or agentId */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing boxes:write */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description ADDRESS_CONFLICT (the address is already reserved) or AGENT_MAILBOX_LIMIT (the project already has 500 active agent mailboxes; One is not counted) */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Agent mailbox */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Boxes.MailAgentMailboxResponse"];
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The agent has no active mailbox in this project */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_delete: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Mailbox deleted (status deleted) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Boxes.MailAgentMailboxResponse"];
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The agent has no active mailbox in this project */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description One's default mailbox cannot be deleted */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_inbox_list: {
+        parameters: {
+            query?: {
+                /** @description Folder name; defaults to inbox */
+                folder?: string;
+                page?: number;
+                /** @description Values outside 1-100 are clamped */
+                limit?: number;
+                /** @description Only unread messages */
+                unreadOnly?: boolean;
+                /** @description Only starred messages */
+                starred?: boolean;
+            };
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Messages page */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailMessage"][];
+                        meta?: components["schemas"]["Boxes.MailListMeta"];
+                    };
+                };
+            };
+            /** @description Malformed JSON body or query parameters */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_send: {
+        parameters: {
+            query?: never;
+            header?: {
+                /** @description Must be a UUID. Optional: the service generates one when absent and rejects a malformed value with 422. Only mail send, agent batch send and agent mailbox send read it. */
+                "Idempotency-Key"?: components["parameters"]["Boxes.IdempotencyKey"];
+            };
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Boxes.MailSendRequest"];
+            };
+        };
+        responses: {
+            /** @description Idempotent replay of an earlier send */
+            200: {
+                headers: {
+                    /** @description The request idempotency key (the supplied UUID, or the generated one) under the Resend transport. */
+                    "Idempotency-Key"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailMessage"];
+                    };
+                };
+            };
+            /** @description Message created */
+            201: {
+                headers: {
+                    /** @description The request idempotency key (the supplied UUID, or the generated one) under the Resend transport. */
+                    "Idempotency-Key"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailMessage"];
+                    };
+                };
+            };
+            /** @description Malformed JSON body or query parameters */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Validation error */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Rate limited */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_threads_list: {
+        parameters: {
+            query?: {
+                page?: number;
+                /** @description Values outside 1-100 are clamped */
+                limit?: number;
+            };
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Threads page */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailThread"][];
+                        meta?: components["schemas"]["Boxes.MailListMeta"];
+                    };
+                };
+            };
+            /** @description Malformed JSON body or query parameters */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The agent has no active mailbox in this project */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_threads_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Thread detail */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailThreadDetail"];
+                    };
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    boxes_mail_agents_messages_get: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The agent identity that owns the mailbox. "one" is One, the default agent in every project; a_<ULID> is an OpenAgentID enrolled at Auth. */
+                agentId: components["parameters"]["Boxes.AgentId"];
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Message and labels */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        success: boolean;
+                        data: components["schemas"]["Boxes.MailMessageWithLabels"];
+                    };
+                };
+            };
+            /** @description Missing or invalid authentication */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     brews_createBrew: {
         parameters: {
             query?: never;