@primitivedotdev/sdk 1.31.0 → 1.32.0

package/dist/{operations.generated-CJVEZJJ2.js → operations.generated-C9RTPXxd.js}

@@ -5934,7 +5934,163 @@ const openapiDocument = {
 					"additionalProperties": false
 				} } }
 			}
-		} }
+		} },
+		"/contact-policy": {
+			"get": {
+				"operationId": "getContactPolicy",
+				"summary": "Read organization contact policy",
+				"tags": ["Contacts"],
+				"security": [{ "BearerAuth": [] }],
+				"description": "Receiver-side email notification admission preferences; never task, tool, code execution or account authority. Rules take effect only in receivers implementing this current contact-policy contract. Older receivers may continue their previous exact-contact notifications until updated. Ordinary email delivery, storage, webhooks and explicit reply waits remain independent of these preferences. Organization owners/admins using session, OAuth or signed dashboard credentials may read/write policies. Connected credentials may only GET their own agent composite; they cannot write either policy. Function and signed capability credentials are not granted access. Rules are unordered. Exact membership notify:false always silences. Next use matching agent rules, otherwise matching organization rules; silence wins ties within that scope. If neither scope matches, existing exact membership notify:true allows using its own activation metadata; otherwise only enabled contact-request intake is allowed. Owner policy silence therefore cannot be bypassed by a connected agent adding a notify:true membership. Patterns are canonical lowercase bare mailboxes, *@example.com, research-*@example.com or *@*.example.com. Only a terminal local-part * and a leading whole domain-label *. are supported; subdomain patterns exclude the apex and require a literal multi-label suffix. No regular expressions, question marks, universal domains or wildcard TLDs. Domain-only UI input must be converted to *@domain. PUT fully replaces up to 100 rules and the request-intake option using exactly one CAS precondition. Duplicate pattern/effect pairs are rejected. if_absent returns an identical existing document, otherwise 409. A missing document reads as empty rules, null version/timestamps, false request intake for the organization and null (inherit) for the agent. Reset overrides with empty rules and null request intake. Allow rules preserve server activation metadata while retained unchanged; removing/recreating or changing a rule to allow resets it. Request intake defaults off; agent null inherits the organization. No-op writes preserve versions. Agent composite effective_version changes with either policy document, connection identity, generation or successful claim; effective_since is the latest policy mutation, connection creation or successful claim. Reclaiming a connection invalidates prior admission snapshots and starts a fresh rule/request cutoff; routine heartbeats do not. Rule/request admissions require received_at >= both the selected activation time and effective_since. Consequently even unrelated policy edits suppress queued older rule/request admissions, without deleting email history or affecting explicit reply waits. Exact membership fallback retains its own notify_since and generation but must still recheck current policy denies and effective_version. Before dispatch, receivers must recheck the current composite version and applicable activation generation and membership; stop new admissions when policy is unavailable or older than 30 seconds. Snapshot fields explain scope and matched rules locally; the API does not execute tasks or dispatch notifications.",
+				"parameters": [],
+				"responses": {
+					"200": {
+						"description": "Current policy",
+						"headers": { "Cache-Control": { "schema": {
+							"type": "string",
+							"const": "no-store"
+						} } },
+						"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+							"type": "object",
+							"required": ["data"],
+							"properties": { "data": { "$ref": "#/components/schemas/ContactPolicy" } }
+						}] } } }
+					},
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": { "$ref": "#/components/responses/NotFound" },
+					"409": {
+						"description": "contact_conflict: policy precondition did not match",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"429": { "$ref": "#/components/responses/RateLimited" }
+				}
+			},
+			"put": {
+				"operationId": "putContactPolicy",
+				"summary": "Replace organization contact policy",
+				"tags": ["Contacts"],
+				"security": [{ "BearerAuth": [] }],
+				"description": "Receiver-side email notification admission preferences; never task, tool, code execution or account authority. Rules take effect only in receivers implementing this current contact-policy contract. Older receivers may continue their previous exact-contact notifications until updated. Ordinary email delivery, storage, webhooks and explicit reply waits remain independent of these preferences. Organization owners/admins using session, OAuth or signed dashboard credentials may read/write policies. Connected credentials may only GET their own agent composite; they cannot write either policy. Function and signed capability credentials are not granted access. Rules are unordered. Exact membership notify:false always silences. Next use matching agent rules, otherwise matching organization rules; silence wins ties within that scope. If neither scope matches, existing exact membership notify:true allows using its own activation metadata; otherwise only enabled contact-request intake is allowed. Owner policy silence therefore cannot be bypassed by a connected agent adding a notify:true membership. Patterns are canonical lowercase bare mailboxes, *@example.com, research-*@example.com or *@*.example.com. Only a terminal local-part * and a leading whole domain-label *. are supported; subdomain patterns exclude the apex and require a literal multi-label suffix. No regular expressions, question marks, universal domains or wildcard TLDs. Domain-only UI input must be converted to *@domain. PUT fully replaces up to 100 rules and the request-intake option using exactly one CAS precondition. Duplicate pattern/effect pairs are rejected. if_absent returns an identical existing document, otherwise 409. A missing document reads as empty rules, null version/timestamps, false request intake for the organization and null (inherit) for the agent. Reset overrides with empty rules and null request intake. Allow rules preserve server activation metadata while retained unchanged; removing/recreating or changing a rule to allow resets it. Request intake defaults off; agent null inherits the organization. No-op writes preserve versions. Agent composite effective_version changes with either policy document, connection identity, generation or successful claim; effective_since is the latest policy mutation, connection creation or successful claim. Reclaiming a connection invalidates prior admission snapshots and starts a fresh rule/request cutoff; routine heartbeats do not. Rule/request admissions require received_at >= both the selected activation time and effective_since. Consequently even unrelated policy edits suppress queued older rule/request admissions, without deleting email history or affecting explicit reply waits. Exact membership fallback retains its own notify_since and generation but must still recheck current policy denies and effective_version. Before dispatch, receivers must recheck the current composite version and applicable activation generation and membership; stop new admissions when policy is unavailable or older than 30 seconds. Snapshot fields explain scope and matched rules locally; the API does not execute tasks or dispatch notifications.",
+				"parameters": [],
+				"requestBody": {
+					"required": true,
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/PutContactPolicyRequest" } } }
+				},
+				"responses": {
+					"200": {
+						"description": "Current policy",
+						"headers": { "Cache-Control": { "schema": {
+							"type": "string",
+							"const": "no-store"
+						} } },
+						"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+							"type": "object",
+							"required": ["data"],
+							"properties": { "data": { "$ref": "#/components/schemas/ContactPolicy" } }
+						}] } } }
+					},
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": { "$ref": "#/components/responses/NotFound" },
+					"409": {
+						"description": "contact_conflict: policy precondition did not match",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"429": { "$ref": "#/components/responses/RateLimited" }
+				}
+			}
+		},
+		"/agent-contact-policy/{agent_address}": {
+			"get": {
+				"operationId": "getAgentContactPolicy",
+				"summary": "Read agent contact policy",
+				"tags": ["Contacts"],
+				"security": [{ "BearerAuth": [] }],
+				"description": "Receiver-side email notification admission preferences; never task, tool, code execution or account authority. Rules take effect only in receivers implementing this current contact-policy contract. Older receivers may continue their previous exact-contact notifications until updated. Ordinary email delivery, storage, webhooks and explicit reply waits remain independent of these preferences. Organization owners/admins using session, OAuth or signed dashboard credentials may read/write policies. Connected credentials may only GET their own agent composite; they cannot write either policy. Function and signed capability credentials are not granted access. Rules are unordered. Exact membership notify:false always silences. Next use matching agent rules, otherwise matching organization rules; silence wins ties within that scope. If neither scope matches, existing exact membership notify:true allows using its own activation metadata; otherwise only enabled contact-request intake is allowed. Owner policy silence therefore cannot be bypassed by a connected agent adding a notify:true membership. Patterns are canonical lowercase bare mailboxes, *@example.com, research-*@example.com or *@*.example.com. Only a terminal local-part * and a leading whole domain-label *. are supported; subdomain patterns exclude the apex and require a literal multi-label suffix. No regular expressions, question marks, universal domains or wildcard TLDs. Domain-only UI input must be converted to *@domain. PUT fully replaces up to 100 rules and the request-intake option using exactly one CAS precondition. Duplicate pattern/effect pairs are rejected. if_absent returns an identical existing document, otherwise 409. A missing document reads as empty rules, null version/timestamps, false request intake for the organization and null (inherit) for the agent. Reset overrides with empty rules and null request intake. Allow rules preserve server activation metadata while retained unchanged; removing/recreating or changing a rule to allow resets it. Request intake defaults off; agent null inherits the organization. No-op writes preserve versions. Agent composite effective_version changes with either policy document, connection identity, generation or successful claim; effective_since is the latest policy mutation, connection creation or successful claim. Reclaiming a connection invalidates prior admission snapshots and starts a fresh rule/request cutoff; routine heartbeats do not. Rule/request admissions require received_at >= both the selected activation time and effective_since. Consequently even unrelated policy edits suppress queued older rule/request admissions, without deleting email history or affecting explicit reply waits. Exact membership fallback retains its own notify_since and generation but must still recheck current policy denies and effective_version. Before dispatch, receivers must recheck the current composite version and applicable activation generation and membership; stop new admissions when policy is unavailable or older than 30 seconds. Snapshot fields explain scope and matched rules locally; the API does not execute tasks or dispatch notifications.",
+				"parameters": [{
+					"name": "agent_address",
+					"in": "path",
+					"required": true,
+					"schema": {
+						"type": "string",
+						"format": "email",
+						"maxLength": 254
+					},
+					"description": "Canonical address of an agent connection in the current organization."
+				}],
+				"responses": {
+					"200": {
+						"description": "Current policy",
+						"headers": { "Cache-Control": { "schema": {
+							"type": "string",
+							"const": "no-store"
+						} } },
+						"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+							"type": "object",
+							"required": ["data"],
+							"properties": { "data": { "$ref": "#/components/schemas/AgentContactPolicy" } }
+						}] } } }
+					},
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": { "$ref": "#/components/responses/NotFound" },
+					"409": {
+						"description": "contact_conflict: policy precondition did not match",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"429": { "$ref": "#/components/responses/RateLimited" }
+				}
+			},
+			"put": {
+				"operationId": "putAgentContactPolicy",
+				"summary": "Replace agent contact policy",
+				"tags": ["Contacts"],
+				"security": [{ "BearerAuth": [] }],
+				"description": "Receiver-side email notification admission preferences; never task, tool, code execution or account authority. Rules take effect only in receivers implementing this current contact-policy contract. Older receivers may continue their previous exact-contact notifications until updated. Ordinary email delivery, storage, webhooks and explicit reply waits remain independent of these preferences. Organization owners/admins using session, OAuth or signed dashboard credentials may read/write policies. Connected credentials may only GET their own agent composite; they cannot write either policy. Function and signed capability credentials are not granted access. Rules are unordered. Exact membership notify:false always silences. Next use matching agent rules, otherwise matching organization rules; silence wins ties within that scope. If neither scope matches, existing exact membership notify:true allows using its own activation metadata; otherwise only enabled contact-request intake is allowed. Owner policy silence therefore cannot be bypassed by a connected agent adding a notify:true membership. Patterns are canonical lowercase bare mailboxes, *@example.com, research-*@example.com or *@*.example.com. Only a terminal local-part * and a leading whole domain-label *. are supported; subdomain patterns exclude the apex and require a literal multi-label suffix. No regular expressions, question marks, universal domains or wildcard TLDs. Domain-only UI input must be converted to *@domain. PUT fully replaces up to 100 rules and the request-intake option using exactly one CAS precondition. Duplicate pattern/effect pairs are rejected. if_absent returns an identical existing document, otherwise 409. A missing document reads as empty rules, null version/timestamps, false request intake for the organization and null (inherit) for the agent. Reset overrides with empty rules and null request intake. Allow rules preserve server activation metadata while retained unchanged; removing/recreating or changing a rule to allow resets it. Request intake defaults off; agent null inherits the organization. No-op writes preserve versions. Agent composite effective_version changes with either policy document, connection identity, generation or successful claim; effective_since is the latest policy mutation, connection creation or successful claim. Reclaiming a connection invalidates prior admission snapshots and starts a fresh rule/request cutoff; routine heartbeats do not. Rule/request admissions require received_at >= both the selected activation time and effective_since. Consequently even unrelated policy edits suppress queued older rule/request admissions, without deleting email history or affecting explicit reply waits. Exact membership fallback retains its own notify_since and generation but must still recheck current policy denies and effective_version. Before dispatch, receivers must recheck the current composite version and applicable activation generation and membership; stop new admissions when policy is unavailable or older than 30 seconds. Snapshot fields explain scope and matched rules locally; the API does not execute tasks or dispatch notifications.",
+				"parameters": [{
+					"name": "agent_address",
+					"in": "path",
+					"required": true,
+					"schema": {
+						"type": "string",
+						"format": "email",
+						"maxLength": 254
+					},
+					"description": "Canonical address of an agent connection in the current organization."
+				}],
+				"requestBody": {
+					"required": true,
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/PutAgentContactPolicyRequest" } } }
+				},
+				"responses": {
+					"200": {
+						"description": "Current policy",
+						"headers": { "Cache-Control": { "schema": {
+							"type": "string",
+							"const": "no-store"
+						} } },
+						"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+							"type": "object",
+							"required": ["data"],
+							"properties": { "data": { "$ref": "#/components/schemas/AgentContactPolicy" } }
+						}] } } }
+					},
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": { "$ref": "#/components/responses/NotFound" },
+					"409": {
+						"description": "contact_conflict: policy precondition did not match",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"429": { "$ref": "#/components/responses/RateLimited" }
+				}
+			}
+		}
 	},
 	"components": {
 		"securitySchemes": {
@@ -6248,124 +6404,369 @@ const openapiDocument = {
 			}
 		},
 		"schemas": {
-			"PublishPolicy": {
-				"type": "string",
-				"enum": [
-					"owner_only",
-					"request",
-					"open"
-				],
-				"description": "Who may publish into a registry. owner_only: only the registry owner.\nrequest: anyone may request and the owner approves. open: anyone may\npublish and it lists immediately (no approval step).\n"
-			},
-			"Registry": {
+			"ContactPolicyRuleInput": {
 				"type": "object",
+				"additionalProperties": false,
 				"properties": {
-					"id": {
+					"pattern": {
 						"type": "string",
-						"format": "uuid"
+						"maxLength": 254,
+						"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+						"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
 					},
-					"slug": { "type": "string" },
-					"name": { "type": "string" },
-					"description": { "type": ["string", "null"] },
-					"is_public": { "type": "boolean" },
-					"publish_policy": { "$ref": "#/components/schemas/PublishPolicy" }
+					"effect": {
+						"type": "string",
+						"enum": ["allow", "silence"]
+					}
 				},
-				"required": [
-					"id",
-					"slug",
-					"name",
-					"description",
-					"is_public",
-					"publish_policy"
-				]
+				"required": ["pattern", "effect"]
 			},
-			"RegistryAgent": {
+			"ContactPolicyRule": {
 				"type": "object",
-				"description": "An agent's public directory profile.",
+				"additionalProperties": false,
 				"properties": {
-					"address": { "type": "string" },
-					"display_name": { "type": "string" },
-					"title": { "type": ["string", "null"] },
-					"description": { "type": ["string", "null"] },
-					"tags": {
-						"type": "array",
-						"items": { "type": "string" }
+					"pattern": {
+						"type": "string",
+						"maxLength": 254,
+						"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+						"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
 					},
-					"handle": {
+					"effect": {
+						"type": "string",
+						"enum": ["allow", "silence"]
+					},
+					"notify_since": {
 						"type": ["string", "null"],
-						"description": "The registry-scoped name. Null on the global by-address read."
+						"format": "date-time"
 					},
-					"last_reachable_at": {
+					"notification_generation": {
 						"type": ["string", "null"],
-						"format": "date-time",
-						"description": "When the agent's address was last confirmed to still route to its endpoint. A freshness signal for ranking listings; null until the first check."
+						"format": "uuid"
 					}
 				},
 				"required": [
-					"address",
-					"display_name",
-					"title",
-					"description",
-					"tags",
-					"handle",
-					"last_reachable_at"
+					"pattern",
+					"effect",
+					"notify_since",
+					"notification_generation"
 				]
 			},
-			"RegistryRequest": {
+			"ContactPolicy": {
 				"type": "object",
-				"description": "A pending publication request, as the registry owner sees it.",
+				"additionalProperties": false,
 				"properties": {
-					"id": {
-						"type": "string",
+					"rules": {
+						"type": "array",
+						"maxItems": 100,
+						"items": { "$ref": "#/components/schemas/ContactPolicyRule" }
+					},
+					"contact_request_since": {
+						"type": ["string", "null"],
+						"format": "date-time"
+					},
+					"contact_request_generation": {
+						"type": ["string", "null"],
 						"format": "uuid"
 					},
-					"address": { "type": "string" },
-					"display_name": { "type": "string" },
-					"handle": { "type": ["string", "null"] },
-					"requested_at": {
-						"type": "string",
+					"version": {
+						"type": ["string", "null"],
+						"format": "uuid"
+					},
+					"updated_at": {
+						"type": ["string", "null"],
 						"format": "date-time"
-					}
+					},
+					"allow_contact_requests": { "type": "boolean" }
 				},
 				"required": [
-					"id",
-					"address",
-					"display_name",
-					"handle",
-					"requested_at"
+					"rules",
+					"contact_request_since",
+					"contact_request_generation",
+					"version",
+					"updated_at",
+					"allow_contact_requests"
 				]
 			},
-			"CreateRegistryInput": {
+			"AgentContactPolicyOverride": {
 				"type": "object",
+				"additionalProperties": false,
 				"properties": {
-					"slug": {
-						"type": "string",
-						"pattern": "^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$",
-						"description": "Lowercase slug, unique across registries."
+					"rules": {
+						"type": "array",
+						"maxItems": 100,
+						"items": { "$ref": "#/components/schemas/ContactPolicyRule" }
 					},
-					"name": {
-						"type": "string",
-						"minLength": 1,
-						"maxLength": 120
+					"contact_request_since": {
+						"type": ["string", "null"],
+						"format": "date-time"
 					},
-					"description": {
+					"contact_request_generation": {
 						"type": ["string", "null"],
-						"maxLength": 2e3
+						"format": "uuid"
 					},
-					"is_public": { "type": "boolean" },
-					"publish_policy": { "$ref": "#/components/schemas/PublishPolicy" }
+					"version": {
+						"type": ["string", "null"],
+						"format": "uuid"
+					},
+					"updated_at": {
+						"type": ["string", "null"],
+						"format": "date-time"
+					},
+					"allow_contact_requests": { "type": ["boolean", "null"] }
 				},
-				"required": ["slug", "name"]
+				"required": [
+					"rules",
+					"contact_request_since",
+					"contact_request_generation",
+					"version",
+					"updated_at",
+					"allow_contact_requests"
+				]
 			},
-			"UpdateRegistryInput": {
+			"AgentContactPolicy": {
 				"type": "object",
-				"minProperties": 1,
+				"additionalProperties": false,
 				"properties": {
-					"name": {
+					"agent_address": {
 						"type": "string",
-						"minLength": 1,
-						"maxLength": 120
-					},
+						"format": "email",
+						"maxLength": 254
+					},
+					"org_policy": { "$ref": "#/components/schemas/ContactPolicy" },
+					"agent_policy": { "$ref": "#/components/schemas/AgentContactPolicyOverride" },
+					"effective_version": {
+						"type": "string",
+						"pattern": "^[a-f0-9]{64}$"
+					},
+					"effective_since": {
+						"type": "string",
+						"format": "date-time"
+					},
+					"allow_contact_requests": { "type": "boolean" },
+					"contact_request_since": {
+						"type": ["string", "null"],
+						"format": "date-time"
+					},
+					"contact_request_generation": {
+						"type": ["string", "null"],
+						"pattern": "^[a-f0-9]{64}$"
+					}
+				},
+				"required": [
+					"agent_address",
+					"org_policy",
+					"agent_policy",
+					"effective_version",
+					"effective_since",
+					"allow_contact_requests",
+					"contact_request_since",
+					"contact_request_generation"
+				]
+			},
+			"PutContactPolicyRequest": { "oneOf": [{ "$ref": "#/components/schemas/PutContactPolicyCreate" }, { "$ref": "#/components/schemas/PutContactPolicyReplace" }] },
+			"PutAgentContactPolicyRequest": { "oneOf": [{ "$ref": "#/components/schemas/PutAgentContactPolicyCreate" }, { "$ref": "#/components/schemas/PutAgentContactPolicyReplace" }] },
+			"PutContactPolicyCreate": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"rules": {
+						"type": "array",
+						"maxItems": 100,
+						"items": { "$ref": "#/components/schemas/ContactPolicyRuleInput" }
+					},
+					"allow_contact_requests": { "type": "boolean" },
+					"if_absent": {
+						"type": "boolean",
+						"const": true
+					}
+				},
+				"required": [
+					"rules",
+					"allow_contact_requests",
+					"if_absent"
+				]
+			},
+			"PutContactPolicyReplace": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"rules": {
+						"type": "array",
+						"maxItems": 100,
+						"items": { "$ref": "#/components/schemas/ContactPolicyRuleInput" }
+					},
+					"allow_contact_requests": { "type": "boolean" },
+					"if_version": {
+						"type": "string",
+						"format": "uuid"
+					}
+				},
+				"required": [
+					"rules",
+					"allow_contact_requests",
+					"if_version"
+				]
+			},
+			"PutAgentContactPolicyCreate": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"rules": {
+						"type": "array",
+						"maxItems": 100,
+						"items": { "$ref": "#/components/schemas/ContactPolicyRuleInput" }
+					},
+					"allow_contact_requests": { "type": ["boolean", "null"] },
+					"if_absent": {
+						"type": "boolean",
+						"const": true
+					}
+				},
+				"required": [
+					"rules",
+					"allow_contact_requests",
+					"if_absent"
+				]
+			},
+			"PutAgentContactPolicyReplace": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"rules": {
+						"type": "array",
+						"maxItems": 100,
+						"items": { "$ref": "#/components/schemas/ContactPolicyRuleInput" }
+					},
+					"allow_contact_requests": { "type": ["boolean", "null"] },
+					"if_version": {
+						"type": "string",
+						"format": "uuid"
+					}
+				},
+				"required": [
+					"rules",
+					"allow_contact_requests",
+					"if_version"
+				]
+			},
+			"PublishPolicy": {
+				"type": "string",
+				"enum": [
+					"owner_only",
+					"request",
+					"open"
+				],
+				"description": "Who may publish into a registry. owner_only: only the registry owner.\nrequest: anyone may request and the owner approves. open: anyone may\npublish and it lists immediately (no approval step).\n"
+			},
+			"Registry": {
+				"type": "object",
+				"properties": {
+					"id": {
+						"type": "string",
+						"format": "uuid"
+					},
+					"slug": { "type": "string" },
+					"name": { "type": "string" },
+					"description": { "type": ["string", "null"] },
+					"is_public": { "type": "boolean" },
+					"publish_policy": { "$ref": "#/components/schemas/PublishPolicy" }
+				},
+				"required": [
+					"id",
+					"slug",
+					"name",
+					"description",
+					"is_public",
+					"publish_policy"
+				]
+			},
+			"RegistryAgent": {
+				"type": "object",
+				"description": "An agent's public directory profile.",
+				"properties": {
+					"address": { "type": "string" },
+					"display_name": { "type": "string" },
+					"title": { "type": ["string", "null"] },
+					"description": { "type": ["string", "null"] },
+					"tags": {
+						"type": "array",
+						"items": { "type": "string" }
+					},
+					"handle": {
+						"type": ["string", "null"],
+						"description": "The registry-scoped name. Null on the global by-address read."
+					},
+					"last_reachable_at": {
+						"type": ["string", "null"],
+						"format": "date-time",
+						"description": "When the agent's address was last confirmed to still route to its endpoint. A freshness signal for ranking listings; null until the first check."
+					}
+				},
+				"required": [
+					"address",
+					"display_name",
+					"title",
+					"description",
+					"tags",
+					"handle",
+					"last_reachable_at"
+				]
+			},
+			"RegistryRequest": {
+				"type": "object",
+				"description": "A pending publication request, as the registry owner sees it.",
+				"properties": {
+					"id": {
+						"type": "string",
+						"format": "uuid"
+					},
+					"address": { "type": "string" },
+					"display_name": { "type": "string" },
+					"handle": { "type": ["string", "null"] },
+					"requested_at": {
+						"type": "string",
+						"format": "date-time"
+					}
+				},
+				"required": [
+					"id",
+					"address",
+					"display_name",
+					"handle",
+					"requested_at"
+				]
+			},
+			"CreateRegistryInput": {
+				"type": "object",
+				"properties": {
+					"slug": {
+						"type": "string",
+						"pattern": "^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$",
+						"description": "Lowercase slug, unique across registries."
+					},
+					"name": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 120
+					},
+					"description": {
+						"type": ["string", "null"],
+						"maxLength": 2e3
+					},
+					"is_public": { "type": "boolean" },
+					"publish_policy": { "$ref": "#/components/schemas/PublishPolicy" }
+				},
+				"required": ["slug", "name"]
+			},
+			"UpdateRegistryInput": {
+				"type": "object",
+				"minProperties": 1,
+				"properties": {
+					"name": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 120
+					},
 					"description": {
 						"type": ["string", "null"],
 						"maxLength": 2e3
@@ -14916,16 +15317,16 @@ const operationManifest = [
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,
-		"command": "get-contact",
-		"description": "Organization directory and agent preferences; no profiles, message history or runtime presence. Existing organization credentials use tenant permissions. Connected keys may read the directory, create address-only missing contacts using if_absent:true, and access only their own agent memberships; they cannot edit shared labels or delete directory entries. Function credentials are not granted access. Memberships require an existing local agent connection (including revoked connections) and an existing contact. PUT requires exactly one precondition. if_absent returns an existing row unchanged when supplied fields agree; otherwise 409. notify defaults false. Off-to-on generates a new server timestamp and generation; on-to-on and purpose-only edits preserve them. Disable clears activation metadata. Deletion atomically removes membership eligibility. Receivers must recheck generation/preferences before dispatch and pause admission when their policy cache is older than 30 seconds; explicit reply waits are independent. DELETE requires if_version, returns deleted:false for an absent row, and rejects stale versions of recreated rows. Pages use ascending canonical address, with meta.cursor null on the last page. Lists are live pages, not snapshots.",
+		"command": "get-agent-contact-policy",
+		"description": "Receiver-side email notification admission preferences; never task, tool, code execution or account authority. Rules take effect only in receivers implementing this current contact-policy contract. Older receivers may continue their previous exact-contact notifications until updated. Ordinary email delivery, storage, webhooks and explicit reply waits remain independent of these preferences. Organization owners/admins using session, OAuth or signed dashboard credentials may read/write policies. Connected credentials may only GET their own agent composite; they cannot write either policy. Function and signed capability credentials are not granted access. Rules are unordered. Exact membership notify:false always silences. Next use matching agent rules, otherwise matching organization rules; silence wins ties within that scope. If neither scope matches, existing exact membership notify:true allows using its own activation metadata; otherwise only enabled contact-request intake is allowed. Owner policy silence therefore cannot be bypassed by a connected agent adding a notify:true membership. Patterns are canonical lowercase bare mailboxes, *@example.com, research-*@example.com or *@*.example.com. Only a terminal local-part * and a leading whole domain-label *. are supported; subdomain patterns exclude the apex and require a literal multi-label suffix. No regular expressions, question marks, universal domains or wildcard TLDs. Domain-only UI input must be converted to *@domain. PUT fully replaces up to 100 rules and the request-intake option using exactly one CAS precondition. Duplicate pattern/effect pairs are rejected. if_absent returns an identical existing document, otherwise 409. A missing document reads as empty rules, null version/timestamps, false request intake for the organization and null (inherit) for the agent. Reset overrides with empty rules and null request intake. Allow rules preserve server activation metadata while retained unchanged; removing/recreating or changing a rule to allow resets it. Request intake defaults off; agent null inherits the organization. No-op writes preserve versions. Agent composite effective_version changes with either policy document, connection identity, generation or successful claim; effective_since is the latest policy mutation, connection creation or successful claim. Reclaiming a connection invalidates prior admission snapshots and starts a fresh rule/request cutoff; routine heartbeats do not. Rule/request admissions require received_at >= both the selected activation time and effective_since. Consequently even unrelated policy edits suppress queued older rule/request admissions, without deleting email history or affecting explicit reply waits. Exact membership fallback retains its own notify_since and generation but must still recheck current policy denies and effective_version. Before dispatch, receivers must recheck the current composite version and applicable activation generation and membership; stop new admissions when policy is unavailable or older than 30 seconds. Snapshot fields explain scope and matched rules locally; the API does not execute tasks or dispatch notifications.",
 		"hasJsonBody": false,
 		"method": "GET",
-		"operationId": "getContact",
-		"path": "/contacts/{address}",
+		"operationId": "getAgentContactPolicy",
+		"path": "/agent-contact-policy/{agent_address}",
 		"pathParams": [{
-			"description": "address for contacts.",
+			"description": "Canonical address of an agent connection in the current organization.",
 			"enum": null,
-			"name": "address",
+			"name": "agent_address",
 			"required": true,
 			"type": "string"
 		}],
@@ -14935,58 +15336,331 @@ const operationManifest = [
 			"type": "object",
 			"additionalProperties": false,
 			"properties": {
-				"address": {
+				"agent_address": {
 					"type": "string",
 					"format": "email",
-					"maxLength": 254,
-					"description": "Bare email address; trim and lowercase, preserving dots and plus tags."
-				},
-				"display_name": {
-					"type": ["string", "null"],
-					"maxLength": 200
-				},
-				"version": {
-					"type": "string",
-					"format": "uuid",
-					"description": "Opaque CAS token. Changes on mutations and cannot be reused after deletion/recreation."
-				},
-				"created_at": {
-					"type": "string",
-					"format": "date-time"
+					"maxLength": 254
 				},
-				"updated_at": {
-					"type": "string",
-					"format": "date-time"
-				}
-			},
-			"required": [
-				"address",
-				"display_name",
-				"version",
-				"created_at",
-				"updated_at"
-			]
-		},
-		"sdkName": "getContact",
-		"summary": "get Contact",
-		"tag": "Contacts",
-		"tagCommand": "contacts"
-	},
-	{
-		"binaryResponse": false,
-		"bodyRequired": false,
-		"command": "list-agent-contacts",
-		"description": "Organization directory and agent preferences; no profiles, message history or runtime presence. Existing organization credentials use tenant permissions. Connected keys may read the directory, create address-only missing contacts using if_absent:true, and access only their own agent memberships; they cannot edit shared labels or delete directory entries. Function credentials are not granted access. Memberships require an existing local agent connection (including revoked connections) and an existing contact. PUT requires exactly one precondition. if_absent returns an existing row unchanged when supplied fields agree; otherwise 409. notify defaults false. Off-to-on generates a new server timestamp and generation; on-to-on and purpose-only edits preserve them. Disable clears activation metadata. Deletion atomically removes membership eligibility. Receivers must recheck generation/preferences before dispatch and pause admission when their policy cache is older than 30 seconds; explicit reply waits are independent. DELETE requires if_version, returns deleted:false for an absent row, and rejects stale versions of recreated rows. Pages use ascending canonical address, with meta.cursor null on the last page. Lists are live pages, not snapshots.",
-		"hasJsonBody": false,
-		"method": "GET",
-		"operationId": "listAgentContacts",
-		"path": "/agent-contacts/{agent_address}",
-		"pathParams": [{
-			"description": "agent_address for contacts.",
-			"enum": null,
-			"name": "agent_address",
-			"required": true,
-			"type": "string"
+				"org_policy": {
+					"type": "object",
+					"additionalProperties": false,
+					"properties": {
+						"rules": {
+							"type": "array",
+							"maxItems": 100,
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"properties": {
+									"pattern": {
+										"type": "string",
+										"maxLength": 254,
+										"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+										"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+									},
+									"effect": {
+										"type": "string",
+										"enum": ["allow", "silence"]
+									},
+									"notify_since": {
+										"type": ["string", "null"],
+										"format": "date-time"
+									},
+									"notification_generation": {
+										"type": ["string", "null"],
+										"format": "uuid"
+									}
+								},
+								"required": [
+									"pattern",
+									"effect",
+									"notify_since",
+									"notification_generation"
+								]
+							}
+						},
+						"contact_request_since": {
+							"type": ["string", "null"],
+							"format": "date-time"
+						},
+						"contact_request_generation": {
+							"type": ["string", "null"],
+							"format": "uuid"
+						},
+						"version": {
+							"type": ["string", "null"],
+							"format": "uuid"
+						},
+						"updated_at": {
+							"type": ["string", "null"],
+							"format": "date-time"
+						},
+						"allow_contact_requests": { "type": "boolean" }
+					},
+					"required": [
+						"rules",
+						"contact_request_since",
+						"contact_request_generation",
+						"version",
+						"updated_at",
+						"allow_contact_requests"
+					]
+				},
+				"agent_policy": {
+					"type": "object",
+					"additionalProperties": false,
+					"properties": {
+						"rules": {
+							"type": "array",
+							"maxItems": 100,
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"properties": {
+									"pattern": {
+										"type": "string",
+										"maxLength": 254,
+										"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+										"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+									},
+									"effect": {
+										"type": "string",
+										"enum": ["allow", "silence"]
+									},
+									"notify_since": {
+										"type": ["string", "null"],
+										"format": "date-time"
+									},
+									"notification_generation": {
+										"type": ["string", "null"],
+										"format": "uuid"
+									}
+								},
+								"required": [
+									"pattern",
+									"effect",
+									"notify_since",
+									"notification_generation"
+								]
+							}
+						},
+						"contact_request_since": {
+							"type": ["string", "null"],
+							"format": "date-time"
+						},
+						"contact_request_generation": {
+							"type": ["string", "null"],
+							"format": "uuid"
+						},
+						"version": {
+							"type": ["string", "null"],
+							"format": "uuid"
+						},
+						"updated_at": {
+							"type": ["string", "null"],
+							"format": "date-time"
+						},
+						"allow_contact_requests": { "type": ["boolean", "null"] }
+					},
+					"required": [
+						"rules",
+						"contact_request_since",
+						"contact_request_generation",
+						"version",
+						"updated_at",
+						"allow_contact_requests"
+					]
+				},
+				"effective_version": {
+					"type": "string",
+					"pattern": "^[a-f0-9]{64}$"
+				},
+				"effective_since": {
+					"type": "string",
+					"format": "date-time"
+				},
+				"allow_contact_requests": { "type": "boolean" },
+				"contact_request_since": {
+					"type": ["string", "null"],
+					"format": "date-time"
+				},
+				"contact_request_generation": {
+					"type": ["string", "null"],
+					"pattern": "^[a-f0-9]{64}$"
+				}
+			},
+			"required": [
+				"agent_address",
+				"org_policy",
+				"agent_policy",
+				"effective_version",
+				"effective_since",
+				"allow_contact_requests",
+				"contact_request_since",
+				"contact_request_generation"
+			]
+		},
+		"sdkName": "getAgentContactPolicy",
+		"summary": "Read agent contact policy",
+		"tag": "Contacts",
+		"tagCommand": "contacts"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "get-contact",
+		"description": "Organization directory and agent preferences; no profiles, message history or runtime presence. Existing organization credentials use tenant permissions. Connected keys may read the directory, create address-only missing contacts using if_absent:true, and access only their own agent memberships; they cannot edit shared labels or delete directory entries. Function credentials are not granted access. Memberships require an existing local agent connection (including revoked connections) and an existing contact. PUT requires exactly one precondition. if_absent returns an existing row unchanged when supplied fields agree; otherwise 409. notify defaults false. Off-to-on generates a new server timestamp and generation; on-to-on and purpose-only edits preserve them. Disable clears activation metadata. Deletion atomically removes membership eligibility. Receivers must recheck generation/preferences before dispatch and pause admission when their policy cache is older than 30 seconds; explicit reply waits are independent. DELETE requires if_version, returns deleted:false for an absent row, and rejects stale versions of recreated rows. Pages use ascending canonical address, with meta.cursor null on the last page. Lists are live pages, not snapshots.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "getContact",
+		"path": "/contacts/{address}",
+		"pathParams": [{
+			"description": "address for contacts.",
+			"enum": null,
+			"name": "address",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"address": {
+					"type": "string",
+					"format": "email",
+					"maxLength": 254,
+					"description": "Bare email address; trim and lowercase, preserving dots and plus tags."
+				},
+				"display_name": {
+					"type": ["string", "null"],
+					"maxLength": 200
+				},
+				"version": {
+					"type": "string",
+					"format": "uuid",
+					"description": "Opaque CAS token. Changes on mutations and cannot be reused after deletion/recreation."
+				},
+				"created_at": {
+					"type": "string",
+					"format": "date-time"
+				},
+				"updated_at": {
+					"type": "string",
+					"format": "date-time"
+				}
+			},
+			"required": [
+				"address",
+				"display_name",
+				"version",
+				"created_at",
+				"updated_at"
+			]
+		},
+		"sdkName": "getContact",
+		"summary": "get Contact",
+		"tag": "Contacts",
+		"tagCommand": "contacts"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "get-contact-policy",
+		"description": "Receiver-side email notification admission preferences; never task, tool, code execution or account authority. Rules take effect only in receivers implementing this current contact-policy contract. Older receivers may continue their previous exact-contact notifications until updated. Ordinary email delivery, storage, webhooks and explicit reply waits remain independent of these preferences. Organization owners/admins using session, OAuth or signed dashboard credentials may read/write policies. Connected credentials may only GET their own agent composite; they cannot write either policy. Function and signed capability credentials are not granted access. Rules are unordered. Exact membership notify:false always silences. Next use matching agent rules, otherwise matching organization rules; silence wins ties within that scope. If neither scope matches, existing exact membership notify:true allows using its own activation metadata; otherwise only enabled contact-request intake is allowed. Owner policy silence therefore cannot be bypassed by a connected agent adding a notify:true membership. Patterns are canonical lowercase bare mailboxes, *@example.com, research-*@example.com or *@*.example.com. Only a terminal local-part * and a leading whole domain-label *. are supported; subdomain patterns exclude the apex and require a literal multi-label suffix. No regular expressions, question marks, universal domains or wildcard TLDs. Domain-only UI input must be converted to *@domain. PUT fully replaces up to 100 rules and the request-intake option using exactly one CAS precondition. Duplicate pattern/effect pairs are rejected. if_absent returns an identical existing document, otherwise 409. A missing document reads as empty rules, null version/timestamps, false request intake for the organization and null (inherit) for the agent. Reset overrides with empty rules and null request intake. Allow rules preserve server activation metadata while retained unchanged; removing/recreating or changing a rule to allow resets it. Request intake defaults off; agent null inherits the organization. No-op writes preserve versions. Agent composite effective_version changes with either policy document, connection identity, generation or successful claim; effective_since is the latest policy mutation, connection creation or successful claim. Reclaiming a connection invalidates prior admission snapshots and starts a fresh rule/request cutoff; routine heartbeats do not. Rule/request admissions require received_at >= both the selected activation time and effective_since. Consequently even unrelated policy edits suppress queued older rule/request admissions, without deleting email history or affecting explicit reply waits. Exact membership fallback retains its own notify_since and generation but must still recheck current policy denies and effective_version. Before dispatch, receivers must recheck the current composite version and applicable activation generation and membership; stop new admissions when policy is unavailable or older than 30 seconds. Snapshot fields explain scope and matched rules locally; the API does not execute tasks or dispatch notifications.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "getContactPolicy",
+		"path": "/contact-policy",
+		"pathParams": [],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"rules": {
+					"type": "array",
+					"maxItems": 100,
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"properties": {
+							"pattern": {
+								"type": "string",
+								"maxLength": 254,
+								"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+								"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+							},
+							"effect": {
+								"type": "string",
+								"enum": ["allow", "silence"]
+							},
+							"notify_since": {
+								"type": ["string", "null"],
+								"format": "date-time"
+							},
+							"notification_generation": {
+								"type": ["string", "null"],
+								"format": "uuid"
+							}
+						},
+						"required": [
+							"pattern",
+							"effect",
+							"notify_since",
+							"notification_generation"
+						]
+					}
+				},
+				"contact_request_since": {
+					"type": ["string", "null"],
+					"format": "date-time"
+				},
+				"contact_request_generation": {
+					"type": ["string", "null"],
+					"format": "uuid"
+				},
+				"version": {
+					"type": ["string", "null"],
+					"format": "uuid"
+				},
+				"updated_at": {
+					"type": ["string", "null"],
+					"format": "date-time"
+				},
+				"allow_contact_requests": { "type": "boolean" }
+			},
+			"required": [
+				"rules",
+				"contact_request_since",
+				"contact_request_generation",
+				"version",
+				"updated_at",
+				"allow_contact_requests"
+			]
+		},
+		"sdkName": "getContactPolicy",
+		"summary": "Read organization contact policy",
+		"tag": "Contacts",
+		"tagCommand": "contacts"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "list-agent-contacts",
+		"description": "Organization directory and agent preferences; no profiles, message history or runtime presence. Existing organization credentials use tenant permissions. Connected keys may read the directory, create address-only missing contacts using if_absent:true, and access only their own agent memberships; they cannot edit shared labels or delete directory entries. Function credentials are not granted access. Memberships require an existing local agent connection (including revoked connections) and an existing contact. PUT requires exactly one precondition. if_absent returns an existing row unchanged when supplied fields agree; otherwise 409. notify defaults false. Off-to-on generates a new server timestamp and generation; on-to-on and purpose-only edits preserve them. Disable clears activation metadata. Deletion atomically removes membership eligibility. Receivers must recheck generation/preferences before dispatch and pause admission when their policy cache is older than 30 seconds; explicit reply waits are independent. DELETE requires if_version, returns deleted:false for an absent row, and rejects stale versions of recreated rows. Pages use ascending canonical address, with meta.cursor null on the last page. Lists are live pages, not snapshots.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "listAgentContacts",
+		"path": "/agent-contacts/{agent_address}",
+		"pathParams": [{
+			"description": "agent_address for contacts.",
+			"enum": null,
+			"name": "agent_address",
+			"required": true,
+			"type": "string"
 		}],
 		"queryParams": [{
 			"description": "cursor for contacts.",
@@ -15257,16 +15931,16 @@ const operationManifest = [
 	{
 		"binaryResponse": false,
 		"bodyRequired": true,
-		"command": "put-contact",
-		"description": "Organization directory and agent preferences; no profiles, message history or runtime presence. Existing organization credentials use tenant permissions. Connected keys may read the directory, create address-only missing contacts using if_absent:true, and access only their own agent memberships; they cannot edit shared labels or delete directory entries. Function credentials are not granted access. Memberships require an existing local agent connection (including revoked connections) and an existing contact. PUT requires exactly one precondition. if_absent returns an existing row unchanged when supplied fields agree; otherwise 409. notify defaults false. Off-to-on generates a new server timestamp and generation; on-to-on and purpose-only edits preserve them. Disable clears activation metadata. Deletion atomically removes membership eligibility. Receivers must recheck generation/preferences before dispatch and pause admission when their policy cache is older than 30 seconds; explicit reply waits are independent. DELETE requires if_version, returns deleted:false for an absent row, and rejects stale versions of recreated rows. Pages use ascending canonical address, with meta.cursor null on the last page. Lists are live pages, not snapshots.",
+		"command": "put-agent-contact-policy",
+		"description": "Receiver-side email notification admission preferences; never task, tool, code execution or account authority. Rules take effect only in receivers implementing this current contact-policy contract. Older receivers may continue their previous exact-contact notifications until updated. Ordinary email delivery, storage, webhooks and explicit reply waits remain independent of these preferences. Organization owners/admins using session, OAuth or signed dashboard credentials may read/write policies. Connected credentials may only GET their own agent composite; they cannot write either policy. Function and signed capability credentials are not granted access. Rules are unordered. Exact membership notify:false always silences. Next use matching agent rules, otherwise matching organization rules; silence wins ties within that scope. If neither scope matches, existing exact membership notify:true allows using its own activation metadata; otherwise only enabled contact-request intake is allowed. Owner policy silence therefore cannot be bypassed by a connected agent adding a notify:true membership. Patterns are canonical lowercase bare mailboxes, *@example.com, research-*@example.com or *@*.example.com. Only a terminal local-part * and a leading whole domain-label *. are supported; subdomain patterns exclude the apex and require a literal multi-label suffix. No regular expressions, question marks, universal domains or wildcard TLDs. Domain-only UI input must be converted to *@domain. PUT fully replaces up to 100 rules and the request-intake option using exactly one CAS precondition. Duplicate pattern/effect pairs are rejected. if_absent returns an identical existing document, otherwise 409. A missing document reads as empty rules, null version/timestamps, false request intake for the organization and null (inherit) for the agent. Reset overrides with empty rules and null request intake. Allow rules preserve server activation metadata while retained unchanged; removing/recreating or changing a rule to allow resets it. Request intake defaults off; agent null inherits the organization. No-op writes preserve versions. Agent composite effective_version changes with either policy document, connection identity, generation or successful claim; effective_since is the latest policy mutation, connection creation or successful claim. Reclaiming a connection invalidates prior admission snapshots and starts a fresh rule/request cutoff; routine heartbeats do not. Rule/request admissions require received_at >= both the selected activation time and effective_since. Consequently even unrelated policy edits suppress queued older rule/request admissions, without deleting email history or affecting explicit reply waits. Exact membership fallback retains its own notify_since and generation but must still recheck current policy denies and effective_version. Before dispatch, receivers must recheck the current composite version and applicable activation generation and membership; stop new admissions when policy is unavailable or older than 30 seconds. Snapshot fields explain scope and matched rules locally; the API does not execute tasks or dispatch notifications.",
 		"hasJsonBody": true,
 		"method": "PUT",
-		"operationId": "putContact",
-		"path": "/contacts/{address}",
+		"operationId": "putAgentContactPolicy",
+		"path": "/agent-contact-policy/{agent_address}",
 		"pathParams": [{
-			"description": "address for contacts.",
+			"description": "Canonical address of an agent connection in the current organization.",
 			"enum": null,
-			"name": "address",
+			"name": "agent_address",
 			"required": true,
 			"type": "string"
 		}],
@@ -15275,12 +15949,275 @@ const operationManifest = [
 			"type": "object",
 			"additionalProperties": false,
 			"properties": {
-				"display_name": {
-					"type": ["string", "null"],
-					"maxLength": 200
-				},
-				"if_absent": {
-					"type": "boolean",
+				"rules": {
+					"type": "array",
+					"maxItems": 100,
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"properties": {
+							"pattern": {
+								"type": "string",
+								"maxLength": 254,
+								"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+								"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+							},
+							"effect": {
+								"type": "string",
+								"enum": ["allow", "silence"]
+							}
+						},
+						"required": ["pattern", "effect"]
+					}
+				},
+				"allow_contact_requests": { "type": ["boolean", "null"] },
+				"if_absent": {
+					"type": "boolean",
+					"const": true
+				}
+			},
+			"required": [
+				"rules",
+				"allow_contact_requests",
+				"if_absent"
+			]
+		}, {
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"rules": {
+					"type": "array",
+					"maxItems": 100,
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"properties": {
+							"pattern": {
+								"type": "string",
+								"maxLength": 254,
+								"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+								"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+							},
+							"effect": {
+								"type": "string",
+								"enum": ["allow", "silence"]
+							}
+						},
+						"required": ["pattern", "effect"]
+					}
+				},
+				"allow_contact_requests": { "type": ["boolean", "null"] },
+				"if_version": {
+					"type": "string",
+					"format": "uuid"
+				}
+			},
+			"required": [
+				"rules",
+				"allow_contact_requests",
+				"if_version"
+			]
+		}] },
+		"responseSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"agent_address": {
+					"type": "string",
+					"format": "email",
+					"maxLength": 254
+				},
+				"org_policy": {
+					"type": "object",
+					"additionalProperties": false,
+					"properties": {
+						"rules": {
+							"type": "array",
+							"maxItems": 100,
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"properties": {
+									"pattern": {
+										"type": "string",
+										"maxLength": 254,
+										"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+										"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+									},
+									"effect": {
+										"type": "string",
+										"enum": ["allow", "silence"]
+									},
+									"notify_since": {
+										"type": ["string", "null"],
+										"format": "date-time"
+									},
+									"notification_generation": {
+										"type": ["string", "null"],
+										"format": "uuid"
+									}
+								},
+								"required": [
+									"pattern",
+									"effect",
+									"notify_since",
+									"notification_generation"
+								]
+							}
+						},
+						"contact_request_since": {
+							"type": ["string", "null"],
+							"format": "date-time"
+						},
+						"contact_request_generation": {
+							"type": ["string", "null"],
+							"format": "uuid"
+						},
+						"version": {
+							"type": ["string", "null"],
+							"format": "uuid"
+						},
+						"updated_at": {
+							"type": ["string", "null"],
+							"format": "date-time"
+						},
+						"allow_contact_requests": { "type": "boolean" }
+					},
+					"required": [
+						"rules",
+						"contact_request_since",
+						"contact_request_generation",
+						"version",
+						"updated_at",
+						"allow_contact_requests"
+					]
+				},
+				"agent_policy": {
+					"type": "object",
+					"additionalProperties": false,
+					"properties": {
+						"rules": {
+							"type": "array",
+							"maxItems": 100,
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"properties": {
+									"pattern": {
+										"type": "string",
+										"maxLength": 254,
+										"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+										"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+									},
+									"effect": {
+										"type": "string",
+										"enum": ["allow", "silence"]
+									},
+									"notify_since": {
+										"type": ["string", "null"],
+										"format": "date-time"
+									},
+									"notification_generation": {
+										"type": ["string", "null"],
+										"format": "uuid"
+									}
+								},
+								"required": [
+									"pattern",
+									"effect",
+									"notify_since",
+									"notification_generation"
+								]
+							}
+						},
+						"contact_request_since": {
+							"type": ["string", "null"],
+							"format": "date-time"
+						},
+						"contact_request_generation": {
+							"type": ["string", "null"],
+							"format": "uuid"
+						},
+						"version": {
+							"type": ["string", "null"],
+							"format": "uuid"
+						},
+						"updated_at": {
+							"type": ["string", "null"],
+							"format": "date-time"
+						},
+						"allow_contact_requests": { "type": ["boolean", "null"] }
+					},
+					"required": [
+						"rules",
+						"contact_request_since",
+						"contact_request_generation",
+						"version",
+						"updated_at",
+						"allow_contact_requests"
+					]
+				},
+				"effective_version": {
+					"type": "string",
+					"pattern": "^[a-f0-9]{64}$"
+				},
+				"effective_since": {
+					"type": "string",
+					"format": "date-time"
+				},
+				"allow_contact_requests": { "type": "boolean" },
+				"contact_request_since": {
+					"type": ["string", "null"],
+					"format": "date-time"
+				},
+				"contact_request_generation": {
+					"type": ["string", "null"],
+					"pattern": "^[a-f0-9]{64}$"
+				}
+			},
+			"required": [
+				"agent_address",
+				"org_policy",
+				"agent_policy",
+				"effective_version",
+				"effective_since",
+				"allow_contact_requests",
+				"contact_request_since",
+				"contact_request_generation"
+			]
+		},
+		"sdkName": "putAgentContactPolicy",
+		"summary": "Replace agent contact policy",
+		"tag": "Contacts",
+		"tagCommand": "contacts"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": true,
+		"command": "put-contact",
+		"description": "Organization directory and agent preferences; no profiles, message history or runtime presence. Existing organization credentials use tenant permissions. Connected keys may read the directory, create address-only missing contacts using if_absent:true, and access only their own agent memberships; they cannot edit shared labels or delete directory entries. Function credentials are not granted access. Memberships require an existing local agent connection (including revoked connections) and an existing contact. PUT requires exactly one precondition. if_absent returns an existing row unchanged when supplied fields agree; otherwise 409. notify defaults false. Off-to-on generates a new server timestamp and generation; on-to-on and purpose-only edits preserve them. Disable clears activation metadata. Deletion atomically removes membership eligibility. Receivers must recheck generation/preferences before dispatch and pause admission when their policy cache is older than 30 seconds; explicit reply waits are independent. DELETE requires if_version, returns deleted:false for an absent row, and rejects stale versions of recreated rows. Pages use ascending canonical address, with meta.cursor null on the last page. Lists are live pages, not snapshots.",
+		"hasJsonBody": true,
+		"method": "PUT",
+		"operationId": "putContact",
+		"path": "/contacts/{address}",
+		"pathParams": [{
+			"description": "address for contacts.",
+			"enum": null,
+			"name": "address",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": { "oneOf": [{
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"display_name": {
+					"type": ["string", "null"],
+					"maxLength": 200
+				},
+				"if_absent": {
+					"type": "boolean",
 					"const": true
 				}
 			},
@@ -15342,6 +16279,160 @@ const operationManifest = [
 		"tag": "Contacts",
 		"tagCommand": "contacts"
 	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": true,
+		"command": "put-contact-policy",
+		"description": "Receiver-side email notification admission preferences; never task, tool, code execution or account authority. Rules take effect only in receivers implementing this current contact-policy contract. Older receivers may continue their previous exact-contact notifications until updated. Ordinary email delivery, storage, webhooks and explicit reply waits remain independent of these preferences. Organization owners/admins using session, OAuth or signed dashboard credentials may read/write policies. Connected credentials may only GET their own agent composite; they cannot write either policy. Function and signed capability credentials are not granted access. Rules are unordered. Exact membership notify:false always silences. Next use matching agent rules, otherwise matching organization rules; silence wins ties within that scope. If neither scope matches, existing exact membership notify:true allows using its own activation metadata; otherwise only enabled contact-request intake is allowed. Owner policy silence therefore cannot be bypassed by a connected agent adding a notify:true membership. Patterns are canonical lowercase bare mailboxes, *@example.com, research-*@example.com or *@*.example.com. Only a terminal local-part * and a leading whole domain-label *. are supported; subdomain patterns exclude the apex and require a literal multi-label suffix. No regular expressions, question marks, universal domains or wildcard TLDs. Domain-only UI input must be converted to *@domain. PUT fully replaces up to 100 rules and the request-intake option using exactly one CAS precondition. Duplicate pattern/effect pairs are rejected. if_absent returns an identical existing document, otherwise 409. A missing document reads as empty rules, null version/timestamps, false request intake for the organization and null (inherit) for the agent. Reset overrides with empty rules and null request intake. Allow rules preserve server activation metadata while retained unchanged; removing/recreating or changing a rule to allow resets it. Request intake defaults off; agent null inherits the organization. No-op writes preserve versions. Agent composite effective_version changes with either policy document, connection identity, generation or successful claim; effective_since is the latest policy mutation, connection creation or successful claim. Reclaiming a connection invalidates prior admission snapshots and starts a fresh rule/request cutoff; routine heartbeats do not. Rule/request admissions require received_at >= both the selected activation time and effective_since. Consequently even unrelated policy edits suppress queued older rule/request admissions, without deleting email history or affecting explicit reply waits. Exact membership fallback retains its own notify_since and generation but must still recheck current policy denies and effective_version. Before dispatch, receivers must recheck the current composite version and applicable activation generation and membership; stop new admissions when policy is unavailable or older than 30 seconds. Snapshot fields explain scope and matched rules locally; the API does not execute tasks or dispatch notifications.",
+		"hasJsonBody": true,
+		"method": "PUT",
+		"operationId": "putContactPolicy",
+		"path": "/contact-policy",
+		"pathParams": [],
+		"queryParams": [],
+		"requestSchema": { "oneOf": [{
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"rules": {
+					"type": "array",
+					"maxItems": 100,
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"properties": {
+							"pattern": {
+								"type": "string",
+								"maxLength": 254,
+								"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+								"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+							},
+							"effect": {
+								"type": "string",
+								"enum": ["allow", "silence"]
+							}
+						},
+						"required": ["pattern", "effect"]
+					}
+				},
+				"allow_contact_requests": { "type": "boolean" },
+				"if_absent": {
+					"type": "boolean",
+					"const": true
+				}
+			},
+			"required": [
+				"rules",
+				"allow_contact_requests",
+				"if_absent"
+			]
+		}, {
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"rules": {
+					"type": "array",
+					"maxItems": 100,
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"properties": {
+							"pattern": {
+								"type": "string",
+								"maxLength": 254,
+								"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+								"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+							},
+							"effect": {
+								"type": "string",
+								"enum": ["allow", "silence"]
+							}
+						},
+						"required": ["pattern", "effect"]
+					}
+				},
+				"allow_contact_requests": { "type": "boolean" },
+				"if_version": {
+					"type": "string",
+					"format": "uuid"
+				}
+			},
+			"required": [
+				"rules",
+				"allow_contact_requests",
+				"if_version"
+			]
+		}] },
+		"responseSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"rules": {
+					"type": "array",
+					"maxItems": 100,
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"properties": {
+							"pattern": {
+								"type": "string",
+								"maxLength": 254,
+								"pattern": "^[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*[\\x00-\\x7f]*[\\x09-\\x0d\\x20\xA0  - \u2028\u2029  　]*$",
+								"description": "Trim outer whitespace, then require ASCII before lowercase normalization. Exact mailbox or restricted mailbox glob. See operation description."
+							},
+							"effect": {
+								"type": "string",
+								"enum": ["allow", "silence"]
+							},
+							"notify_since": {
+								"type": ["string", "null"],
+								"format": "date-time"
+							},
+							"notification_generation": {
+								"type": ["string", "null"],
+								"format": "uuid"
+							}
+						},
+						"required": [
+							"pattern",
+							"effect",
+							"notify_since",
+							"notification_generation"
+						]
+					}
+				},
+				"contact_request_since": {
+					"type": ["string", "null"],
+					"format": "date-time"
+				},
+				"contact_request_generation": {
+					"type": ["string", "null"],
+					"format": "uuid"
+				},
+				"version": {
+					"type": ["string", "null"],
+					"format": "uuid"
+				},
+				"updated_at": {
+					"type": ["string", "null"],
+					"format": "date-time"
+				},
+				"allow_contact_requests": { "type": "boolean" }
+			},
+			"required": [
+				"rules",
+				"contact_request_since",
+				"contact_request_generation",
+				"version",
+				"updated_at",
+				"allow_contact_requests"
+			]
+		},
+		"sdkName": "putContactPolicy",
+		"summary": "Replace organization contact policy",
+		"tag": "Contacts",
+		"tagCommand": "contacts"
+	},
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,