quoxcli 0.2.0 → 0.4.0

package/lib/api/endpoints/executions.js

@@ -29,4 +29,17 @@ export const executions = {
     path: () => `/api/executions`,
     tags: ['live-safe'],
   },
+  // #997: `run cancel`/`run resume` reach the engine first (these are the runs `run list` shows)
+  'executions.cancel': {
+    method: 'POST',
+    service: 'quoxflow',
+    path: ({ executionId }) => `/api/executions/${executionId}/cancel`,
+    tags: ['live-write'],
+  },
+  'executions.resume': {
+    method: 'POST',
+    service: 'quoxflow',
+    path: ({ executionId }) => `/api/executions/${executionId}/resume`,
+    tags: ['live-write'],
+  },
 };

package/lib/api/endpoints/fetchAllowlist.js

@@ -0,0 +1,27 @@
+/**
+ * 'fetchAllowlist.*' endpoints: the per-org URL-prefix allowlist behind the governed
+ * agent fetch tool (web_fetch_allowlisted, quox#1171). Collector-owned routes
+ * (services/collector/lib/agentFetchAllowlistRoutes.js). Writes are human org
+ * admin only on the server.
+ *
+ * See cli/lib/api/endpoints/index.js for the fragment convention.
+ */
+
+export const fetchAllowlist = {
+  'fetchAllowlist.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/fetch-allowlist`,
+    tags: ['live-safe'],
+  },
+  'fetchAllowlist.add': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/fetch-allowlist`,
+  },
+  'fetchAllowlist.remove': {
+    method: 'DELETE',
+    service: 'collector',
+    path: ({ prefix }) => `/api/v1/fetch-allowlist?url_prefix=${encodeURIComponent(prefix)}`,
+  },
+};

package/lib/api/endpoints/files.js

@@ -23,4 +23,18 @@ export const files = {
     path: () => `/upload`,
     tags: ['live-write'],
   },
+  // F01 A': quarantined legacy files (no proven owner) and their owner-approved assignment. Collector routes,
+  // human instance admin only (enforced server-side).
+  'files.quarantine.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/admin/files/quarantine`,
+    tags: ['live-safe'],
+  },
+  'files.quarantine.assign': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/admin/files/assign`,
+    tags: ['live-write'],
+  },
 };

package/lib/api/endpoints/hat.js

@@ -26,6 +26,36 @@ export const hat = {
     path: ({ orgId, hatId }) => `/api/orgs/${orgId}/quoxhat/hats/${encodeURIComponent(hatId)}`,
     tags: ['live-safe'],
   },
+  // quox#1183: which hat a conversation is on, and the person's own switch (audited quoxhat.binding.selected).
+  'hat.resolve': {
+    method: 'GET',
+    service: 'auth',
+    path: ({ orgId }) => `/api/orgs/${orgId}/quoxhat/resolve`,
+    tags: ['live-safe'],
+  },
+  'hat.bind': {
+    method: 'PUT',
+    service: 'auth',
+    path: ({ orgId, conversationId }) => `/api/orgs/${orgId}/quoxhat/bindings/${encodeURIComponent(conversationId)}`,
+  },
+  // CUSTOM-HATS (owner 2026-10-17): create / edit (definition + optional rename) / delete a custom
+  // hat. Same auth routes the dashboard uses; org hats need org manage-settings, a private hat only
+  // its owner. Every write is revisioned and audited server-side (quoxhat.hat.created|updated|deleted).
+  'hat.create': {
+    method: 'POST',
+    service: 'auth',
+    path: ({ orgId }) => `/api/orgs/${orgId}/quoxhat/hats`,
+  },
+  'hat.update': {
+    method: 'PUT',
+    service: 'auth',
+    path: ({ orgId, hatId }) => `/api/orgs/${orgId}/quoxhat/hats/${encodeURIComponent(hatId)}`,
+  },
+  'hat.delete': {
+    method: 'DELETE',
+    service: 'auth',
+    path: ({ orgId, hatId }) => `/api/orgs/${orgId}/quoxhat/hats/${encodeURIComponent(hatId)}`,
+  },
   // Audited reset of an org-edited built-in hat back to its current template
   // (needs org manage-settings); writes quoxhat.hat.reset_to_template.
   'hat.reset': {
@@ -33,4 +63,18 @@ export const hat = {
     service: 'auth',
     path: ({ orgId, hatId }) => `/api/orgs/${orgId}/quoxhat/hats/${encodeURIComponent(hatId)}/reset-to-template`,
   },
+  // Merge-upgrade (2026-10-19): 3-way merge of an org-edited built-in onto the current
+  // template. Preview is a dry run (writes nothing); upgrade appends one system-authored
+  // revision (audited quoxhat.hat.template_merged) and refuses a stale preview (409).
+  'hat.upgrade.preview': {
+    method: 'GET',
+    service: 'auth',
+    path: ({ orgId, hatId }) => `/api/orgs/${orgId}/quoxhat/hats/${encodeURIComponent(hatId)}/upgrade-preview`,
+    tags: ['live-safe'],
+  },
+  'hat.upgrade': {
+    method: 'POST',
+    service: 'auth',
+    path: ({ orgId, hatId }) => `/api/orgs/${orgId}/quoxhat/hats/${encodeURIComponent(hatId)}/upgrade`,
+  },
 };

package/lib/api/endpoints/inbox.js

@@ -17,12 +17,32 @@ export const inbox = {
     path: ({ orgId }) => `/api/orgs/${orgId}/inbox`,
     tags: ['live-safe'],
   },
+  // quox#827: the ONE server-side set of open approvals this user can act on (also backs stats.pending_approvals and LUCID).
+  'inbox.approvals.open': {
+    method: 'GET',
+    service: 'auth',
+    path: ({ orgId }) => `/api/orgs/${orgId}/approvals/open`,
+    tags: ['live-safe'],
+  },
   'inbox.respond': {
     method: 'POST',
     service: 'auth',
     path: ({ orgId, itemId }) => `/api/orgs/${orgId}/inbox/${itemId}/respond`,
     tags: ['live-write'],
   },
+  // quox ask: a session files a decision request (one inbox item) and waits for the human's answer.
+  'inbox.decision.create': {
+    method: 'POST',
+    service: 'auth',
+    path: ({ orgId }) => `/api/orgs/${orgId}/decisions`,
+    tags: ['live-write'],
+  },
+  'inbox.decision.get': {
+    method: 'GET',
+    service: 'auth',
+    path: ({ orgId, id }) => `/api/orgs/${orgId}/decisions/${id}`,
+    tags: ['live-safe'],
+  },
   'inbox.stats.list': {
     method: 'GET',
     service: 'auth',

package/lib/api/endpoints/index.js

@@ -50,6 +50,7 @@
  *   of silently landing in the wrong file.
  */
 
+import { actions } from './actions.js';
 import { admin } from './admin.js';
 import { aee } from './aee.js';
 import { agentAttach } from './agent-attach.js';
@@ -58,8 +59,14 @@ import { assistants } from './assistants.js';
 import { audit } from './audit.js';
 import { auth } from './auth.js';
 import { awareness } from './awareness.js';
+import { router } from './router.js';
+import { mind } from './mind.js';
 import { lucid } from './lucid.js';
+import { loops } from './loops.js';
+import { away } from './away.js';
+import { presence } from './presence.js';
 import { invites } from './invites.js';
+import { agentSchedules } from './agent-schedules.js';
 import { backupSchedules } from './backup-schedules.js';
 import { backups } from './backups.js';
 import { brain } from './brain.js';
@@ -78,10 +85,12 @@ import { engine } from './engine.js';
 import { executions } from './executions.js';
 import { file } from './file.js';
 import { files } from './files.js';
+import { evidence } from './evidence.js';
 import { governance } from './governance.js';
 import { inbox } from './inbox.js';
 import { inboxq } from './inboxq.js';
 import { notesq } from './notesq.js';
+import { blog } from './blog.js';
 import { contactsq } from './contactsq.js';
 import { x } from './x.js';
 import { llmPolicy } from './llm-policy.js';
@@ -100,6 +109,8 @@ import { quoxchat } from './quoxchat.js';
 import { quoxflow } from './quoxflow.js';
 import { quoxplan } from './quoxplan.js';
 import { qlarity } from './qlarity.js';
+import { fetchAllowlist } from './fetchAllowlist.js';
+import { devServerRegistry } from './devServerRegistry.js';
 import { quoxseo } from './quoxseo.js';
 import { telephony } from './telephony.js';
 import { voice } from './voice.js';
@@ -109,6 +120,7 @@ import { runs } from './runs.js';
 import { scim } from './scim.js';
 import { scopes } from './scopes.js';
 import { security } from './security.js';
+import { server } from './server.js';
 import { setup } from './setup.js';
 import { skills } from './skills.js';
 import { sso } from './sso.js';
@@ -124,11 +136,13 @@ import { v1 } from './v1.js';
 import { vault } from './vault.js';
 import { volt } from './volt.js';
 import { safety } from './safety.js';
+import { stepup } from './stepup.js';
 import { ward } from './ward.js';
 import { webhooks } from './webhooks.js';
 import { workflows } from './workflows.js';
 
 export const ENDPOINTS = {
+  ...actions,
   ...admin,
   ...aee,
   ...agentAttach,
@@ -137,8 +151,14 @@ export const ENDPOINTS = {
   ...audit,
   ...auth,
   ...awareness,
+  ...router,
+  ...mind,
   ...lucid,
+  ...loops,
+  ...away,
+  ...presence,
   ...invites,
+  ...agentSchedules,
   ...backupSchedules,
   ...backups,
   ...brain,
@@ -157,10 +177,12 @@ export const ENDPOINTS = {
   ...executions,
   ...file,
   ...files,
+  ...evidence,
   ...governance,
   ...inbox,
   ...inboxq,
   ...notesq,
+  ...blog,
   ...contactsq,
   ...x,
   ...llmPolicy,
@@ -179,6 +201,8 @@ export const ENDPOINTS = {
   ...quoxflow,
   ...quoxplan,
   ...qlarity,
+  ...fetchAllowlist,
+  ...devServerRegistry,
   ...quoxseo,
   ...telephony,
   ...voice,
@@ -188,6 +212,7 @@ export const ENDPOINTS = {
   ...scim,
   ...scopes,
   ...security,
+  ...server,
   ...setup,
   ...skills,
   ...sso,
@@ -203,6 +228,7 @@ export const ENDPOINTS = {
   ...vault,
   ...volt,
   ...safety,
+  ...stepup,
   ...ward,
   ...webhooks,
   ...workflows,

package/lib/api/endpoints/loops.js

@@ -0,0 +1,26 @@
+/**
+ * 'loops.*' endpoints: QLOOP-LIVE, observe a loop as it runs.
+ * Served by the collector (/api/v1/loops/*), which forwards the caller's identity to the tasks
+ * service that owns the durable per-loop event log. Contract: ~/quoxon-work/qloop-live-design.md section 1.
+ */
+
+export const loops = {
+  'loops.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/loops`,
+    tags: ['live-safe'],
+  },
+  'loops.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id }) => `/api/v1/loops/${id}`,
+    tags: ['live-safe'],
+  },
+  'loops.events': {
+    method: 'STREAM',
+    service: 'collector',
+    path: ({ id }) => `/api/v1/loops/${id}/events`,
+    tags: ['live-safe'],
+  },
+};

package/lib/api/endpoints/memory.js

@@ -66,6 +66,25 @@ export const memory = {
     path: ({ id }) => `/api/memory/${id}/reinstate`,
     tags: ['live-write'],
   },
+  // QUOXMIND #1111: the core set.
+  'memory.core-set': {
+    method: 'GET',
+    service: 'memory',
+    path: () => `/api/memory/core-set`,
+    tags: ['live-safe'],
+  },
+  'memory.pin': {
+    method: 'POST',
+    service: 'memory',
+    path: ({ id }) => `/api/memory/${id}/pin`,
+    tags: ['live-write'],
+  },
+  'memory.unpin': {
+    method: 'DELETE',
+    service: 'memory',
+    path: ({ id }) => `/api/memory/${id}/pin`,
+    tags: ['live-write'],
+  },
   'memory.update': {
     method: 'PATCH',
     service: 'memory',

package/lib/api/endpoints/mind.js

@@ -0,0 +1,13 @@
+/**
+ * 'mind.*' endpoints: QuoxMind cognitive implants (read-only).
+ * Collector routes: GET /api/v1/mind/implants, /api/v1/mind/implants/:id,
+ * /api/v1/mind/health, /api/v1/mind/mirror (the compact System Status block CommanderQ
+ * is given, plus its age). Org-scoped, requireServiceOrUserAuth.
+ */
+
+export const mind = {
+  'mind.implants': { method: 'GET', service: 'collector', path: () => `/api/v1/mind/implants`, tags: ['live-safe'] },
+  'mind.implant': { method: 'GET', service: 'collector', path: ({ id }) => `/api/v1/mind/implants/${encodeURIComponent(id)}`, tags: ['live-safe'] },
+  'mind.health': { method: 'GET', service: 'collector', path: () => `/api/v1/mind/health`, tags: ['live-safe'] },
+  'mind.mirror': { method: 'GET', service: 'collector', path: () => `/api/v1/mind/mirror`, tags: ['live-safe'] },
+};

package/lib/api/endpoints/mon.js

@@ -85,6 +85,12 @@ export const mon = {
     path: ({ id }) => `/docker/containers/${id}`,
     tags: ['live-safe'],
   },
+  'mon.docker.containers.inspect': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id }) => `/docker/containers/${id}/inspect`,
+    tags: ['live-safe'],
+  },
   'mon.docker.containers.list': {
     method: 'GET',
     service: 'collector',
@@ -121,6 +127,179 @@ export const mon = {
     path: () => `/docker/system-df`,
     tags: ['live-safe'],
   },
+  'mon.kuma.monitors.list': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/monitors`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.monitors.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/monitors/${encodeURIComponent(id)}`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.monitors.create': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/monitors`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.monitors.update': {
+    method: 'PATCH',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/monitors/${encodeURIComponent(id)}`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.monitors.pause': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/monitors/${encodeURIComponent(id)}/pause`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.monitors.resume': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/monitors/${encodeURIComponent(id)}/resume`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.monitors.delete': {
+    method: 'DELETE',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/monitors/${encodeURIComponent(id)}`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.incidents.list': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ open, limit } = {}) => {
+      const q = [];
+      if (open) q.push('open=1');
+      if (limit) q.push(`limit=${encodeURIComponent(limit)}`);
+      return `/api/v1/kuma/incidents${q.length ? `?${q.join('&')}` : ''}`;
+    },
+    tags: ['live-safe'],
+  },
+  'mon.kuma.incidents.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/incidents/${encodeURIComponent(id)}`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.coverage.get': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/kuma/coverage`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.coverage.propose': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/kuma/coverage/propose`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.maintenance.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/kuma/maintenance`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.maintenance.open': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/kuma/maintenance`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.maintenance.end': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/maintenance/${encodeURIComponent(id)}/end`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.statusIncident.draft': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/status-incidents/${encodeURIComponent(id)}/draft`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.statusIncident.publish': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/status-incidents/${encodeURIComponent(id)}/publish`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.statusIncident.resolve': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/kuma/status-incidents/resolve`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.diagnose.create': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/kuma/diagnose`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.sla.create': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/kuma/sla`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.sla.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/kuma/sla`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.sla.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/sla/${encodeURIComponent(id)}`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.sla.verify': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/sla/${encodeURIComponent(id)}/verify`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.hooks.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/kuma/hooks`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.hooks.create': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/kuma/hooks`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.hooks.delete': {
+    method: 'DELETE',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/hooks/${encodeURIComponent(id)}`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.refresh.create': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/monitoring/uptime-kuma/refresh`,
+    tags: ['live-write'],
+  },
+  'mon.kuma.live.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ fresh } = {}) => `/api/v1/kuma/status${fresh ? '?fresh=1' : ''}`,
+    tags: ['live-safe'],
+  },
+  'mon.kuma.status.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ slug }) => `/api/v1/monitoring/uptime-kuma/status/${encodeURIComponent(slug)}`,
+    tags: ['live-safe'],
+  },
   'mon.metrics.get': {
     method: 'GET',
     service: 'collector',

package/lib/api/endpoints/objectives.js

@@ -11,6 +11,18 @@ export const objectives = {
     path: ({ id }) => `/api/objectives/${id}/approve-plan`,
     tags: ['live-write'],
   },
+  'objectives.retry': {
+    method: 'POST',
+    service: 'tasks',
+    path: ({ id }) => `/api/objectives/${id}/retry`,
+    tags: ['live-write'],
+  },
+  'objectives.cancel': {
+    method: 'DELETE',
+    service: 'tasks',
+    path: ({ id }) => `/api/objectives/${id}`,
+    tags: ['live-write'],
+  },
   'objectives.checkpoint-approve': {
     method: 'POST',
     service: 'tasks',

package/lib/api/endpoints/plugins.js

@@ -101,6 +101,24 @@ export const plugins = {
     path: ({ orgId, pluginId, name }) => `/api/orgs/${orgId}/plugins/${pluginId}/secrets/${name}`,
     tags: ['live-write'],
   },
+  'plugins.revocations.create': {
+    method: 'POST',
+    service: 'auth',
+    path: ({ orgId }) => `/api/orgs/${orgId}/plugin-revocations`,
+    tags: ['live-write'],
+  },
+  'plugins.revocations.delete': {
+    method: 'DELETE',
+    service: 'auth',
+    path: ({ orgId, revocationId }) => `/api/orgs/${orgId}/plugin-revocations/${revocationId}`,
+    tags: ['live-write'],
+  },
+  'plugins.revocations.list': {
+    method: 'GET',
+    service: 'auth',
+    path: ({ orgId }) => `/api/orgs/${orgId}/plugin-revocations`,
+    tags: ['live-safe'],
+  },
   'plugins.trusted-keys.create': {
     method: 'POST',
     service: 'auth',

package/lib/api/endpoints/presence.js

@@ -0,0 +1,33 @@
+/**
+ * 'presence.*' endpoints: PRESENCE (owner 2026-10-16). /afk, /sleep, /back in quox, `quox presence`.
+ * Collector routes GET/PUT /api/v1/presence (org from the verified caller; only a human login sets its own).
+ *
+ * See cli/lib/api/endpoints/index.js for the fragment convention.
+ */
+
+export const presence = {
+  'presence.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/presence`,
+    tags: ['live-safe'],
+  },
+  'presence.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ who }) => `/api/v1/presence/${encodeURIComponent(who)}`,
+    tags: ['live-safe'],
+  },
+  'presence.activity': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/presence/activity`,
+    tags: ['live-write'],
+  },
+  'presence.set': {
+    method: 'PUT',
+    service: 'collector',
+    path: () => `/api/v1/presence`,
+    tags: ['live-write'],
+  },
+};

package/lib/api/endpoints/quoxplan.js

@@ -27,6 +27,13 @@ export const quoxplan = {
     path: () => `/api/v1/quoxplan/roadmaps`,
     tags: ['live-write'],
   },
+  // Read-only free-text search over streams (id, name, summary, notes, plan, phase titles).
+  'quoxplan.search': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/quoxplan/search`,
+    tags: ['live-safe'],
+  },
   'quoxplan.roadmap.streams.list': {
     method: 'GET',
     service: 'collector',

package/lib/api/endpoints/quoxseo.js

@@ -59,6 +59,12 @@ export const quoxseo = {
     path: ({ query = '' }) => `/api/v1/quoxseo/trends${query}`,
     tags: ['live-safe'],
   },
+  'quoxseo.queries.rows': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ query = '' }) => `/api/v1/quoxseo/queries/rows${query}`,
+    tags: ['live-safe'],
+  },
   'quoxseo.inspection': {
     method: 'GET',
     service: 'collector',
@@ -77,6 +83,12 @@ export const quoxseo = {
     service: 'collector',
     path: () => `/api/v1/quoxseo/sites`,
   },
+  // Symmetric removal (quoxwebsite#63); org-scoped at the collector proxy.
+  'quoxseo.sites.remove': {
+    method: 'DELETE',
+    service: 'collector',
+    path: ({ id }) => `/api/v1/quoxseo/sites/${encodeURIComponent(id)}`,
+  },
   // quox#676: governed report delivery (email via instance SMTP and/or the HITL
   // inbox, AEE-witnessed at the collector).
   'quoxseo.report.deliver': {

package/lib/api/endpoints/router.js

@@ -0,0 +1,17 @@
+/**
+ * 'router.*' endpoints: RouterOS identity (quoxai/quox#1236).
+ * Collector route: GET /api/v1/mikrotik/tls-fingerprint (requireServiceOrUserAuth).
+ * Handshake only: the collector reads the certificate the configured router
+ * endpoint presents and sends NO credentials. Nothing is stored or pinned.
+ *
+ * See cli/lib/api/endpoints/index.js for the fragment convention.
+ */
+
+export const router = {
+  'router.tlsFingerprint': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/mikrotik/tls-fingerprint`,
+    tags: ['live-safe'],
+  },
+};