@ornncompute/cli 1.0.135 → 1.0.137

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ornncompute/cli",
-  "version": "1.0.135",
+  "version": "1.0.137",
   "description": "Command-line interface for Ornn compute access workflows.",
   "type": "module",
   "bin": {

package/vendor/capabilities/cli.js

@@ -375,7 +375,6 @@ var adminSshCapability = defineCapability({
   roles: ["admin"],
   description: "Open staff SSH using a temporary local key and a short-lived node certificate.",
   mutation: "local",
-  http: { method: "POST", path: "/v1/orchestrator/nodes/{node_id}/ssh-certificates" },
   mcp: false,
   slack: false,
   cli: {
@@ -670,7 +669,6 @@ var listFacilitiesCapability = defineCapability({
   roles: ["admin"],
   description: "List facilities (id, display name, region, supplier organization id). Optional organization_id filter. When nextCursor is present, pass it back as cursor for the next page. Use facilities.show to resolve one facility id.",
   mutation: "read",
-  http: { method: "GET", path: "/internal/v1/facilities" },
   slack: {
     parameters: {
       type: "object",
@@ -709,7 +707,6 @@ var facilityShowCapability = defineCapability({
   roles: ["admin"],
   description: "Resolve one facility id (e.g. a listing's facilityId) to its display name, region and status.",
   mutation: "read",
-  http: { method: "GET", path: "/internal/v1/facilities/{facilityId}" },
   cli: false,
   slack: {
     parameters: {
@@ -732,7 +729,6 @@ var listNodesCapability = defineCapability({
   roles: ["user", "admin"],
   description: "List nodes. Users see their own reserved machines. Admins see enrolled and ghost nodes. Call with no filters for the whole fleet. Optional reservation_id lists the nodes on one reservation (find a customer's reservations with reservation.list customerId). Optional organization_id (supplier), facility_id, and status (ghost, bare-metal) narrow the same list. Paginate large fleets with cursor + max: pass the response's next_cursor back as cursor to fetch the next page; next_cursor is omitted once the page is not full. Never invent nodes. Never print private keys.",
   mutation: "read",
-  http: { method: "GET", path: "/nodes" },
   slack: {
     parameters: {
       type: "object",
@@ -790,7 +786,6 @@ var nodeExecCapability = defineCapability({
   roles: ["admin"],
   description: "Admin-only. Run one unrestricted command over orchestrator SSH. Pass node_id for an enrolled node (uses its stored admin key), or host + private_key (+ optional username, default root, and port, default 22) for any host, including one not enrolled yet. Always pass timeout_seconds. Not an interactive shell. On NVIDIA hosts use nvidia-smi; on AMD Instinct use amd-smi. Runs on the tool call \u2014 no confirm, no y/N.",
   mutation: "immediate",
-  http: { method: "POST", path: "/v1/staff/remote" },
   slack: {
     parameters: {
       type: "object",
@@ -821,7 +816,6 @@ var nodeTerminateCapability = defineCapability({
   roles: ["admin"],
   description: "Admin-only. Mark a node terminated and clear its assignment once no undeleted VM remains on it. Does no host cleanup. There is no deenroll verb. Slack waits for a human confirm. ",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/orchestrator/nodes/{id}/terminate" },
   cli: {
     command: ["admin", "nodes", "terminate"],
     vnext: {
@@ -962,7 +956,6 @@ var telemetryLatestCapability = defineCapability({
   roles: ["user", "admin"],
   description: "One-shot telemetry window for one node (start/end or span plus max_points). Users may only query a reserved machine. Admins may query any enrolled node. Pass a node UUID. Use this for heartbeat / last-seen / public_ip. Not a live stream.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/observability/nodes/{id}/telemetry/query" },
   slack: {
     parameters: {
       type: "object",
@@ -999,7 +992,6 @@ var telemetryLatestBatchCapability = defineCapability({
   roles: ["user", "admin"],
   description: "Latest telemetry tip (last heartbeat, public_ip, GPU/CPU/memory utilization) for up to 100 nodes in one call. Prefer this over telemetry_latest per node when checking several nodes.",
   mutation: "read",
-  http: { method: "POST", path: "/v1/observability/nodes/telemetry/latest" },
   cli: false,
   slack: {
     parameters: {
@@ -1024,7 +1016,6 @@ var logsLatestCapability = defineCapability({
   roles: ["user", "admin"],
   description: "Stored kernel or serial logs, all severities, newest first. Optional start/before bounds can query any retained history; default is the seven days before now. First call omits cursor; subsequent pages pass next_cursor with the same start/before. Users only on a reserved machine. Not a live tail.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/observability/nodes/{id}/logs/{stream}/query" },
   slack: {
     parameters: {
       type: "object",
@@ -1066,7 +1057,6 @@ var telemetrySnapshotCapability = defineCapability({
   roles: ["admin"],
   description: "Read the latest stored heartbeat with all staff-visible fields, including version, status, port context, and kernel-log coverage when stored. Works while the node is offline; check observed_at for staleness. limit=1 returns the latest row; larger limits only scan a bounded recent window, at most 24h. Use telemetry.latest for historical numeric windows.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/observability/nodes/{id}/telemetry/latest" },
   mcp: false,
   slack: {
     parameters: {
@@ -1090,7 +1080,6 @@ var telemetryTailCapability = defineCapability({
   roles: ["user", "admin"],
   description: "Live telemetry follow on the same Observability subscribe feed the graphs use. Users only on a reserved machine. Slack and MCP attach for duration (default 20s) and return events. Not telemetry.latest.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/observability/nodes/{id}/telemetry/subscribe" },
   slack: {
     parameters: {
       type: "object",
@@ -1116,7 +1105,6 @@ var logsTailCapability = defineCapability({
   roles: ["user", "admin"],
   description: "Live kernel or serial log follow on the same Observability subscribe feed LogViewer uses. Users only on a reserved machine. Slack and MCP attach for duration (default 20s). Not logs.latest.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/observability/nodes/{id}/logs/{stream}/subscribe" },
   slack: {
     parameters: {
       type: "object",
@@ -1193,7 +1181,6 @@ var tokensListCapability = defineCapability({
   roles: ["admin"],
   description: "List issued enrollment tokens (id, supplier organization_id, status, expiry). Does not return plaintext secrets.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/orchestrator/enrollment-tokens" },
   slack: { parameters: { type: "object", properties: {} } },
   input: emptyInput,
   execute: async (ctx) => listEnrollmentTokens(ctx.fetch)
@@ -1204,7 +1191,6 @@ var tokensCreateCapability = defineCapability({
   roles: ["admin"],
   description: "Admin-only. Mint an enrollment token. Without a host this returns the curl installer. With host + private_key, orchestrator SSHs and runs that curl (same as Bulk Enroll). Never invent a command. Slack waits for a human confirm. ",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/orchestrator/enrollment-tokens" },
   slack: {
     parameters: {
       type: "object",
@@ -1484,7 +1470,6 @@ var adminNodeHealthCapability = defineCapability({
   roles: ["admin"],
   description: "Read lifecycle and readiness facts for one enrolled node.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/orchestrator/nodes/{id}" },
   cli: {
     command: ["admin", "nodes", "health"],
     vnext: adminHelp(["admin", "nodes", "health"], "Inspect lifecycle and readiness facts for one node.", "ornn admin nodes health <node-id>", "ornn admin nodes health <node-id> --format json", ["canonical node ID"])
@@ -1810,7 +1795,6 @@ var adminCapacityOffersCreateCapability = defineCapability({
   roles: ["admin"],
   description: "Create native capacity with an organization, a facilityId or a location, hardware, availability and advertised terms. A location is any state, city, address, or catalog region (us-west-3); Ornn places it in a catalog region and uses the organization's facility there. Primary capacity needs daysToRfs (0 when ready now) or both availableAt and availableUntil. nodeIds attach nodes at creation. Returns {listing, terms}. Requires an idempotencyKey reused on retries and confirm: true.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/commerce/v2/listings" },
   input: nativeListingCreateInput,
   slack: false,
   cli: {
@@ -1899,7 +1883,6 @@ var listingsListCapability = defineCapability({
   roles: ["user"],
   description: "List native capacity listings. Primary listings require organization approval. Returns capacityListingId, hardware, capacity and availability; when nextCursor is present, pass it back as cursor for the next page. Read listings.terms separately for prices and durations.",
   mutation: "read",
-  http: { method: "GET", path: "/commerce/v2/listings" },
   input: listingsListInput,
   cli: {
     command: ["capacity-offers", "list"],
@@ -1928,7 +1911,6 @@ var listingShowCapability = defineCapability({
   roles: ["user"],
   description: "Show one native capacity listing. Returns capacityListingId, hardware, capacity and availability; use listings.terms for financial choices.",
   mutation: "read",
-  http: { method: "GET", path: "/commerce/v2/listings/{listingId}" },
   input: listingShowInput,
   cli: {
     command: ["capacity-offers", "show"],
@@ -1946,7 +1928,6 @@ var listingTermsCapability = defineCapability({
   roles: ["user"],
   description: "Read a capacity listing's advertised financial terms. Each term returns listingTermsId, capacityListingId, pricePerGpuHourMicroUsd, duration bounds, downPaymentCents and renewable. Use the parent's capacityListingId as listingId. Prices are gross integer micro-USD per GPU-hour (per vCPU-hour on CPU capacity), the price reservations.purchase expects.",
   mutation: "read",
-  http: { method: "GET", path: "/commerce/v2/listings/{listingId}/terms" },
   input: listingShowInput,
   cli: {
     command: ["capacity-offers", "terms"],
@@ -2001,7 +1982,6 @@ var listingRelistCapability = defineCapability({
   roles: ["user"],
   description: "Relist whole nodes of a reservation's capacity using a native availability window, nodeCount and financial terms. Buyers run on nodes Ornn assigns when their rental starts..",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/commerce/reservations/{reservationId}/relist" },
   input: listingRelistInput,
   cli: {
     command: ["capacity-offers", "relist"],
@@ -2032,7 +2012,6 @@ var listingUpdateCapability = defineCapability({
   roles: ["admin"],
   description: "Staff only: edit one advertised native financial term with its complete financial fields. Reuse idempotencyKey on retries..",
   mutation: "preview-confirm",
-  http: { method: "PATCH", path: "/commerce/v2/listings/{listingId}/terms/{listingTermsId}" },
   input: listingUpdateInput,
   cli: {
     command: ["admin", "capacity-offers", "update"],
@@ -2061,7 +2040,6 @@ var listingDelistCapability = defineCapability({
   roles: ["user"],
   description: "Delist a listing you own. Its unsold time leaves the market, its spot asks are cancelled and running spot reservations on it end. Windows already bought stay sold..",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/commerce/v2/listings/{listingId}/delist" },
   input: listingDelistInput,
   cli: {
     command: ["capacity-offers", "delist"],
@@ -2103,7 +2081,6 @@ var reservationsListCapability = defineCapability({
   roles: ["user"],
   description: "List this organization's reservations, schedule and spot alike (a running spot reservation has no end time). With listingId, list the trades on a listing you own. When nextCursor is present, pass it back as cursor for the next page.",
   mutation: "read",
-  http: { method: "GET", path: "/commerce/reservations" },
   input: reservationsListInput,
   cli: {
     command: ["reservations", "list"],
@@ -2126,7 +2103,6 @@ var reservationsShowCapability = defineCapability({
   roles: ["user"],
   description: "Show one reservation: kind, status, window, price and node count.",
   mutation: "read",
-  http: { method: "GET", path: "/commerce/reservations/{reservationId}" },
   input: reservationLookupInput,
   cli: {
     command: ["reservations", "show"],
@@ -2144,7 +2120,6 @@ var reservationInvoicesCapability = defineCapability({
   roles: ["user"],
   description: "List a reservation's invoices: the down payment and each billing period, with status and amount in cents.",
   mutation: "read",
-  http: { method: "GET", path: "/commerce/reservations/{reservationId}/invoices" },
   input: reservationLookupInput,
   cli: {
     command: ["reservations", "invoices"],
@@ -2572,7 +2547,6 @@ var marketEndCapability = defineCapability({
   roles: ["user"],
   description: "End a running fill: its reservation stops, its VMs stop, and its capacity goes back on the book..",
   mutation: "preview-confirm",
-  http: { method: "DELETE", path: "/commerce/reservations/{fillId}" },
   input: marketEndInput,
   cli: {
     command: ["market", "end"],
@@ -2813,7 +2787,6 @@ var adminEnrollmentTokenRevokeCapability = defineCapability({
   roles: ["admin"],
   description: "Internal staff only: revoke one exact enrollment-token generation after reconciling its durable goal.",
   mutation: "preview-confirm",
-  http: { method: "DELETE", path: "/v1/orchestrator/enrollment-tokens/{tokenId}" },
   cli: {
     command: ["admin", "enrollment-tokens", "revoke"],
     vnext: adminHelp3(["admin", "enrollment-tokens", "revoke"], "Revoke one exact enrollment-token generation.", "ornn admin enrollment-tokens revoke <token-id> [--expected-created-at TIME] []", "ornn admin enrollment-tokens revoke <token-id> --expected-created-at TIME  --idempotency-key KEY --format json", ["canonical token UUID", "token created_at generation"], "Review the exact token generation and the loss of future enrollment access.")
@@ -2887,7 +2860,6 @@ var adminNodeEnrollCapability = defineCapability({
   roles: ["admin"],
   description: "Enroll one explicit node over SSH with an explicit supplier and facility assignment.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/staff/remote" },
   cli: {
     command: ["admin", "nodes", "enroll"],
     vnext: adminHelp3(["admin", "nodes", "enroll"], "Install Ornn management on one explicitly assigned node.", "ornn admin nodes enroll <node-id> --host HOST --supplier UUID --facility UUID [--filter COMPARTMENT_IDS] --identity-file PATH --token-ttl SECONDS --replace-existing-management [--verbose] []", "Unsupported: remote enrollment requires an eligible human terminal.", ["canonical node UUID", "canonical supplier organization UUID", "canonical facility UUID"], "Review node identity, SSH target, assignment, compartment filter, and replacement of existing management.")
@@ -2957,7 +2929,6 @@ var adminNodeExportKeyCapability = defineCapability({
   roles: ["admin"],
   description: "Export an enrolled node's private admin key only through an explicit secret destination.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/orchestrator/enrollment/admin-ssh-key" },
   cli: {
     command: ["admin", "nodes", "export-key"],
     vnext: adminHelp3(["admin", "nodes", "export-key"], "Export one node admin key deliberately.", "ornn admin nodes export-key <node-id> (--print | --output PATH) [--overwrite]", "ornn admin nodes export-key <node-id> --output PATH [--overwrite] --format json", ["canonical node UUID"])
@@ -2976,7 +2947,6 @@ var adminNodeRotateKeyCapability = defineCapability({
   roles: ["admin"],
   description: "Replace a node's admin key and export the new private key explicitly.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/orchestrator/enrollment/admin-ssh-key" },
   cli: {
     command: ["admin", "nodes", "rotate-key"],
     vnext: adminHelp3(["admin", "nodes", "rotate-key"], "Rotate one node admin key and export the replacement deliberately.", "ornn admin nodes rotate-key <node-id> (--print | --output PATH) [--overwrite] []", "Unsupported: key rotation requires an eligible human terminal.", ["canonical node UUID"], "Review the node and loss of access through the previous private key.")
@@ -3043,7 +3013,6 @@ var adminNodeDiagnoseCapability = defineCapability({
   roles: ["admin"],
   description: "Queue the staff-authorized diagnosis workflow for one exact node after a live review.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/benchmark/jobs" },
   cli: {
     command: ["admin", "nodes", "diagnose"],
     vnext: adminNodeHelp(["admin", "nodes", "diagnose"], "Queue diagnosis for one exact node.", "ornn admin nodes diagnose <node-id>", "Unavailable in machine and redirected modes; use an eligible human terminal.", "Exact node, lifecycle, reachability, and diagnosis workflow.")
@@ -3188,7 +3157,6 @@ var nodeSanitizeStartCapability = defineCapability({
   roles: ["admin"],
   description: "Destructive staff maintenance write: start node drive sanitization with a stable job UUID. data_wipe erases local data drives and keeps the OS; ram_roundtrip does not erase drives; node_turnover wipes and restores the whole node; host_restore restores the host. Supply the exact operation-specific confirmation phrase yourself; it is never filled automatically. The job then waits for staff approval. Slack waits for a human confirm.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/orchestrator/nodes/{node_id}/sanitize-drives" },
   cli: {
     command: ["admin", "nodes", "sanitize"],
     vnext: sanitizeHelp(["admin", "nodes", "sanitize"], "Start one held sanitize job on one exact node.", "ornn admin nodes sanitize <node-id> --operation data_wipe|ram_roundtrip|node_turnover|host_restore --confirmation PHRASE [--recovery-uuid UUID] [--job-id UUID] [--batch UUID]", "Exact node, operation, job UUID, and confirmation phrase.")
@@ -3209,7 +3177,6 @@ var nodeSanitizeShowCapability = defineCapability({
   roles: ["admin"],
   description: "Staff maintenance read: show the bounded JSON status for one node sanitize job, including its operation, approval, manual cleanup attestation, and per-drive results. This does not request an NDJSON download.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/orchestrator/nodes/{node_id}/sanitize-drives/{job_id}" },
   cli: {
     command: ["admin", "nodes", "sanitize-status"],
     vnext: sanitizeHelp(["admin", "nodes", "sanitize-status"], "Read one sanitize job on one exact node.", "ornn admin nodes sanitize-status <node-id> --job UUID")
@@ -3228,7 +3195,6 @@ var nodeSanitizeUpdateCapability = defineCapability({
   roles: ["admin"],
   description: "Staff maintenance write on a held sanitize job. APPROVE SANITIZATION starts destructive maintenance. SKIP SANITIZATION skips an eligible first-use wipe and certifies nothing. ACCEPT MANUAL CLEANUP lets a held Bare Metal release finish when its node_turnover job is awaiting_approval with no recovery image, after staff manually revoked tenant access and sanitized the data drives with the OS retained; it requires manual_cleanup with the reservation, the current orchestrator release operation, a reason, the evidence file SHA-256, and all three attestations. The owner enforces eligibility. Slack waits for a human confirm.",
   mutation: "preview-confirm",
-  http: { method: "PATCH", path: "/v1/orchestrator/nodes/{node_id}/sanitize-drives/{job_id}" },
   cli: {
     command: ["admin", "nodes", "sanitize-decide"],
     vnext: sanitizeHelp(["admin", "nodes", "sanitize-decide"], "Approve, skip, or accept manual cleanup for one held sanitize job.", 'ornn admin nodes sanitize-decide <node-id> --job UUID --confirmation "APPROVE SANITIZATION"|"SKIP SANITIZATION"|"ACCEPT MANUAL CLEANUP" [--reservation UUID --release-operation UUID --reason TEXT --evidence-file PATH --tenant-access-revoked --data-drives-sanitized --acknowledge-retained-os]', "Exact node, job, decision, and for manual cleanup the reservation, release operation, reason, evidence SHA-256, and retained-OS attestations.")
@@ -3321,7 +3287,6 @@ var adminNodeRebootCapability = defineCapability({
   roles: ["admin"],
   description: "Reboot the exact live machine backing one managed node after a normalized review.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/orchestrator/nodes/{id}/reboot" },
   cli: {
     command: ["admin", "nodes", "reboot"],
     vnext: adminLifecycleHelp(["admin", "nodes", "reboot"], "Reboot one exact live machine while preserving local data and access configuration.", "ornn admin nodes reboot <node-ref> [] [--no-wait] [--timeout SECONDS]", "Unsupported: reboot requires an eligible human terminal.", "Node and live-machine identities, supplier, facility, capacity assignment, and preserved access.")
@@ -3337,7 +3302,6 @@ var adminNodeHardResetCapability = defineCapability({
   roles: ["admin"],
   description: "Hard reset the exact live machine backing one node with explicit local-data erasure scope.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/orchestrator/nodes/{id}/reboot" },
   cli: {
     command: ["admin", "nodes", "hard-reset"],
     vnext: adminLifecycleHelp(["admin", "nodes", "hard-reset"], "Erase local tenant data and hard reset one exact live machine.", "ornn admin nodes hard-reset <node-ref> --erase-local-data [] [--no-wait] [--timeout SECONDS]", "Unsupported: hard reset requires an eligible human terminal.", "Node and live-machine identities, supplier, facility, capacity assignment, erased local data, and restored keys.")
@@ -3353,7 +3317,6 @@ var adminNodeAssignCapability = defineCapability({
   roles: ["admin"],
   description: "Assign one exact node to one exact capacity reservation after consequence review.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/v1/orchestrator/nodes/{id}/assign" },
   cli: {
     command: ["admin", "nodes", "assign"],
     vnext: adminLifecycleHelp(["admin", "nodes", "assign"], "Assign one exact node to one exact capacity reservation.", "ornn admin nodes assign <node-ref> --reservation <reservation-id> [] [--no-wait]", "ornn admin nodes assign <node-id> --reservation <reservation-id>  --idempotency-key KEY --format json", "Node, supplier, facility, previous and requested capacity assignments, and tenant access change.")
@@ -3381,8 +3344,6 @@ var adminNodeLifecycleCapabilities = [
 
 // ../../packages/capabilities/dist/capabilities/billing.js
 import { z as z16 } from "zod";
-var INVOICES_ROUTE = "/commerce/invoices";
-var SHOWBACK_ROUTE = "/commerce/billing/showback";
 var DATE_ONLY = /^\d{4}-\d{2}-\d{2}$/;
 var billingCapabilities = [
   defineCapability({
@@ -3391,7 +3352,6 @@ var billingCapabilities = [
     roles: ["user"],
     description: "Read account billing totals: open balance, earliest due date, and paid monthly totals grouped by currency. Usage estimates are available separately through billing_showback.",
     mutation: "read",
-    http: { method: "GET", path: "/commerce/billing/summary" },
     input: z16.object({}),
     slack: false,
     execute: (ctx) => getBillingSummary(ctx.fetch)
@@ -3402,7 +3362,6 @@ var billingCapabilities = [
     roles: ["user"],
     description: "List a page of this tenant's invoices.",
     mutation: "read",
-    http: { method: "GET", path: INVOICES_ROUTE },
     input: z16.object({
       limit: z16.number().int().min(1).max(500).optional(),
       cursor: z16.string().trim().min(1).max(2048).optional()
@@ -3416,7 +3375,6 @@ var billingCapabilities = [
     roles: ["user"],
     description: "Get a showback report of this tenant's usage for a date range: per-reservation unit-hours, estimated cost, and share of total. Each row's unit is a GPU, or a vCPU when its `unit` is `vcpu` (CPU capacity); gpuCount and gpuHours count that unit. Unit-hours are the billable reservation interval that falls inside the inclusive dates, not a whole calendar day. This is an estimate from reservation windows, not a bill. Use billing_summary or billing_invoices for amounts actually charged.",
     mutation: "read",
-    http: { method: "GET", path: SHOWBACK_ROUTE },
     input: z16.object({
       start: z16.string().regex(DATE_ONLY, "start must be a date in yyyy-mm-dd format."),
       end: z16.string().regex(DATE_ONLY, "end must be a date in yyyy-mm-dd format.")
@@ -4027,9 +3985,6 @@ var computeCapabilities = [
   sshKeyAssignmentSyncCapability,
   sshKeyAssignmentStatusCapability
 ];
-var NODES_ROUTE = "/v1/orchestrator/nodes";
-var ORG_SSH_KEYS_ROUTE = "/v1/workflows/compute/nodes/organizations/me/ssh-keys";
-var CLUSTER_USERS_ROUTE = "/v1/workflows/compute/nodes/organizations/me/cluster-users";
 var pageInput = z17.object({
   limit: z17.number().int().min(1).max(500).optional(),
   cursor: z17.string().optional()
@@ -4052,7 +4007,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "Show VM and Bare Metal SSH access machines for a reservation.",
     mutation: "read",
-    http: { method: "GET", path: NODES_ROUTE },
     input: z17.object({ reservationId: z17.string() }),
     slack: false,
     execute: (ctx, input) => listNodes(ctx.fetch, { reservation_id: input.reservationId })
@@ -4063,7 +4017,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "Activate access (bare-metal by default, or VM via accessMode) for a reservation and launch machine(s) with the given SSH key(s), optionally on the private network via networkMode. A VM launches on the reservation's saved disk; pass diskId to choose one, which a reservation without a saved disk needs.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: `${NODES_ROUTE}/reservations/{reservationId}/launch` },
     input: z17.object({
       reservationId: z17.string(),
       sshKeyIds: z17.array(z17.string()).min(1),
@@ -4097,7 +4050,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "Switch a live reservation between public/private network mode (and optionally VM/Bare Metal) via switch-access. Use this instead of re-launching when machines are already running. Supply a unique requestId and keep it to check progress, including after a timeout. Acceptance does not confirm completion.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: `${NODES_ROUTE}/reservations/{reservationId}/switch-access` },
     input: z17.object({
       reservationId: z17.string(),
       networkMode: z17.enum(["public", "private"]),
@@ -4121,7 +4073,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "List SSH keys registered for a reservation.",
     mutation: "read",
-    http: { method: "GET", path: `${NODES_ROUTE}/reservations/{reservationId}/ssh-keys` },
     input: z17.object({ reservationId: z17.string() }),
     slack: false,
     execute: (ctx, input) => listReservationSshKeys(ctx.fetch, input.reservationId)
@@ -4132,7 +4083,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: `Add an SSH key to a reservation. ${ADDED_KEY_OUTCOME}`,
     mutation: "preview-confirm",
-    http: { method: "POST", path: `${NODES_ROUTE}/reservations/{reservationId}/ssh-keys` },
     input: publicKeyInput.extend({ reservationId: z17.string() }),
     slack: false,
     execute: (ctx, input) => addReservationSshKey(ctx.fetch, input.reservationId, {
@@ -4146,7 +4096,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "Reboot a running reservation machine. Keeps storage and SSH keys. Pass the machine/node instance id from access_show.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: `${NODES_ROUTE}/{nodeId}/reboot` },
     input: nodeIdInput,
     mcp: { name: "nodes_reboot" },
     slack: false,
@@ -4158,7 +4107,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "Hard-reset a running reservation machine: clean (wipe tenant storage, users, keys, caches) then reboot and re-push keys. The tenant keeps ownership.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: `${NODES_ROUTE}/{nodeId}/reboot` },
     input: nodeIdInput,
     mcp: { name: "nodes_hard_reset" },
     slack: false,
@@ -4170,7 +4118,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "List a page of account SSH keys. Pass next_cursor as cursor to continue.",
     mutation: "read",
-    http: { method: "GET", path: ORG_SSH_KEYS_ROUTE },
     input: pageInput,
     slack: false,
     execute: (ctx, input) => listAccountSshKeys(ctx.fetch, {
@@ -4185,7 +4132,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: `Add an SSH public key to the account. ${ADDED_KEY_OUTCOME}`,
     mutation: "preview-confirm",
-    http: { method: "POST", path: ORG_SSH_KEYS_ROUTE },
     input: publicKeyInput,
     slack: false,
     execute: (ctx, input) => createAccountSshKey(ctx.fetch, {
@@ -4199,7 +4145,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "Delete an SSH key from the account.",
     mutation: "preview-confirm",
-    http: { method: "DELETE", path: `${ORG_SSH_KEYS_ROUTE}/{keyId}` },
     input: keyIdInput,
     slack: false,
     execute: async (ctx, input) => await deleteAccountSshKey(ctx.fetch, input.keyId) ?? { deleted: true }
@@ -4210,7 +4155,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "List a page of organization cluster-user SSH keys. Pass next_cursor as cursor to continue.",
     mutation: "read",
-    http: { method: "GET", path: CLUSTER_USERS_ROUTE },
     input: pageInput,
     slack: false,
     execute: (ctx, input) => listClusterUserKeys(ctx.fetch, {
@@ -4225,7 +4169,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "Add a cluster-user SSH public key to the organization. Registers the same organization key as ssh_keys_add; a key already registered is returned as-is with its existing label.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: CLUSTER_USERS_ROUTE },
     input: publicKeyInput,
     slack: false,
     execute: (ctx, input) => createClusterUserKey(ctx.fetch, {
@@ -4239,7 +4182,6 @@ var accessVerbCapabilities = [
     roles: ["user"],
     description: "Revoke a cluster-user SSH key from the organization.",
     mutation: "preview-confirm",
-    http: { method: "DELETE", path: `${CLUSTER_USERS_ROUTE}/{keyId}` },
     input: keyIdInput,
     slack: false,
     execute: async (ctx, input) => await deleteClusterUserKey(ctx.fetch, input.keyId) ?? { deleted: true }
@@ -4251,7 +4193,6 @@ var machinePushKeysCapability = defineCapability({
   roles: ["user"],
   description: "Push SSH keys onto one reservation machine.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: `${NODES_ROUTE}/{nodeId}/push-keys` },
   input: z17.object({
     nodeId: z17.string(),
     sshKeyIds: z17.array(z17.string()).min(1),
@@ -4272,10 +4213,6 @@ var machineMetricsCapabilities = [
     roles: ["user"],
     description: "Fetch a live metrics snapshot for one reservation machine.",
     mutation: "read",
-    http: {
-      method: "GET",
-      path: "/v1/workflows/compute/nodes/reservations/{reservationId}/live-metrics"
-    },
     input: z17.object({ reservationId: z17.string(), machineId: z17.string() }),
     mcp: false,
     slack: false,
@@ -4289,10 +4226,6 @@ var machineMetricsCapabilities = [
     roles: ["user"],
     description: "Fetch historical telemetry for one reservation machine over a time range.",
     mutation: "read",
-    http: {
-      method: "GET",
-      path: "/v1/workflows/compute/nodes/reservations/{reservationId}/telemetry-history"
-    },
     input: z17.object({
       reservationId: z17.string(),
       machineId: z17.string(),
@@ -4327,7 +4260,6 @@ var creditGrantCapability = defineCapability({
   roles: ["admin"],
   description: "Adjust Ornn credits for a customer organization using Internal Billing. Defaults to credit; direction=debit removes credits. Credits belong to the organization, not an individual person. Resolve the intended organization first. MCP posts immediately; retain adjustmentId on retries. The verified staff actor supplies audit identity.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/internal/v1/organizations/{organizationId}/credit-adjustments" },
   cli: {
     command: ["admin", "organizations", "grant-credit"],
     vnext: {
@@ -4693,7 +4625,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "List this tenant's kubernetes/slurm clusters.",
     mutation: "read",
-    http: { method: "GET", path: "/v1/workflows/compute/clusters" },
     input: z20.object({}),
     mcp: { name: "clusters_list" },
     slack: false,
@@ -4705,7 +4636,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "List active reservations eligible for cluster creation (kubernetes/slurm), 100 per page. Pass the response's nextCursor as cursor for the next page.",
     mutation: "read",
-    http: { method: "GET", path: "/commerce/reservations" },
     input: z20.object({
       cursor: z20.string().min(1).optional().describe("nextCursor from the previous page.")
     }),
@@ -4722,7 +4652,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "Launch a kubernetes or slurm cluster on a reservation.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/v1/orchestrator/controllers" },
     input: z20.object({
       reservationId: z20.string(),
       type: clusterType,
@@ -4747,10 +4676,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "Show a kubernetes or slurm cluster's status for a reservation.",
     mutation: "read",
-    http: {
-      method: "GET",
-      path: "/v1/workflows/compute/{type}/reservations/{reservationId}/cluster"
-    },
     input: reservationCluster,
     mcp: { name: "clusters_show" },
     slack: false,
@@ -4762,10 +4687,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "Fetch a kubernetes or slurm cluster's connection credentials for a reservation.",
     mutation: "read",
-    http: {
-      method: "GET",
-      path: "/v1/workflows/compute/{type}/reservations/{reservationId}/credentials"
-    },
     input: reservationCluster,
     mcp: { name: "clusters_credentials" },
     slack: false,
@@ -4777,10 +4698,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "Fetch the raw kubeconfig text for a kubernetes cluster reservation. Unlike `ornn clusters kubeconfig`, this does not write a file locally -- the caller is responsible for saving the returned text if needed.",
     mutation: "read",
-    http: {
-      method: "GET",
-      path: "/v1/workflows/compute/kubernetes/reservations/{reservationId}/credentials"
-    },
     input: z20.object({ reservationId: z20.string() }),
     mcp: { name: "clusters_kubeconfig" },
     slack: false,
@@ -4798,7 +4715,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "Join a node to a controller.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/v1/orchestrator/controllers/{controllerId}/nodes/{nodeId}" },
     input: controllerNode,
     mcp: { name: "clusters_add_node" },
     slack: false,
@@ -4810,7 +4726,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "Remove a node from a controller.",
     mutation: "preview-confirm",
-    http: { method: "DELETE", path: "/v1/orchestrator/controllers/{controllerId}/nodes/{nodeId}" },
     input: controllerNode,
     mcp: { name: "clusters_remove_node" },
     slack: false,
@@ -4822,10 +4737,6 @@ var clusterCapabilities = [
     roles: ["user"],
     description: "Tear down a kubernetes or slurm cluster on a reservation.",
     mutation: "preview-confirm",
-    http: {
-      method: "POST",
-      path: "/v1/workflows/compute/{type}/reservations/{reservationId}/cluster/teardown"
-    },
     input: reservationCluster.extend({ confirm: z20.boolean().optional() }),
     mcp: { name: "clusters_teardown" },
     slack: false,
@@ -5296,7 +5207,6 @@ var loginCapability = defineCapability({
   roles: ["user"],
   description: "Authenticate the CLI with Ornn device authorization.",
   mutation: "local",
-  http: { method: "POST", path: "/v1/cli/device/start" },
   input: loginInput,
   cli: {
     command: ["login"],
@@ -5322,7 +5232,6 @@ var contextCapability = defineCapability({
   roles: ["user"],
   description: "Show the current server-verified organization context.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/cli/session" },
   input: emptyInput3,
   cli: {
     command: ["context"],
@@ -5347,7 +5256,6 @@ var logoutCapability = defineCapability({
   roles: ["user"],
   description: "Revoke the remote CLI session and clear its local bearer.",
   mutation: "local",
-  http: { method: "DELETE", path: "/v1/cli/session" },
   input: emptyInput3,
   cli: {
     command: ["logout"],
@@ -5371,7 +5279,6 @@ var whoamiCapability = defineCapability({
   roles: ["user", "admin"],
   description: "Show the signed-in Ornn user and organization.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/cli/session" },
   input: emptyInput3,
   execute: async (ctx) => getCliSession(ctx.fetch)
 });
@@ -5381,7 +5288,6 @@ var statusCapability = defineCapability({
   roles: ["user", "admin"],
   description: "Show Ornn platform status.",
   mutation: "read",
-  http: { method: "GET", path: "/v1/cli/status" },
   input: emptyInput3,
   execute: async (ctx) => getCliStatus(ctx.fetch),
   cli: {
@@ -5482,7 +5388,6 @@ var listCatalogTermsCapability = defineCapability({
   roles: ["admin"],
   description: "Dump the orchestrator hardware dictionary (display name + aliases). Call once and pick from it. Hardware fields on listings must match a term. Optional kind filter: gpu, cpu, node, or link.",
   mutation: "read",
-  http: { method: "GET", path: hardwareCatalogPath },
   slack: {
     parameters: {
       type: "object",
@@ -5606,7 +5511,6 @@ var createListingCapability = defineCapability({
   roles: ["admin"],
   description: "Create a primary marketplace listing (admin). gpu_type, cpu, node_model, and fabric_type must exact-match an orchestrator catalog display name, canonical, or alias; gpu_type becomes the listing's GPU slug. buy_now_price_per_gpu_hour is the customer price; deposit_percent is the upfront payment as a percentage of the full availability window. Nodes are attached afterwards. Slack never POSTs until a human replies confirm. MCP and CLI use native listing.create instead.",
   mutation: "preview-confirm",
-  http: { method: "POST", path: "/commerce/v2/listings" },
   slack: { parameters: slackListingCreateParams },
   input: listingCreateInput,
   execute: async (ctx, input) => {
@@ -5815,7 +5719,6 @@ var organizationInviteCapability = defineCapability({
 
 // ../../packages/capabilities/dist/capabilities/networks.js
 import { z as z27 } from "zod";
-var NETWORKS_PATH = "/v1/orchestrator/networks";
 var globalInput = {
   $positionals: z27.array(z27.string()).optional(),
   guided: z27.boolean().optional(),
@@ -6102,7 +6005,6 @@ var networkVerbCapabilities = [
     roles: ["user"],
     description: "List this tenant's private networks.",
     mutation: "read",
-    http: { method: "GET", path: NETWORKS_PATH },
     input: z27.object({}),
     mcp: { name: "networks_list" },
     slack: false,
@@ -6114,7 +6016,6 @@ var networkVerbCapabilities = [
     roles: ["user"],
     description: "Show a single private network by id.",
     mutation: "read",
-    http: { method: "GET", path: `${NETWORKS_PATH}/{networkId}` },
     input: z27.object({ networkId: z27.string() }),
     mcp: { name: "networks_show" },
     slack: false,
@@ -6126,7 +6027,6 @@ var networkVerbCapabilities = [
     roles: ["user"],
     description: "Create a private network.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: NETWORKS_PATH },
     input: z27.object({
       name: z27.string(),
       cidr: z27.string().optional(),
@@ -6147,7 +6047,6 @@ var networkVerbCapabilities = [
     roles: ["user"],
     description: "Update a private network's name or description. Pass clearDescription: true to null out the description instead of setting it.",
     mutation: "preview-confirm",
-    http: { method: "PATCH", path: `${NETWORKS_PATH}/{networkId}` },
     input: networkUpdateFields,
     mcp: { name: "networks_update" },
     slack: false,
@@ -6162,7 +6061,6 @@ var networkVerbCapabilities = [
     roles: ["user"],
     description: "Delete a private network.",
     mutation: "preview-confirm",
-    http: { method: "DELETE", path: `${NETWORKS_PATH}/{networkId}` },
     input: z27.object({ networkId: z27.string(), confirm: z27.boolean().optional() }),
     mcp: { name: "networks_delete" },
     slack: false,
@@ -6178,10 +6076,6 @@ var networkVerbCapabilities = [
     roles: ["user"],
     description: "List WireGuard VPN peers registered on a reservation.",
     mutation: "read",
-    http: {
-      method: "GET",
-      path: "/v1/orchestrator/networks/shared/peers"
-    },
     input: z27.object({ reservationId: z27.string() }),
     mcp: { name: "vpn_peers_list" },
     slack: false,
@@ -6193,10 +6087,6 @@ var networkVerbCapabilities = [
     roles: ["user"],
     description: "Register a WireGuard VPN peer public key on a reservation.",
     mutation: "preview-confirm",
-    http: {
-      method: "POST",
-      path: "/v1/orchestrator/networks/shared/peers"
-    },
     input: z27.object({
       reservationId: z27.string(),
       publicKey: z27.string(),
@@ -6216,10 +6106,6 @@ var networkVerbCapabilities = [
     roles: ["user"],
     description: "Revoke a WireGuard VPN peer from a reservation.",
     mutation: "preview-confirm",
-    http: {
-      method: "DELETE",
-      path: "/v1/orchestrator/networks/shared/peers/{peerId}"
-    },
     input: z27.object({
       reservationId: z27.string(),
       peerId: z27.string(),
@@ -6233,7 +6119,6 @@ var networkVerbCapabilities = [
 
 // ../../packages/capabilities/dist/capabilities/registry.js
 import { z as z28 } from "zod";
-var REGISTRY_PATH = "/v1/orchestrator/registry";
 var globalInput2 = {
   $positionals: z28.array(z28.string()).default([]),
   yes: z28.boolean().optional()
@@ -6292,7 +6177,6 @@ var registryShowCapability = defineCapability({
   roles: ["user"],
   description: "Show the organization's container registry: the host to docker login to and the namespace every image is pushed under.",
   mutation: "read",
-  http: { method: "GET", path: REGISTRY_PATH },
   input: emptyInput4,
   cli: {
     command: ["registry", "show"],
@@ -6327,7 +6211,6 @@ var registryRepositoriesListCapability = defineCapability({
   roles: ["user"],
   description: "List the repositories in the organization's container registry that have a tag.",
   mutation: "read",
-  http: { method: "GET", path: `${REGISTRY_PATH}/repositories` },
   input: emptyInput4,
   cli: {
     command: ["registry", "repositories", "list"],
@@ -6362,7 +6245,6 @@ var registryTagsListCapability = defineCapability({
   roles: ["user"],
   description: "List one repository's tags with the digest each names, the bytes the image occupies, and when it was built.",
   mutation: "read",
-  http: { method: "GET", path: `${REGISTRY_PATH}/tags` },
   input: repositoryInput,
   cli: {
     command: ["registry", "tags", "list"],
@@ -6400,7 +6282,6 @@ var registryTagsDeleteCapability = defineCapability({
   roles: ["user"],
   description: "Delete a tag from the organization's container registry. Pods and Slurm jobs that name it can no longer pull it; each cluster drops its copy within a minute, and the registry frees the space no other tag uses, pausing pushes for about a minute while it does.",
   mutation: "preview-confirm",
-  http: { method: "DELETE", path: `${REGISTRY_PATH}/tags` },
   input: tagInput,
   cli: {
     command: ["registry", "tags", "delete"],
@@ -6470,7 +6351,6 @@ var registryUsageCapability = defineCapability({
   roles: ["user"],
   description: "Show the bytes the organization's tagged images occupy in its container registry, each layer counted once.",
   mutation: "read",
-  http: { method: "GET", path: `${REGISTRY_PATH}/usage` },
   input: emptyInput4,
   cli: {
     command: ["registry", "usage"],
@@ -6502,7 +6382,6 @@ var registryCopiesListCapability = defineCapability({
   roles: ["user"],
   description: "List, for each of the organization's clusters, the registry tags its own copy holds now and the digest it holds them at, so a push or delete can be followed until every cluster has it.",
   mutation: "read",
-  http: { method: "GET", path: `${REGISTRY_PATH}/caches` },
   input: emptyInput4,
   cli: {
     command: ["registry", "copies", "list"],
@@ -6574,7 +6453,6 @@ var reservationListCapability = defineCapability({
   roles: ["admin"],
   description: "Internal staff only: list Commerce reservations across organizations, optionally filtered by customer organization (customerId), listing, listing term, and derived status. Resolve a customer's organization with users.list or organization.list first; pass each reservationId to nodes.list reservation_id for its machines. Page with nextCursor as cursor.",
   mutation: "read",
-  http: { method: "GET", path: "/commerce/reservations" },
   cli: {
     command: ["admin", "reservations", "list"],
     vnext: {
@@ -6793,7 +6671,6 @@ var volumeCapabilities = [
     related: ["volumes files list"]
   })
 ];
-var DRIVES_ROUTE = "/v1/orchestrator/drives";
 var reservationInput = z30.object({ reservationId: z30.string() });
 var reservationWrite = reservationInput.extend({ confirm: z30.boolean().optional() });
 var driveInput = z30.object({ driveId: z30.string() });
@@ -6824,10 +6701,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Attach an existing storage volume (drive) to a reservation -- the inverse of storage_undeploy. Always mounts at the platform path /home/tenant/volume (fuse). There is no customer mount-path override.",
     mutation: "preview-confirm",
-    http: {
-      method: "POST",
-      path: "/v1/workflows/compute/nodes/reservations/{reservationId}/storage-deployment"
-    },
     input: reservationWrite.extend({ driveId: z30.string(), readOnly: z30.boolean().optional() }),
     slack: false,
     execute: (ctx, input) => deployReservationStorage(ctx.fetch, input.reservationId, {
@@ -6841,10 +6714,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Detach the reservation storage attachment (after unmount) so the volume can be deleted.",
     mutation: "preview-confirm",
-    http: {
-      method: "DELETE",
-      path: "/v1/workflows/compute/nodes/reservations/{reservationId}/storage-attachment"
-    },
     input: reservationWrite,
     slack: false,
     execute: (ctx, input) => detachReservationStorage(ctx.fetch, input.reservationId)
@@ -6855,10 +6724,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Show a reservation's storage deployment (attachment) status.",
     mutation: "read",
-    http: {
-      method: "GET",
-      path: "/v1/workflows/compute/nodes/reservations/{reservationId}/storage-attachment"
-    },
     input: reservationInput,
     slack: false,
     execute: (ctx, input) => getReservationStorageAttachment(ctx.fetch, input.reservationId)
@@ -6869,7 +6734,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "List reservations that can receive a storage deploy, grouped the same way as the console picker.",
     mutation: "read",
-    http: { method: "GET", path: "/v1/orchestrator/storage-targets" },
     input: z30.object({}),
     slack: false,
     execute: (ctx) => listStorageTargets(ctx.fetch)
@@ -6880,7 +6744,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "List a page of storage volumes, newest updated first. Pass next_cursor as cursor to continue.",
     mutation: "read",
-    http: { method: "GET", path: DRIVES_ROUTE },
     input: z30.object({
       limit: z30.number().int().min(1).max(100).optional(),
       cursor: z30.string().optional()
@@ -6898,7 +6761,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Show a single storage volume (drive) by id.",
     mutation: "read",
-    http: { method: "GET", path: `${DRIVES_ROUTE}/{driveId}` },
     input: driveInput,
     mcp: { name: "storage_volumes_show" },
     slack: false,
@@ -6910,7 +6772,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Create a storage volume (drive), optionally cloned from an existing source drive.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: DRIVES_ROUTE },
     input: z30.object({
       name: z30.string(),
       sourceDriveId: z30.string().optional(),
@@ -6929,7 +6790,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Refresh a storage volume's (drive's) reported usage/state.",
     mutation: "preview-confirm",
-    http: { method: "GET", path: `${DRIVES_ROUTE}/{driveId}` },
     input: driveWrite,
     mcp: { name: "storage_volumes_refresh" },
     slack: false,
@@ -6941,7 +6801,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Clear (empty) a storage volume's (drive's) contents without deleting the drive.",
     mutation: "preview-confirm",
-    http: { method: "DELETE", path: `${DRIVES_ROUTE}/{driveId}/contents` },
     input: driveWrite,
     mcp: { name: "storage_volumes_clear" },
     slack: false,
@@ -6957,7 +6816,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Delete a storage volume (drive).",
     mutation: "preview-confirm",
-    http: { method: "DELETE", path: `${DRIVES_ROUTE}/{driveId}` },
     input: driveWrite,
     mcp: { name: "storage_volumes_delete" },
     slack: false,
@@ -6972,7 +6830,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Connect an external bucket (GCS, S3, or Cloudflare R2) as a storage volume. Cloudflare R2 deployment support is coming soon (connect succeeds, but deployment is not yet available).",
     mutation: "preview-confirm",
-    http: { method: "POST", path: DRIVES_ROUTE },
     input: bucketConnectInput,
     mcp: { name: "storage_buckets_connect" },
     slack: false,
@@ -7000,7 +6857,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Verify a connected S3-compatible bucket's source credentials/connectivity.",
     mutation: "preview-confirm",
-    http: { method: "PATCH", path: `${DRIVES_ROUTE}/{driveId}` },
     input: driveWrite,
     mcp: { name: "storage_buckets_verify" },
     slack: false,
@@ -7012,7 +6868,6 @@ var storageVerbCapabilities = [
     roles: ["user"],
     description: "Update a connected S3-compatible bucket's access key credentials.",
     mutation: "preview-confirm",
-    http: { method: "PATCH", path: `${DRIVES_ROUTE}/{driveId}` },
     input: driveWrite.extend({ accessKeyId: z30.string(), secretAccessKey: z30.string() }),
     mcp: { name: "storage_buckets_update_credentials" },
     slack: false,
@@ -7024,33 +6879,32 @@ var storageVerbCapabilities = [
     })
   })
 ];
-var storageCompositionCapabilities = [
-  defineCapability({
-    id: "bucket.list",
-    domain: "storage",
-    roles: ["user"],
-    description: "List a page of connected external buckets.",
-    mutation: "read",
-    http: { method: "GET", path: DRIVES_ROUTE },
-    input: z30.object({
-      limit: z30.number().int().min(1).max(100).optional(),
-      cursor: z30.string().optional()
-    }),
-    mcp: false,
-    slack: false,
-    execute: (ctx, input) => listDrives(ctx.fetch, {
-      limit: input.limit ?? 25,
-      scope: "external",
-      ...input.cursor ? { cursor: input.cursor } : {}
-    })
+var bucketListCapability = defineCapability({
+  id: "bucket.list",
+  domain: "storage",
+  roles: ["user"],
+  description: "List a page of connected external buckets. Pass next_cursor as cursor to continue.",
+  mutation: "read",
+  input: z30.object({
+    limit: z30.number().int().min(1).max(100).optional(),
+    cursor: z30.string().optional()
   }),
+  mcp: { name: "storage_buckets_list" },
+  slack: false,
+  execute: (ctx, input) => listDrives(ctx.fetch, {
+    limit: input.limit ?? 25,
+    scope: "external",
+    ...input.cursor ? { cursor: input.cursor } : {}
+  })
+});
+var storageCompositionCapabilities = [
+  bucketListCapability,
   defineCapability({
     id: "volume.contents",
     domain: "storage",
     roles: ["user"],
     description: "List one page of a storage volume's contents.",
     mutation: "read",
-    http: { method: "GET", path: `${DRIVES_ROUTE}/{driveId}/contents` },
     input: z30.object({
       driveId: z30.string(),
       path: z30.string().optional(),