{ "components": { "schemas": { "AcknowledgementOperatorSummary": { "additionalProperties": false, "properties": { "allPayloadsHidden": { "type": "boolean" }, "consumerAgentId": { "type": "string" }, "count": { "minimum": 0, "type": "integer" }, "notificationId": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "rawPayloadExposedCount": { "minimum": 0, "type": "integer" }, "receiptId": { "type": "string" }, "schemaVersion": { "const": "memoryendpoints.acknowledgement_operator_summary.v1" }, "status": { "type": "string" }, "statusCounts": { "$ref": "#/components/schemas/StringCountMap" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "count", "receiptId", "notificationId", "consumerAgentId", "status", "statusCounts", "rawPayloadExposedCount", "allPayloadsHidden", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentGrantScope": { "additionalProperties": false, "properties": { "scopeId": { "minLength": 1, "type": "string" }, "scopeType": { "enum": [ "company", "workspace", "project", "game", "session", "goal", "task" ], "type": "string" } }, "required": [ "scopeType", "scopeId" ], "type": "object" }, "AgentImmutableGrant": { "additionalProperties": false, "properties": { "accessRule": { "const": "scope_and_descendants" }, "immutable": { "const": true }, "scopeId": { "type": "string" }, "scopeType": { "type": "string" } }, "required": [ "scopeType", "scopeId", "accessRule", "immutable" ], "type": "object" }, "AgentInvite": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "agentIdentityId": { "type": "string" }, "agentName": { "type": "string" }, "agentTokenId": { "type": [ "string", "null" ] }, "assignmentContext": { "$ref": "#/components/schemas/PublicJsonObject" }, "companyId": { "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "expiresAt": { "format": "date-time", "type": "string" }, "grant": { "$ref": "#/components/schemas/AgentImmutableGrant" }, "grantId": { "type": [ "string", "null" ] }, "inviteId": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "redeemedAt": { "format": "date-time", "type": [ "string", "null" ] }, "requestId": { "type": "string" }, "scopeId": { "type": "string" }, "scopeType": { "type": "string" }, "singleUse": { "const": true }, "status": { "enum": [ "issued", "redeemed", "revoked", "expired" ], "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "inviteId", "requestId", "companyId", "agentIdentityId", "agentId", "agentName", "scopeType", "scopeId", "status", "createdAt", "expiresAt", "redeemedAt", "grantId", "agentTokenId", "assignmentContext", "singleUse", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentInviteIssueInput": { "additionalProperties": false, "properties": { "approvedRequestId": { "type": "string" }, "expiresInSeconds": { "maximum": 86400, "minimum": 60, "type": "integer" } }, "required": [ "approvedRequestId" ], "type": "object" }, "AgentInviteIssueResult": { "additionalProperties": false, "properties": { "credentialDeliveredToAuthorizedRecipient": { "const": true }, "invite": { "$ref": "#/components/schemas/AgentInvite" }, "inviteUrl": { "type": "string" }, "ok": { "const": true }, "rawCredentialPersisted": { "const": false }, "rawPayloadExposed": { "const": false }, "showCredentialOnce": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "invite", "inviteUrl", "valuesRedacted", "rawPayloadExposed", "credentialDeliveredToAuthorizedRecipient", "rawCredentialPersisted", "showCredentialOnce" ], "type": "object" }, "AgentInviteListResult": { "additionalProperties": false, "properties": { "items": { "items": { "$ref": "#/components/schemas/AgentInvite" }, "type": "array" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "ok", "items", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentInviteOnboarding": { "additionalProperties": false, "properties": { "assignmentContext": { "$ref": "#/components/schemas/PublicJsonObject" }, "immutableScope": { "$ref": "#/components/schemas/AgentImmutableGrant" }, "projectId": { "type": [ "string", "null" ] }, "workspaceId": { "type": [ "string", "null" ] } }, "required": [ "assignmentContext", "workspaceId", "projectId", "immutableScope" ], "type": "object" }, "AgentInviteRedeemInput": { "additionalProperties": false, "properties": { "inviteSecret": { "format": "password", "minLength": 1, "type": "string", "writeOnly": true } }, "required": [ "inviteSecret" ], "type": "object" }, "AgentInviteRedeemResult": { "additionalProperties": false, "properties": { "agentTokenSecret": { "format": "password", "readOnly": true, "type": "string" }, "credentialDeliveredToAuthorizedRecipient": { "const": true }, "invite": { "$ref": "#/components/schemas/AgentInvite" }, "ok": { "const": true }, "onboarding": { "$ref": "#/components/schemas/AgentInviteOnboarding" }, "principal": { "$ref": "#/components/schemas/AgentRedeemedPrincipal" }, "rawCredentialPersisted": { "const": false }, "rawPayloadExposed": { "const": false }, "showCredentialOnce": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "agentTokenSecret", "principal", "invite", "onboarding", "valuesRedacted", "rawPayloadExposed", "credentialDeliveredToAuthorizedRecipient", "rawCredentialPersisted", "showCredentialOnce" ], "type": "object" }, "AgentNameDecisionInput": { "additionalProperties": false, "properties": { "decision": { "enum": [ "approve", "deny" ], "type": "string" }, "decisionReason": { "maxLength": 1000, "type": "string" } }, "required": [ "decision" ], "type": "object" }, "AgentNameLease": { "additionalProperties": false, "properties": { "acquiredAt": { "format": "date-time", "type": [ "string", "null" ] }, "available": { "type": "boolean" }, "conflict": { "type": "boolean" }, "expiresAt": { "format": "date-time", "type": [ "string", "null" ] }, "fencingTokenExposed": { "const": false }, "generation": { "minimum": 1, "type": "integer" }, "holderIdentifiersExposed": { "const": false }, "leaseId": { "readOnly": true, "type": [ "string", "null" ] }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "recovery": { "$ref": "#/components/schemas/AgentNameLeaseRecoveryMetadata" }, "releasedAt": { "format": "date-time", "type": [ "string", "null" ] }, "renewedAt": { "format": "date-time", "type": [ "string", "null" ] }, "revision": { "minimum": 1, "type": "integer" }, "status": { "enum": [ "available", "active", "expired", "released" ], "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "available", "conflict", "status", "holderIdentifiersExposed", "fencingTokenExposed", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentNameLeaseMutationResult": { "additionalProperties": false, "properties": { "action": { "enum": [ "renew", "release", "recover" ], "type": "string" }, "lease": { "$ref": "#/components/schemas/AgentNameLease" }, "normalizedName": { "type": "string" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.agent_name_lease.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "normalizedName", "action", "lease", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentNameLeaseProblem": { "additionalProperties": false, "properties": { "error": { "additionalProperties": false, "properties": { "code": { "enum": [ "invalid_token", "company_master_required", "agent_name_invalid", "agent_name_lease_not_found", "agent_name_lease_conflict", "agent_name_lease_stale", "agent_name_lease_locked", "invalid_request" ], "type": "string" }, "currentLease": { "$ref": "#/components/schemas/AgentNameLease" }, "detail": { "type": "string" }, "safeNoOp": { "const": true }, "title": { "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "code", "title", "detail", "safeNoOp", "valuesRedacted" ], "type": "object" }, "ok": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "safeNoOp": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ], "type": "object" }, "AgentNameLeaseRecoveryInput": { "additionalProperties": false, "properties": { "expectedGeneration": { "minimum": 1, "type": "integer" }, "expectedRevision": { "minimum": 1, "type": "integer" }, "reason": { "maxLength": 255, "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.agent_name_lease.v1" } }, "required": [ "schemaVersion", "expectedGeneration", "expectedRevision", "reason" ], "type": "object" }, "AgentNameLeaseRecoveryMetadata": { "additionalProperties": false, "properties": { "adminRecoverySupported": { "const": true }, "count": { "minimum": 0, "type": "integer" }, "holderIdentifiersExposed": { "const": false }, "lastReason": { "type": [ "string", "null" ] }, "recoveredAt": { "format": "date-time", "type": [ "string", "null" ] }, "recoveredByKind": { "type": [ "string", "null" ] } }, "required": [ "count", "lastReason", "recoveredAt", "recoveredByKind", "adminRecoverySupported", "holderIdentifiersExposed" ], "type": "object" }, "AgentNameLeaseReleaseInput": { "additionalProperties": false, "properties": { "expectedGeneration": { "minimum": 1, "type": "integer" }, "expectedRevision": { "minimum": 1, "type": "integer" }, "reason": { "maxLength": 255, "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.agent_name_lease.v1" } }, "required": [ "schemaVersion", "expectedGeneration", "expectedRevision" ], "type": "object" }, "AgentNameLeaseRenewInput": { "additionalProperties": false, "properties": { "expectedGeneration": { "minimum": 1, "type": "integer" }, "expectedRevision": { "minimum": 1, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.agent_name_lease.v1" } }, "required": [ "schemaVersion", "expectedGeneration", "expectedRevision" ], "type": "object" }, "AgentNameLeaseStatusResult": { "additionalProperties": false, "properties": { "lease": { "$ref": "#/components/schemas/AgentNameLease" }, "normalizedName": { "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$", "type": "string" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.agent_name_lease.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "normalizedName", "lease", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentNameRequest": { "additionalProperties": false, "properties": { "agentIdentityId": { "type": [ "string", "null" ] }, "agentName": { "type": "string" }, "approvedAt": { "format": "date-time", "type": [ "string", "null" ] }, "assignmentContext": { "$ref": "#/components/schemas/PublicJsonObject" }, "companyId": { "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "decisionReason": { "type": [ "string", "null" ] }, "displayName": { "type": "string" }, "inviteId": { "type": [ "string", "null" ] }, "justification": { "type": [ "string", "null" ] }, "memoryTransferFromTokenId": { "type": [ "string", "null" ] }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "requestId": { "type": "string" }, "requestedName": { "type": "string" }, "scopeId": { "type": "string" }, "scopeType": { "type": "string" }, "status": { "enum": [ "pending", "approved", "denied" ], "type": "string" }, "supersedesTokenId": { "type": [ "string", "null" ] }, "valuesRedacted": { "const": true } }, "required": [ "requestId", "companyId", "agentName", "requestedName", "displayName", "justification", "assignmentContext", "scopeType", "scopeId", "status", "createdAt", "approvedAt", "agentIdentityId", "inviteId", "decisionReason", "supersedesTokenId", "memoryTransferFromTokenId", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentNameRequestInput": { "additionalProperties": false, "properties": { "assignmentContext": { "$ref": "#/components/schemas/PublicJsonObject" }, "displayName": { "maxLength": 80, "minLength": 1, "type": "string" }, "justification": { "maxLength": 1000, "type": "string" }, "memoryTransferFromCredentialId": { "type": "string" }, "requestedGrant": { "$ref": "#/components/schemas/AgentGrantScope" }, "requestedName": { "maxLength": 64, "minLength": 3, "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$", "type": "string" }, "supersedesCredentialId": { "type": "string" } }, "required": [ "requestedName", "requestedGrant" ], "type": "object" }, "AgentNameRequestListResult": { "additionalProperties": false, "properties": { "items": { "items": { "$ref": "#/components/schemas/AgentNameRequest" }, "type": "array" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "ok", "items", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentNameRequestMutationResult": { "additionalProperties": false, "properties": { "idempotencyKeyExposed": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "request": { "$ref": "#/components/schemas/AgentNameRequest" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "request", "idempotentReplay", "idempotencyKeyExposed", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "AgentPermissions": { "additionalProperties": false, "properties": { "canAccessWorkspaceOperations": { "const": true }, "canApproveAgentAccess": { "const": false }, "canDelegateCompanyMasterCredentials": { "const": false }, "canIssueAgentInvites": { "const": false }, "canListAgentTokens": { "const": false }, "canManageCompany": { "const": false }, "canRead": { "const": true }, "canRevokeAgentTokens": { "const": false }, "canWrite": { "const": true } }, "required": [ "canRead", "canWrite", "canApproveAgentAccess", "canIssueAgentInvites", "canListAgentTokens", "canRevokeAgentTokens", "canDelegateCompanyMasterCredentials", "canManageCompany", "canAccessWorkspaceOperations" ], "type": "object" }, "AgentPrincipalGrant": { "additionalProperties": false, "properties": { "accessRule": { "const": "scope_and_descendants" }, "grantId": { "type": "string" }, "immutable": { "const": true }, "memoryTransferFromCredentialId": { "type": [ "string", "null" ] }, "scopeId": { "type": "string" }, "scopeType": { "type": "string" }, "supersedesCredentialId": { "type": [ "string", "null" ] } }, "required": [ "grantId", "scopeType", "scopeId", "accessRule", "immutable", "supersedesCredentialId", "memoryTransferFromCredentialId" ], "type": "object" }, "AgentPrincipalResourceContext": { "additionalProperties": false, "properties": { "projectId": { "type": [ "string", "null" ] }, "workspaceId": { "type": [ "string", "null" ] } }, "required": [ "workspaceId", "projectId" ], "type": "object" }, "AgentRedeemedPrincipal": { "additionalProperties": false, "properties": { "active": { "const": true }, "agentClass": { "type": "string" }, "agentId": { "type": "string" }, "agentIdentityId": { "type": "string" }, "canInvite": { "const": false }, "canRevoke": { "const": false }, "capabilities": { "items": { "type": "string" }, "type": "array" }, "companyId": { "type": "string" }, "credentialId": { "type": "string" }, "credentialStatus": { "const": "active" }, "credentialType": { "const": "agent_token" }, "displayName": { "type": "string" }, "grant": { "$ref": "#/components/schemas/AgentPrincipalGrant" }, "grantId": { "type": "string" }, "identityClass": { "type": "string" }, "masterCompanyAgentCredential": { "const": false }, "ordinaryAgentCredential": { "const": true }, "permissions": { "$ref": "#/components/schemas/AgentPermissions" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/AgentPrincipalResourceContext" }, "revoked": { "const": false }, "scopeId": { "type": "string" }, "scopeType": { "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "credentialId", "credentialType", "credentialStatus", "active", "revoked", "canInvite", "canRevoke", "ordinaryAgentCredential", "masterCompanyAgentCredential", "companyId", "agentIdentityId", "agentId", "displayName", "agentClass", "identityClass", "grantId", "scopeType", "scopeId", "resourceContext", "grant", "capabilities", "permissions", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "CommercialAuthorityAuditEvidence": { "additionalProperties": false, "properties": { "action": { "enum": [ "commercial.parent_authority.create", "commercial.parent_authority.redelegate" ], "type": "string" }, "auditEvidenceId": { "pattern": "^parentaudit-[a-f0-9]{32}$", "type": "string" }, "authorityRevision": { "minimum": 1, "type": "integer" }, "durable": { "const": true }, "evidenceHash": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "parentAuthorityRevisionId": { "pattern": "^parentauthrev-[a-f0-9]{32}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.commercial_authority_audit_evidence.v1" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "auditEvidenceId", "parentAuthorityRevisionId", "authorityRevision", "action", "evidenceHash", "durable", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "CommercialParentAuthority": { "additionalProperties": false, "properties": { "authorityClass": { "const": "commercial_parent_account" }, "authorityRevision": { "minimum": 1, "type": "integer" }, "bindingDigest": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "characterIdentity": { "const": false }, "childPrivateNpcMemoryScopes": { "maxItems": 0, "type": "array" }, "delegatedGatewayCredentialId": { "minLength": 1, "type": "string" }, "integrityHash": { "pattern": "^[a-f0-9]{64}$", "type": "string" }, "parentAccountId": { "pattern": "^parentaccount-[a-f0-9]{32}$", "type": "string" }, "personaAuthority": { "const": false }, "previousIntegrityHash": { "pattern": "^[a-f0-9]{64}$", "type": [ "string", "null" ] }, "previousRevisionId": { "type": [ "string", "null" ] }, "projectId": { "minLength": 1, "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "runtimeCredentialAuthority": { "const": false }, "schemaVersion": { "const": "memoryendpoints.commercial_parent_account.v1" }, "siteOrigin": { "const": "escape.gamesfor.me" }, "status": { "const": "active" }, "valuesRedacted": { "const": true }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "parentAccountId", "workspaceId", "projectId", "siteOrigin", "authorityClass", "delegatedGatewayCredentialId", "authorityRevision", "bindingDigest", "previousRevisionId", "previousIntegrityHash", "integrityHash", "status", "characterIdentity", "personaAuthority", "runtimeCredentialAuthority", "childPrivateNpcMemoryScopes", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "CurrentMessageAttentionOrdering": { "additionalProperties": false, "properties": { "cursorField": { "const": "notification.notificationId" }, "priority": { "items": { "type": "string" }, "type": "array" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.current_message_attention_ordering.v1" }, "valuesRedacted": { "const": true }, "withinPriority": { "const": "newest_notification_first" } }, "required": [ "schemaVersion", "priority", "withinPriority", "cursorField", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "CurrentMessageFilters": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "cursor": { "type": "string" }, "limit": { "type": "string" }, "messageId": { "type": "string" }, "notificationId": { "type": "string" } }, "required": [], "type": "object" }, "CurrentMessageOperatorSummary": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "attentionOrdering": { "$ref": "#/components/schemas/CurrentMessageAttentionOrdering" }, "currentMessageLane": { "const": true }, "deliveryCounts": { "$ref": "#/components/schemas/MessageDeliveryCounts" }, "pagination": { "$ref": "#/components/schemas/CurrentMessagePagination" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "responseDispositionCounts": { "$ref": "#/components/schemas/StringCountMap" }, "schemaVersion": { "const": "memoryendpoints.inbox_operator_summary.v1" }, "totalUnreadCount": { "minimum": 0, "type": "integer" }, "unreadCount": { "minimum": 0, "type": "integer" }, "valuesRedacted": { "const": true }, "visibleUnreadCount": { "minimum": 0, "type": "integer" } }, "required": [ "schemaVersion", "agentId", "unreadCount", "visibleUnreadCount", "totalUnreadCount", "currentMessageLane", "deliveryCounts", "responseDispositionCounts", "pagination", "attentionOrdering", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "CurrentMessagePagination": { "additionalProperties": false, "properties": { "cursor": { "type": "string" }, "cursorAccepted": { "type": [ "boolean", "null" ] }, "hasMore": { "type": "boolean" }, "limit": { "maximum": 200, "minimum": 0, "type": "integer" }, "nextCursor": { "type": [ "string", "null" ] }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "totalUnreadCount": { "minimum": 0, "type": "integer" }, "valuesRedacted": { "const": true }, "visibleUnreadCount": { "minimum": 0, "type": "integer" } }, "required": [ "totalUnreadCount", "visibleUnreadCount", "hasMore", "nextCursor", "cursor", "cursorAccepted", "limit", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "FbdHierarchyDocument": { "additionalProperties": false, "properties": { "childPrivateNpcMemoryScopes": { "items": false, "maxItems": 5, "minItems": 5, "prefixItems": [ { "const": "npc_global" }, { "const": "npc_player_relationship" }, { "const": "npc_game_context" }, { "const": "npc_session_context" }, { "const": "npc_puzzle_state" } ], "type": "array" }, "grants": { "items": { "$ref": "#/components/schemas/FbdSubjectGrant" }, "type": "array" }, "hierarchyDigest": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "hierarchyRevision": { "minimum": 1, "type": "integer" }, "privateRooms": { "items": { "$ref": "#/components/schemas/FbdPrivateRoom" }, "type": "array" }, "projectId": { "minLength": 1, "type": "string" }, "rawPayloadExposed": { "const": false }, "ready": { "type": "boolean" }, "schemaVersion": { "const": "memoryendpoints.fbd_hierarchy.v2" }, "sharedSubjectsWidenNpcMemoryScopes": { "const": false }, "siteParent": { "$ref": "#/components/schemas/FbdHierarchySiteParent" }, "subjects": { "items": { "$ref": "#/components/schemas/FbdSharedSubject" }, "type": "array" }, "swarmRoster": { "$ref": "#/components/schemas/FbdSwarmRoster" }, "valuesRedacted": { "const": true }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "ready", "workspaceId", "projectId", "hierarchyRevision", "siteParent", "subjects", "grants", "swarmRoster", "privateRooms", "childPrivateNpcMemoryScopes", "sharedSubjectsWidenNpcMemoryScopes", "valuesRedacted", "rawPayloadExposed", "hierarchyDigest" ], "type": "object" }, "FbdHierarchyMutationDocument": { "additionalProperties": false, "properties": { "childPrivateNpcMemoryScopes": { "items": false, "maxItems": 5, "minItems": 5, "prefixItems": [ { "const": "npc_global" }, { "const": "npc_player_relationship" }, { "const": "npc_game_context" }, { "const": "npc_session_context" }, { "const": "npc_puzzle_state" } ], "type": "array" }, "grants": { "items": { "$ref": "#/components/schemas/FbdSubjectGrant" }, "type": "array" }, "hierarchyDigest": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "hierarchyRevision": { "minimum": 1, "type": "integer" }, "idempotentReplay": { "type": "boolean" }, "privateRooms": { "items": { "$ref": "#/components/schemas/FbdPrivateRoom" }, "type": "array" }, "projectId": { "minLength": 1, "type": "string" }, "rawPayloadExposed": { "const": false }, "ready": { "type": "boolean" }, "schemaVersion": { "const": "memoryendpoints.fbd_hierarchy.v2" }, "sharedSubjectsWidenNpcMemoryScopes": { "const": false }, "siteParent": { "$ref": "#/components/schemas/FbdHierarchySiteParent" }, "subjects": { "items": { "$ref": "#/components/schemas/FbdSharedSubject" }, "type": "array" }, "swarmRoster": { "$ref": "#/components/schemas/FbdSwarmRoster" }, "valuesRedacted": { "const": true }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "ready", "workspaceId", "projectId", "hierarchyRevision", "siteParent", "subjects", "grants", "swarmRoster", "privateRooms", "childPrivateNpcMemoryScopes", "sharedSubjectsWidenNpcMemoryScopes", "valuesRedacted", "rawPayloadExposed", "hierarchyDigest", "idempotentReplay" ], "type": "object" }, "FbdHierarchySiteParent": { "additionalProperties": false, "properties": { "authorityClass": { "const": "commercial_parent_account" }, "bindingDigest": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "characterIdentity": { "const": false }, "immutable": { "const": true }, "parentAccountId": { "pattern": "^parentaccount-[a-f0-9]{32}$", "type": "string" }, "personaAuthority": { "const": false }, "projectId": { "minLength": 1, "type": "string" }, "runtimeCredentialAuthority": { "const": false }, "siteOrigin": { "const": "escape.gamesfor.me" }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "parentAccountId", "workspaceId", "projectId", "siteOrigin", "authorityClass", "bindingDigest", "immutable", "characterIdentity", "personaAuthority", "runtimeCredentialAuthority" ], "type": "object" }, "FbdPrivateRoom": { "additionalProperties": false, "properties": { "members": { "items": { "$ref": "#/components/schemas/FbdRosterMember" }, "type": "array" }, "membershipRevision": { "minimum": 0, "type": "integer" }, "roomSubjectId": { "pattern": "^fbd-subject-v1:room:[a-f0-9]{64}$", "type": "string" } }, "required": [ "roomSubjectId", "membershipRevision", "members" ], "type": "object" }, "FbdRosterMember": { "additionalProperties": false, "properties": { "generation": { "minimum": 1, "type": "integer" }, "membershipId": { "minLength": 1, "type": "string" }, "principalId": { "minLength": 1, "type": "string" }, "principalType": { "const": "npc_profile" }, "revision": { "minimum": 1, "type": "integer" }, "role": { "minLength": 1, "type": "string" }, "state": { "enum": [ "active", "revoked" ], "type": "string" } }, "required": [ "membershipId", "principalType", "principalId", "role", "state", "revision", "generation" ], "type": "object" }, "FbdSharedSubject": { "additionalProperties": false, "properties": { "immutableParentAndOrigin": { "const": true }, "lineageDigest": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "origin": { "const": "escape.gamesfor.me" }, "originKey": { "pattern": "^fbd-origin-v1:(site|world|room):[a-f0-9]{64}:[a-f0-9]{64}$", "type": "string" }, "parentSubjectId": { "pattern": "^fbd-subject-v1:(site|world|room):[a-f0-9]{64}$", "type": [ "string", "null" ] }, "revision": { "minimum": 1, "type": "integer" }, "subjectId": { "pattern": "^fbd-subject-v1:(site|world|room):[a-f0-9]{64}$", "type": "string" }, "subjectType": { "enum": [ "site", "world", "room" ], "type": "string" } }, "required": [ "subjectId", "subjectType", "parentSubjectId", "origin", "originKey", "revision", "lineageDigest", "immutableParentAndOrigin" ], "type": "object" }, "FbdSubjectGrant": { "additionalProperties": false, "properties": { "capabilities": { "items": { "enum": [ "consume", "read", "write" ], "type": "string" }, "maxItems": 3, "minItems": 1, "type": "array", "uniqueItems": true }, "childPrivateNpcMemoryScopesGranted": { "maxItems": 0, "type": "array" }, "generation": { "minimum": 1, "type": "integer" }, "grantId": { "minLength": 1, "type": "string" }, "principalId": { "minLength": 1, "type": "string" }, "principalType": { "enum": [ "npc_profile", "swarm_roster" ], "type": "string" }, "revision": { "minimum": 1, "type": "integer" }, "state": { "enum": [ "active", "revoked" ], "type": "string" }, "subjectId": { "pattern": "^fbd-subject-v1:(site|world|room):[a-f0-9]{64}$", "type": "string" } }, "required": [ "grantId", "subjectId", "principalType", "principalId", "capabilities", "state", "revision", "generation", "childPrivateNpcMemoryScopesGranted" ], "type": "object" }, "FbdSwarmRoster": { "additionalProperties": false, "properties": { "memberships": { "items": { "$ref": "#/components/schemas/FbdRosterMember" }, "type": "array" }, "revision": { "minimum": 0, "type": "integer" }, "rosterId": { "minLength": 1, "type": "string" } }, "required": [ "rosterId", "revision", "memberships" ], "type": "object" }, "GovernedAgentMessage": { "additionalProperties": false, "properties": { "correlationId": { "type": [ "string", "null" ] }, "createdAt": { "format": "date-time", "type": "string" }, "messageId": { "type": "string" }, "rawMessageBodyStored": { "const": false }, "replyToMessageId": { "type": [ "string", "null" ] }, "responseRequired": { "type": "boolean" }, "safeSummary": { "type": "string" }, "senderAgentId": { "type": "string" }, "targetAgentId": { "type": "string" }, "threadId": { "type": [ "string", "null" ] }, "valuesRedacted": { "const": true }, "visibility": { "enum": [ "public_safe", "direct_private" ], "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "messageId", "workspaceId", "senderAgentId", "targetAgentId", "safeSummary", "responseRequired", "visibility", "threadId", "correlationId", "replyToMessageId", "createdAt", "rawMessageBodyStored", "valuesRedacted" ], "type": "object" }, "GovernedCurrentMessageItem": { "additionalProperties": false, "properties": { "delivery": { "$ref": "#/components/schemas/GovernedMessageDelivery" }, "message": { "$ref": "#/components/schemas/GovernedAgentMessage" }, "notification": { "$ref": "#/components/schemas/GovernedNotification" } }, "required": [ "notification", "message", "delivery" ], "type": "object" }, "GovernedCurrentMessageResult": { "additionalProperties": false, "properties": { "attentionOrdering": { "$ref": "#/components/schemas/CurrentMessageAttentionOrdering" }, "currentMessageLane": { "const": true }, "cursor": { "type": "string" }, "cursorAccepted": { "type": [ "boolean", "null" ] }, "deliveryCounts": { "$ref": "#/components/schemas/MessageDeliveryCounts" }, "filters": { "$ref": "#/components/schemas/CurrentMessageFilters" }, "hasMore": { "type": "boolean" }, "items": { "items": { "$ref": "#/components/schemas/GovernedCurrentMessageItem" }, "maxItems": 200, "type": "array" }, "nextCursor": { "type": [ "string", "null" ] }, "ok": { "const": true }, "operatorSummary": { "$ref": "#/components/schemas/CurrentMessageOperatorSummary" }, "pagination": { "$ref": "#/components/schemas/CurrentMessagePagination" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "responseStates": { "items": { "type": "string" }, "type": "array" }, "totalUnreadCount": { "minimum": 0, "type": "integer" }, "unreadCount": { "minimum": 0, "type": "integer" }, "valuesRedacted": { "const": true }, "visibleUnreadCount": { "minimum": 0, "type": "integer" } }, "required": [ "ok", "currentMessageLane", "items", "unreadCount", "visibleUnreadCount", "totalUnreadCount", "hasMore", "nextCursor", "cursor", "cursorAccepted", "attentionOrdering", "responseStates", "filters", "deliveryCounts", "pagination", "operatorSummary", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedMeetingMessage": { "additionalProperties": false, "properties": { "createdAt": { "format": "date-time", "type": "string" }, "meetingMessageId": { "type": "string" }, "rawMessageBodyStored": { "const": false }, "rawPayloadExposed": { "const": false }, "roomId": { "type": "string" }, "safeSummary": { "type": "string" }, "scope": { "type": "string" }, "scopeId": { "type": "string" }, "senderAgentId": { "type": "string" }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "meetingMessageId", "workspaceId", "roomId", "scope", "scopeId", "senderAgentId", "safeSummary", "createdAt", "rawMessageBodyStored", "valuesRedacted", "rawPayloadExposed" ], "type": "object" }, "GovernedMeetingMessageInput": { "additionalProperties": false, "properties": { "roomId": { "type": "string" }, "safeSummary": { "maxLength": 2000, "minLength": 1, "type": "string" }, "senderAgentId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "roomId", "senderAgentId", "safeSummary" ], "type": "object" }, "GovernedMeetingMessageListResult": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "cursor": { "type": "string" }, "cursorAccepted": { "type": [ "boolean", "null" ] }, "filters": { "$ref": "#/components/schemas/MeetingMessageFilters" }, "hasMore": { "type": "boolean" }, "items": { "items": { "$ref": "#/components/schemas/GovernedMeetingMessage" }, "type": "array" }, "nextCursor": { "type": [ "string", "null" ] }, "ok": { "const": true }, "operatorSummary": { "$ref": "#/components/schemas/MeetingMessagesOperatorSummary" }, "pagination": { "$ref": "#/components/schemas/MeetingTranscriptPagination" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readState": { "$ref": "#/components/schemas/MeetingReadState" }, "room": { "$ref": "#/components/schemas/GovernedMeetingRoom" }, "schemaVersion": { "const": "memoryendpoints.meeting_messages.v1" }, "totalMessageCount": { "minimum": 0, "type": "integer" }, "transcriptOrdering": { "$ref": "#/components/schemas/MeetingTranscriptOrdering" }, "valuesRedacted": { "const": true }, "visibleMessageCount": { "minimum": 0, "type": "integer" } }, "required": [ "ok", "schemaVersion", "room", "items", "count", "visibleMessageCount", "totalMessageCount", "hasMore", "nextCursor", "cursor", "cursorAccepted", "transcriptOrdering", "pagination", "readState", "filters", "operatorSummary", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedMeetingMessageMutationResult": { "additionalProperties": false, "properties": { "canonicalRoomId": { "type": "string" }, "confirmation": { "$ref": "#/components/schemas/MeetingPostConfirmation" }, "idempotentReplay": { "type": "boolean" }, "message": { "$ref": "#/components/schemas/GovernedMeetingMessage" }, "messageId": { "type": "string" }, "ok": { "const": true }, "operatorSummary": { "$ref": "#/components/schemas/MeetingPostOperatorSummary" }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "room": { "$ref": "#/components/schemas/GovernedMeetingRoom" }, "transcriptQueryUrl": { "type": "string" }, "valuesRedacted": { "const": true }, "visibleToSender": { "const": true } }, "required": [ "ok", "room", "message", "persisted", "visibleToSender", "canonicalRoomId", "messageId", "transcriptQueryUrl", "confirmation", "operatorSummary", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedMeetingMessagePromotionInput": { "additionalProperties": false, "properties": { "confidence": { "maximum": 1, "minimum": 0, "type": "number" }, "meetingMessageId": { "type": "string" }, "memoryType": { "type": "string" }, "promotedByAgentId": { "type": "string" }, "scope": { "type": "string" }, "scopeId": { "type": "string" }, "source": { "type": "string" }, "subject": { "type": "string" }, "summary": { "maxLength": 4000, "minLength": 1, "type": "string" }, "tags": { "items": { "type": "string" }, "type": "array" }, "title": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "meetingMessageId", "promotedByAgentId" ], "type": "object" }, "GovernedMeetingMessagePromotionResult": { "additionalProperties": false, "properties": { "canonicalMemoryEventId": { "type": "string" }, "confirmation": { "$ref": "#/components/schemas/MemorySubmissionConfirmation" }, "event": { "$ref": "#/components/schemas/GovernedMemoryEvent" }, "idempotentReplay": { "type": "boolean" }, "memoryQueryUrl": { "type": "string" }, "ok": { "const": true }, "operatorSummary": { "$ref": "#/components/schemas/MeetingMemoryPromotionOperatorSummary" }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reviewId": { "type": "string" }, "reviewQueueUrl": { "type": "string" }, "room": { "$ref": "#/components/schemas/GovernedMeetingRoom" }, "sourceMeetingMessage": { "$ref": "#/components/schemas/GovernedMeetingMessage" }, "submission": { "$ref": "#/components/schemas/MeetingMemorySubmission" }, "valuesRedacted": { "const": true }, "visibleInReviewQueue": { "type": "boolean" }, "visibleInSearch": { "type": "boolean" } }, "required": [ "ok", "sourceMeetingMessage", "room", "event", "submission", "persisted", "visibleInSearch", "visibleInReviewQueue", "canonicalMemoryEventId", "reviewId", "memoryQueryUrl", "reviewQueueUrl", "confirmation", "operatorSummary", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedMeetingRoom": { "additionalProperties": false, "properties": { "alwaysAvailable": { "const": true }, "ancestorRoomIds": { "items": { "type": "string" }, "type": "array" }, "childRoomIds": { "items": { "type": "string" }, "type": "array" }, "companyId": { "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "defaultRoom": { "type": "boolean" }, "hierarchyDepth": { "maximum": 16, "minimum": 0, "type": "integer" }, "joined": { "type": "boolean" }, "label": { "type": "string" }, "lastMessageAt": { "format": "date-time", "type": [ "string", "null" ] }, "membership": { "$ref": "#/components/schemas/MeetingRoomMembershipState" }, "messageCount": { "minimum": 0, "type": "integer" }, "name": { "type": "string" }, "parentRoomId": { "type": [ "string", "null" ] }, "purpose": { "type": "string" }, "rawPayloadExposed": { "const": false }, "readState": { "$ref": "#/components/schemas/MeetingReadState" }, "roomId": { "type": "string" }, "scope": { "enum": [ "company", "workspace", "project", "goal", "task", "game", "session" ], "type": "string" }, "scopeId": { "type": "string" }, "status": { "const": "active" }, "unreadCount": { "minimum": 0, "type": "integer" }, "updatedAt": { "format": "date-time", "type": [ "string", "null" ] }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "roomId", "workspaceId", "scope", "scopeId", "label", "name", "purpose", "status", "defaultRoom", "alwaysAvailable", "createdAt", "valuesRedacted", "rawPayloadExposed" ], "type": "object" }, "GovernedMeetingRoomCreateInput": { "additionalProperties": false, "properties": { "creatorAgentId": { "type": "string" }, "label": { "maxLength": 120, "type": "string" }, "name": { "maxLength": 160, "type": "string" }, "parentScopeId": { "type": "string" }, "parentScopeType": { "enum": [ "project", "goal", "game" ], "type": "string" }, "purpose": { "maxLength": 1000, "type": "string" }, "scope": { "enum": [ "goal", "task", "game", "session" ], "type": "string" }, "scopeId": { "maxLength": 160, "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "scope", "scopeId", "parentScopeType", "parentScopeId", "creatorAgentId" ], "type": "object" }, "GovernedMeetingRoomListResult": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "filters": { "$ref": "#/components/schemas/MeetingRoomFilters" }, "items": { "items": { "$ref": "#/components/schemas/GovernedMeetingRoom" }, "type": "array" }, "ok": { "const": true }, "operatorSummary": { "$ref": "#/components/schemas/MeetingRoomsOperatorSummary" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.meeting_rooms.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "filters", "operatorSummary", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedMeetingRoomMutationResult": { "additionalProperties": false, "properties": { "canonicalRoomId": { "type": "string" }, "confirmation": { "$ref": "#/components/schemas/MeetingRoomCreateConfirmation" }, "created": { "type": "boolean" }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operatorSummary": { "$ref": "#/components/schemas/MeetingRoomCreateOperatorSummary" }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "room": { "$ref": "#/components/schemas/GovernedMeetingRoom" }, "roomQueryUrl": { "type": "string" }, "transcriptQueryUrl": { "type": "string" }, "valuesRedacted": { "const": true }, "visibleToAgent": { "const": true } }, "required": [ "ok", "room", "created", "persisted", "visibleToAgent", "canonicalRoomId", "roomQueryUrl", "transcriptQueryUrl", "confirmation", "operatorSummary", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedMeetingRoomReadInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "lastMeetingMessageId": { "type": "string" }, "roomId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "roomId", "agentId" ], "type": "object" }, "GovernedMeetingRoomReadResult": { "additionalProperties": false, "properties": { "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operatorSummary": { "$ref": "#/components/schemas/MeetingReadOperatorSummary" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readState": { "$ref": "#/components/schemas/MeetingReadStateValue" }, "room": { "$ref": "#/components/schemas/GovernedMeetingRoom" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "room", "readState", "operatorSummary", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedMemoryEvent": { "additionalProperties": false, "properties": { "actorAgentId": { "type": "string" }, "bodyHash": { "type": "string" }, "confidence": { "maximum": 1, "minimum": 0, "type": "number" }, "createdAt": { "format": "date-time", "type": "string" }, "eventId": { "type": "string" }, "firewall": { "$ref": "#/components/schemas/GovernedMemoryFirewall" }, "memoryType": { "type": "string" }, "promotionState": { "type": "string" }, "rawPrivatePayloadStored": { "const": false }, "reviewId": { "type": "string" }, "reviewStatus": { "type": "string" }, "revision": { "minimum": 1, "type": "integer" }, "scope": { "type": "string" }, "scopeId": { "type": "string" }, "source": { "type": "string" }, "status": { "type": "string" }, "subject": { "type": "string" }, "summary": { "type": "string" }, "tags": { "items": { "type": "string" }, "type": "array" }, "title": { "type": "string" }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "eventId", "workspaceId", "actorAgentId", "scope", "scopeId", "memoryType", "subject", "title", "summary", "tags", "source", "confidence", "promotionState", "reviewStatus", "bodyHash", "revision", "firewall", "createdAt", "status", "rawPrivatePayloadStored", "valuesRedacted", "reviewId" ], "type": "object" }, "GovernedMemoryFirewall": { "additionalProperties": false, "properties": { "decision": { "type": "string" }, "detectedThreats": { "items": { "type": "string" }, "type": "array" }, "redactionApplied": { "type": "boolean" }, "riskScore": { "type": "number" }, "schemaVersion": { "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "decision", "riskScore", "detectedThreats", "redactionApplied", "valuesRedacted" ], "type": "object" }, "GovernedMemorySubmitInput": { "description": "Broader governed MATM memory submission, bounded to 1 MiB. snake_case aliases remain accepted for compatibility; schemaVersion is reserved.", "not": { "required": [ "schemaVersion" ] }, "properties": { "actorAgentId": { "type": "string" }, "confidence": { "type": "number" }, "memoryType": { "type": "string" }, "scope": { "type": "string" }, "scopeId": { "type": "string" }, "source": { "type": "string" }, "subject": { "type": "string" }, "summary": { "maxLength": 4000, "type": "string" }, "tags": { "items": { "type": "string" }, "type": "array" }, "title": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "summary" ], "type": "object" }, "GovernedMemorySubmitResult": { "additionalProperties": false, "properties": { "canonicalMemoryEventId": { "type": "string" }, "confirmation": { "type": "object" }, "event": { "type": "object" }, "memoryQueryUrl": { "type": "string" }, "ok": { "const": true }, "operatorSummary": { "type": "object" }, "persisted": { "type": "boolean" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reviewId": { "type": [ "string", "null" ] }, "reviewQueueUrl": { "type": "string" }, "submission": { "type": "object" }, "valuesRedacted": { "const": true }, "visibleInReviewQueue": { "type": "boolean" }, "visibleInSearch": { "type": "boolean" } }, "required": [ "ok", "event", "submission", "operatorSummary", "persisted", "visibleInSearch", "visibleInReviewQueue", "canonicalMemoryEventId", "reviewId", "memoryQueryUrl", "reviewQueueUrl", "confirmation", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedMessageDelivery": { "additionalProperties": false, "properties": { "broadcast": { "type": "boolean" }, "inboxAgentId": { "type": "string" }, "messageType": { "enum": [ "broadcast", "targeted" ], "type": "string" }, "rawPayloadExposed": { "const": false }, "recipientAgentId": { "type": "string" }, "responseDisposition": { "enum": [ "required_response", "viewed_acknowledgement" ], "type": "string" }, "targetAgentId": { "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "messageType", "broadcast", "targetAgentId", "recipientAgentId", "inboxAgentId", "responseDisposition", "valuesRedacted", "rawPayloadExposed" ], "type": "object" }, "GovernedNotification": { "additionalProperties": false, "properties": { "createdAt": { "format": "date-time", "type": "string" }, "messageId": { "type": "string" }, "notificationId": { "type": "string" }, "readAt": { "format": "date-time", "type": [ "string", "null" ] }, "responseDisposition": { "enum": [ "required_response", "viewed_acknowledgement" ], "type": "string" }, "status": { "const": "unread" }, "targetAgentId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "notificationId", "workspaceId", "messageId", "targetAgentId", "status", "responseDisposition", "createdAt", "readAt" ], "type": "object" }, "GovernedNotificationAckInput": { "additionalProperties": false, "properties": { "consumerAgentId": { "type": "string" }, "notificationId": { "type": "string" }, "status": { "enum": [ "read", "archived" ], "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "consumerAgentId", "notificationId" ], "type": "object" }, "GovernedNotificationAckResult": { "additionalProperties": false, "properties": { "idempotencyKeyExposed": { "const": false }, "idempotentReplay": { "type": "boolean" }, "notificationId": { "type": "string" }, "ok": { "const": true }, "operatorSummary": { "$ref": "#/components/schemas/AcknowledgementOperatorSummary" }, "persistedReceiptCount": { "const": 1 }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "receipt": { "$ref": "#/components/schemas/GovernedReceipt" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "notificationId", "persistedReceiptCount", "receipt", "operatorSummary", "idempotentReplay", "idempotencyKeyExposed", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedReceipt": { "additionalProperties": false, "properties": { "consumerAgentId": { "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "notificationId": { "type": "string" }, "rawPayloadExposed": { "const": false }, "receiptId": { "type": "string" }, "status": { "enum": [ "read", "archived" ], "type": "string" }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "receiptId", "workspaceId", "notificationId", "consumerAgentId", "status", "createdAt", "rawPayloadExposed", "valuesRedacted" ], "type": "object" }, "GovernedSelfReadbackResult": { "additionalProperties": false, "properties": { "access": { "type": "object" }, "ok": { "const": true }, "principal": { "properties": { "credentialType": { "enum": [ "company_master", "agent_token" ], "type": "string" } }, "required": [ "credentialType" ], "type": "object" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "ok", "principal", "access", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "GovernedWorkspaceReadbackResult": { "additionalProperties": false, "properties": { "ok": { "const": true }, "operatorSummary": { "type": "object" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "valuesRedacted": { "const": true }, "workspace": { "type": "object" } }, "required": [ "ok", "workspace", "operatorSummary", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "HumanCommercialAddSubjectPayload": { "additionalProperties": false, "properties": { "parentSubjectId": { "pattern": "^fbd-subject-v1:(site|world|room):[a-f0-9]{64}$", "type": [ "string", "null" ] }, "sourceIdentityDigest": { "pattern": "^fbd-source-v1:(site|world|room):[a-f0-9]{64}$", "type": "string" }, "subjectType": { "enum": [ "site", "world", "room" ], "type": "string" } }, "required": [ "subjectType", "parentSubjectId", "sourceIdentityDigest" ], "type": "object" }, "HumanCommercialEnsurePrivateRoomPayload": { "additionalProperties": false, "properties": { "expectedMembershipRevision": { "minimum": 0, "type": "integer" }, "roomSubjectId": { "pattern": "^fbd-subject-v1:room:[a-f0-9]{64}$", "type": "string" } }, "required": [ "roomSubjectId", "expectedMembershipRevision" ], "type": "object" }, "HumanCommercialHierarchyMutationInput": { "additionalProperties": false, "properties": { "expectedHierarchyRevision": { "minimum": 0, "type": "integer" }, "operation": { "enum": [ "set_site_parent", "add_subject", "set_subject_grant", "set_swarm_roster_membership", "ensure_private_room", "set_private_room_membership" ], "type": "string" }, "payload": { "oneOf": [ { "$ref": "#/components/schemas/HumanCommercialSetSiteParentPayload" }, { "$ref": "#/components/schemas/HumanCommercialAddSubjectPayload" }, { "$ref": "#/components/schemas/HumanCommercialSetSubjectGrantPayload" }, { "$ref": "#/components/schemas/HumanCommercialSetRosterMembershipPayload" }, { "$ref": "#/components/schemas/HumanCommercialEnsurePrivateRoomPayload" }, { "$ref": "#/components/schemas/HumanCommercialSetPrivateRoomMembershipPayload" } ] }, "projectId": { "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.human_commercial_operator.v1" }, "siteOrigin": { "const": "escape.gamesfor.me" }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "siteOrigin", "operation", "payload", "expectedHierarchyRevision" ], "type": "object" }, "HumanCommercialHierarchyMutationResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "hierarchy": { "$ref": "#/components/schemas/FbdHierarchyMutationDocument" }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "safeNoOpOnRetry": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "hierarchy", "idempotentReplay", "safeNoOpOnRetry" ], "type": "object" }, "HumanCommercialHierarchyReadResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "hierarchy": { "$ref": "#/components/schemas/FbdHierarchyDocument" }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "hierarchy" ], "type": "object" }, "HumanCommercialParentAuthorityMutationInput": { "additionalProperties": false, "properties": { "delegatedGatewayCredentialId": { "maxLength": 512, "minLength": 1, "type": "string" }, "expectedAuthorityRevision": { "minimum": 0, "type": "integer" }, "projectId": { "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.human_commercial_operator.v1" }, "siteOrigin": { "const": "escape.gamesfor.me" }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "siteOrigin", "delegatedGatewayCredentialId", "expectedAuthorityRevision" ], "type": "object" }, "HumanCommercialParentAuthorityMutationResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "auditEvidence": { "$ref": "#/components/schemas/CommercialAuthorityAuditEvidence" }, "childScopesGranted": { "const": false }, "contextVersion": { "minLength": 1, "type": "string" }, "created": { "type": "boolean" }, "csrfTokenRotated": { "const": false }, "hierarchyMutated": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "parentAuthority": { "$ref": "#/components/schemas/CommercialParentAuthority" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "personaCreated": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "redelegated": { "type": "boolean" }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "runtimeCredentialCreated": { "const": false }, "safeNoOpOnRetry": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "parentAuthority", "auditEvidence", "created", "redelegated", "idempotentReplay", "hierarchyMutated", "personaCreated", "runtimeCredentialCreated", "childScopesGranted", "safeNoOpOnRetry" ], "type": "object" }, "HumanCommercialParentAuthorityReadResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "parentAuthority": { "oneOf": [ { "$ref": "#/components/schemas/CommercialParentAuthority" }, { "type": "null" } ] }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "parentAuthority" ], "type": "object" }, "HumanCommercialProblem": { "additionalProperties": false, "allOf": [ { "if": { "properties": { "safeNoOp": { "const": false } }, "required": [ "safeNoOp" ] }, "then": { "properties": { "error": { "required": [ "outcomeUncertain", "reconcileRequired" ] } }, "required": [ "outcomeUncertain", "reconcileRequired" ] } } ], "properties": { "error": { "additionalProperties": false, "properties": { "code": { "minLength": 1, "type": "string" }, "detail": { "minLength": 1, "type": "string" }, "outcomeUncertain": { "const": true }, "reconcileRequired": { "const": true }, "safeNoOp": { "type": "boolean" }, "title": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "code", "title", "detail", "safeNoOp", "valuesRedacted" ], "type": "object" }, "ok": { "const": false }, "outcomeUncertain": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reconcileRequired": { "const": true }, "safeNoOp": { "type": "boolean" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ], "type": "object" }, "HumanCommercialSetPrivateRoomMembershipPayload": { "additionalProperties": false, "properties": { "expectedMembershipRevision": { "minimum": 0, "type": "integer" }, "principalId": { "minLength": 1, "type": "string" }, "principalType": { "const": "npc_profile" }, "role": { "minLength": 1, "type": "string" }, "roomSubjectId": { "pattern": "^fbd-subject-v1:room:[a-f0-9]{64}$", "type": "string" }, "state": { "enum": [ "active", "revoked" ], "type": "string" } }, "required": [ "roomSubjectId", "principalType", "principalId", "role", "state", "expectedMembershipRevision" ], "type": "object" }, "HumanCommercialSetRosterMembershipPayload": { "additionalProperties": false, "properties": { "expectedRosterRevision": { "minimum": 0, "type": "integer" }, "principalId": { "minLength": 1, "type": "string" }, "principalType": { "const": "npc_profile" }, "role": { "minLength": 1, "type": "string" }, "state": { "enum": [ "active", "revoked" ], "type": "string" } }, "required": [ "principalType", "principalId", "role", "state", "expectedRosterRevision" ], "type": "object" }, "HumanCommercialSetSiteParentPayload": { "additionalProperties": false, "properties": { "parentAccountId": { "pattern": "^parentaccount-[a-f0-9]{32}$", "type": "string" } }, "required": [ "parentAccountId" ], "type": "object" }, "HumanCommercialSetSubjectGrantPayload": { "additionalProperties": false, "properties": { "capabilities": { "items": { "enum": [ "consume", "read", "write" ], "type": "string" }, "maxItems": 3, "minItems": 1, "type": "array", "uniqueItems": true }, "expectedGrantRevision": { "minimum": 0, "type": "integer" }, "grantId": { "minLength": 1, "type": "string" }, "principalId": { "minLength": 1, "type": "string" }, "principalType": { "enum": [ "npc_profile", "swarm_roster" ], "type": "string" }, "state": { "enum": [ "active", "revoked" ], "type": "string" }, "subjectId": { "pattern": "^fbd-subject-v1:(site|world|room):[a-f0-9]{64}$", "type": "string" } }, "required": [ "grantId", "subjectId", "principalType", "principalId", "capabilities", "state", "expectedGrantRevision" ], "type": "object" }, "HumanMcpConnectionApprovalInput": { "additionalProperties": false, "properties": { "connectionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "decision": { "enum": [ "approve", "reject" ], "type": "string" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "reason": { "maxLength": 500, "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_approval.v1" } }, "required": [ "schemaVersion", "connectionRef", "connectionRevision", "connectionDigest", "policyRevision", "policyDigest", "decision", "reason" ], "type": "object" }, "HumanMcpConnectionApprovalResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "contextVersion": { "minLength": 1, "type": "string" }, "credentialsStored": { "const": false }, "csrfTokenRotated": { "const": false }, "exactRevisionBound": { "const": true }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reasonStored": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "result": { "additionalProperties": false, "properties": { "connection": { "additionalProperties": false, "properties": { "approvalEvidenceVerified": { "type": "boolean" }, "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "connectionAllowed": { "type": "boolean" }, "connectionIntegrityVerified": { "type": "boolean" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "createdAt": { "minLength": 1, "type": "string" }, "credentialBinding": { "additionalProperties": false, "properties": { "bindingDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "endpointBound": { "const": true }, "isolatedAgentResolverRequired": { "type": "boolean" }, "ownerBound": { "const": true }, "projectBound": { "const": true }, "referenceAccepted": { "type": "boolean" }, "referenceType": { "enum": [ "none", "auth-profile" ], "type": "string" }, "serverResolvesCredentials": { "type": "boolean" } }, "required": [ "referenceType", "referenceAccepted", "bindingDigest", "ownerBound", "projectBound", "endpointBound", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, "credentialReferenceAccepted": { "type": "boolean" }, "credentialReferenceConfigured": { "type": "boolean" }, "credentialsStored": { "const": false }, "enabled": { "type": "boolean" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "humanApprovalRequired": { "type": "boolean" }, "humanApproved": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "label": { "maxLength": 120, "minLength": 1, "type": "string" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyIntegrityVerified": { "type": "boolean" }, "policyRevision": { "minimum": 0, "type": "integer" }, "projectId": { "minLength": 1, "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 1, "type": "integer" }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "runtimeAuthorization": { "anyOf": [ { "additionalProperties": false, "properties": { "acceptedAsCredential": { "const": false }, "authorizationAttestation": { "pattern": "^mcp-runtime-v1\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "expiresAt": { "format": "date-time", "type": "string" }, "humanPolicyCanRevokeFutureAuthorizations": { "const": true }, "issuedAt": { "format": "date-time", "type": "string" }, "maximumAuthorizationAgeSeconds": { "const": 60 }, "mustRefreshBeforeEveryConnect": { "const": true }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_authorization.v1" }, "serverSideDispatchRequiredForHardRevocation": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "connectionRevision", "revisionDigest", "policyRevision", "policyDigest", "issuedAt", "expiresAt", "authorizationAttestation", "acceptedAsCredential", "mustRefreshBeforeEveryConnect", "maximumAuthorizationAgeSeconds", "humanPolicyCanRevokeFutureAuthorizations", "serverSideDispatchRequiredForHardRevocation", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, { "type": "null" } ] }, "runtimeConfig": { "anyOf": [ { "additionalProperties": false, "properties": { "credentialReference": { "pattern": "^(none|auth-profile:[A-Za-z0-9][A-Za-z0-9._:-]{0,127})$", "type": "string" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "isolatedAgentResolverRequired": { "type": "boolean" }, "serverResolvesCredentials": { "type": "boolean" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "untrustedRemoteContent": { "const": true } }, "required": [ "transport", "endpointUrl", "credentialReference", "toolAllowlist", "untrustedRemoteContent", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, { "type": "null" } ] }, "schemaVersion": { "const": "memoryendpoints.mcp_connection.v1" }, "serverSideProbePerformed": { "const": false }, "state": { "enum": [ "active", "disabled", "pending_human_approval", "revoked", "invalid" ], "type": "string" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "updatedAt": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "projectId", "label", "transport", "endpointUrl", "toolAllowlist", "revision", "revisionDigest", "enabled", "state", "approvalMode", "autonomousByDefault", "humanApprovalRequired", "humanApproved", "approvalEvidenceVerified", "connectionAllowed", "policyRevision", "policyDigest", "integrityVerified", "connectionIntegrityVerified", "policyIntegrityVerified", "credentialReferenceConfigured", "credentialReferenceAccepted", "credentialBinding", "credentialsStored", "serverSideProbePerformed", "createdAt", "updatedAt", "runtimeConfig", "runtimeAuthorization", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "decision": { "enum": [ "approve", "reject" ], "type": "string" }, "policy": { "additionalProperties": false, "properties": { "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "forceHumanApproval": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_policy.v1" }, "updatedAt": { "type": [ "string", "null" ] }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "forceHumanApproval", "approvalMode", "autonomousByDefault", "revision", "policyDigest", "integrityVerified", "updatedAt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" } }, "required": [ "connection", "policy", "decision" ], "type": "object" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_approval.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "schemaVersion", "result", "persisted", "exactRevisionBound", "reasonStored", "credentialsStored" ], "type": "object" }, "HumanMcpConnectionListResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "autonomousByDefault": { "const": true }, "contextVersion": { "minLength": 1, "type": "string" }, "count": { "minimum": 0, "type": "integer" }, "credentialsStored": { "const": false }, "csrfTokenRotated": { "const": false }, "items": { "items": { "additionalProperties": false, "properties": { "approvalEvidenceVerified": { "type": "boolean" }, "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "connectionAllowed": { "type": "boolean" }, "connectionIntegrityVerified": { "type": "boolean" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "createdAt": { "minLength": 1, "type": "string" }, "credentialBinding": { "additionalProperties": false, "properties": { "bindingDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "endpointBound": { "const": true }, "isolatedAgentResolverRequired": { "type": "boolean" }, "ownerBound": { "const": true }, "projectBound": { "const": true }, "referenceAccepted": { "type": "boolean" }, "referenceType": { "enum": [ "none", "auth-profile" ], "type": "string" }, "serverResolvesCredentials": { "type": "boolean" } }, "required": [ "referenceType", "referenceAccepted", "bindingDigest", "ownerBound", "projectBound", "endpointBound", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, "credentialReferenceAccepted": { "type": "boolean" }, "credentialReferenceConfigured": { "type": "boolean" }, "credentialsStored": { "const": false }, "enabled": { "type": "boolean" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "humanApprovalRequired": { "type": "boolean" }, "humanApproved": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "label": { "maxLength": 120, "minLength": 1, "type": "string" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyIntegrityVerified": { "type": "boolean" }, "policyRevision": { "minimum": 0, "type": "integer" }, "projectId": { "minLength": 1, "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 1, "type": "integer" }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "runtimeAuthorization": { "anyOf": [ { "additionalProperties": false, "properties": { "acceptedAsCredential": { "const": false }, "authorizationAttestation": { "pattern": "^mcp-runtime-v1\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "expiresAt": { "format": "date-time", "type": "string" }, "humanPolicyCanRevokeFutureAuthorizations": { "const": true }, "issuedAt": { "format": "date-time", "type": "string" }, "maximumAuthorizationAgeSeconds": { "const": 60 }, "mustRefreshBeforeEveryConnect": { "const": true }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_authorization.v1" }, "serverSideDispatchRequiredForHardRevocation": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "connectionRevision", "revisionDigest", "policyRevision", "policyDigest", "issuedAt", "expiresAt", "authorizationAttestation", "acceptedAsCredential", "mustRefreshBeforeEveryConnect", "maximumAuthorizationAgeSeconds", "humanPolicyCanRevokeFutureAuthorizations", "serverSideDispatchRequiredForHardRevocation", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, { "type": "null" } ] }, "runtimeConfig": { "anyOf": [ { "additionalProperties": false, "properties": { "credentialReference": { "pattern": "^(none|auth-profile:[A-Za-z0-9][A-Za-z0-9._:-]{0,127})$", "type": "string" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "isolatedAgentResolverRequired": { "type": "boolean" }, "serverResolvesCredentials": { "type": "boolean" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "untrustedRemoteContent": { "const": true } }, "required": [ "transport", "endpointUrl", "credentialReference", "toolAllowlist", "untrustedRemoteContent", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, { "type": "null" } ] }, "schemaVersion": { "const": "memoryendpoints.mcp_connection.v1" }, "serverSideProbePerformed": { "const": false }, "state": { "enum": [ "active", "disabled", "pending_human_approval", "revoked", "invalid" ], "type": "string" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "updatedAt": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "projectId", "label", "transport", "endpointUrl", "toolAllowlist", "revision", "revisionDigest", "enabled", "state", "approvalMode", "autonomousByDefault", "humanApprovalRequired", "humanApproved", "approvalEvidenceVerified", "connectionAllowed", "policyRevision", "policyDigest", "integrityVerified", "connectionIntegrityVerified", "policyIntegrityVerified", "credentialReferenceConfigured", "credentialReferenceAccepted", "credentialBinding", "credentialsStored", "serverSideProbePerformed", "createdAt", "updatedAt", "runtimeConfig", "runtimeAuthorization", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "type": "array" }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "policy": { "additionalProperties": false, "properties": { "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "forceHumanApproval": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_policy.v1" }, "updatedAt": { "type": [ "string", "null" ] }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "forceHumanApproval", "approvalMode", "autonomousByDefault", "revision", "policyDigest", "integrityVerified", "updatedAt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "runtimeConfigurationsExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.mcp_connections.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "schemaVersion", "items", "count", "policy", "autonomousByDefault", "runtimeConfigurationsExposed", "credentialsStored" ], "type": "object" }, "HumanMcpConnectionPolicyInput": { "additionalProperties": false, "properties": { "expectedRevision": { "minimum": 0, "type": "integer" }, "forceHumanApproval": { "type": "boolean" }, "reason": { "maxLength": 500, "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_policy.v1" } }, "required": [ "schemaVersion", "forceHumanApproval", "expectedRevision", "reason" ], "type": "object" }, "HumanMcpConnectionPolicyResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "contextVersion": { "minLength": 1, "type": "string" }, "credentialsStored": { "const": false }, "csrfTokenRotated": { "const": false }, "exactRevisionBound": { "const": true }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reasonStored": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "result": { "additionalProperties": false, "properties": { "changed": { "type": "boolean" }, "policy": { "additionalProperties": false, "properties": { "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "forceHumanApproval": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_policy.v1" }, "updatedAt": { "type": [ "string", "null" ] }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "forceHumanApproval", "approvalMode", "autonomousByDefault", "revision", "policyDigest", "integrityVerified", "updatedAt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" } }, "required": [ "policy", "changed" ], "type": "object" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_policy.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "schemaVersion", "result", "persisted", "exactRevisionBound", "reasonStored", "credentialsStored" ], "type": "object" }, "HumanNpcClassificationAuthorityIssueInput": { "additionalProperties": false, "properties": { "allowedOperations": { "enum": [ [ "shared_memory:submit" ], [ "shared_memory:search" ], [ "shared_memory:submit", "shared_memory:search" ], [ "shared_memory:readback" ], [ "shared_memory:submit", "shared_memory:readback" ], [ "shared_memory:search", "shared_memory:readback" ], [ "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ] ], "type": "array" }, "candidateRuntimeIntentRef": { "pattern": "^npcauth-candidate-runtime-v1:[a-f0-9]{64}$", "type": "string" }, "childRef": { "pattern": "^npcauth-child-selector-v1:[a-f0-9]{64}$", "type": "string" }, "expectedAuthorityRevision": { "minimum": 0, "type": "integer" }, "requestedTtlSeconds": { "const": 300 }, "schemaVersion": { "const": "memoryendpoints.npc_classification_authority_issue_request.v1" }, "shareClass": { "enum": [ "site_shared", "world_shared", "room_local" ], "type": "string" }, "subjectRef": { "pattern": "^npcauth-subject-selector-v1:[a-f0-9]{64}$", "type": "string" } }, "required": [ "schemaVersion", "childRef", "subjectRef", "shareClass", "allowedOperations", "candidateRuntimeIntentRef", "expectedAuthorityRevision", "requestedTtlSeconds" ], "type": "object" }, "HumanNpcClassificationAuthorityIssueResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "classificationAuthority": { "additionalProperties": false, "properties": { "authorityRevision": { "minimum": 1, "type": "integer" }, "childPrivateNpcMemoryScopesGranted": { "maxItems": 0, "type": "array" }, "classificationRef": { "pattern": "^npcauth-classification-v1:[a-f0-9]{64}$", "type": "string" }, "created": { "type": "boolean" }, "expiresAt": { "format": "date-time", "type": "string" }, "idempotentReplay": { "type": "boolean" }, "keyVersion": { "pattern": "^npcauth-key-v1:[1-9][0-9]{0,17}$", "type": "string" }, "operation": { "enum": [ "runtime:register", "runtime:attach-classification" ], "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "receipt": { "maxLength": 4096, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "receiptDigest": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "runtimeBindingState": { "enum": [ "pre_runtime_absent", "pre_runtime_existing" ], "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_classification_authority_issue_result.v1" }, "shareClass": { "enum": [ "site_shared", "world_shared", "room_local" ], "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "created", "idempotentReplay", "authorityRevision", "keyVersion", "childPrivateNpcMemoryScopesGranted", "receipt", "receiptDigest", "classificationRef", "operation", "shareClass", "runtimeBindingState", "expiresAt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "safeNoOpOnRetry": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "classificationAuthority", "idempotentReplay", "safeNoOpOnRetry" ], "type": "object" }, "HumanNpcClassificationAuthorityRevokeInput": { "additionalProperties": false, "properties": { "classificationRef": { "pattern": "^npcauth-classification-v1:[a-f0-9]{64}$", "type": "string" }, "expectedAuthorityRevision": { "minimum": 1, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_classification_authority_revocation_request.v1" } }, "required": [ "schemaVersion", "classificationRef", "expectedAuthorityRevision" ], "type": "object" }, "HumanNpcClassificationAuthorityRevokeResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "classificationAuthority": { "additionalProperties": false, "properties": { "authorityRevision": { "minimum": 1, "type": "integer" }, "classificationRef": { "pattern": "^npcauth-classification-v1:[a-f0-9]{64}$", "type": "string" }, "idempotentReplay": { "type": "boolean" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revoked": { "const": true }, "schemaVersion": { "const": "memoryendpoints.npc_classification_authority_revocation_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "classificationRef", "authorityRevision", "revoked", "idempotentReplay", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "safeNoOpOnRetry": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "classificationAuthority", "idempotentReplay", "safeNoOpOnRetry" ], "type": "object" }, "HumanNpcClassificationAuthorityRotateKeyInput": { "additionalProperties": false, "properties": { "expectedKeyGeneration": { "minimum": 1, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_classification_key_rotation_request.v1" } }, "required": [ "schemaVersion", "expectedKeyGeneration" ], "type": "object" }, "HumanNpcClassificationAuthorityRotateKeyResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "classificationAuthorityKey": { "additionalProperties": false, "properties": { "idempotentReplay": { "type": "boolean" }, "keyGeneration": { "minimum": 1, "type": "integer" }, "keyVersion": { "pattern": "^npcauth-key-v1:[1-9][0-9]{0,17}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "rotatedAuthorityCount": { "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_classification_key_rotation_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "keyVersion", "keyGeneration", "rotatedAuthorityCount", "idempotentReplay", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "safeNoOpOnRetry": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "classificationAuthorityKey", "idempotentReplay", "safeNoOpOnRetry" ], "type": "object" }, "HumanNpcClassificationAuthoritySelectorsResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "classificationAuthoritySelectors": { "additionalProperties": false, "properties": { "children": { "items": { "additionalProperties": false, "properties": { "childRef": { "pattern": "^npcauth-child-selector-v1:[a-f0-9]{64}$", "type": "string" }, "displayName": { "minLength": 1, "type": "string" }, "rosterBound": { "const": true } }, "required": [ "childRef", "displayName", "rosterBound" ], "type": "object" }, "type": "array" }, "hierarchyRevision": { "minimum": 1, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.npc_classification_authority_selectors.v1" }, "subjects": { "items": { "additionalProperties": false, "properties": { "shareClass": { "enum": [ "site_shared", "world_shared", "room_local" ], "type": "string" }, "subjectRef": { "pattern": "^npcauth-subject-selector-v1:[a-f0-9]{64}$", "type": "string" } }, "required": [ "subjectRef", "shareClass" ], "type": "object" }, "type": "array" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "children", "subjects", "hierarchyRevision", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "classificationAuthoritySelectors" ], "type": "object" }, "HumanNpcPrivateRuntimeDelegationIssueInput": { "additionalProperties": false, "properties": { "childRefs": { "items": { "pattern": "^npcpriv-child-v1:[0-9a-f]{64}$", "type": "string" }, "maxItems": 256, "minItems": 1, "type": "array", "uniqueItems": true }, "expectedDelegationRevision": { "minimum": 0, "type": "integer" }, "maxRuntimeTtlSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "requestedTtlSeconds": { "maximum": 2592000, "minimum": 300, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_private_runtime_delegation_issue_request.v1" } }, "required": [ "schemaVersion", "childRefs", "expectedDelegationRevision", "requestedTtlSeconds", "maxRuntimeTtlSeconds" ], "type": "object" }, "HumanNpcPrivateRuntimeDelegationMutationResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "privateRuntimeDelegation": { "$ref": "#/components/schemas/NpcPrivateRuntimeDelegation" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "safeNoOpOnRetry": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "privateRuntimeDelegation", "idempotentReplay", "safeNoOpOnRetry" ], "type": "object" }, "HumanNpcPrivateRuntimeDelegationReadResult": { "additionalProperties": false, "properties": { "auditActor": { "$ref": "#/components/schemas/HumanOperationalAuditActor" }, "contextVersion": { "minLength": 1, "type": "string" }, "csrfTokenRotated": { "const": false }, "ok": { "const": true }, "operations": { "$ref": "#/components/schemas/HumanOperationalOperations" }, "permissions": { "$ref": "#/components/schemas/HumanOperationalPermissions" }, "privateRuntimeDelegation": { "$ref": "#/components/schemas/NpcPrivateRuntimeDelegationReadback" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalResourceContext" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "resourceContext", "contextVersion", "csrfTokenRotated", "permissions", "operations", "auditActor", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "privateRuntimeDelegation" ], "type": "object" }, "HumanNpcPrivateRuntimeDelegationRefreshInput": { "additionalProperties": false, "properties": { "delegationRef": { "pattern": "^npcpriv-delegation-v1:[0-9a-f]{64}$", "type": "string" }, "expectedDelegationRevision": { "minimum": 1, "type": "integer" }, "requestedTtlSeconds": { "maximum": 2592000, "minimum": 300, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_private_runtime_delegation_refresh_request.v1" } }, "required": [ "schemaVersion", "delegationRef", "expectedDelegationRevision", "requestedTtlSeconds" ], "type": "object" }, "HumanNpcPrivateRuntimeDelegationRevokeInput": { "additionalProperties": false, "properties": { "delegationRef": { "pattern": "^npcpriv-delegation-v1:[0-9a-f]{64}$", "type": "string" }, "expectedDelegationRevision": { "minimum": 1, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_private_runtime_delegation_revoke_request.v1" } }, "required": [ "schemaVersion", "delegationRef", "expectedDelegationRevision" ], "type": "object" }, "HumanOperationalAuditActor": { "additionalProperties": false, "properties": { "authMode": { "const": "human_account" }, "authorityId": { "minLength": 1, "type": "string" }, "companyId": { "minLength": 1, "type": "string" }, "humanAccountId": { "minLength": 1, "type": "string" }, "humanAccountSessionId": { "minLength": 1, "type": "string" }, "projectId": { "minLength": 1, "type": "string" }, "username": { "minLength": 1, "type": "string" }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "humanAccountId", "humanAccountSessionId", "username", "authorityId", "companyId", "workspaceId", "projectId", "authMode" ], "type": "object" }, "HumanOperationalOperation": { "additionalProperties": false, "properties": { "allowed": { "type": "boolean" }, "methods": { "items": { "enum": [ "GET", "POST" ], "type": "string" }, "type": "array" }, "path": { "type": "string" }, "permission": { "minLength": 1, "type": "string" } }, "required": [ "path", "methods", "permission", "allowed" ], "type": "object" }, "HumanOperationalOperations": { "additionalProperties": false, "properties": { "collaboration": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "commercialHierarchy": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "commercialHierarchyMutate": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "commercialParentAuthority": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "commercialParentAuthorityCreate": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "commercialParentAuthorityRedelegate": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "contextCatalog": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "externalLinks": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "internetSearch": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "knowledgeDocuments": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "knowledgeTree": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "mcpConnectionApproval": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "mcpConnectionPolicy": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "mcpConnections": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "meetings": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "memorySubmit": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "messages": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "resourceContext": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "review": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "search": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "sync": { "$ref": "#/components/schemas/HumanOperationalOperation" }, "workspace": { "$ref": "#/components/schemas/HumanOperationalOperation" } }, "required": [ "resourceContext", "contextCatalog", "workspace", "search", "knowledgeTree", "knowledgeDocuments", "externalLinks", "internetSearch", "memorySubmit", "mcpConnections", "mcpConnectionPolicy", "mcpConnectionApproval", "commercialParentAuthority", "commercialParentAuthorityCreate", "commercialParentAuthorityRedelegate", "commercialHierarchy", "commercialHierarchyMutate", "collaboration", "review", "sync", "meetings", "messages" ], "type": "object" }, "HumanOperationalPermissions": { "additionalProperties": false, "properties": { "canManageCommercialHierarchy": { "const": true }, "canManageMcpConnections": { "const": true }, "canReadContextCatalog": { "type": "boolean" }, "canReadExternalLinks": { "type": "boolean" }, "canReadKnowledgeDocuments": { "type": "boolean" }, "canReadKnowledgeTree": { "type": "boolean" }, "canReadWorkspace": { "type": "boolean" }, "canReviewMemory": { "const": false }, "canSearchCuratedInternet": { "type": "boolean" }, "canSearchMemory": { "type": "boolean" }, "canSelectResourceContext": { "type": "boolean" }, "canSendMessages": { "const": false }, "canSubmitPublicSafeMemory": { "type": "boolean" }, "canUseCollaboration": { "const": false }, "canUseMeetings": { "const": false }, "canUseSync": { "const": false } }, "required": [ "canSelectResourceContext", "canReadContextCatalog", "canReadWorkspace", "canSearchMemory", "canReadKnowledgeTree", "canReadKnowledgeDocuments", "canReadExternalLinks", "canSearchCuratedInternet", "canSubmitPublicSafeMemory", "canManageCommercialHierarchy", "canManageMcpConnections", "canUseCollaboration", "canReviewMemory", "canUseSync", "canUseMeetings", "canSendMessages" ], "type": "object" }, "HumanOperationalResourceContext": { "additionalProperties": false, "properties": { "authorityId": { "minLength": 1, "type": "string" }, "companyId": { "minLength": 1, "type": "string" }, "contextVersion": { "minLength": 1, "type": "string" }, "projectId": { "minLength": 1, "type": "string" }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "authorityId", "companyId", "workspaceId", "projectId", "contextVersion" ], "type": "object" }, "McpConnection": { "additionalProperties": false, "properties": { "approvalEvidenceVerified": { "type": "boolean" }, "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "connectionAllowed": { "type": "boolean" }, "connectionIntegrityVerified": { "type": "boolean" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "createdAt": { "minLength": 1, "type": "string" }, "credentialBinding": { "additionalProperties": false, "properties": { "bindingDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "endpointBound": { "const": true }, "isolatedAgentResolverRequired": { "type": "boolean" }, "ownerBound": { "const": true }, "projectBound": { "const": true }, "referenceAccepted": { "type": "boolean" }, "referenceType": { "enum": [ "none", "auth-profile" ], "type": "string" }, "serverResolvesCredentials": { "type": "boolean" } }, "required": [ "referenceType", "referenceAccepted", "bindingDigest", "ownerBound", "projectBound", "endpointBound", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, "credentialReferenceAccepted": { "type": "boolean" }, "credentialReferenceConfigured": { "type": "boolean" }, "credentialsStored": { "const": false }, "enabled": { "type": "boolean" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "humanApprovalRequired": { "type": "boolean" }, "humanApproved": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "label": { "maxLength": 120, "minLength": 1, "type": "string" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyIntegrityVerified": { "type": "boolean" }, "policyRevision": { "minimum": 0, "type": "integer" }, "projectId": { "minLength": 1, "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 1, "type": "integer" }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "runtimeAuthorization": { "anyOf": [ { "additionalProperties": false, "properties": { "acceptedAsCredential": { "const": false }, "authorizationAttestation": { "pattern": "^mcp-runtime-v1\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "expiresAt": { "format": "date-time", "type": "string" }, "humanPolicyCanRevokeFutureAuthorizations": { "const": true }, "issuedAt": { "format": "date-time", "type": "string" }, "maximumAuthorizationAgeSeconds": { "const": 60 }, "mustRefreshBeforeEveryConnect": { "const": true }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_authorization.v1" }, "serverSideDispatchRequiredForHardRevocation": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "connectionRevision", "revisionDigest", "policyRevision", "policyDigest", "issuedAt", "expiresAt", "authorizationAttestation", "acceptedAsCredential", "mustRefreshBeforeEveryConnect", "maximumAuthorizationAgeSeconds", "humanPolicyCanRevokeFutureAuthorizations", "serverSideDispatchRequiredForHardRevocation", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, { "type": "null" } ] }, "runtimeConfig": { "anyOf": [ { "additionalProperties": false, "properties": { "credentialReference": { "pattern": "^(none|auth-profile:[A-Za-z0-9][A-Za-z0-9._:-]{0,127})$", "type": "string" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "isolatedAgentResolverRequired": { "type": "boolean" }, "serverResolvesCredentials": { "type": "boolean" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "untrustedRemoteContent": { "const": true } }, "required": [ "transport", "endpointUrl", "credentialReference", "toolAllowlist", "untrustedRemoteContent", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, { "type": "null" } ] }, "schemaVersion": { "const": "memoryendpoints.mcp_connection.v1" }, "serverSideProbePerformed": { "const": false }, "state": { "enum": [ "active", "disabled", "pending_human_approval", "revoked", "invalid" ], "type": "string" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "updatedAt": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "projectId", "label", "transport", "endpointUrl", "toolAllowlist", "revision", "revisionDigest", "enabled", "state", "approvalMode", "autonomousByDefault", "humanApprovalRequired", "humanApproved", "approvalEvidenceVerified", "connectionAllowed", "policyRevision", "policyDigest", "integrityVerified", "connectionIntegrityVerified", "policyIntegrityVerified", "credentialReferenceConfigured", "credentialReferenceAccepted", "credentialBinding", "credentialsStored", "serverSideProbePerformed", "createdAt", "updatedAt", "runtimeConfig", "runtimeAuthorization", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "McpConnectionInput": { "additionalProperties": false, "properties": { "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "credentialReference": { "pattern": "^(none|auth-profile:[A-Za-z0-9][A-Za-z0-9._:-]{0,127})$", "type": "string" }, "enabled": { "type": "boolean" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "expectedRevision": { "minimum": 1, "type": "integer" }, "label": { "maxLength": 120, "minLength": 1, "type": "string" }, "projectId": { "maxLength": 128, "minLength": 1, "type": "string" }, "requireHumanApproval": { "type": "boolean" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection.v1" }, "toolAllowlist": { "items": { "maxLength": 128, "minLength": 1, "type": "string" }, "maxItems": 64, "type": "array", "uniqueItems": true }, "transport": { "const": "streamable_http" } }, "required": [ "schemaVersion", "projectId", "label", "transport", "endpointUrl", "credentialReference", "toolAllowlist", "enabled", "requireHumanApproval" ], "type": "object" }, "McpConnectionListResult": { "additionalProperties": false, "properties": { "agentRuntimeConnects": { "const": true }, "autonomousByDefault": { "const": true }, "count": { "minimum": 0, "type": "integer" }, "credentialsStored": { "const": false }, "items": { "items": { "additionalProperties": false, "properties": { "approvalEvidenceVerified": { "type": "boolean" }, "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "connectionAllowed": { "type": "boolean" }, "connectionIntegrityVerified": { "type": "boolean" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "createdAt": { "minLength": 1, "type": "string" }, "credentialBinding": { "additionalProperties": false, "properties": { "bindingDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "endpointBound": { "const": true }, "isolatedAgentResolverRequired": { "type": "boolean" }, "ownerBound": { "const": true }, "projectBound": { "const": true }, "referenceAccepted": { "type": "boolean" }, "referenceType": { "enum": [ "none", "auth-profile" ], "type": "string" }, "serverResolvesCredentials": { "type": "boolean" } }, "required": [ "referenceType", "referenceAccepted", "bindingDigest", "ownerBound", "projectBound", "endpointBound", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, "credentialReferenceAccepted": { "type": "boolean" }, "credentialReferenceConfigured": { "type": "boolean" }, "credentialsStored": { "const": false }, "enabled": { "type": "boolean" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "humanApprovalRequired": { "type": "boolean" }, "humanApproved": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "label": { "maxLength": 120, "minLength": 1, "type": "string" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyIntegrityVerified": { "type": "boolean" }, "policyRevision": { "minimum": 0, "type": "integer" }, "projectId": { "minLength": 1, "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 1, "type": "integer" }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "runtimeAuthorization": { "anyOf": [ { "additionalProperties": false, "properties": { "acceptedAsCredential": { "const": false }, "authorizationAttestation": { "pattern": "^mcp-runtime-v1\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "expiresAt": { "format": "date-time", "type": "string" }, "humanPolicyCanRevokeFutureAuthorizations": { "const": true }, "issuedAt": { "format": "date-time", "type": "string" }, "maximumAuthorizationAgeSeconds": { "const": 60 }, "mustRefreshBeforeEveryConnect": { "const": true }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_authorization.v1" }, "serverSideDispatchRequiredForHardRevocation": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "connectionRevision", "revisionDigest", "policyRevision", "policyDigest", "issuedAt", "expiresAt", "authorizationAttestation", "acceptedAsCredential", "mustRefreshBeforeEveryConnect", "maximumAuthorizationAgeSeconds", "humanPolicyCanRevokeFutureAuthorizations", "serverSideDispatchRequiredForHardRevocation", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, { "type": "null" } ] }, "runtimeConfig": { "anyOf": [ { "additionalProperties": false, "properties": { "credentialReference": { "pattern": "^(none|auth-profile:[A-Za-z0-9][A-Za-z0-9._:-]{0,127})$", "type": "string" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "isolatedAgentResolverRequired": { "type": "boolean" }, "serverResolvesCredentials": { "type": "boolean" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "untrustedRemoteContent": { "const": true } }, "required": [ "transport", "endpointUrl", "credentialReference", "toolAllowlist", "untrustedRemoteContent", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, { "type": "null" } ] }, "schemaVersion": { "const": "memoryendpoints.mcp_connection.v1" }, "serverSideProbePerformed": { "const": false }, "state": { "enum": [ "active", "disabled", "pending_human_approval", "revoked", "invalid" ], "type": "string" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "updatedAt": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "projectId", "label", "transport", "endpointUrl", "toolAllowlist", "revision", "revisionDigest", "enabled", "state", "approvalMode", "autonomousByDefault", "humanApprovalRequired", "humanApproved", "approvalEvidenceVerified", "connectionAllowed", "policyRevision", "policyDigest", "integrityVerified", "connectionIntegrityVerified", "policyIntegrityVerified", "credentialReferenceConfigured", "credentialReferenceAccepted", "credentialBinding", "credentialsStored", "serverSideProbePerformed", "createdAt", "updatedAt", "runtimeConfig", "runtimeAuthorization", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "type": "array" }, "ok": { "const": true }, "policy": { "additionalProperties": false, "properties": { "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "forceHumanApproval": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_policy.v1" }, "updatedAt": { "type": [ "string", "null" ] }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "forceHumanApproval", "approvalMode", "autonomousByDefault", "revision", "policyDigest", "integrityVerified", "updatedAt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.mcp_connections.v1" }, "serverSideOutboundDispatch": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "policy", "agentRuntimeConnects", "serverSideOutboundDispatch", "credentialsStored", "autonomousByDefault", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "McpConnectionMutationResult": { "additionalProperties": false, "properties": { "agentRuntimeConnects": { "const": true }, "autonomousByDefault": { "const": true }, "canonicalConnectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "changed": { "type": "boolean" }, "connection": { "additionalProperties": false, "properties": { "approvalEvidenceVerified": { "type": "boolean" }, "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "connectionAllowed": { "type": "boolean" }, "connectionIntegrityVerified": { "type": "boolean" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "createdAt": { "minLength": 1, "type": "string" }, "credentialBinding": { "additionalProperties": false, "properties": { "bindingDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "endpointBound": { "const": true }, "isolatedAgentResolverRequired": { "type": "boolean" }, "ownerBound": { "const": true }, "projectBound": { "const": true }, "referenceAccepted": { "type": "boolean" }, "referenceType": { "enum": [ "none", "auth-profile" ], "type": "string" }, "serverResolvesCredentials": { "type": "boolean" } }, "required": [ "referenceType", "referenceAccepted", "bindingDigest", "ownerBound", "projectBound", "endpointBound", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, "credentialReferenceAccepted": { "type": "boolean" }, "credentialReferenceConfigured": { "type": "boolean" }, "credentialsStored": { "const": false }, "enabled": { "type": "boolean" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "humanApprovalRequired": { "type": "boolean" }, "humanApproved": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "label": { "maxLength": 120, "minLength": 1, "type": "string" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyIntegrityVerified": { "type": "boolean" }, "policyRevision": { "minimum": 0, "type": "integer" }, "projectId": { "minLength": 1, "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 1, "type": "integer" }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "runtimeAuthorization": { "anyOf": [ { "additionalProperties": false, "properties": { "acceptedAsCredential": { "const": false }, "authorizationAttestation": { "pattern": "^mcp-runtime-v1\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "expiresAt": { "format": "date-time", "type": "string" }, "humanPolicyCanRevokeFutureAuthorizations": { "const": true }, "issuedAt": { "format": "date-time", "type": "string" }, "maximumAuthorizationAgeSeconds": { "const": 60 }, "mustRefreshBeforeEveryConnect": { "const": true }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revisionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_authorization.v1" }, "serverSideDispatchRequiredForHardRevocation": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "connectionRevision", "revisionDigest", "policyRevision", "policyDigest", "issuedAt", "expiresAt", "authorizationAttestation", "acceptedAsCredential", "mustRefreshBeforeEveryConnect", "maximumAuthorizationAgeSeconds", "humanPolicyCanRevokeFutureAuthorizations", "serverSideDispatchRequiredForHardRevocation", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, { "type": "null" } ] }, "runtimeConfig": { "anyOf": [ { "additionalProperties": false, "properties": { "credentialReference": { "pattern": "^(none|auth-profile:[A-Za-z0-9][A-Za-z0-9._:-]{0,127})$", "type": "string" }, "endpointUrl": { "pattern": "^https://", "type": "string" }, "isolatedAgentResolverRequired": { "type": "boolean" }, "serverResolvesCredentials": { "type": "boolean" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "untrustedRemoteContent": { "const": true } }, "required": [ "transport", "endpointUrl", "credentialReference", "toolAllowlist", "untrustedRemoteContent", "isolatedAgentResolverRequired", "serverResolvesCredentials" ], "type": "object" }, { "type": "null" } ] }, "schemaVersion": { "const": "memoryendpoints.mcp_connection.v1" }, "serverSideProbePerformed": { "const": false }, "state": { "enum": [ "active", "disabled", "pending_human_approval", "revoked", "invalid" ], "type": "string" }, "toolAllowlist": { "items": { "type": "string" }, "type": "array" }, "transport": { "const": "streamable_http" }, "updatedAt": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "connectionRef", "projectId", "label", "transport", "endpointUrl", "toolAllowlist", "revision", "revisionDigest", "enabled", "state", "approvalMode", "autonomousByDefault", "humanApprovalRequired", "humanApproved", "approvalEvidenceVerified", "connectionAllowed", "policyRevision", "policyDigest", "integrityVerified", "connectionIntegrityVerified", "policyIntegrityVerified", "credentialReferenceConfigured", "credentialReferenceAccepted", "credentialBinding", "credentialsStored", "serverSideProbePerformed", "createdAt", "updatedAt", "runtimeConfig", "runtimeAuthorization", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "connectionQueryUrl": { "minLength": 1, "type": "string" }, "created": { "type": "boolean" }, "credentialsStored": { "const": false }, "idempotencyKeyExposed": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "persisted": { "const": true }, "policy": { "additionalProperties": false, "properties": { "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "forceHumanApproval": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_policy.v1" }, "updatedAt": { "type": [ "string", "null" ] }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "forceHumanApproval", "approvalMode", "autonomousByDefault", "revision", "policyDigest", "integrityVerified", "updatedAt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_result.v1" }, "serverSideOutboundDispatch": { "const": true }, "valuesRedacted": { "const": true }, "visibleToOwner": { "const": true } }, "required": [ "ok", "schemaVersion", "connection", "policy", "created", "changed", "persisted", "visibleToOwner", "canonicalConnectionRef", "connectionQueryUrl", "agentRuntimeConnects", "serverSideOutboundDispatch", "credentialsStored", "autonomousByDefault", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "McpConnectionPolicy": { "additionalProperties": false, "properties": { "approvalMode": { "enum": [ "autonomous", "human_required" ], "type": "string" }, "autonomousByDefault": { "const": true }, "forceHumanApproval": { "type": "boolean" }, "integrityVerified": { "type": "boolean" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.mcp_connection_policy.v1" }, "updatedAt": { "type": [ "string", "null" ] }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "forceHumanApproval", "approvalMode", "autonomousByDefault", "revision", "policyDigest", "integrityVerified", "updatedAt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "McpRuntimeToolCallInput": { "additionalProperties": false, "properties": { "arguments": { "maxProperties": 4096, "type": "object" }, "connectionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "projectId": { "maxLength": 128, "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_tool_call_request.v1" }, "toolName": { "maxLength": 128, "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "projectId", "connectionRef", "connectionRevision", "connectionDigest", "policyRevision", "policyDigest", "toolName", "arguments" ], "type": "object" }, "McpRuntimeToolCallResult": { "additionalProperties": false, "properties": { "allowlistApplied": { "const": true }, "connected": { "const": true }, "connectionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "credentialProfileRevision": { "minimum": 0, "type": "integer" }, "credentialsResolvedServerSide": { "type": "boolean" }, "egressValidated": { "const": true }, "idempotencyKeyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "ok": { "const": true }, "outcomeUnknown": { "const": false }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "protocolVersion": { "const": "2026-07-28" }, "proxyEnvironmentUsed": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "redirectsAllowed": { "const": false }, "remoteContentUntrusted": { "const": true }, "remoteToolInvoked": { "const": true }, "requestDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "result": { "additionalProperties": false, "properties": { "content": { "items": { "type": "object" }, "maxItems": 32, "type": "array" }, "isError": { "type": "boolean" }, "redactionApplied": { "type": "boolean" }, "resultType": { "const": "complete" }, "structuredContent": {}, "untrustedRemoteContent": { "const": true } }, "required": [ "resultType", "content", "structuredContent", "isError", "untrustedRemoteContent", "redactionApplied" ], "type": "object" }, "resultDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_tool_call_result.v1" }, "tlsVerified": { "const": true }, "toolName": { "maxLength": 128, "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "toolName", "result", "resultDigest", "requestDigest", "idempotencyKeyDigest", "remoteToolInvoked", "outcomeUnknown", "connectionRef", "connectionRevision", "connectionDigest", "policyRevision", "policyDigest", "protocolVersion", "connected", "tlsVerified", "egressValidated", "redirectsAllowed", "proxyEnvironmentUsed", "credentialProfileRevision", "credentialsResolvedServerSide", "remoteContentUntrusted", "allowlistApplied", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "McpRuntimeToolsInput": { "additionalProperties": false, "properties": { "connectionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "projectId": { "maxLength": 128, "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_tools_request.v1" } }, "required": [ "schemaVersion", "projectId", "connectionRef", "connectionRevision", "connectionDigest", "policyRevision", "policyDigest" ], "type": "object" }, "McpRuntimeToolsResult": { "additionalProperties": false, "properties": { "allowlistApplied": { "const": true }, "connected": { "const": true }, "connectionDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "connectionRef": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" }, "connectionRevision": { "minimum": 1, "type": "integer" }, "count": { "maximum": 128, "minimum": 0, "type": "integer" }, "credentialProfileRevision": { "minimum": 0, "type": "integer" }, "credentialsResolvedServerSide": { "type": "boolean" }, "egressValidated": { "const": true }, "ok": { "const": true }, "policyDigest": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "policyRevision": { "minimum": 0, "type": "integer" }, "protocolVersion": { "const": "2026-07-28" }, "proxyEnvironmentUsed": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "redirectsAllowed": { "const": false }, "remoteContentUntrusted": { "const": true }, "schemaVersion": { "const": "memoryendpoints.mcp_runtime_tools_result.v1" }, "tlsVerified": { "const": true }, "tools": { "items": { "additionalProperties": false, "properties": { "description": { "maxLength": 4000, "type": "string" }, "inputSchema": { "type": "object" }, "name": { "maxLength": 128, "minLength": 1, "type": "string" }, "outputSchema": { "type": "object" }, "title": { "maxLength": 200, "type": "string" }, "untrustedRemoteMetadata": { "const": true } }, "required": [ "name", "title", "description", "inputSchema", "untrustedRemoteMetadata" ], "type": "object" }, "type": "array" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "tools", "count", "connectionRef", "connectionRevision", "connectionDigest", "policyRevision", "policyDigest", "protocolVersion", "connected", "tlsVerified", "egressValidated", "redirectsAllowed", "proxyEnvironmentUsed", "credentialProfileRevision", "credentialsResolvedServerSide", "remoteContentUntrusted", "allowlistApplied", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingMemoryPromotionOperatorSummary": { "additionalProperties": false, "properties": { "firewallDecision": { "type": "string" }, "meetingMessageId": { "type": "string" }, "memoryEventId": { "type": "string" }, "memoryType": { "type": "string" }, "promotedByAgentId": { "type": "string" }, "promotionState": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reviewId": { "type": "string" }, "reviewStatus": { "type": "string" }, "roomId": { "type": "string" }, "schemaVersion": { "const": "memoryendpoints.meeting_memory_promotion_operator_summary.v1" }, "scope": { "type": "string" }, "scopeId": { "type": "string" }, "sourceSenderAgentId": { "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "meetingMessageId", "roomId", "sourceSenderAgentId", "promotedByAgentId", "memoryEventId", "reviewId", "scope", "scopeId", "memoryType", "firewallDecision", "reviewStatus", "promotionState", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingMemorySubmission": { "additionalProperties": false, "properties": { "firewallDecision": { "type": "string" }, "memoryEventId": { "type": "string" }, "memoryType": { "type": "string" }, "promotionState": { "type": "string" }, "rawPayloadExposed": { "const": false }, "redactionApplied": { "type": "boolean" }, "reviewId": { "type": "string" }, "reviewStatus": { "type": "string" }, "scope": { "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "memoryEventId", "reviewId", "scope", "memoryType", "reviewStatus", "promotionState", "firewallDecision", "redactionApplied", "valuesRedacted", "rawPayloadExposed" ], "type": "object" }, "MeetingMessageFilters": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "cursor": { "type": "string" }, "limit": { "type": "string" }, "roomId": { "type": "string" } }, "required": [ "roomId" ], "type": "object" }, "MeetingMessagesOperatorSummary": { "additionalProperties": false, "properties": { "alwaysAvailable": { "type": "boolean" }, "count": { "minimum": 0, "type": "integer" }, "filters": { "$ref": "#/components/schemas/MeetingMessageFilters" }, "pagination": { "$ref": "#/components/schemas/MeetingTranscriptPagination" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readStatePresent": { "type": "boolean" }, "roomId": { "type": "string" }, "schemaVersion": { "const": "memoryendpoints.meeting_messages_operator_summary.v1" }, "scope": { "type": "string" }, "scopeId": { "type": "string" }, "senderAgentCounts": { "$ref": "#/components/schemas/StringCountMap" }, "totalMessageCount": { "minimum": 0, "type": "integer" }, "transcriptOrdering": { "$ref": "#/components/schemas/MeetingTranscriptOrdering" }, "unreadCount": { "minimum": 0, "type": "integer" }, "valuesRedacted": { "const": true }, "visibleMessageCount": { "minimum": 0, "type": "integer" } }, "required": [ "schemaVersion", "roomId", "scope", "scopeId", "count", "visibleMessageCount", "totalMessageCount", "filters", "senderAgentCounts", "unreadCount", "pagination", "transcriptOrdering", "readStatePresent", "alwaysAvailable", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingPostConfirmation": { "additionalProperties": false, "properties": { "canonicalRoomId": { "type": "string" }, "messageId": { "type": "string" }, "persisted": { "const": true }, "transcriptQueryUrl": { "type": "string" }, "valuesRedacted": { "const": true }, "visibleToSender": { "const": true } }, "required": [ "persisted", "visibleToSender", "canonicalRoomId", "messageId", "transcriptQueryUrl", "valuesRedacted" ], "type": "object" }, "MeetingPostOperatorSummary": { "additionalProperties": false, "properties": { "alwaysAvailable": { "type": "boolean" }, "meetingMessageId": { "type": "string" }, "messageCount": { "minimum": 0, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "roomId": { "type": "string" }, "schemaVersion": { "const": "memoryendpoints.meeting_post_operator_summary.v1" }, "scope": { "type": "string" }, "scopeId": { "type": "string" }, "senderAgentId": { "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "roomId", "meetingMessageId", "scope", "scopeId", "senderAgentId", "messageCount", "alwaysAvailable", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingReadOperatorSummary": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "lastMeetingMessageId": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readMessageCount": { "minimum": 0, "type": "integer" }, "roomId": { "type": "string" }, "schemaVersion": { "const": "memoryendpoints.meeting_read_operator_summary.v1" }, "scope": { "type": "string" }, "status": { "const": "read" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "roomId", "scope", "agentId", "lastMeetingMessageId", "readMessageCount", "status", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingReadState": { "oneOf": [ { "additionalProperties": false, "properties": {}, "required": [], "type": "object" }, { "$ref": "#/components/schemas/MeetingReadStateValue" } ] }, "MeetingReadStateValue": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "lastMeetingMessageId": { "type": "string" }, "lastReadAt": { "format": "date-time", "type": "string" }, "meetingReadId": { "type": "string" }, "rawPayloadExposed": { "const": false }, "readMessageCount": { "minimum": 0, "type": "integer" }, "roomId": { "type": "string" }, "status": { "const": "read" }, "updatedAt": { "format": "date-time", "type": "string" }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "meetingReadId", "workspaceId", "roomId", "agentId", "createdAt", "lastMeetingMessageId", "lastReadAt", "readMessageCount", "updatedAt", "status", "valuesRedacted", "rawPayloadExposed" ], "type": "object" }, "MeetingRoomCreateConfirmation": { "additionalProperties": false, "properties": { "canonicalRoomId": { "type": "string" }, "persisted": { "const": true }, "roomQueryUrl": { "type": "string" }, "transcriptQueryUrl": { "type": "string" }, "valuesRedacted": { "const": true }, "visibleToAgent": { "const": true } }, "required": [ "persisted", "visibleToAgent", "canonicalRoomId", "roomQueryUrl", "transcriptQueryUrl", "valuesRedacted" ], "type": "object" }, "MeetingRoomCreateOperatorSummary": { "additionalProperties": false, "properties": { "alwaysAvailable": { "type": "boolean" }, "created": { "type": "boolean" }, "creatorAgentId": { "type": "string" }, "defaultRoom": { "type": "boolean" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reusedExistingRoom": { "type": "boolean" }, "roomCreationRoute": { "const": "/api/matm/meeting-rooms" }, "roomId": { "type": "string" }, "schemaVersion": { "const": "memoryendpoints.meeting_room_create_operator_summary.v1" }, "scope": { "type": "string" }, "scopeId": { "type": "string" }, "transcriptRoute": { "const": "/api/matm/meeting-messages" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "roomId", "scope", "scopeId", "creatorAgentId", "created", "reusedExistingRoom", "alwaysAvailable", "defaultRoom", "roomCreationRoute", "transcriptRoute", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingRoomFilters": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "membershipStatus": { "enum": [ "joined", "left", "none" ], "type": "string" }, "scope": { "type": "string" }, "scopeId": { "type": "string" } }, "required": [], "type": "object" }, "MeetingRoomFlow": { "additionalProperties": false, "properties": { "customGoalTaskRoomsSupported": { "const": true }, "entryProtocol": { "items": { "type": "string" }, "type": "array" }, "entryRoomScope": { "const": "company" }, "roomCreationRoute": { "const": "/api/matm/meeting-rooms" }, "routingOrder": { "items": { "type": "string" }, "type": "array" }, "valuesRedacted": { "const": true } }, "required": [ "entryRoomScope", "entryProtocol", "routingOrder", "customGoalTaskRoomsSupported", "roomCreationRoute", "valuesRedacted" ], "type": "object" }, "MeetingRoomMembership": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "joinedAt": { "format": "date-time", "type": [ "string", "null" ] }, "leftAt": { "format": "date-time", "type": [ "string", "null" ] }, "membershipId": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 1, "type": "integer" }, "role": { "enum": [ "owner", "member" ], "type": "string" }, "roomId": { "type": "string" }, "status": { "enum": [ "joined", "left" ], "type": "string" }, "updatedAt": { "format": "date-time", "type": "string" }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "membershipId", "workspaceId", "roomId", "agentId", "role", "status", "revision", "joinedAt", "leftAt", "createdAt", "updatedAt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingRoomMembershipListResult": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "items": { "items": { "$ref": "#/components/schemas/MeetingRoomMembership" }, "type": "array" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.meeting_room_memberships.v1" }, "status": { "enum": [ "joined", "left", null ], "type": [ "string", "null" ] }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "status", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingRoomMembershipMutationInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "expectedMembershipRevision": { "minimum": 0, "type": "integer" }, "roomId": { "maxLength": 96, "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "roomId", "expectedMembershipRevision" ], "type": "object" }, "MeetingRoomMembershipMutationResult": { "additionalProperties": false, "properties": { "action": { "enum": [ "join", "leave" ], "type": "string" }, "changed": { "type": "boolean" }, "idempotentReplay": { "type": "boolean" }, "membership": { "$ref": "#/components/schemas/MeetingRoomMembership" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "room": { "$ref": "#/components/schemas/GovernedMeetingRoom" }, "schemaVersion": { "const": "memoryendpoints.meeting_room_membership.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "action", "changed", "membership", "room", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingRoomMembershipState": { "oneOf": [ { "additionalProperties": false, "properties": {}, "required": [], "type": "object" }, { "$ref": "#/components/schemas/MeetingRoomMembership" } ] }, "MeetingRoomsOperatorSummary": { "additionalProperties": false, "properties": { "alwaysAvailableCount": { "minimum": 0, "type": "integer" }, "count": { "minimum": 0, "type": "integer" }, "defaultRoomCount": { "minimum": 0, "type": "integer" }, "filters": { "$ref": "#/components/schemas/MeetingRoomFilters" }, "messageCount": { "minimum": 0, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readStateCount": { "minimum": 0, "type": "integer" }, "roomFlow": { "$ref": "#/components/schemas/MeetingRoomFlow" }, "schemaVersion": { "const": "memoryendpoints.meeting_rooms_operator_summary.v1" }, "scopeCounts": { "$ref": "#/components/schemas/StringCountMap" }, "unreadCount": { "minimum": 0, "type": "integer" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "count", "filters", "scopeCounts", "alwaysAvailableCount", "defaultRoomCount", "messageCount", "unreadCount", "readStateCount", "roomFlow", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingTranscriptOrdering": { "additionalProperties": false, "properties": { "cursorDirection": { "const": "older" }, "cursorField": { "const": "items[0].meetingMessageId" }, "displayOrder": { "const": "oldest_to_newest_within_visible_window" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.meeting_transcript_ordering.v1" }, "valuesRedacted": { "const": true }, "window": { "const": "latest_messages" } }, "required": [ "schemaVersion", "window", "displayOrder", "cursorDirection", "cursorField", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MeetingTranscriptPagination": { "additionalProperties": false, "properties": { "cursor": { "type": "string" }, "cursorAccepted": { "type": [ "boolean", "null" ] }, "cursorDirection": { "const": "older" }, "hasMore": { "type": "boolean" }, "nextCursor": { "type": [ "string", "null" ] }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "totalMessageCount": { "minimum": 0, "type": "integer" }, "valuesRedacted": { "const": true }, "visibleMessageCount": { "minimum": 0, "type": "integer" } }, "required": [ "visibleMessageCount", "totalMessageCount", "hasMore", "nextCursor", "cursor", "cursorAccepted", "cursorDirection", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "MemorySubmissionConfirmation": { "additionalProperties": false, "properties": { "canonicalMemoryEventId": { "type": "string" }, "memoryQueryUrl": { "type": "string" }, "persisted": { "const": true }, "reviewId": { "type": "string" }, "reviewQueueUrl": { "type": "string" }, "valuesRedacted": { "const": true }, "visibleInReviewQueue": { "type": "boolean" }, "visibleInSearch": { "type": "boolean" } }, "required": [ "persisted", "visibleInSearch", "visibleInReviewQueue", "canonicalMemoryEventId", "reviewId", "memoryQueryUrl", "reviewQueueUrl", "valuesRedacted" ], "type": "object" }, "MessageDeliveryCounts": { "additionalProperties": false, "properties": { "broadcast": { "minimum": 0, "type": "integer" }, "targeted": { "minimum": 0, "type": "integer" } }, "required": [ "broadcast", "targeted" ], "type": "object" }, "NpcClassificationAttachOperationProofInput": { "additionalProperties": false, "properties": { "intendedRequest": { "$ref": "#/components/schemas/NpcClassificationRuntimeAttachInput" }, "requestedTtlSeconds": { "maximum": 300, "minimum": 30, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_classification_attach_operation_proof_request.v1" } }, "required": [ "schemaVersion", "intendedRequest", "requestedTtlSeconds" ], "type": "object" }, "NpcClassificationAuthorityReceiptContract": { "additionalProperties": false, "properties": { "auditLogIsReceiptState": { "const": false }, "bindingStates": { "const": [ "pre_runtime_absent", "pre_runtime_existing", "runtime_bound" ], "items": { "type": "string" }, "type": "array" }, "childPrivateNpcMemoryScopesGranted": { "const": [], "maxItems": 0, "type": "array" }, "classificationHandoffNeverExtendsHumanReceipt": { "const": true }, "classificationHandoffPath": { "const": "/api/matm/npc-shared-memory/classification-handoffs/claim" }, "classificationHandoffReturnsExactlyOne": { "const": true }, "classificationHandoffZeroOrMultipleMatchesFailClosed": { "const": true }, "clientCryptographicVerificationSupported": { "const": false }, "currentAuthorityRevalidatedPerOperation": { "const": true }, "durableRevocationAndKeyRotation": { "const": true }, "escapeConsumerIntegrationReady": { "const": false }, "humanOperatorIssuedPreRuntime": { "const": true }, "maximumTokenBytes": { "const": 4096 }, "maximumTtlSeconds": { "const": 300 }, "minimumTtlSeconds": { "const": 30 }, "operationCapabilities": { "additionalProperties": false, "properties": { "runtime:attach-classification": { "const": [ "write", "read", "consume" ], "items": { "type": "string" }, "type": "array" }, "runtime:register": { "const": [ "write", "read", "consume" ], "items": { "type": "string" }, "type": "array" }, "shared_memory:readback": { "const": [ "read", "consume" ], "items": { "type": "string" }, "type": "array" }, "shared_memory:search": { "const": [ "read", "consume" ], "items": { "type": "string" }, "type": "array" }, "shared_memory:submit": { "const": [ "write" ], "items": { "type": "string" }, "type": "array" } }, "required": [ "runtime:register", "runtime:attach-classification", "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "type": "object" }, "operationProofContract": { "additionalProperties": false, "properties": { "callerDigestAccepted": { "const": false }, "changedRetryRejectedByDownstreamOperation": { "const": true }, "childPrivateNpcMemoryScopesGranted": { "const": [] }, "credentialRateAccountingIsOnlyPermittedPrevalidationMutation": { "const": true }, "credentialRateAccountingPrecedesBodyAndProofValidation": { "const": true }, "currentAuthorityRevalidatedAtOperationUse": { "const": true }, "currentAuthorityValidatedBeforeIssuance": { "const": true }, "downstreamIdempotencyOwnsDurableReplay": { "const": true }, "escapeConsumerIntegrationReady": { "const": false }, "escapeRemoteWriteEligible": { "const": false }, "exactRequestAndIdempotencyBound": { "const": true }, "exactRetryReturnsCommittedResult": { "const": false }, "freshEquivalentReissuance": { "const": true }, "fullIntendedRequestCanonicalizedByServer": { "const": true }, "issuanceRoutes": { "const": [ { "credentialType": "npc_gateway", "idempotencyRequiredFor": [ "/api/matm/npc-memory/runtime-credentials" ], "intendedOperationPaths": [ "/api/matm/npc-memory/runtime-credentials" ], "method": "POST", "operationClass": "runtime_registration", "path": "/api/matm/npc-shared-memory/operation-proofs/runtime-registration", "requiredExistingCapability": "npc:runtime_credential:issue" }, { "credentialType": "npc_runtime", "idempotencyRequiredFor": [ "/api/matm/npc-shared-memory/classifications/attach" ], "intendedOperationPaths": [ "/api/matm/npc-shared-memory/classifications/attach" ], "method": "POST", "operationClass": "classification_attach", "path": "/api/matm/npc-shared-memory/operation-proofs/classification-attach", "requiredExistingCapability": null }, { "credentialType": "npc_runtime", "idempotencyRequiredFor": [ "/api/matm/npc-shared-memory/records" ], "intendedOperationPaths": [ "/api/matm/npc-shared-memory/records", "/api/matm/npc-shared-memory/search", "/api/matm/npc-shared-memory/readback" ], "method": "POST", "operationClass": "shared_operation", "path": "/api/matm/npc-shared-memory/operation-proofs/shared-operation", "requiredExistingCapability": null } ] }, "maximumProofBytes": { "const": 8192 }, "maximumTtlSeconds": { "const": 300 }, "minimumTtlSeconds": { "const": 30 }, "operationClasses": { "const": [ "runtime_registration", "classification_attach", "shared_operation" ] }, "operations": { "const": [ "runtime:register", "runtime:attach-classification", "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ] }, "proofFreezesAuthority": { "const": false }, "proofHeader": { "const": "X-MemoryEndpoints-Operation-Proof" }, "proofIsNonAuthorizing": { "const": true }, "proofIsOpaque": { "const": true }, "protectedOperationPaths": { "const": [ "/api/matm/npc-memory/runtime-credentials", "/api/matm/npc-shared-memory/classifications/attach", "/api/matm/npc-shared-memory/records", "/api/matm/npc-shared-memory/search", "/api/matm/npc-shared-memory/readback" ] }, "protectedValidationProofAvailable": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "rawProofLogged": { "const": false }, "rejectedRequestProtectedBusinessStateUnchanged": { "const": true }, "schemaVersion": { "const": "memoryendpoints.npc_operation_proof_contract.v1" }, "sealedNpcMemoryV1SurfaceUnchanged": { "const": true }, "stateless": { "const": true }, "storageMigrationRequired": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "protectedValidationProofAvailable", "escapeConsumerIntegrationReady", "escapeRemoteWriteEligible", "issuanceRoutes", "proofHeader", "operationClasses", "operations", "minimumTtlSeconds", "maximumTtlSeconds", "maximumProofBytes", "fullIntendedRequestCanonicalizedByServer", "callerDigestAccepted", "proofIsOpaque", "proofIsNonAuthorizing", "proofFreezesAuthority", "currentAuthorityValidatedBeforeIssuance", "currentAuthorityRevalidatedAtOperationUse", "protectedOperationPaths", "credentialRateAccountingPrecedesBodyAndProofValidation", "credentialRateAccountingIsOnlyPermittedPrevalidationMutation", "rejectedRequestProtectedBusinessStateUnchanged", "exactRequestAndIdempotencyBound", "exactRetryReturnsCommittedResult", "freshEquivalentReissuance", "downstreamIdempotencyOwnsDurableReplay", "changedRetryRejectedByDownstreamOperation", "stateless", "storageMigrationRequired", "childPrivateNpcMemoryScopesGranted", "sealedNpcMemoryV1SurfaceUnchanged", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "rawProofLogged" ], "type": "object" }, "operations": { "const": [ "runtime:register", "runtime:attach-classification", "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "items": { "type": "string" }, "type": "array" }, "preRuntimeReceiptTtlSeconds": { "const": 300 }, "protectedClassificationHandoffAvailable": { "const": true }, "protectedValidationProofAvailable": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "receiptIsOpaqueServerEnforced": { "const": true }, "registrationAtomicallyExchangesAuthority": { "const": true }, "requiredForSharedSubmitSearchReadback": { "const": true }, "runtimeCredentialRegistrationPrerequisite": { "const": true }, "runtimeOperations": { "const": [ "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "items": { "type": "string" }, "type": "array" }, "runtimeRefreshGoverned": { "const": true }, "schemaVersion": { "const": "memoryendpoints.npc_classification_authority_contract.v2" }, "shareClasses": { "const": [ "site_shared", "world_shared", "room_local" ], "items": { "type": "string" }, "type": "array" }, "tokenPayloadContainsOpaqueRefsOnly": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "humanOperatorIssuedPreRuntime", "runtimeCredentialRegistrationPrerequisite", "registrationAtomicallyExchangesAuthority", "runtimeRefreshGoverned", "durableRevocationAndKeyRotation", "auditLogIsReceiptState", "requiredForSharedSubmitSearchReadback", "shareClasses", "operations", "runtimeOperations", "operationCapabilities", "bindingStates", "minimumTtlSeconds", "maximumTtlSeconds", "preRuntimeReceiptTtlSeconds", "maximumTokenBytes", "tokenPayloadContainsOpaqueRefsOnly", "receiptIsOpaqueServerEnforced", "clientCryptographicVerificationSupported", "protectedValidationProofAvailable", "protectedClassificationHandoffAvailable", "classificationHandoffPath", "classificationHandoffReturnsExactlyOne", "classificationHandoffZeroOrMultipleMatchesFailClosed", "classificationHandoffNeverExtendsHumanReceipt", "escapeConsumerIntegrationReady", "operationProofContract", "currentAuthorityRevalidatedPerOperation", "childPrivateNpcMemoryScopesGranted", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcClassificationAuthorityReceiptContractResponse": { "additionalProperties": false, "properties": { "data": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptContract" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "ok", "data", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcClassificationAuthorityReceiptRefreshInput": { "additionalProperties": false, "properties": { "classificationRef": { "pattern": "^npcauth-classification-v1:[a-f0-9]{64}$", "type": "string" }, "operations": { "oneOf": [ { "const": [ "shared_memory:submit" ], "items": { "type": "string" }, "type": "array" }, { "const": [ "shared_memory:search" ], "items": { "type": "string" }, "type": "array" }, { "const": [ "shared_memory:submit", "shared_memory:search" ], "items": { "type": "string" }, "type": "array" }, { "const": [ "shared_memory:readback" ], "items": { "type": "string" }, "type": "array" }, { "const": [ "shared_memory:submit", "shared_memory:readback" ], "items": { "type": "string" }, "type": "array" }, { "const": [ "shared_memory:search", "shared_memory:readback" ], "items": { "type": "string" }, "type": "array" }, { "const": [ "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "items": { "type": "string" }, "type": "array" } ] }, "requestedTtlSeconds": { "maximum": 300, "minimum": 30, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_classification_authority_refresh_request.v1" } }, "required": [ "schemaVersion", "classificationRef", "operations", "requestedTtlSeconds" ], "type": "object" }, "NpcClassificationAuthorityReceiptRefreshResult": { "additionalProperties": false, "properties": { "authorityRevision": { "maximum": 9223372036854775807, "minimum": 1, "type": "integer" }, "childPrivateNpcMemoryScopesGranted": { "const": [], "items": { "type": "string" }, "maxItems": 0, "type": "array" }, "classificationRef": { "pattern": "^npcauth-classification-v1:[a-f0-9]{64}$", "type": "string" }, "keyVersion": { "pattern": "^npcauth-key-v1:[1-9][0-9]{0,17}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "receipts": { "oneOf": [ { "additionalProperties": false, "properties": { "shared_memory:submit": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:submit" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:search": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:search" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:search": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:submit": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:submit", "shared_memory:search" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:readback": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:readback" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:readback": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:submit": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:submit", "shared_memory:readback" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:readback": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:search": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:search", "shared_memory:readback" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:readback": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:search": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:submit": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "type": "object" } ] }, "schemaVersion": { "const": "memoryendpoints.npc_classification_authority_refresh_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "classificationRef", "authorityRevision", "keyVersion", "receipts", "childPrivateNpcMemoryScopesGranted", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcClassificationAuthorityReceiptResult": { "additionalProperties": false, "properties": { "classificationRef": { "pattern": "^npcauth-classification-v1:[a-f0-9]{64}$", "type": "string" }, "expiresAt": { "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}Z$", "type": "string" }, "operation": { "enum": [ "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "receipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "receiptDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "runtimeBindingState": { "const": "runtime_bound" }, "shareClass": { "enum": [ "site_shared", "world_shared", "room_local" ], "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "classificationRef", "expiresAt", "operation", "rawCredentialExposed", "rawPayloadExposed", "receipt", "receiptDigest", "runtimeBindingState", "shareClass", "valuesRedacted" ], "type": "object" }, "NpcClassificationHandoffClaimInput": { "additionalProperties": false, "properties": { "candidateTokenSecret": { "maxLength": 4096, "minLength": 32, "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "schemaVersion": { "const": "memoryendpoints.npc_classification_handoff_claim_request.v1" } }, "required": [ "schemaVersion", "candidateTokenSecret" ], "type": "object" }, "NpcClassificationHandoffClaimResult": { "additionalProperties": false, "properties": { "allowedOperations": { "items": { "enum": [ "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "type": "string" }, "maxItems": 3, "minItems": 1, "type": "array", "uniqueItems": true }, "authorityRevision": { "maximum": 9223372036854775807, "minimum": 1, "type": "integer" }, "childPrivateNpcMemoryScopesGranted": { "const": [], "items": { "type": "string" }, "maxItems": 0, "type": "array" }, "classificationRef": { "pattern": "^npcauth-classification-v1:[a-f0-9]{64}$", "type": "string" }, "exactHistoricalReceiptReconstructed": { "const": true }, "expiresAt": { "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}Z$", "type": "string" }, "keyVersion": { "pattern": "^npcauth-key-v1:[1-9][0-9]{0,17}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readOnly": { "const": true }, "receiptDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "runtimeBindingState": { "const": "pre_runtime_absent" }, "schemaVersion": { "const": "memoryendpoints.npc_classification_handoff_claim_result.v1" }, "shareClass": { "enum": [ "site_shared", "world_shared", "room_local" ], "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "preRuntimeClassificationReceipt", "receiptDigest", "classificationRef", "shareClass", "allowedOperations", "runtimeBindingState", "authorityRevision", "keyVersion", "expiresAt", "readOnly", "exactHistoricalReceiptReconstructed", "childPrivateNpcMemoryScopesGranted", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcClassificationRuntimeAttachInput": { "additionalProperties": false, "properties": { "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_classification_runtime_attach.v1" } }, "required": [ "preRuntimeClassificationReceipt", "schemaVersion" ], "type": "object" }, "NpcClassificationRuntimeAttachResult": { "additionalProperties": false, "properties": { "attached": { "type": "boolean" }, "authorityRevision": { "maximum": 9223372036854775807, "minimum": 1, "type": "integer" }, "childPrivateNpcMemoryScopesGranted": { "const": [], "items": { "type": "string" }, "maxItems": 0, "type": "array" }, "classificationRef": { "pattern": "^npcauth-classification-v1:[a-f0-9]{64}$", "type": "string" }, "idempotentReplay": { "type": "boolean" }, "keyVersion": { "pattern": "^npcauth-key-v1:[1-9][0-9]{0,17}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "receipts": { "oneOf": [ { "additionalProperties": false, "properties": { "shared_memory:submit": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:submit" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:search": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:search" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:search": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:submit": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:submit", "shared_memory:search" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:readback": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:readback" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:readback": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:submit": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:submit", "shared_memory:readback" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:readback": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:search": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:search", "shared_memory:readback" ], "type": "object" }, { "additionalProperties": false, "properties": { "shared_memory:readback": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:search": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" }, "shared_memory:submit": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptResult" } }, "required": [ "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "type": "object" } ] }, "schemaVersion": { "const": "memoryendpoints.npc_classification_runtime_attach_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "attached", "authorityRevision", "childPrivateNpcMemoryScopesGranted", "classificationRef", "idempotentReplay", "keyVersion", "rawCredentialExposed", "rawPayloadExposed", "receipts", "schemaVersion", "valuesRedacted" ], "type": "object" }, "NpcMemoryCapabilities": { "additionalProperties": false, "properties": { "activeSecurityControls": { "const": [ "authentication", "request_size_limits", "rate_limits", "abuse_controls", "secret_scanning", "prompt_injection_protection", "tenant_isolation", "schema_validation", "public_safe_validation", "idempotency" ] }, "auditHistoryAccess": { "const": false }, "billingAccess": { "const": false }, "capabilities": { "oneOf": [ { "const": [ "npc:profile:register", "npc:runtime_credential:issue", "npc:persona_package:write", "npc:persona_package:read", "npc:uaix:manage", "entitlement:self:read" ] }, { "const": [ "npc:memory:submit", "npc:memory:search", "npc:memory:readback", "npc:persona_package:read", "npc:uaix:read", "npc:retention:read" ] } ] }, "clientGeneratedRuntimeCredentials": { "const": true }, "companyDataAccessible": { "const": false }, "credentialType": { "enum": [ "npc_gateway_token", "npc_runtime_token" ] }, "documentsAccess": { "const": false }, "durableMemoryScopes": { "const": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ] }, "identityClass": { "minLength": 1, "type": "string" }, "operatorCoordinationAccess": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "runtimeCredentialScopeTypes": { "const": [ "game", "session" ] }, "safetyControlsRemainActive": { "const": true }, "schemaVersion": { "const": "memoryendpoints.npc_memory_capabilities.v1" }, "serverSideExactScopeMatching": { "const": true }, "settingsAccess": { "const": false }, "valuesRedacted": { "const": true }, "virtualUaixSupported": { "const": true }, "workspaceOperatorAccess": { "const": false } }, "required": [ "schemaVersion", "credentialType", "identityClass", "capabilities", "durableMemoryScopes", "runtimeCredentialScopeTypes", "serverSideExactScopeMatching", "clientGeneratedRuntimeCredentials", "virtualUaixSupported", "companyDataAccessible", "workspaceOperatorAccess", "billingAccess", "auditHistoryAccess", "documentsAccess", "settingsAccess", "operatorCoordinationAccess", "safetyControlsRemainActive", "activeSecurityControls", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcMemoryCapabilitiesResponse": { "additionalProperties": false, "properties": { "data": { "$ref": "#/components/schemas/NpcMemoryCapabilities" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "ok", "data", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcMemoryContract": { "properties": { "gatewayCapabilities": { "const": [ "npc:profile:register", "npc:runtime_credential:issue", "npc:persona_package:write", "npc:persona_package:read", "npc:uaix:manage", "entitlement:self:read" ], "type": "array" }, "runtimeCapabilities": { "const": [ "npc:memory:submit", "npc:memory:search", "npc:memory:readback", "npc:persona_package:read", "npc:uaix:read", "npc:retention:read" ], "type": "array" } }, "required": [ "gatewayCapabilities", "runtimeCapabilities" ], "type": "object" }, "NpcMemoryEventRequest": { "additionalProperties": false, "properties": { "actorAgentId": {}, "confidence": {}, "memoryType": {}, "projectId": {}, "schemaVersion": {}, "scope": {}, "scopeId": {}, "source": {}, "subject": {}, "summary": {}, "tags": {}, "title": {}, "workspaceId": {} }, "required": [ "schemaVersion", "workspaceId", "projectId", "actorAgentId", "scope", "scopeId", "title", "summary", "memoryType", "subject", "tags", "source", "confidence" ], "type": "object" }, "NpcMemoryEventResponse": { "additionalProperties": false, "properties": { "event": {}, "exactReadbackVerified": {}, "idempotentReplay": {}, "ok": {}, "persisted": {}, "rawCredentialExposed": {}, "rawPayloadExposed": {}, "receipt": {}, "valuesRedacted": {} }, "required": [ "ok", "persisted", "exactReadbackVerified", "idempotentReplay", "event", "receipt", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcOperationProofResult": { "additionalProperties": false, "properties": { "childPrivateNpcMemoryScopesGranted": { "const": [], "maxItems": 0, "type": "array" }, "currentAuthorityMustBeRevalidatedAtUse": { "const": true }, "expiresAt": { "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}Z$", "type": "string" }, "operation": { "enum": [ "runtime:register", "runtime:attach-classification", "shared_memory:submit", "shared_memory:search", "shared_memory:readback" ], "type": "string" }, "operationClass": { "enum": [ "runtime_registration", "classification_attach", "shared_operation" ], "type": "string" }, "operationProof": { "description": "Opaque, non-authorizing proof returned only to the exact authenticated caller and never logged.", "maxLength": 8192, "pattern": "^npcproof-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string", "writeOnly": true }, "proofHeader": { "const": "X-MemoryEndpoints-Operation-Proof" }, "proofIsNonAuthorizing": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "rawProofLogged": { "const": false }, "routePath": { "enum": [ "/api/matm/npc-memory/runtime-credentials", "/api/matm/npc-shared-memory/classifications/attach", "/api/matm/npc-shared-memory/records", "/api/matm/npc-shared-memory/search", "/api/matm/npc-shared-memory/readback" ], "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_operation_proof_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "operationClass", "operation", "routePath", "operationProof", "expiresAt", "proofHeader", "proofIsNonAuthorizing", "currentAuthorityMustBeRevalidatedAtUse", "childPrivateNpcMemoryScopesGranted", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "rawProofLogged" ], "type": "object" }, "NpcPersonaPackageMutationResponse": { "additionalProperties": false, "properties": { "atomicWrite": {}, "exactReadbackRequired": {}, "ok": {}, "package": {}, "persisted": {}, "rawCredentialExposed": {}, "rawPayloadExposed": {}, "valuesRedacted": {} }, "required": [ "ok", "persisted", "atomicWrite", "exactReadbackRequired", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "package" ], "type": "object" }, "NpcPersonaPackageReadResponse": { "additionalProperties": false, "properties": { "data": {}, "exactBindingVerified": {}, "ok": {}, "rawCredentialExposed": {}, "rawPayloadExposed": {}, "valuesRedacted": {} }, "required": [ "ok", "exactBindingVerified", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "data" ], "type": "object" }, "NpcPersonaPackageRequest": { "additionalProperties": false, "properties": { "agentId": {}, "files": {}, "packageHash": {}, "packageId": {}, "packageStatus": {}, "personaHash": {}, "personaId": {}, "projectId": {}, "schemaVersion": {}, "sourceAuthority": {}, "workspaceId": {} }, "required": [ "schemaVersion", "workspaceId", "projectId", "agentId", "packageId", "personaId", "personaHash", "packageStatus", "sourceAuthority", "packageHash", "files" ], "type": "object" }, "NpcPrivateRuntimeDelegation": { "additionalProperties": false, "properties": { "action": { "enum": [ "readback", "issue", "refresh", "revoke" ] }, "childRefs": { "items": { "pattern": "^npcpriv-child-v1:[0-9a-f]{64}$", "type": "string" }, "maxItems": 256, "minItems": 1, "type": "array", "uniqueItems": true }, "created": { "type": "boolean" }, "current": { "type": "boolean" }, "delegationGeneration": { "minimum": 1, "type": "integer" }, "delegationRef": { "pattern": "^npcpriv-delegation-v1:[0-9a-f]{64}$", "type": "string" }, "delegationRevision": { "minimum": 1, "type": "integer" }, "expiresAt": { "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{1,6})?Z$", "type": "string" }, "fenceDigest": { "pattern": "^sha256-v1:[0-9a-f]{64}$", "type": "string" }, "gatewayRef": { "pattern": "^npcpriv-gateway-v1:[0-9a-f]{64}$", "type": "string" }, "idempotentReplay": { "type": "boolean" }, "issuedAt": { "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{1,6})?Z$", "type": "string" }, "maxRuntimeTtlSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "playerScopeRequired": { "const": true }, "privateMemoryScopes": { "const": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ] }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "rosterRef": { "pattern": "^npcpriv-roster-v1:[0-9a-f]{64}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_private_runtime_delegation.v1" }, "sharedMemoryScopes": { "maxItems": 0, "type": "array" }, "sharedSubjectOperations": { "maxItems": 0, "type": "array" }, "status": { "enum": [ "active", "revoked" ] }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "delegationRef", "gatewayRef", "rosterRef", "childRefs", "delegationGeneration", "delegationRevision", "fenceDigest", "status", "issuedAt", "expiresAt", "maxRuntimeTtlSeconds", "playerScopeRequired", "privateMemoryScopes", "sharedMemoryScopes", "sharedSubjectOperations", "action", "created", "idempotentReplay", "current", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcPrivateRuntimeDelegationContract": { "additionalProperties": false, "properties": { "authorityMode": { "const": "private_runtime_delegation" }, "classificationAuthorityReceiptIssued": { "const": false }, "currentAuthorityRevalidatedAtUse": { "const": true }, "humanRoutes": { "additionalProperties": false, "properties": { "issue": { "const": "/api/matm/human/operational/npc-private-runtime-delegation/issue" }, "readback": { "const": "/api/matm/human/operational/npc-private-runtime-delegation" }, "refresh": { "const": "/api/matm/human/operational/npc-private-runtime-delegation/refresh" }, "revoke": { "const": "/api/matm/human/operational/npc-private-runtime-delegation/revoke" } }, "required": [ "readback", "issue", "refresh", "revoke" ], "type": "object" }, "operationProofHeader": { "const": "X-MemoryEndpoints-Operation-Proof" }, "operationProofIsNonAuthorizing": { "const": true }, "operationProofRoute": { "const": "/api/matm/npc-private-memory/operation-proofs/runtime-registration" }, "playerScopeRequired": { "const": true }, "privateMemoryScopes": { "const": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ] }, "privateSubmitSearchRequireOperationProof": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "rawProofLogged": { "const": false }, "registrationRoute": { "const": "/api/matm/npc-memory/runtime-credentials" }, "schemaVersion": { "const": "memoryendpoints.npc_private_runtime_delegation_contract.v1" }, "sealedNpcV1CapabilitiesChanged": { "const": false }, "sealedNpcV1RouteInventoryChanged": { "const": false }, "sharedMemoryScopesGranted": { "maxItems": 0, "type": "array" }, "sharedSubjectOperationsGranted": { "maxItems": 0, "type": "array" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "authorityMode", "humanRoutes", "operationProofRoute", "registrationRoute", "operationProofHeader", "operationProofIsNonAuthorizing", "currentAuthorityRevalidatedAtUse", "playerScopeRequired", "privateMemoryScopes", "privateSubmitSearchRequireOperationProof", "sharedMemoryScopesGranted", "sharedSubjectOperationsGranted", "classificationAuthorityReceiptIssued", "sealedNpcV1RouteInventoryChanged", "sealedNpcV1CapabilitiesChanged", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "rawProofLogged" ], "type": "object" }, "NpcPrivateRuntimeDelegationContractResponse": { "additionalProperties": false, "properties": { "data": { "$ref": "#/components/schemas/NpcPrivateRuntimeDelegationContract" }, "ok": { "const": true } }, "required": [ "ok", "data" ], "type": "object" }, "NpcPrivateRuntimeDelegationReadback": { "additionalProperties": false, "properties": { "availableChildRefs": { "items": { "pattern": "^npcpriv-child-v1:[0-9a-f]{64}$", "type": "string" }, "maxItems": 256, "type": "array" }, "currentDelegation": { "oneOf": [ { "$ref": "#/components/schemas/NpcPrivateRuntimeDelegation" }, { "type": "null" } ] }, "hierarchyRevision": { "minimum": 1, "type": "integer" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.npc_private_runtime_delegation_readback.v1" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "availableChildRefs", "currentDelegation", "hierarchyRevision", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcPrivateRuntimeOperationProofInput": { "additionalProperties": false, "properties": { "intendedRequest": { "$ref": "#/components/schemas/NpcPrivateRuntimeRegistrationInput" }, "requestedTtlSeconds": { "maximum": 300, "minimum": 30, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_private_runtime_registration_operation_proof_request.v1" } }, "required": [ "schemaVersion", "intendedRequest", "requestedTtlSeconds" ], "type": "object" }, "NpcPrivateRuntimeOperationProofResult": { "additionalProperties": false, "properties": { "childPrivateNpcMemoryScopesGranted": { "maxItems": 0, "type": "array" }, "childRef": { "pattern": "^npcpriv-[a-z-]+-v1:[0-9a-f]{64}$", "type": "string" }, "currentAuthorityMustBeRevalidatedAtUse": { "const": true }, "delegationRef": { "pattern": "^npcpriv-delegation-v1:[0-9a-f]{64}$", "type": "string" }, "expiresAt": { "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{1,6})?Z$", "type": "string" }, "operation": { "const": "runtime:register" }, "operationClass": { "const": "private_runtime_registration" }, "operationProof": { "type": "string", "writeOnly": true }, "playerScopeRef": { "pattern": "^npcpriv-[a-z-]+-v1:[0-9a-f]{64}$", "type": "string" }, "proofHeader": { "const": "X-MemoryEndpoints-Operation-Proof" }, "proofIsNonAuthorizing": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "rawProofLogged": { "const": false }, "routePath": { "const": "/api/matm/npc-memory/runtime-credentials" }, "schemaVersion": { "const": "memoryendpoints.npc_private_runtime_operation_proof_result.v1" }, "sharedMemoryScopesGranted": { "maxItems": 0, "type": "array" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "operationClass", "operation", "routePath", "delegationRef", "childRef", "playerScopeRef", "operationProof", "expiresAt", "proofHeader", "proofIsNonAuthorizing", "currentAuthorityMustBeRevalidatedAtUse", "childPrivateNpcMemoryScopesGranted", "sharedMemoryScopesGranted", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "rawProofLogged" ], "type": "object" }, "NpcPrivateRuntimeProblem": { "oneOf": [ { "additionalProperties": false, "properties": { "error": { "additionalProperties": false, "properties": { "code": { "enum": [ "commercial_authority_commit_outcome_uncertain", "commercial_authority_retryable_unavailable", "commercial_schema_upgrade_required", "idempotency_key_invalid", "idempotency_key_required", "invalid_json", "invalid_token", "json_content_type_required", "method_not_allowed", "npc_capability_forbidden", "npc_credential_candidate_invalid", "npc_gateway_credential_required", "npc_private_runtime_delegation_child_not_allowed", "npc_private_runtime_delegation_expired", "npc_private_runtime_delegation_idempotency_conflict", "npc_private_runtime_delegation_invariant_invalid", "npc_private_runtime_delegation_not_found", "npc_private_runtime_delegation_request_invalid", "npc_private_runtime_delegation_revoked", "npc_private_runtime_delegation_stale", "npc_private_runtime_operation_proof_authority_stale", "npc_private_runtime_operation_proof_binding_mismatch", "npc_private_runtime_operation_proof_expired", "npc_private_runtime_operation_proof_invalid", "npc_private_runtime_operation_proof_request_mismatch", "npc_private_runtime_operation_proof_required", "npc_private_runtime_operation_proof_signing_unavailable", "npc_profile_not_found", "npc_rate_limit_unavailable", "npc_runtime_authority_stale", "npc_runtime_context_invalid", "npc_runtime_credential_conflict", "npc_runtime_credential_store_unavailable", "npc_runtime_ttl_invalid", "rate_limited", "request_body_too_large" ], "type": "string" }, "detail": { "minLength": 1, "type": "string" }, "safeNoOp": { "const": true }, "title": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "code", "title", "detail", "safeNoOp", "valuesRedacted" ], "type": "object" }, "ok": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "safeNoOp": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ], "type": "object" }, { "additionalProperties": false, "properties": { "error": { "additionalProperties": false, "properties": { "code": { "enum": [ "commercial_authority_commit_outcome_uncertain", "commercial_authority_retryable_unavailable", "commercial_schema_upgrade_required", "idempotency_key_invalid", "idempotency_key_required", "invalid_json", "invalid_token", "json_content_type_required", "method_not_allowed", "npc_capability_forbidden", "npc_credential_candidate_invalid", "npc_gateway_credential_required", "npc_private_runtime_delegation_child_not_allowed", "npc_private_runtime_delegation_expired", "npc_private_runtime_delegation_idempotency_conflict", "npc_private_runtime_delegation_invariant_invalid", "npc_private_runtime_delegation_not_found", "npc_private_runtime_delegation_request_invalid", "npc_private_runtime_delegation_revoked", "npc_private_runtime_delegation_stale", "npc_private_runtime_operation_proof_authority_stale", "npc_private_runtime_operation_proof_binding_mismatch", "npc_private_runtime_operation_proof_expired", "npc_private_runtime_operation_proof_invalid", "npc_private_runtime_operation_proof_request_mismatch", "npc_private_runtime_operation_proof_required", "npc_private_runtime_operation_proof_signing_unavailable", "npc_profile_not_found", "npc_rate_limit_unavailable", "npc_runtime_authority_stale", "npc_runtime_context_invalid", "npc_runtime_credential_conflict", "npc_runtime_credential_store_unavailable", "npc_runtime_ttl_invalid", "rate_limited", "request_body_too_large" ], "type": "string" }, "detail": { "minLength": 1, "type": "string" }, "outcomeUncertain": { "const": true }, "reconcileRequired": { "const": true }, "safeNoOp": { "const": false }, "title": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "code", "title", "detail", "safeNoOp", "outcomeUncertain", "reconcileRequired", "valuesRedacted" ], "type": "object" }, "ok": { "const": false }, "outcomeUncertain": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reconcileRequired": { "const": true }, "safeNoOp": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "outcomeUncertain", "reconcileRequired", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ], "type": "object" } ], "properties": { "error": { "properties": { "code": { "enum": [ "commercial_authority_commit_outcome_uncertain", "commercial_authority_retryable_unavailable", "commercial_schema_upgrade_required", "idempotency_key_invalid", "idempotency_key_required", "invalid_json", "invalid_token", "json_content_type_required", "method_not_allowed", "npc_capability_forbidden", "npc_credential_candidate_invalid", "npc_gateway_credential_required", "npc_private_runtime_delegation_child_not_allowed", "npc_private_runtime_delegation_expired", "npc_private_runtime_delegation_idempotency_conflict", "npc_private_runtime_delegation_invariant_invalid", "npc_private_runtime_delegation_not_found", "npc_private_runtime_delegation_request_invalid", "npc_private_runtime_delegation_revoked", "npc_private_runtime_delegation_stale", "npc_private_runtime_operation_proof_authority_stale", "npc_private_runtime_operation_proof_binding_mismatch", "npc_private_runtime_operation_proof_expired", "npc_private_runtime_operation_proof_invalid", "npc_private_runtime_operation_proof_request_mismatch", "npc_private_runtime_operation_proof_required", "npc_private_runtime_operation_proof_signing_unavailable", "npc_profile_not_found", "npc_rate_limit_unavailable", "npc_runtime_authority_stale", "npc_runtime_context_invalid", "npc_runtime_credential_conflict", "npc_runtime_credential_store_unavailable", "npc_runtime_ttl_invalid", "rate_limited", "request_body_too_large" ], "type": "string" }, "detail": { "minLength": 1, "type": "string" }, "safeNoOp": { "type": "boolean" }, "title": { "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } } }, "ok": { "const": false }, "outcomeUncertain": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reconcileRequired": { "const": true }, "safeNoOp": { "type": "boolean" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ] }, "NpcPrivateRuntimeRegistrationInput": { "additionalProperties": false, "properties": { "authorityMode": { "const": "private_runtime_delegation" }, "candidateTokenSecret": { "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[0-9a-f]{32}$", "type": "string" }, "npcAgentId": { "minLength": 1, "type": "string" }, "playerScopeId": { "pattern": "^player-[0-9a-f]{32}$", "type": "string" }, "privateRuntimeDelegationRef": { "pattern": "^npcpriv-delegation-v1:[0-9a-f]{64}$", "type": "string" }, "projectId": { "minLength": 1, "type": "string" }, "puzzleScopeId": { "pattern": "^puzzle-[0-9a-f]{32}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "sessionScopeId": { "pattern": "^session-[0-9a-f]{32}$", "type": "string" }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "authorityMode", "privateRuntimeDelegationRef", "workspaceId", "projectId", "npcAgentId", "playerScopeId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds" ], "type": "object" }, "NpcPrivateRuntimeRegistrationResponse": { "additionalProperties": false, "properties": { "authorityMode": { "const": "private_runtime_delegation" }, "candidateCredentialAccepted": { "const": true }, "childPrivateNpcMemoryScopes": { "const": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ] }, "classificationAuthorityReceipts": { "maxItems": 0, "type": "array" }, "created": { "type": "boolean" }, "credentialReturnedByServer": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "operationProofConsumed": { "const": true }, "persisted": { "const": true }, "privateRuntimeDelegation": { "additionalProperties": false, "properties": { "childRef": { "pattern": "^npcpriv-[a-z-]+-v1:[0-9a-f]{64}$", "type": "string" }, "current": { "const": true }, "delegationGeneration": { "minimum": 1, "type": "integer" }, "delegationRef": { "pattern": "^npcpriv-delegation-v1:[0-9a-f]{64}$", "type": "string" }, "delegationRevision": { "minimum": 1, "type": "integer" }, "expiresAt": { "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{1,6})?Z$", "type": "string" }, "fenceDigest": { "pattern": "^sha256-v1:[0-9a-f]{64}$", "type": "string" }, "playerScopeRef": { "pattern": "^npcpriv-[a-z-]+-v1:[0-9a-f]{64}$", "type": "string" } }, "required": [ "delegationRef", "childRef", "playerScopeRef", "delegationGeneration", "delegationRevision", "fenceDigest", "expiresAt", "current" ], "type": "object" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "rawProofExposed": { "const": false }, "runtimeCredential": { "$ref": "#/components/schemas/NpcRuntimeCredential" }, "sharedSubjectAuthorityGranted": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "ok", "runtimeCredential", "authorityMode", "privateRuntimeDelegation", "created", "idempotentReplay", "persisted", "candidateCredentialAccepted", "credentialReturnedByServer", "childPrivateNpcMemoryScopes", "classificationAuthorityReceipts", "sharedSubjectAuthorityGranted", "operationProofConsumed", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "rawProofExposed" ], "type": "object" }, "NpcProfileRequest": { "oneOf": [ { "additionalProperties": false, "properties": { "agentClass": {}, "agentId": {}, "displayName": {}, "npcId": {}, "personaHash": {}, "personaId": {}, "projectId": {}, "schemaVersion": {}, "workspaceId": {} }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcId", "agentId", "displayName", "personaId", "personaHash", "agentClass" ], "type": "object" }, { "additionalProperties": false, "properties": { "agentId": {}, "expectedLeaseFence": { "pattern": "^[A-Za-z0-9_-]{43}$", "type": "string" }, "expectedLeaseGeneration": { "minimum": 1, "type": "integer" }, "expectedLeaseId": {}, "expectedLeaseRevision": { "minimum": 1, "type": "integer" }, "npcProfileId": {}, "operation": { "const": "renew_name_lease" }, "projectId": {}, "runtimeCredentialId": {}, "schemaVersion": {}, "workspaceId": {} }, "required": [ "schemaVersion", "operation", "workspaceId", "projectId", "npcProfileId", "agentId", "runtimeCredentialId", "expectedLeaseId", "expectedLeaseGeneration", "expectedLeaseFence", "expectedLeaseRevision" ], "type": "object" } ] }, "NpcProfileResponse": { "oneOf": [ { "additionalProperties": false, "properties": { "bindingDigest": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "created": {}, "nameLease": { "additionalProperties": false, "properties": { "expiresAt": { "format": "date-time", "type": "string" }, "fence": { "pattern": "^[A-Za-z0-9_-]{43}$", "type": "string" }, "generation": { "minimum": 1, "type": "integer" }, "leaseId": { "type": "string" }, "revision": { "minimum": 1, "type": "integer" } }, "required": [ "leaseId", "generation", "fence", "revision", "expiresAt" ], "type": "object" }, "ok": {}, "persisted": {}, "profile": {}, "rawCredentialExposed": {}, "rawPayloadExposed": {}, "valuesRedacted": {}, "visibleToGateway": {} }, "required": [ "ok", "profile", "nameLease", "bindingDigest", "created", "persisted", "visibleToGateway", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, { "additionalProperties": false, "properties": { "bindingDigest": { "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "created": { "const": false }, "nameLease": { "additionalProperties": false, "properties": { "expiresAt": { "format": "date-time", "type": "string" }, "fence": { "pattern": "^[A-Za-z0-9_-]{43}$", "type": "string" }, "generation": { "minimum": 1, "type": "integer" }, "leaseId": { "type": "string" }, "revision": { "minimum": 1, "type": "integer" } }, "required": [ "leaseId", "generation", "fence", "revision", "expiresAt" ], "type": "object" }, "ok": {}, "operation": { "const": "renew_name_lease" }, "persisted": {}, "profile": {}, "rawCredentialExposed": {}, "rawPayloadExposed": {}, "renewed": { "const": true }, "valuesRedacted": {}, "visibleToGateway": {} }, "required": [ "ok", "operation", "profile", "nameLease", "renewed", "created", "persisted", "visibleToGateway", "bindingDigest", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" } ] }, "NpcRuntimeCredential": { "additionalProperties": false, "properties": { "agentId": { "minLength": 1, "type": "string" }, "capabilities": { "const": [ "npc:memory:submit", "npc:memory:search", "npc:memory:readback", "npc:persona_package:read", "npc:uaix:read", "npc:retention:read" ] }, "createdAt": { "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{1,6})?Z$", "type": "string" }, "credentialClientGenerated": { "const": true }, "credentialId": { "minLength": 1, "type": "string" }, "credentialPersistedAsHashOnly": { "const": true }, "expiresAt": { "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{1,6})?Z$", "type": "string" }, "gameScopeId": { "minLength": 1, "type": "string" }, "gatewayCredentialId": { "minLength": 1, "type": "string" }, "identityClass": { "const": "game_npc" }, "npcProfileId": { "minLength": 1, "type": "string" }, "playerScopeId": { "type": [ "string", "null" ] }, "projectId": { "minLength": 1, "type": "string" }, "puzzleScopeId": { "type": [ "string", "null" ] }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "scopeId": { "minLength": 1, "type": "string" }, "scopeType": { "enum": [ "game", "session" ] }, "sessionScopeId": { "type": [ "string", "null" ] }, "status": { "const": "active" }, "valuesRedacted": { "const": true }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "credentialId", "gatewayCredentialId", "npcProfileId", "workspaceId", "projectId", "agentId", "identityClass", "scopeType", "scopeId", "playerScopeId", "gameScopeId", "sessionScopeId", "puzzleScopeId", "capabilities", "status", "createdAt", "expiresAt", "credentialClientGenerated", "credentialPersistedAsHashOnly", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcRuntimeCredentialIntentInput": { "additionalProperties": false, "properties": { "candidateTokenSecret": { "description": "Exact candidate runtime token. The server binds its secret hash to the opaque intent and never returns it.", "maxLength": 312, "minLength": 75, "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential_intent.v1" } }, "required": [ "candidateTokenSecret", "schemaVersion" ], "type": "object" }, "NpcRuntimeCredentialIntentResult": { "additionalProperties": false, "properties": { "candidateRuntimeIntentRef": { "pattern": "^npcauth-candidate-runtime-v1:[a-f0-9]{64}$", "type": "string" }, "intentMode": { "enum": [ "pre_registration", "existing_runtime_attach" ], "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "registrationPerformed": { "const": false }, "safeNoOp": { "const": true }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential_intent_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "candidateRuntimeIntentRef", "intentMode", "rawCredentialExposed", "rawPayloadExposed", "registrationPerformed", "safeNoOp", "schemaVersion", "valuesRedacted" ], "type": "object" }, "NpcRuntimeCredentialRequest": { "additionalProperties": false, "properties": { "candidateTokenSecret": { "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[0-9a-f]{32}$", "type": "string" }, "npcAgentId": { "minLength": 1, "type": "string" }, "playerScopeId": { "pattern": "^player-[0-9a-f]{32}$", "type": "string" }, "preRuntimeClassificationReceipt": { "maxLength": 4096, "minLength": 1, "type": "string", "writeOnly": true }, "projectId": { "minLength": 1, "type": "string" }, "puzzleScopeId": { "pattern": "^puzzle-[0-9a-f]{32}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "sessionScopeId": { "pattern": "^session-[0-9a-f]{32}$", "type": "string" }, "workspaceId": { "minLength": 1, "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt" ], "type": "object" }, "NpcRuntimeCredentialResponse": { "additionalProperties": false, "properties": { "candidateCredentialAccepted": { "const": true }, "classificationAuthorityReceipts": { "additionalProperties": false, "minProperties": 1, "properties": { "shared_memory:readback": { "maxLength": 4096, "minLength": 1, "type": "string", "writeOnly": true }, "shared_memory:search": { "maxLength": 4096, "minLength": 1, "type": "string", "writeOnly": true }, "shared_memory:submit": { "maxLength": 4096, "minLength": 1, "type": "string", "writeOnly": true } }, "type": "object" }, "created": { "type": "boolean" }, "credentialReturnedByServer": { "const": false }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "runtimeCredential": { "$ref": "#/components/schemas/NpcRuntimeCredential" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "runtimeCredential", "created", "idempotentReplay", "persisted", "candidateCredentialAccepted", "credentialReturnedByServer", "classificationAuthorityReceipts", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "NpcRuntimeRegistrationOperationProofInput": { "additionalProperties": false, "properties": { "intendedRequest": { "oneOf": [ { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[a-f0-9]{32}$", "type": "string" }, "npcAgentId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "projectId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "workspaceId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt" ], "type": "object" }, { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[a-f0-9]{32}$", "type": "string" }, "npcAgentId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "projectId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "sessionScopeId": { "pattern": "^session-[a-f0-9]{32}$", "type": "string" }, "workspaceId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt", "sessionScopeId" ], "type": "object" }, { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[a-f0-9]{32}$", "type": "string" }, "npcAgentId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "playerScopeId": { "pattern": "^player-[a-f0-9]{32}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "projectId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "workspaceId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt", "playerScopeId" ], "type": "object" }, { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[a-f0-9]{32}$", "type": "string" }, "npcAgentId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "playerScopeId": { "pattern": "^player-[a-f0-9]{32}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "projectId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "sessionScopeId": { "pattern": "^session-[a-f0-9]{32}$", "type": "string" }, "workspaceId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt", "sessionScopeId", "playerScopeId" ], "type": "object" }, { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[a-f0-9]{32}$", "type": "string" }, "npcAgentId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "projectId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "puzzleScopeId": { "pattern": "^puzzle-[a-f0-9]{32}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "workspaceId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt", "puzzleScopeId" ], "type": "object" }, { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[a-f0-9]{32}$", "type": "string" }, "npcAgentId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "projectId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "puzzleScopeId": { "pattern": "^puzzle-[a-f0-9]{32}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "sessionScopeId": { "pattern": "^session-[a-f0-9]{32}$", "type": "string" }, "workspaceId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt", "sessionScopeId", "puzzleScopeId" ], "type": "object" }, { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[a-f0-9]{32}$", "type": "string" }, "npcAgentId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "playerScopeId": { "pattern": "^player-[a-f0-9]{32}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "projectId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "puzzleScopeId": { "pattern": "^puzzle-[a-f0-9]{32}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "workspaceId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt", "playerScopeId", "puzzleScopeId" ], "type": "object" }, { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_npc_runtime_v1\\.[A-Za-z0-9_-]{8,160}\\.[A-Za-z0-9_-]{43,128}$", "type": "string", "writeOnly": true }, "expiresInSeconds": { "maximum": 86400, "minimum": 300, "type": "integer" }, "gameScopeId": { "pattern": "^game-[a-f0-9]{32}$", "type": "string" }, "npcAgentId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "playerScopeId": { "pattern": "^player-[a-f0-9]{32}$", "type": "string" }, "preRuntimeClassificationReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "projectId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "puzzleScopeId": { "pattern": "^puzzle-[a-f0-9]{32}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_credential.v1" }, "sessionScopeId": { "pattern": "^session-[a-f0-9]{32}$", "type": "string" }, "workspaceId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "projectId", "npcAgentId", "gameScopeId", "candidateTokenSecret", "expiresInSeconds", "preRuntimeClassificationReceipt", "sessionScopeId", "playerScopeId", "puzzleScopeId" ], "type": "object" } ] }, "requestedTtlSeconds": { "maximum": 300, "minimum": 30, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_runtime_registration_operation_proof_request.v1" } }, "required": [ "schemaVersion", "intendedRequest", "requestedTtlSeconds" ], "type": "object" }, "NpcSharedOperationProofInput": { "oneOf": [ { "additionalProperties": false, "properties": { "intendedRequest": { "$ref": "#/components/schemas/SharedNpcMemorySubmitInput" }, "operationPath": { "const": "/api/matm/npc-shared-memory/records" }, "requestedTtlSeconds": { "maximum": 300, "minimum": 30, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_operation_proof_request.v1" } }, "required": [ "schemaVersion", "operationPath", "intendedRequest", "requestedTtlSeconds" ], "type": "object" }, { "additionalProperties": false, "properties": { "intendedRequest": { "$ref": "#/components/schemas/SharedNpcMemorySearchInput" }, "operationPath": { "const": "/api/matm/npc-shared-memory/search" }, "requestedTtlSeconds": { "maximum": 300, "minimum": 30, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_operation_proof_request.v1" } }, "required": [ "schemaVersion", "operationPath", "intendedRequest", "requestedTtlSeconds" ], "type": "object" }, { "additionalProperties": false, "properties": { "intendedRequest": { "$ref": "#/components/schemas/SharedNpcMemoryReadbackInput" }, "operationPath": { "const": "/api/matm/npc-shared-memory/readback" }, "requestedTtlSeconds": { "maximum": 300, "minimum": 30, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_operation_proof_request.v1" } }, "required": [ "schemaVersion", "operationPath", "intendedRequest", "requestedTtlSeconds" ], "type": "object" } ] }, "OneTimeCredentialFlags": { "additionalProperties": false, "properties": { "credentialDeliveredToAuthorizedRecipient": { "const": true }, "rawCredentialPersisted": { "const": false }, "showCredentialOnce": { "const": true } }, "required": [ "credentialDeliveredToAuthorizedRecipient", "rawCredentialPersisted", "showCredentialOnce" ], "type": "object" }, "PublicJsonObject": { "additionalProperties": { "$ref": "#/components/schemas/PublicJsonValue" }, "description": "Recursively typed, public-safe assignment metadata after server redaction.", "type": "object" }, "PublicJsonValue": { "oneOf": [ { "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "items": { "$ref": "#/components/schemas/PublicJsonValue" }, "type": "array" }, { "$ref": "#/components/schemas/PublicJsonObject" } ] }, "SafeEnvelope": { "properties": { "ok": { "type": "boolean" }, "rawCredentialExposed": { "type": "boolean" }, "rawPayloadExposed": { "type": "boolean" }, "valuesRedacted": { "type": "boolean" } }, "type": "object" }, "SharedNpcMemoryAuthoritySnapshot": { "additionalProperties": false, "properties": { "agentNameLeaseFenceDigest": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "agentNameLeaseGeneration": { "minimum": 1, "type": "integer" }, "agentNameLeaseRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "agentRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "authorityDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "authoritySource": { "const": "canonical_fbd_authorize_shared_subject" }, "authorized": { "const": true }, "capability": { "enum": [ "consume", "read", "write" ], "type": "string" }, "childAgentActive": { "const": true }, "childAgentMatchesProfile": { "const": true }, "childPrivateNpcMemoryScopesGranted": { "const": [], "items": { "type": "string" }, "maxItems": 0, "type": "array" }, "childProfileActive": { "const": true }, "grantGeneration": { "minimum": 1, "type": "integer" }, "grantRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "grantRevision": { "minimum": 0, "type": "integer" }, "hierarchyDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "hierarchyRevision": { "minimum": 0, "type": "integer" }, "hierarchySchemaVersion": { "const": "memoryendpoints.fbd_hierarchy.v2" }, "parentAccountRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "parentAuthorityIntegrityHash": { "maxLength": 64, "minLength": 64, "pattern": "^[a-f0-9]{64}$", "type": "string" }, "parentAuthorityRevision": { "minimum": 1, "type": "integer" }, "parentBindingDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "principalRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "principalType": { "const": "npc_profile" }, "projectRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "roomMemberGeneration": { "minimum": 1, "type": [ "integer", "null" ] }, "roomMemberRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": [ "string", "null" ] }, "roomMemberRevision": { "minimum": 0, "type": [ "integer", "null" ] }, "roomMembershipRevision": { "minimum": 0, "type": [ "integer", "null" ] }, "rosterMembershipGeneration": { "minimum": 1, "type": "integer" }, "rosterMembershipRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "rosterMembershipRevision": { "minimum": 0, "type": "integer" }, "rosterRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "rosterRevision": { "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_memory_authority_snapshot.v1" }, "siteOrigin": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "subjectLineageDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "subjectRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "subjectRevision": { "minimum": 0, "type": "integer" }, "valuesRedacted": { "const": true }, "workspaceRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" } }, "required": [ "agentNameLeaseFenceDigest", "agentNameLeaseGeneration", "agentNameLeaseRef", "agentRef", "authorityDigest", "authoritySource", "authorized", "capability", "childAgentActive", "childAgentMatchesProfile", "childPrivateNpcMemoryScopesGranted", "childProfileActive", "grantGeneration", "grantRef", "grantRevision", "hierarchyDigest", "hierarchyRevision", "hierarchySchemaVersion", "parentAccountRef", "parentAuthorityIntegrityHash", "parentAuthorityRevision", "parentBindingDigest", "principalRef", "principalType", "projectRef", "rawCredentialExposed", "rawPayloadExposed", "roomMemberGeneration", "roomMemberRef", "roomMemberRevision", "roomMembershipRevision", "rosterMembershipGeneration", "rosterMembershipRef", "rosterMembershipRevision", "rosterRef", "rosterRevision", "schemaVersion", "siteOrigin", "subjectLineageDigest", "subjectRef", "subjectRevision", "valuesRedacted", "workspaceRef" ], "type": "object" }, "SharedNpcMemoryProblem": { "oneOf": [ { "additionalProperties": false, "properties": { "error": { "additionalProperties": false, "properties": { "code": { "enum": [ "commercial_authority_commit_outcome_uncertain", "commercial_authority_retryable_unavailable", "commercial_hierarchy_store_unavailable", "commercial_schema_upgrade_required", "idempotency_conflict", "idempotency_key_invalid", "idempotency_key_required", "invalid_json", "invalid_token", "json_content_type_required", "method_not_allowed", "npc_authority_handoff_ambiguous", "npc_authority_handoff_not_found", "npc_authority_receipt_audit_invariant_invalid", "npc_authority_receipt_authority_stale", "npc_authority_receipt_binding_mismatch", "npc_authority_receipt_exchanged", "npc_authority_receipt_expired", "npc_authority_receipt_idempotency_conflict", "npc_authority_receipt_invalid", "npc_authority_receipt_key_version_unsupported", "npc_authority_receipt_operation_mismatch", "npc_authority_receipt_request_invalid", "npc_authority_receipt_required", "npc_authority_receipt_revoked", "npc_authority_receipt_share_class_mismatch", "npc_authority_receipt_signing_unavailable", "npc_binding_unavailable", "npc_capability_forbidden", "npc_entitlement_inactive", "npc_gateway_credential_required", "npc_operation_proof_authority_stale", "npc_operation_proof_binding_mismatch", "npc_operation_proof_expired", "npc_operation_proof_invalid", "npc_operation_proof_key_version_unsupported", "npc_operation_proof_operation_mismatch", "npc_operation_proof_request_invalid", "npc_operation_proof_request_mismatch", "npc_operation_proof_required", "npc_operation_proof_signing_unavailable", "npc_rate_limit_unavailable", "npc_runtime_credential_required", "rate_limited", "request_body_invalid", "request_body_too_large", "shared_npc_memory_authority_denied", "shared_npc_memory_authority_snapshot_invalid", "shared_npc_memory_child_agent_mismatch", "shared_npc_memory_child_inactive", "shared_npc_memory_cursor_invalid", "shared_npc_memory_digest_stale", "shared_npc_memory_grant_stale", "shared_npc_memory_hierarchy_stale", "shared_npc_memory_parent_as_child_forbidden", "shared_npc_memory_parent_authority_stale", "shared_npc_memory_parent_mismatch", "shared_npc_memory_principal_forbidden", "shared_npc_memory_private_payload_forbidden", "shared_npc_memory_private_room_stale", "shared_npc_memory_private_scope_forbidden", "shared_npc_memory_project_mismatch", "shared_npc_memory_public_content_invalid", "shared_npc_memory_record_conflict", "shared_npc_memory_record_invalid", "shared_npc_memory_record_not_found", "shared_npc_memory_request_invalid", "shared_npc_memory_roster_stale", "shared_npc_memory_route_not_found", "shared_npc_memory_route_request_invalid", "shared_npc_memory_search_invalid", "shared_npc_memory_serialization_invalid", "shared_npc_memory_storage_invariant_invalid", "shared_npc_memory_store_unavailable", "shared_npc_memory_subject_stale" ], "type": "string" }, "detail": { "maxLength": 2000, "minLength": 1, "type": "string" }, "safeNoOp": { "const": true }, "title": { "maxLength": 255, "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "code", "title", "detail", "safeNoOp", "valuesRedacted" ], "type": "object" }, "ok": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "safeNoOp": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ], "type": "object" }, { "additionalProperties": false, "properties": { "error": { "additionalProperties": false, "properties": { "code": { "enum": [ "commercial_authority_commit_outcome_uncertain", "commercial_authority_retryable_unavailable", "commercial_hierarchy_store_unavailable", "commercial_schema_upgrade_required", "idempotency_conflict", "idempotency_key_invalid", "idempotency_key_required", "invalid_json", "invalid_token", "json_content_type_required", "method_not_allowed", "npc_authority_handoff_ambiguous", "npc_authority_handoff_not_found", "npc_authority_receipt_audit_invariant_invalid", "npc_authority_receipt_authority_stale", "npc_authority_receipt_binding_mismatch", "npc_authority_receipt_exchanged", "npc_authority_receipt_expired", "npc_authority_receipt_idempotency_conflict", "npc_authority_receipt_invalid", "npc_authority_receipt_key_version_unsupported", "npc_authority_receipt_operation_mismatch", "npc_authority_receipt_request_invalid", "npc_authority_receipt_required", "npc_authority_receipt_revoked", "npc_authority_receipt_share_class_mismatch", "npc_authority_receipt_signing_unavailable", "npc_binding_unavailable", "npc_capability_forbidden", "npc_entitlement_inactive", "npc_gateway_credential_required", "npc_operation_proof_authority_stale", "npc_operation_proof_binding_mismatch", "npc_operation_proof_expired", "npc_operation_proof_invalid", "npc_operation_proof_key_version_unsupported", "npc_operation_proof_operation_mismatch", "npc_operation_proof_request_invalid", "npc_operation_proof_request_mismatch", "npc_operation_proof_required", "npc_operation_proof_signing_unavailable", "npc_rate_limit_unavailable", "npc_runtime_credential_required", "rate_limited", "request_body_invalid", "request_body_too_large", "shared_npc_memory_authority_denied", "shared_npc_memory_authority_snapshot_invalid", "shared_npc_memory_child_agent_mismatch", "shared_npc_memory_child_inactive", "shared_npc_memory_cursor_invalid", "shared_npc_memory_digest_stale", "shared_npc_memory_grant_stale", "shared_npc_memory_hierarchy_stale", "shared_npc_memory_parent_as_child_forbidden", "shared_npc_memory_parent_authority_stale", "shared_npc_memory_parent_mismatch", "shared_npc_memory_principal_forbidden", "shared_npc_memory_private_payload_forbidden", "shared_npc_memory_private_room_stale", "shared_npc_memory_private_scope_forbidden", "shared_npc_memory_project_mismatch", "shared_npc_memory_public_content_invalid", "shared_npc_memory_record_conflict", "shared_npc_memory_record_invalid", "shared_npc_memory_record_not_found", "shared_npc_memory_request_invalid", "shared_npc_memory_roster_stale", "shared_npc_memory_route_not_found", "shared_npc_memory_route_request_invalid", "shared_npc_memory_search_invalid", "shared_npc_memory_serialization_invalid", "shared_npc_memory_storage_invariant_invalid", "shared_npc_memory_store_unavailable", "shared_npc_memory_subject_stale" ], "type": "string" }, "detail": { "maxLength": 2000, "minLength": 1, "type": "string" }, "outcomeUncertain": { "const": true }, "reconcileRequired": { "const": true }, "safeNoOp": { "const": false }, "title": { "maxLength": 255, "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "code", "title", "detail", "safeNoOp", "outcomeUncertain", "reconcileRequired", "valuesRedacted" ], "type": "object" }, "ok": { "const": false }, "outcomeUncertain": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reconcileRequired": { "const": true }, "safeNoOp": { "const": false }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "outcomeUncertain", "reconcileRequired", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ], "type": "object" } ], "properties": { "error": { "properties": { "code": { "enum": [ "commercial_authority_commit_outcome_uncertain", "commercial_authority_retryable_unavailable", "commercial_hierarchy_store_unavailable", "commercial_schema_upgrade_required", "idempotency_conflict", "idempotency_key_invalid", "idempotency_key_required", "invalid_json", "invalid_token", "json_content_type_required", "method_not_allowed", "npc_authority_handoff_ambiguous", "npc_authority_handoff_not_found", "npc_authority_receipt_audit_invariant_invalid", "npc_authority_receipt_authority_stale", "npc_authority_receipt_binding_mismatch", "npc_authority_receipt_exchanged", "npc_authority_receipt_expired", "npc_authority_receipt_idempotency_conflict", "npc_authority_receipt_invalid", "npc_authority_receipt_key_version_unsupported", "npc_authority_receipt_operation_mismatch", "npc_authority_receipt_request_invalid", "npc_authority_receipt_required", "npc_authority_receipt_revoked", "npc_authority_receipt_share_class_mismatch", "npc_authority_receipt_signing_unavailable", "npc_binding_unavailable", "npc_capability_forbidden", "npc_entitlement_inactive", "npc_gateway_credential_required", "npc_operation_proof_authority_stale", "npc_operation_proof_binding_mismatch", "npc_operation_proof_expired", "npc_operation_proof_invalid", "npc_operation_proof_key_version_unsupported", "npc_operation_proof_operation_mismatch", "npc_operation_proof_request_invalid", "npc_operation_proof_request_mismatch", "npc_operation_proof_required", "npc_operation_proof_signing_unavailable", "npc_rate_limit_unavailable", "npc_runtime_credential_required", "rate_limited", "request_body_invalid", "request_body_too_large", "shared_npc_memory_authority_denied", "shared_npc_memory_authority_snapshot_invalid", "shared_npc_memory_child_agent_mismatch", "shared_npc_memory_child_inactive", "shared_npc_memory_cursor_invalid", "shared_npc_memory_digest_stale", "shared_npc_memory_grant_stale", "shared_npc_memory_hierarchy_stale", "shared_npc_memory_parent_as_child_forbidden", "shared_npc_memory_parent_authority_stale", "shared_npc_memory_parent_mismatch", "shared_npc_memory_principal_forbidden", "shared_npc_memory_private_payload_forbidden", "shared_npc_memory_private_room_stale", "shared_npc_memory_private_scope_forbidden", "shared_npc_memory_project_mismatch", "shared_npc_memory_public_content_invalid", "shared_npc_memory_record_conflict", "shared_npc_memory_record_invalid", "shared_npc_memory_record_not_found", "shared_npc_memory_request_invalid", "shared_npc_memory_roster_stale", "shared_npc_memory_route_not_found", "shared_npc_memory_route_request_invalid", "shared_npc_memory_search_invalid", "shared_npc_memory_serialization_invalid", "shared_npc_memory_storage_invariant_invalid", "shared_npc_memory_store_unavailable", "shared_npc_memory_subject_stale" ], "type": "string" }, "detail": { "maxLength": 2000, "minLength": 1, "type": "string" }, "safeNoOp": { "type": "boolean" }, "title": { "maxLength": 255, "minLength": 1, "type": "string" }, "valuesRedacted": { "const": true } } }, "ok": { "const": false }, "outcomeUncertain": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "reconcileRequired": { "const": true }, "safeNoOp": { "type": "boolean" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ] }, "SharedNpcMemoryProvenance": { "additionalProperties": false, "properties": { "actorClass": { "const": "npc_profile" }, "agentNameLeaseFenceDigest": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "agentNameLeaseGeneration": { "minimum": 1, "type": "integer" }, "agentNameLeaseRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "agentRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "authoritySnapshotDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "capability": { "const": "write" }, "grantGeneration": { "minimum": 1, "type": "integer" }, "grantRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "hierarchyDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "parentAuthorityIntegrityHash": { "maxLength": 64, "minLength": 64, "pattern": "^[a-f0-9]{64}$", "type": "string" }, "parentAuthorityRevision": { "minimum": 1, "type": "integer" }, "principalRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "roomMemberGeneration": { "minimum": 1, "type": [ "integer", "null" ] }, "roomMemberRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": [ "string", "null" ] }, "rosterMembershipGeneration": { "minimum": 1, "type": "integer" }, "rosterMembershipRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "subjectRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" } }, "required": [ "actorClass", "agentNameLeaseFenceDigest", "agentNameLeaseGeneration", "agentNameLeaseRef", "agentRef", "authoritySnapshotDigest", "capability", "grantGeneration", "grantRef", "hierarchyDigest", "parentAuthorityIntegrityHash", "parentAuthorityRevision", "principalRef", "roomMemberGeneration", "roomMemberRef", "rosterMembershipGeneration", "rosterMembershipRef", "subjectRef" ], "type": "object" }, "SharedNpcMemoryPublicContent": { "additionalProperties": false, "properties": { "createdAt": { "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d{1,6})?(?:Z|[+-]\\d{2}:\\d{2})$", "type": "string" }, "payloadClass": { "const": "public_safe" }, "recordId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "sourceUri": { "maxLength": 512, "minLength": 1, "type": "string" }, "summary": { "maxLength": 4000, "minLength": 1, "type": "string" }, "tags": { "items": { "maxLength": 96, "minLength": 1, "type": "string" }, "maxItems": 20, "type": "array", "uniqueItems": true, "x-canonicalOrder": "ascending_unique" }, "title": { "maxLength": 255, "minLength": 1, "type": "string" } }, "required": [ "createdAt", "payloadClass", "recordId", "sourceUri", "summary", "tags", "title" ], "type": "object" }, "SharedNpcMemoryPublicRecord": { "additionalProperties": false, "properties": { "authoritySnapshot": { "$ref": "#/components/schemas/SharedNpcMemoryAuthoritySnapshot" }, "childPrivateNpcMemoryScopesGranted": { "const": [], "items": { "type": "string" }, "maxItems": 0, "type": "array" }, "immutable": { "const": true }, "parentAccountRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "projectRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "provenance": { "$ref": "#/components/schemas/SharedNpcMemoryProvenance" }, "publicContent": { "$ref": "#/components/schemas/SharedNpcMemoryPublicContent" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "recordDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "recordId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_memory_public_record.v1" }, "subjectRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" }, "valuesRedacted": { "const": true }, "visibility": { "const": "shared_subject_public_safe" }, "workspaceRef": { "maxLength": 128, "minLength": 84, "pattern": "^npcmem-ref-v1:[a-z][a-z0-9_]{2,47}:[a-f0-9]{64}$", "type": "string" } }, "required": [ "authoritySnapshot", "childPrivateNpcMemoryScopesGranted", "immutable", "parentAccountRef", "projectRef", "provenance", "publicContent", "rawCredentialExposed", "rawPayloadExposed", "recordDigest", "recordId", "schemaVersion", "subjectRef", "valuesRedacted", "visibility", "workspaceRef" ], "type": "object" }, "SharedNpcMemoryReadbackInput": { "additionalProperties": false, "properties": { "authorityReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "recordId": { "maxLength": 256, "minLength": 3, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$", "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_memory_readback_request.v2" } }, "required": [ "authorityReceipt", "recordId", "schemaVersion" ], "type": "object" }, "SharedNpcMemoryReadbackResult": { "additionalProperties": false, "properties": { "childPrivateNpcMemoryScopesGranted": { "const": [], "items": { "type": "string" }, "maxItems": 0, "type": "array" }, "currentAuthoritySnapshot": { "$ref": "#/components/schemas/SharedNpcMemoryAuthoritySnapshot" }, "historicalAuthoritySnapshotProvenanceOnly": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readbackDigest": { "maxLength": 74, "minLength": 74, "pattern": "^sha256-v1:[a-f0-9]{64}$", "type": "string" }, "record": { "$ref": "#/components/schemas/SharedNpcMemoryPublicRecord" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_memory_readback.v1" }, "valuesRedacted": { "const": true } }, "required": [ "childPrivateNpcMemoryScopesGranted", "currentAuthoritySnapshot", "historicalAuthoritySnapshotProvenanceOnly", "rawCredentialExposed", "rawPayloadExposed", "readbackDigest", "record", "schemaVersion", "valuesRedacted" ], "type": "object" }, "SharedNpcMemorySearchInput": { "additionalProperties": false, "properties": { "authorityReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "cursor": { "maxLength": 4096, "pattern": "^sharedmem-cursor-v1:[A-Za-z0-9_-]+\\.[a-f0-9]{64}$", "type": [ "string", "null" ] }, "limit": { "maximum": 200, "minimum": 1, "type": "integer" }, "query": { "maxLength": 512, "minLength": 1, "type": "string" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_memory_search_request.v2" }, "tags": { "items": { "maxLength": 96, "minLength": 1, "type": "string" }, "maxItems": 20, "type": "array", "uniqueItems": true, "x-canonicalOrder": "ascending_unique" } }, "required": [ "authorityReceipt", "cursor", "limit", "query", "schemaVersion", "tags" ], "type": "object" }, "SharedNpcMemorySearchResult": { "additionalProperties": false, "properties": { "childPrivateNpcMemoryScopesGranted": { "const": [], "items": { "type": "string" }, "maxItems": 0, "type": "array" }, "currentAuthoritySnapshot": { "$ref": "#/components/schemas/SharedNpcMemoryAuthoritySnapshot" }, "historicalAuthoritySnapshotProvenanceOnly": { "const": true }, "nextCursor": { "maxLength": 4096, "pattern": "^sharedmem-cursor-v1:[A-Za-z0-9_-]+\\.[a-f0-9]{64}$", "type": [ "string", "null" ] }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "records": { "items": { "$ref": "#/components/schemas/SharedNpcMemoryPublicRecord" }, "maxItems": 200, "type": "array" }, "resultCount": { "maximum": 200, "minimum": 0, "type": "integer" }, "schemaVersion": { "const": "memoryendpoints.commercial_shared_npc_memory_search_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "childPrivateNpcMemoryScopesGranted", "currentAuthoritySnapshot", "historicalAuthoritySnapshotProvenanceOnly", "nextCursor", "rawCredentialExposed", "rawPayloadExposed", "records", "resultCount", "schemaVersion", "valuesRedacted" ], "type": "object" }, "SharedNpcMemorySubmitInput": { "additionalProperties": false, "properties": { "authorityReceipt": { "description": "Opaque operation-bound classification authority; it supplements and never replaces the current runtime bearer credential.", "maxLength": 4096, "minLength": 56, "pattern": "^npcauth-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, "publicContent": { "$ref": "#/components/schemas/SharedNpcMemoryPublicContent" }, "schemaVersion": { "const": "memoryendpoints.npc_shared_memory_submit_request.v2" } }, "required": [ "authorityReceipt", "publicContent", "schemaVersion" ], "type": "object" }, "SharedNpcMemorySubmitResult": { "additionalProperties": false, "properties": { "childPrivateNpcMemoryScopesGranted": { "const": [], "items": { "type": "string" }, "maxItems": 0, "type": "array" }, "created": { "type": "boolean" }, "durable": { "const": true }, "historicalAuthoritySnapshotProvenanceOnly": { "const": true }, "idempotentReplay": { "type": "boolean" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "record": { "$ref": "#/components/schemas/SharedNpcMemoryPublicRecord" }, "schemaVersion": { "const": "memoryendpoints.commercial_shared_npc_memory_submit_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "childPrivateNpcMemoryScopesGranted", "created", "durable", "historicalAuthoritySnapshotProvenanceOnly", "idempotentReplay", "rawCredentialExposed", "rawPayloadExposed", "record", "schemaVersion", "valuesRedacted" ], "type": "object" }, "StringCountMap": { "additionalProperties": { "minimum": 0, "type": "integer" }, "type": "object" }, "UaiLegacyEditClaim": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "agentName": { "type": "string" }, "baseContentHash": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "claimId": { "type": "string" }, "closedAt": { "format": "date-time", "type": [ "string", "null" ] }, "completionContentHash": { "pattern": "^sha256:[a-f0-9]{64}$", "type": [ "string", "null" ] }, "completionSummary": { "type": [ "string", "null" ] }, "coordinationMetadataOnly": { "const": true }, "createdAt": { "format": "date-time", "type": "string" }, "headId": { "type": "string" }, "intentSummary": { "type": "string" }, "leaseExpiresAt": { "format": "date-time", "type": "string" }, "leaseSeconds": { "maximum": 1800, "minimum": 60, "type": "integer" }, "localContentStored": { "const": false }, "logicalPath": { "type": "string" }, "projectId": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "status": { "enum": [ "active", "completed", "released", "expired" ], "type": "string" }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "claimId", "headId", "workspaceId", "projectId", "agentId", "agentName", "logicalPath", "baseContentHash", "intentSummary", "leaseSeconds", "leaseExpiresAt", "status", "completionContentHash", "completionSummary", "createdAt", "closedAt", "localContentStored", "coordinationMetadataOnly", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyEditClaimAcquireInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "baseContentHash": { "pattern": "^(?:sha256:)?[a-f0-9]{64}$", "type": "string" }, "intentSummary": { "maxLength": 1000, "minLength": 1, "type": "string" }, "leaseSeconds": { "maximum": 1800, "minimum": 60, "type": "integer" }, "logicalPath": { "type": "string" }, "projectId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "projectId", "agentId", "logicalPath", "baseContentHash", "intentSummary" ], "type": "object" }, "UaiLegacyEditClaimAcquireResult": { "additionalProperties": false, "properties": { "canonicalClaimId": { "type": "string" }, "canonicalHeadId": { "type": "string" }, "claim": { "$ref": "#/components/schemas/UaiLegacyEditClaim" }, "claimAcquired": { "const": true }, "claimQueryUrl": { "type": "string" }, "head": { "$ref": "#/components/schemas/UaiLegacyFileHead" }, "headQueryUrl": { "type": "string" }, "headRevision": { "minimum": 0, "type": "integer" }, "idempotentReplay": { "type": "boolean" }, "localContentStored": { "const": false }, "ok": { "const": true }, "persisted": { "const": true }, "projectMeetingRoomQueryUrl": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "valuesRedacted": { "const": true }, "visibleToSender": { "const": true } }, "required": [ "ok", "claim", "head", "persisted", "visibleToSender", "claimAcquired", "canonicalClaimId", "canonicalHeadId", "headRevision", "claimQueryUrl", "headQueryUrl", "projectMeetingRoomQueryUrl", "localContentStored", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyEditClaimCompleteInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "claimId": { "type": "string" }, "completionSummary": { "maxLength": 1000, "minLength": 1, "type": "string" }, "newContentHash": { "pattern": "^(?:sha256:)?[a-f0-9]{64}$", "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "agentId", "claimId", "newContentHash", "completionSummary" ], "type": "object" }, "UaiLegacyEditClaimFilters": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "logicalPath": { "type": "string" }, "projectId": { "type": "string" }, "status": { "enum": [ "active", "completed", "released", "expired" ], "type": "string" } }, "required": [], "type": "object" }, "UaiLegacyEditClaimHeartbeatInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "claimId": { "type": "string" }, "leaseSeconds": { "maximum": 1800, "minimum": 60, "type": "integer" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "agentId", "claimId" ], "type": "object" }, "UaiLegacyEditClaimListResult": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "filters": { "$ref": "#/components/schemas/UaiLegacyEditClaimFilters" }, "items": { "items": { "$ref": "#/components/schemas/UaiLegacyEditClaim" }, "type": "array" }, "localContentStored": { "const": false }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.uai_edit_claims.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "filters", "localContentStored", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyEditClaimMutationResult": { "additionalProperties": false, "properties": { "canonicalClaimId": { "type": "string" }, "canonicalHeadId": { "type": "string" }, "claim": { "$ref": "#/components/schemas/UaiLegacyEditClaim" }, "claimQueryUrl": { "type": "string" }, "head": { "$ref": "#/components/schemas/UaiLegacyFileHead" }, "headQueryUrl": { "type": "string" }, "headRevision": { "minimum": 0, "type": "integer" }, "idempotentReplay": { "type": "boolean" }, "localContentStored": { "const": false }, "ok": { "const": true }, "operation": { "enum": [ "heartbeat", "complete", "release" ], "type": "string" }, "persisted": { "const": true }, "projectMeetingRoomQueryUrl": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "valuesRedacted": { "const": true }, "visibleToSender": { "const": true } }, "required": [ "ok", "operation", "claim", "head", "persisted", "visibleToSender", "canonicalClaimId", "canonicalHeadId", "headRevision", "claimQueryUrl", "headQueryUrl", "projectMeetingRoomQueryUrl", "localContentStored", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyEditClaimReleaseInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "claimId": { "type": "string" }, "releaseSummary": { "maxLength": 1000, "minLength": 1, "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "agentId", "claimId", "releaseSummary" ], "type": "object" }, "UaiLegacyEditClaimResultFields": { "additionalProperties": false, "properties": { "canonicalClaimId": { "type": "string" }, "canonicalHeadId": { "type": "string" }, "claim": { "$ref": "#/components/schemas/UaiLegacyEditClaim" }, "claimQueryUrl": { "type": "string" }, "head": { "$ref": "#/components/schemas/UaiLegacyFileHead" }, "headQueryUrl": { "type": "string" }, "headRevision": { "minimum": 0, "type": "integer" }, "localContentStored": { "const": false }, "persisted": { "const": true }, "projectMeetingRoomQueryUrl": { "type": "string" }, "visibleToSender": { "const": true } }, "required": [ "claim", "head", "persisted", "visibleToSender", "canonicalClaimId", "canonicalHeadId", "headRevision", "claimQueryUrl", "headQueryUrl", "projectMeetingRoomQueryUrl", "localContentStored" ], "type": "object" }, "UaiLegacyFileHead": { "additionalProperties": false, "properties": { "activeAgentId": { "type": [ "string", "null" ] }, "activeClaimId": { "type": [ "string", "null" ] }, "coordinationMetadataOnly": { "const": true }, "createdAt": { "format": "date-time", "type": "string" }, "headId": { "type": "string" }, "leaseExpiresAt": { "format": "date-time", "type": [ "string", "null" ] }, "localContentStored": { "const": false }, "logicalPath": { "type": "string" }, "memoryId": { "type": "string" }, "observedContentHash": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "projectId": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 0, "type": "integer" }, "status": { "const": "tracked" }, "updatedAt": { "format": "date-time", "type": [ "string", "null" ] }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "headId", "workspaceId", "projectId", "logicalPath", "observedContentHash", "revision", "activeClaimId", "activeAgentId", "leaseExpiresAt", "status", "createdAt", "updatedAt", "localContentStored", "coordinationMetadataOnly", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyFileHeadListResult": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "items": { "items": { "$ref": "#/components/schemas/UaiLegacyFileHead" }, "type": "array" }, "localContentStored": { "const": false }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.uai_collaboration_heads.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "localContentStored", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyPackage": { "additionalProperties": false, "properties": { "activeRecordCount": { "minimum": 0, "type": "integer" }, "agentId": { "type": "string" }, "agentName": { "type": "string" }, "clientClass": { "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "invalidRequiredPaths": { "items": { "type": "string" }, "type": "array" }, "localFilesCreated": { "const": false }, "localFilesystemAvailable": { "const": false }, "missingRequiredPaths": { "items": { "type": "string" }, "type": "array" }, "packageId": { "type": "string" }, "packageType": { "type": "string" }, "profile": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readyForStartup": { "type": "boolean" }, "requiredRecordCount": { "minimum": 0, "type": "integer" }, "startupReadOrder": { "items": { "type": "string" }, "type": "array" }, "status": { "enum": [ "setup_required", "active" ], "type": "string" }, "storageMode": { "const": "protected_database_virtual_files" }, "updatedAt": { "format": "date-time", "type": [ "string", "null" ] }, "valuesRedacted": { "const": true }, "virtualFilesystem": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "packageId", "workspaceId", "agentId", "agentName", "profile", "packageType", "clientClass", "localFilesystemAvailable", "storageMode", "status", "createdAt", "updatedAt", "requiredRecordCount", "activeRecordCount", "missingRequiredPaths", "invalidRequiredPaths", "readyForStartup", "startupReadOrder", "virtualFilesystem", "localFilesCreated", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyPackageCreateInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "clientClass": { "enum": [ "accountless_browser_ai", "server_game_npc" ], "type": "string" }, "localFilesystemAvailable": { "const": false }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "agentId", "clientClass", "localFilesystemAvailable" ], "type": "object" }, "UaiLegacyPackageFilters": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "packageId": { "type": "string" } }, "required": [], "type": "object" }, "UaiLegacyPackageListResult": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "filters": { "$ref": "#/components/schemas/UaiLegacyPackageFilters" }, "items": { "items": { "$ref": "#/components/schemas/UaiLegacyPackage" }, "type": "array" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.virtual_uai_packages.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "filters", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyPackageMutationResult": { "additionalProperties": false, "properties": { "canonicalPackageId": { "type": "string" }, "created": { "type": "boolean" }, "idempotentReplay": { "type": "boolean" }, "ok": { "const": true }, "package": { "$ref": "#/components/schemas/UaiLegacyPackage" }, "packageQueryUrl": { "type": "string" }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "recordQueryUrl": { "type": "string" }, "startupQueryUrl": { "type": "string" }, "valuesRedacted": { "const": true }, "visibleToSender": { "const": true } }, "required": [ "ok", "package", "created", "persisted", "visibleToSender", "canonicalPackageId", "packageQueryUrl", "recordQueryUrl", "startupQueryUrl", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyRecord": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "content": { "type": "string" }, "contentBytes": { "minimum": 0, "type": "integer" }, "contentHash": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "dateFree": { "const": true }, "firewall": { "$ref": "#/components/schemas/UaiLegacyRecordFirewall" }, "localFileCreated": { "const": false }, "logicalPath": { "type": "string" }, "packageId": { "type": "string" }, "protectedContentIncluded": { "type": "boolean" }, "publicSafe": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "recordId": { "type": "string" }, "required": { "type": "boolean" }, "revision": { "minimum": 1, "type": "integer" }, "role": { "type": "string" }, "source": { "type": "string" }, "startupOrder": { "minimum": 0, "type": "integer" }, "status": { "const": "active" }, "title": { "type": "string" }, "updatedAt": { "format": "date-time", "type": [ "string", "null" ] }, "valuesRedacted": { "const": true }, "virtualFilesystem": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "recordId", "packageId", "workspaceId", "agentId", "logicalPath", "role", "title", "contentHash", "contentBytes", "revision", "required", "startupOrder", "status", "source", "firewall", "createdAt", "updatedAt", "protectedContentIncluded", "virtualFilesystem", "localFileCreated", "dateFree", "publicSafe", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyRecordFilters": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "logicalPath": { "type": "string" }, "packageId": { "type": "string" }, "recordId": { "type": "string" } }, "required": [], "type": "object" }, "UaiLegacyRecordFirewall": { "additionalProperties": false, "properties": { "decision": { "const": "accepted" }, "detectedThreats": { "items": { "type": "string" }, "type": "array" }, "rawPrivatePayloadStored": { "const": false }, "riskScore": { "const": 0 }, "schemaVersion": { "type": "string" } }, "required": [ "schemaVersion", "decision", "riskScore", "detectedThreats", "rawPrivatePayloadStored" ], "type": "object" }, "UaiLegacyRecordListResult": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "filters": { "$ref": "#/components/schemas/UaiLegacyRecordFilters" }, "items": { "items": { "$ref": "#/components/schemas/UaiLegacyRecord" }, "type": "array" }, "ok": { "const": true }, "protectedContentIncluded": { "type": "boolean" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revisionCount": { "minimum": 0, "type": "integer" }, "revisions": { "items": { "$ref": "#/components/schemas/UaiLegacyRevision" }, "type": "array" }, "schemaVersion": { "const": "memoryendpoints.virtual_uai_records.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "revisions", "revisionCount", "protectedContentIncluded", "filters", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyRecordMutationResult": { "additionalProperties": false, "properties": { "canonicalPackageId": { "type": "string" }, "canonicalRecordId": { "type": "string" }, "changed": { "type": "boolean" }, "contentHash": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "created": { "type": "boolean" }, "idempotentReplay": { "type": "boolean" }, "logicalPath": { "type": "string" }, "ok": { "const": true }, "package": { "$ref": "#/components/schemas/UaiLegacyPackage" }, "packageQueryUrl": { "type": "string" }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "record": { "$ref": "#/components/schemas/UaiLegacyRecord" }, "recordQueryUrl": { "type": "string" }, "revision": { "minimum": 1, "type": "integer" }, "startupQueryUrl": { "type": "string" }, "valuesRedacted": { "const": true }, "visibleToSender": { "const": true } }, "required": [ "ok", "record", "package", "created", "changed", "persisted", "visibleToSender", "canonicalPackageId", "canonicalRecordId", "logicalPath", "revision", "contentHash", "packageQueryUrl", "recordQueryUrl", "startupQueryUrl", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyRecordUpsertInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "content": { "type": "string" }, "expectedRevision": { "minimum": 0, "type": "integer" }, "logicalPath": { "type": "string" }, "packageId": { "type": "string" }, "title": { "type": [ "string", "null" ] }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "agentId", "packageId", "logicalPath", "content" ], "type": "object" }, "UaiLegacyRevision": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "content": { "type": "string" }, "contentHash": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "createdAt": { "format": "date-time", "type": "string" }, "logicalPath": { "type": "string" }, "packageId": { "type": "string" }, "protectedContentIncluded": { "type": "boolean" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "recordId": { "type": "string" }, "revision": { "minimum": 1, "type": "integer" }, "revisionId": { "type": "string" }, "title": { "type": "string" }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "revisionId", "recordId", "packageId", "workspaceId", "agentId", "logicalPath", "revision", "title", "contentHash", "createdAt", "protectedContentIncluded", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyStartup": { "additionalProperties": false, "properties": { "invalidRequiredPaths": { "items": { "type": "string" }, "type": "array" }, "missingRequiredPaths": { "items": { "type": "string" }, "type": "array" }, "package": { "$ref": "#/components/schemas/UaiLegacyPackage" }, "partialStartupAllowed": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "readyForStartup": { "type": "boolean" }, "recordCount": { "minimum": 0, "type": "integer" }, "records": { "items": { "$ref": "#/components/schemas/UaiLegacyRecord" }, "type": "array" }, "schemaVersion": { "const": "memoryendpoints.virtual_uai_startup.v1" }, "startupReadOrder": { "items": { "type": "string" }, "type": "array" }, "valuesRedacted": { "const": true } }, "required": [ "schemaVersion", "package", "records", "recordCount", "startupReadOrder", "missingRequiredPaths", "invalidRequiredPaths", "readyForStartup", "partialStartupAllowed", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiLegacyStartupResult": { "additionalProperties": false, "properties": { "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "startup": { "$ref": "#/components/schemas/UaiLegacyStartup" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "startup", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryBranchInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "expectedParentEtag": { "pattern": "^uai-etag-[a-f0-9]{64}$", "type": "string" }, "expectedParentRevision": { "minimum": 0, "type": "integer" }, "leaseSeconds": { "maximum": 1800, "minimum": 60, "type": "integer" }, "parentMemoryId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "parentMemoryId", "agentId", "expectedParentRevision" ], "type": "object" }, "UaiMemoryBranchResult": { "additionalProperties": false, "properties": { "branchCreated": { "const": true }, "lease": { "$ref": "#/components/schemas/UaiMemoryLease" }, "memory": { "$ref": "#/components/schemas/UaiMemoryInstance" }, "ok": { "const": true }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.uai_memory_branch_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "memory", "lease", "branchCreated", "persisted", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryCommitInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "expectedEtag": { "pattern": "^uai-etag-[a-f0-9]{64}$", "type": "string" }, "expectedRevision": { "minimum": 0, "type": "integer" }, "leaseGeneration": { "minimum": 0, "type": "integer" }, "leaseId": { "type": "string" }, "memoryId": { "type": "string" }, "newContentHash": { "pattern": "^(sha256:)?[a-f0-9]{64}$", "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "memoryId", "agentId", "leaseId", "leaseGeneration", "expectedRevision", "newContentHash" ], "type": "object" }, "UaiMemoryCommitResult": { "additionalProperties": false, "properties": { "committed": { "const": true }, "lease": { "$ref": "#/components/schemas/UaiMemoryLease" }, "memory": { "$ref": "#/components/schemas/UaiMemoryInstance" }, "ok": { "const": true }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.uai_memory_commit_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "memory", "lease", "committed", "persisted", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryInstance": { "additionalProperties": false, "properties": { "branchCreatedByAgentId": { "type": [ "string", "null" ] }, "coordinationMetadataOnly": { "const": true }, "createdAt": { "format": "date-time", "type": "string" }, "etag": { "pattern": "^uai-etag-[a-f0-9]{64}$", "type": "string" }, "identityKind": { "enum": [ "canonical", "branch" ], "type": "string" }, "leaseGeneration": { "minimum": 0, "type": "integer" }, "lineageImmutable": { "const": true }, "localContentStored": { "const": false }, "logicalPath": { "pattern": "^\\.uai/.+\\.uai$", "type": "string" }, "memoryId": { "pattern": "^uaimem-", "type": "string" }, "observedContentHash": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" }, "parentMemoryId": { "type": [ "string", "null" ] }, "parentRevision": { "minimum": 0, "type": [ "integer", "null" ] }, "projectId": { "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "revision": { "minimum": 0, "type": "integer" }, "status": { "const": "active" }, "updatedAt": { "format": "date-time", "type": [ "string", "null" ] }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "memoryId", "workspaceId", "projectId", "logicalPath", "identityKind", "parentMemoryId", "parentRevision", "branchCreatedByAgentId", "observedContentHash", "revision", "etag", "leaseGeneration", "status", "createdAt", "updatedAt", "localContentStored", "coordinationMetadataOnly", "lineageImmutable", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryInstanceCreateInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "logicalPath": { "pattern": "^\\.uai/.+\\.uai$", "type": "string" }, "observedContentHash": { "pattern": "^(sha256:)?[a-f0-9]{64}$", "type": "string" }, "projectId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "projectId", "agentId", "logicalPath", "observedContentHash" ], "type": "object" }, "UaiMemoryInstanceCreateResult": { "additionalProperties": false, "properties": { "canonicalMemoryId": { "type": "string" }, "created": { "type": "boolean" }, "memory": { "$ref": "#/components/schemas/UaiMemoryInstance" }, "ok": { "const": true }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.uai_memory_instance_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "memory", "created", "persisted", "canonicalMemoryId", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryInstanceList": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "items": { "items": { "$ref": "#/components/schemas/UaiMemoryInstance" }, "type": "array" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.uai_memory_instances.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryLease": { "additionalProperties": false, "properties": { "accessMode": { "enum": [ "writable", "readonly" ], "type": "string" }, "acquiredAt": { "format": "date-time", "type": "string" }, "agentId": { "type": "string" }, "agentName": { "type": "string" }, "coordinationMetadataOnly": { "const": true }, "expiresAt": { "format": "date-time", "type": "string" }, "fencingToken": { "minimum": 0, "type": "integer" }, "leaseGeneration": { "minimum": 0, "type": "integer" }, "leaseId": { "pattern": "^uailease-", "type": "string" }, "leaseSeconds": { "maximum": 1800, "minimum": 60, "type": "integer" }, "localContentStored": { "const": false }, "memoryId": { "pattern": "^uaimem-", "type": "string" }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "releasedAt": { "format": "date-time", "type": [ "string", "null" ] }, "renewedAt": { "format": "date-time", "type": "string" }, "status": { "enum": [ "active", "expired", "released" ], "type": "string" }, "valuesRedacted": { "const": true }, "workspaceId": { "type": "string" } }, "required": [ "leaseId", "memoryId", "workspaceId", "agentId", "agentName", "leaseGeneration", "fencingToken", "accessMode", "leaseSeconds", "acquiredAt", "renewedAt", "expiresAt", "status", "releasedAt", "localContentStored", "coordinationMetadataOnly", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryLeaseAcquireInput": { "additionalProperties": false, "properties": { "accessMode": { "enum": [ "writable", "readonly" ], "type": "string" }, "agentId": { "type": "string" }, "leaseSeconds": { "maximum": 1800, "minimum": 60, "type": "integer" }, "memoryId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "memoryId", "agentId", "accessMode" ], "type": "object" }, "UaiMemoryLeaseList": { "additionalProperties": false, "properties": { "count": { "minimum": 0, "type": "integer" }, "items": { "items": { "$ref": "#/components/schemas/UaiMemoryLease" }, "type": "array" }, "ok": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.uai_memory_leases.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "items", "count", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryLeaseReleaseInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "leaseGeneration": { "minimum": 0, "type": "integer" }, "leaseId": { "type": "string" }, "memoryId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "memoryId", "agentId", "leaseId", "leaseGeneration" ], "type": "object" }, "UaiMemoryLeaseRenewInput": { "additionalProperties": false, "properties": { "agentId": { "type": "string" }, "leaseGeneration": { "minimum": 0, "type": "integer" }, "leaseId": { "type": "string" }, "leaseSeconds": { "maximum": 1800, "minimum": 60, "type": "integer" }, "memoryId": { "type": "string" }, "workspaceId": { "type": "string" } }, "required": [ "workspaceId", "memoryId", "agentId", "leaseId", "leaseGeneration" ], "type": "object" }, "UaiMemoryLeaseResult": { "additionalProperties": false, "properties": { "lease": { "$ref": "#/components/schemas/UaiMemoryLease" }, "leaseAcquired": { "const": true }, "memory": { "$ref": "#/components/schemas/UaiMemoryInstance" }, "ok": { "const": true }, "persisted": { "const": true }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "schemaVersion": { "const": "memoryendpoints.uai_memory_lease_result.v1" }, "valuesRedacted": { "const": true } }, "required": [ "ok", "schemaVersion", "memory", "lease", "persisted", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed" ], "type": "object" }, "UaiMemoryProblem": { "additionalProperties": false, "properties": { "error": { "additionalProperties": false, "properties": { "code": { "type": "string" }, "detail": { "type": "string" }, "details": { "oneOf": [ { "additionalProperties": false, "type": "object" }, { "additionalProperties": false, "properties": { "memory": { "$ref": "#/components/schemas/UaiMemoryInstance" } }, "required": [ "memory" ], "type": "object" }, { "additionalProperties": false, "properties": { "activeLease": { "$ref": "#/components/schemas/UaiMemoryLease" } }, "required": [ "activeLease" ], "type": "object" }, { "additionalProperties": false, "properties": { "currentEtag": { "type": "string" }, "currentRevision": { "minimum": 0, "type": "integer" } }, "required": [ "currentRevision", "currentEtag" ], "type": "object" }, { "additionalProperties": false, "properties": { "currentEtag": { "type": "string" }, "currentRevision": { "minimum": 0, "type": "integer" }, "memoryId": { "pattern": "^uaimem-", "type": "string" }, "requiredAction": { "enum": [ "acquire_uai_memory_lease", "release_legacy_claim_then_reacquire_uai_memory_lease" ], "type": "string" } }, "required": [ "memoryId", "currentRevision", "currentEtag", "requiredAction" ], "type": "object" }, { "additionalProperties": false, "properties": { "currentLeaseGeneration": { "minimum": 0, "type": "integer" } }, "required": [ "currentLeaseGeneration" ], "type": "object" }, { "additionalProperties": false, "properties": { "leaseStatus": { "type": "string" } }, "required": [ "leaseStatus" ], "type": "object" }, { "additionalProperties": false, "properties": { "memoryStatus": { "type": "string" } }, "required": [ "memoryStatus" ], "type": "object" }, { "additionalProperties": false, "properties": { "claimId": { "type": "string" } }, "required": [ "claimId" ], "type": "object" }, { "additionalProperties": false, "properties": { "unexpectedFields": { "items": { "type": "string" }, "type": "array" } }, "required": [ "unexpectedFields" ], "type": "object" }, { "additionalProperties": false, "properties": { "missingFields": { "items": { "type": "string" }, "type": "array" } }, "required": [ "missingFields" ], "type": "object" }, { "additionalProperties": false, "properties": { "currentContentHash": { "pattern": "^sha256:[a-f0-9]{64}$", "type": "string" } }, "required": [ "currentContentHash" ], "type": "object" } ] }, "safeNoOp": { "const": true }, "title": { "type": "string" }, "valuesRedacted": { "const": true } }, "required": [ "code", "title", "detail", "safeNoOp", "valuesRedacted" ], "type": "object" }, "ok": { "const": false }, "rawCredentialExposed": { "const": false }, "rawPayloadExposed": { "const": false }, "safeNoOp": { "const": true }, "valuesRedacted": { "const": true } }, "required": [ "ok", "safeNoOp", "valuesRedacted", "rawCredentialExposed", "rawPayloadExposed", "error" ], "type": "object" } }, "securitySchemes": { "adminDiagnosticsBearer": { "description": "Dedicated diagnostics credential; never an NPC or company credential.", "scheme": "bearer", "type": "http" }, "companyMasterBearer": { "bearerFormat": "company_master", "description": "Individually identified company-master machine credential used for authorized access administration, including audited registration of a client-generated sibling master. Never share it with ordinary or disposable agents.", "scheme": "bearer", "type": "http" }, "humanSession": { "description": "Opaque authenticated human account session with selected company membership. Mutations also require same-origin checks, Fetch Metadata, recent password reauthentication when specified, and X-CSRF-Token.", "in": "cookie", "name": "__Host-memoryendpoints-human", "type": "apiKey" }, "npcGatewayBearer": { "description": "Project-bound game-service gateway credential.", "scheme": "bearer", "type": "http" }, "npcRuntimeBearer": { "bearerFormat": "npc_runtime_token", "description": "Exact active child-NPC runtime credential. Shared-memory operations revalidate current parent and FBD authority transactionally.", "scheme": "bearer", "type": "http" }, "workspaceBearer": { "description": "Workspace key supplied by the user; never echo or log.", "scheme": "bearer", "type": "http" }, "workspaceHeader": { "description": "Alternate workspace key header for browser clients.", "in": "header", "name": "X-MemoryEndpoints-Key", "type": "apiKey" } } }, "info": { "summary": "Bounded public-safe OpenAPI-style schema for setup, hosted memory, coordination, receipts, audit, and discovery.", "title": "MemoryEndpoints MATM Golden Path API", "version": "0.2.0" }, "openapi": "3.1.0", "paths": { "/api/admin/commercial-schema": { "get": { "description": "Returns only migration version/checksum, missing schema identifiers, and a store fingerprint.", "responses": { "200": { "description": "Public-safe redacted result." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "adminDiagnosticsBearer": [] } ], "summary": "Read commercial schema readiness" }, "post": { "description": "Runs duplicate preflight and applies only the build's exact version/checksum migration.", "parameters": [ { "description": "Exact retries replay; changed reuse conflicts. Never put credentials in this key.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "description": "Public-safe redacted result." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "adminDiagnosticsBearer": [] } ], "summary": "Apply exact commercial schema migration" } }, "/api/matm/access/agent-name-leases/{agentName}": { "get": { "description": "An ordinary agent may read its own normalized name; a company master may inspect public-safe lease state before recovery.", "parameters": [ { "in": "path", "name": "agentName", "required": true, "schema": { "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$", "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseStatusResult" } } }, "description": "Typed lease status and exact concurrency ETag." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Current governed bearer required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The principal lacks holder or company-master authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "No retained lease state exists." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Generation, revision, or If-Match conflict." }, "410": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The authenticated holder is stale after expiry or takeover." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The closed request schema is invalid." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Another governed identity owns the active name." } }, "security": [ { "companyMasterBearer": [] }, { "workspaceBearer": [] } ], "summary": "Read exact governed agent-name lease status" } }, "/api/matm/access/agent-name-leases/{agentName}/recover": { "post": { "description": "Company-master-only exact recovery. An active lease owned by another company returns 423 without holder identifiers.", "parameters": [ { "in": "path", "name": "agentName", "required": true, "schema": { "type": "string" } }, { "in": "header", "name": "If-Match", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseRecoveryInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseMutationResult" } } }, "description": "Lease and former holder authority safely retired." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Current governed bearer required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The principal lacks holder or company-master authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "No retained lease state exists." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Generation, revision, or If-Match conflict." }, "410": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The authenticated holder is stale after expiry or takeover." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The closed request schema is invalid." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Another governed identity owns the active name." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "Recover a company-owned or inactive name lease" } }, "/api/matm/access/agent-name-leases/{agentName}/release": { "post": { "description": "Requires the exact current generation, revision, If-Match, credential, and hidden fencing-token binding.", "parameters": [ { "in": "path", "name": "agentName", "required": true, "schema": { "type": "string" } }, { "in": "header", "name": "If-Match", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseReleaseInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseMutationResult" } } }, "description": "Lease released; the old token immediately fails lease-bound authentication." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Current governed bearer required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The principal lacks holder or company-master authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "No retained lease state exists." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Generation, revision, or If-Match conflict." }, "410": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The authenticated holder is stale after expiry or takeover." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The closed request schema is invalid." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Another governed identity owns the active name." } }, "security": [ { "workspaceBearer": [] } ], "summary": "Release the calling ordinary agent's name lease" } }, "/api/matm/access/agent-name-leases/{agentName}/renew": { "post": { "description": "Requires exact expectedGeneration, expectedRevision, and matching If-Match. Authentication also proves the unexposed fencing token.", "parameters": [ { "in": "path", "name": "agentName", "required": true, "schema": { "type": "string" } }, { "in": "header", "name": "If-Match", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseRenewInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseMutationResult" } } }, "description": "Lease renewed and revision incremented." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Current governed bearer required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The principal lacks holder or company-master authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "No retained lease state exists." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Generation, revision, or If-Match conflict." }, "410": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The authenticated holder is stale after expiry or takeover." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The closed request schema is invalid." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "Another governed identity owns the active name." } }, "security": [ { "workspaceBearer": [] } ], "summary": "Renew the calling ordinary agent's name lease" } }, "/api/matm/access/agent-name-requests": { "get": { "description": "List redacted request metadata, optionally filtered by status.", "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameRequestListResult" } } }, "description": "Redacted governed-access metadata." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "List agent-name requests", "x-noRedirects": true, "x-rawCredentialExposed": false }, "post": { "description": "Creates no credential. Idempotency-Key is required because the public-safe response can be replayed without persisting secret material.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameRequestInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameRequestMutationResult" } } }, "description": "Public-safe governed-access result; exact retries replay this response." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "Request a governed agent name", "x-idempotency": "required_public_safe_replay", "x-noRedirects": true, "x-rawCredentialPersisted": false } }, "/api/matm/access/agent-name-requests/{requestId}/decision": { "post": { "description": "Approve or deny one pending request. Exact retries replay the public-safe decision metadata.", "parameters": [ { "in": "path", "name": "requestId", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameDecisionInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameRequestMutationResult" } } }, "description": "Public-safe governed-access result; exact retries replay this response." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "Decide an agent-name request", "x-idempotency": "required_public_safe_replay", "x-noRedirects": true, "x-rawCredentialPersisted": false } }, "/api/matm/access/agent-tokens": { "get": { "description": "Company-master-only redacted credential inventory; raw credential values and verifiers are never returned.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Redacted governed-access metadata." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "List agent credential metadata", "x-noRedirects": true, "x-rawCredentialExposed": false } }, "/api/matm/access/agent-tokens/{credentialId}/revoke": { "post": { "description": "Immediately revokes one governed agent credential. The exact key and target retry replays the public-safe revoked result.", "parameters": [ { "in": "path", "name": "credentialId", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": false }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe governed-access result; exact retries replay this response." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "Revoke an agent credential", "x-idempotency": "required_public_safe_replay", "x-noRedirects": true, "x-rawCredentialPersisted": false } }, "/api/matm/access/company-master-credentials": { "get": { "description": "Company-master-only inventory. Raw credentials and verifiers are never returned.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Redacted company-master credential metadata." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "List company-master credential metadata" }, "post": { "description": "An authenticated company master may register a delegated sibling for bounded recovery or a trusted high-level company-agent handoff. An enabled company-scoped top-level agent may register a human-operator recovery master. The candidate is generated and durably staged by the client first; the server stores only an HMAC verifier and cannot reveal plaintext later. This is not the one-time ordinary-agent invitation route. Lower-scoped agents, invite credentials, and human sessions are denied.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "additionalProperties": false, "properties": { "candidateTokenSecret": { "pattern": "^me_master_v1\\.masterkey-[0-9a-f]{20}\\.[A-Za-z0-9_-]{43}$", "type": "string", "writeOnly": true }, "label": { "maxLength": 80, "minLength": 1, "type": "string" }, "principalName": { "maxLength": 80, "minLength": 1, "type": "string" }, "schemaVersion": { "enum": [ "memoryendpoints.company_master_delegation.v1", "memoryendpoints.top_level_agent_company_master.v1" ] }, "workspaceId": { "type": "string" } }, "required": [ "schemaVersion", "workspaceId", "candidateTokenSecret", "label", "principalName" ], "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Exact idempotent replay; metadata only." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Candidate accepted and verifier stored atomically; metadata only." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] }, { "workspaceBearer": [] } ], "summary": "Register a client-generated durable sibling company master", "x-idempotency": "Exact key/body retry replays the metadata result; changed reuse is a conflict-safe no-op.", "x-noRedirects": true, "x-rawCredentialPersisted": false } }, "/api/matm/access/invites": { "get": { "description": "List current invitation IDs, request IDs, status, scope, and expiry without any raw invitation secret.", "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentInviteListResult" } } }, "description": "Redacted governed-access metadata." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "List invitation metadata", "x-noRedirects": true, "x-rawCredentialExposed": false }, "post": { "description": "Returns one fragment-only invitation URL once. Idempotency-Key is forbidden because raw invitation material is never persisted or replayed. After an unknown outcome, list metadata, revoke the issued invite idempotently, then issue a replacement from the same approved request.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentInviteIssueInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentInviteIssueResult" } } }, "description": "One-time secret response. Store it immediately; it cannot be replayed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "410": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "Issue a one-time agent invitation", "x-idempotency": "forbidden_one_time_secret_response", "x-idempotencyHeaderAllowed": false, "x-noRedirects": true, "x-rawCredentialPersisted": false } }, "/api/matm/access/invites/redeem": { "post": { "description": "Consumes the body-only invitation secret and returns one agent credential once. Idempotency-Key is forbidden; a successful response cannot be replayed.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentInviteRedeemInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentInviteRedeemResult" } } }, "description": "One-time secret response. Store it immediately; it cannot be replayed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "410": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The approved globally normalized agent name is held by another active governed identity." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [], "summary": "Redeem a one-time agent invitation", "x-idempotency": "forbidden_one_time_secret_response", "x-idempotencyHeaderAllowed": false, "x-noRedirects": true, "x-rawCredentialPersisted": false } }, "/api/matm/access/invites/{inviteId}/revoke": { "post": { "description": "Revokes an issued invitation. The exact key and target retry replays public-safe revoked metadata.", "parameters": [ { "in": "path", "name": "inviteId", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": false }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe governed-access result; exact retries replay this response." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "Revoke an invitation", "x-idempotency": "required_public_safe_replay", "x-noRedirects": true, "x-rawCredentialPersisted": false } }, "/api/matm/access/scope-catalog": { "get": { "description": "Company-master-only catalog used to choose an immutable company, workspace, project, game, session, goal, or task grant.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Redacted governed-access metadata." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "503": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] } ], "summary": "List governed grant scopes", "x-noRedirects": true, "x-rawCredentialExposed": false } }, "/api/matm/agent-compatibility": { "get": { "description": "L0-L7 agent ability levels, route-record guidance, fallback policy, and UAIX dogfood feedback.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Read agent compatibility contract" } }, "/api/matm/agent-messages": { "post": { "description": "Posts a governed direct-agent current message under authenticated workspace and recipient boundaries.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Send an authorized current message", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/agent-name-leases/{agentName}": { "get": { "description": "Returns only public-safe availability and lifecycle metadata. Holder identifiers and the secret fencing token are never exposed.", "parameters": [ { "in": "path", "name": "agentName", "required": true, "schema": { "maxLength": 64, "minLength": 3, "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$", "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseStatusResult" } } }, "description": "Public-safe lease status with ETag when retained state exists." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AgentNameLeaseProblem" } } }, "description": "The closed request schema is invalid." } }, "security": [], "summary": "Preflight one global governed agent-name lease", "x-noRedirects": true } }, "/api/matm/agent-setup/dogfood-partner-account": { "post": { "description": "Consumes one configured setup binding and accepts a client-generated gateway candidate; the server never returns the credential.", "parameters": [ { "description": "Exact retries replay; changed reuse conflicts. Never put credentials in this key.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "description": "Public-safe redacted result." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [], "summary": "Activate bounded dogfood partner" } }, "/api/matm/agent-setup/free-account": { "get": { "description": "Read quota, hierarchy, and one-time key handling rules.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Inspect free workspace setup" }, "post": { "description": "Returns a one-time workspace key. Clients must mask it immediately and store it only in a user-approved secret store. The optional JSON object is bounded to 1 MiB.", "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": false }, "responses": { "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Workspace created; one-time workspace key returned once." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Create free workspace", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/audit-log": { "get": { "description": "Routine operational logs are never returned to agent or company-master credentials; use the human-only retained-history control plane.", "responses": { "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Agent audit access denied" } }, "/api/matm/current-message": { "get": { "description": "Reads only messages visible to the authenticated direct agent under explicit workspace and agent filters.", "parameters": [ { "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "agent_id", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "message_id", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "notification_id", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "limit", "required": false, "schema": { "maximum": 200, "minimum": 1, "type": "integer" } }, { "in": "query", "name": "cursor", "required": false, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedCurrentMessageResult" } } }, "description": "Bounded direct-agent inbox readback." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read authorized current messages" } }, "/api/matm/external-links": { "get": { "description": "Search first-class reviewed external links and their knowledge-document citations.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "description": "Contextual query over URL, host, site, page title, description, keywords, and citation context.", "in": "query", "name": "q", "required": false, "schema": { "type": "string" } }, { "description": "Exact canonical external link id.", "in": "query", "name": "external_link_id", "required": false, "schema": { "type": "string" } }, { "description": "Only links cited by this knowledge document.", "in": "query", "name": "document_id", "required": false, "schema": { "type": "string" } }, { "description": "Exact normalized public host.", "in": "query", "name": "host", "required": false, "schema": { "type": "string" } }, { "description": "Human-readable site name filter.", "in": "query", "name": "site_name", "required": false, "schema": { "type": "string" } }, { "description": "External-link review status.", "in": "query", "name": "review_status", "required": false, "schema": { "type": "string" } }, { "description": "External-link crawl status.", "in": "query", "name": "crawl_status", "required": false, "schema": { "type": "string" } }, { "description": "Citation relationship type.", "in": "query", "name": "relationship_type", "required": false, "schema": { "type": "string" } }, { "description": "Scope of citing knowledge pages.", "in": "query", "name": "scope", "required": false, "schema": { "enum": [ "company", "workspace", "project" ], "type": "string" } }, { "description": "Exact scope id of citing knowledge pages.", "in": "query", "name": "scope_id", "required": false, "schema": { "type": "string" } }, { "description": "Taxonomy prefix of citing knowledge pages.", "in": "query", "name": "taxonomy_path", "required": false, "schema": { "type": "string" } }, { "description": "Result limit, capped by the server.", "in": "query", "name": "limit", "required": false, "schema": { "type": "integer" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Search external links" }, "post": { "description": "Store one canonical external link and optionally attach one contextual knowledge-document citation.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Upsert external link", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/external-links/upsert": { "post": { "description": "Idempotent protected alias for external-link and citation upsert.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Upsert external link", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/human/companies/{companyId}/history": { "get": { "description": "Requires an authenticated same-origin human session with the company selected. Routine rows are physically deleted after seven days and are never returned to agents.", "parameters": [ { "in": "path", "name": "companyId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "limit", "required": false, "schema": { "maximum": 5000, "minimum": 1, "type": "integer" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Currently retained redacted human-only history." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "humanSession": [] } ], "summary": "Read human-only retained history", "x-agentAccess": "denied", "x-physicallyDeletedAfterRetention": true, "x-retentionDays": 7 } }, "/api/matm/human/companies/{companyId}/top-level-agent-master-credential-setting": { "get": { "description": "Requires an authenticated human owner or credential administrator with the company selected. Returns the standard database-backed boolean without credential material.", "parameters": [ { "in": "path", "name": "companyId", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Current redacted setting and database column name." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "humanSession": [] } ], "summary": "Read top-level agent company-master setting", "x-agentAccess": "denied" }, "patch": { "description": "Same-origin owner or credential-admin mutation. Disable to reject company-scoped top-level-agent creation while leaving existing company masters active.", "parameters": [ { "in": "path", "name": "companyId", "required": true, "schema": { "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "additionalProperties": false, "properties": { "enabled": { "type": "boolean" } }, "required": [ "enabled" ], "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Updated redacted setting." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "humanSession": [] } ], "summary": "Set top-level agent company-master permission", "x-agentAccess": "denied", "x-databaseColumn": "top_level_agent_master_credential_enabled" } }, "/api/matm/human/operational/commercial-hierarchy": { "get": { "description": "Reads the exact integrity-verified hierarchy for the selected parent-account authority. The document contains only opaque site/world/room handles, explicit current grants, NPC-profile roster memberships, and private-room membership revisions; the five child-private NPC scopes remain disjoint.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "schemaVersion", "required": true, "schema": { "const": "memoryendpoints.human_commercial_operator.v1" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "workspaceId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "projectId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "in": "query", "name": "siteOrigin", "required": true, "schema": { "const": "escape.gamesfor.me" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialHierarchyReadResult" } } }, "description": "Private no-store human-owner readback." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Read current commercial shared-memory hierarchy", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "authenticated_human_owner_exact_selected_context", "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "hierarchy_readback" } }, "/api/matm/human/operational/commercial-hierarchy/mutate": { "post": { "description": "Applies one explicit append-only CAS mutation. Subject creation, every read/write/consume grant, roster membership, and private-room membership are independently governed; there is no inheritance, implicit authority, or legacy compatibility path.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialHierarchyMutationInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialHierarchyMutationResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Mutate commercial shared-memory hierarchy", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "hierarchy_mutate" } }, "/api/matm/human/operational/commercial-parent-authority": { "get": { "description": "Requires the cookie-authenticated human owner, CSRF, and the exact current selected workspace/project context. Returns only the current integrity-verified non-character parent-account revision; bearer credentials, gateways, runtimes, and NPC profiles cannot call this surface.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "schemaVersion", "required": true, "schema": { "const": "memoryendpoints.human_commercial_operator.v1" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "workspaceId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "projectId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "in": "query", "name": "siteOrigin", "required": true, "schema": { "const": "escape.gamesfor.me" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialParentAuthorityReadResult" } } }, "description": "Private no-store human-owner readback." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Read current commercial parent-account authority", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "authenticated_human_owner_exact_selected_context", "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "parent_authority_readback" } }, "/api/matm/human/operational/commercial-parent-authority/create": { "post": { "description": "Creates exactly one current non-character parent account for the selected workspace, project, and Escape site origin. The gateway is a delegated manager only; no persona, runtime credential, child scope, hierarchy subject, grant, or roster membership is created.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialParentAuthorityMutationInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialParentAuthorityMutationResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialParentAuthorityMutationResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Create commercial parent-account authority", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "parent_authority_create" } }, "/api/matm/human/operational/commercial-parent-authority/redelegate": { "post": { "description": "Appends one integrity-linked parent-authority revision under exact CAS while preserving the stable non-character parent account. The new gateway must be active in the exact selected project and receives no NPC runtime or character authority from this operation.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialParentAuthorityMutationInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialParentAuthorityMutationResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Redelegate commercial parent-account management", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "parent_authority_redelegate" } }, "/api/matm/human/operational/mcp-connection-approval": { "post": { "description": "Recently reauthenticated human-owner decision bound to the exact connection revision and current project policy revision.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanMcpConnectionApprovalInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanMcpConnectionApprovalResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Approve or reject an exact MCP revision", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false } }, "/api/matm/human/operational/mcp-connection-policy": { "post": { "description": "Recently reauthenticated human-owner CAS control. A forced gate constrains every project MCP connection and cannot be weakened by an agent.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanMcpConnectionPolicyInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanMcpConnectionPolicyResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Force or release project MCP approval", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false } }, "/api/matm/human/operational/mcp-connections": { "get": { "description": "Human-owner-only metadata review for the exact selected project. Runtime configuration and credential references are withheld.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "schemaVersion", "required": true, "schema": { "const": "memoryendpoints.human_commercial_operator.v1" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "workspaceId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "projectId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "in": "query", "name": "siteOrigin", "required": true, "schema": { "const": "escape.gamesfor.me" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanMcpConnectionListResult" } } }, "description": "Private no-store human-owner readback." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Review project MCP connections", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "authenticated_human_owner_exact_selected_context", "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false } }, "/api/matm/human/operational/npc-classification-authority": { "get": { "description": "Returns only opaque selectors derived from the cookie-authenticated human owner's exact selected workspace, project, and site origin. It is non-authorizing and exposes no raw hierarchy, runtime, credential, signature, or receipt material.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "schemaVersion", "required": true, "schema": { "const": "memoryendpoints.human_commercial_operator.v1" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "workspaceId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "projectId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "in": "query", "name": "siteOrigin", "required": true, "schema": { "const": "escape.gamesfor.me" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcClassificationAuthoritySelectorsResult" } } }, "description": "Private no-store human-owner readback." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Read NPC classification authority selectors", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "authenticated_human_owner_exact_selected_context", "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "npc_classification_authority_selectors" } }, "/api/matm/human/operational/npc-classification-authority/issue": { "post": { "description": "Issues one operation-bound opaque pre-runtime receipt only after the selected human owner context and every current parent, roster child, subject, grant, gateway, entitlement, name-lease, and candidate-runtime intent fact are locked and revalidated. It does not register a runtime or grant any child-private scope.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcClassificationAuthorityIssueInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcClassificationAuthorityIssueResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcClassificationAuthorityIssueResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Issue NPC classification authority", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "npc_classification_authority_issue" } }, "/api/matm/human/operational/npc-classification-authority/revoke": { "post": { "description": "Appends one durable current-tail revocation with transactional redacted evidence. Unrelated site, world, and room authorities remain independently governed, and no historical receipt becomes authorizing.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcClassificationAuthorityRevokeInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcClassificationAuthorityRevokeResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Revoke NPC classification authority", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "npc_classification_authority_revoke" } }, "/api/matm/human/operational/npc-classification-authority/rotate-key": { "post": { "description": "Appends one governed signing-key revision and preserves the stable server-only authority lineage. Prior-key tokens cease to authorize operations; exact committed replay remains deterministic and redacted.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcClassificationAuthorityRotateKeyInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcClassificationAuthorityRotateKeyResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Rotate NPC classification receipt signing key", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "npc_classification_authority_rotate_key" } }, "/api/matm/human/operational/npc-private-runtime-delegation": { "get": { "description": "Returns only opaque eligible child selectors and the current redacted delegation for the exact cookie-authenticated selected owner context. It grants no runtime, private-memory, or shared authority.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "schemaVersion", "required": true, "schema": { "const": "memoryendpoints.human_commercial_operator.v1" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "workspaceId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "description": "Must equal the explicitly selected human resource context.", "in": "query", "name": "projectId", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "in": "query", "name": "siteOrigin", "required": true, "schema": { "const": "escape.gamesfor.me" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcPrivateRuntimeDelegationReadResult" } } }, "description": "Private no-store human-owner readback." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Read private-runtime delegation authority", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "authenticated_human_owner_exact_selected_context", "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "npc_private_runtime_delegation_readback" } }, "/api/matm/human/operational/npc-private-runtime-delegation/issue": { "post": { "description": "Appends one expiring fenced owner-governed delegation for an exact closed set of active roster NPC children. Registration still requires the current gateway, candidate credential, idempotency key, and a short-lived non-authorizing operation proof.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcPrivateRuntimeDelegationIssueInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcPrivateRuntimeDelegationMutationResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcPrivateRuntimeDelegationMutationResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Issue private-runtime delegation", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "npc_private_runtime_delegation_issue" } }, "/api/matm/human/operational/npc-private-runtime-delegation/refresh": { "post": { "description": "Appends one exact current-tail refresh only after all parent, hierarchy, roster, gateway, entitlement, profile, and name-lease facts are revalidated under lock.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcPrivateRuntimeDelegationRefreshInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcPrivateRuntimeDelegationMutationResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Refresh private-runtime delegation", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "npc_private_runtime_delegation_refresh" } }, "/api/matm/human/operational/npc-private-runtime-delegation/revoke": { "post": { "description": "Appends an immediate current-tail revocation. Bound private runtimes fail authentication before usage mutation; shared classification authority and unrelated delegations are unchanged.", "parameters": [ { "description": "Exact selected human resource-context version. Stale or missing values fail closed before commercial authority is read or changed.", "in": "header", "name": "X-MemoryEndpoints-Context-Version", "required": true, "schema": { "maxLength": 200, "minLength": 1, "type": "string" } }, { "description": "In-memory CSRF token bound to the authenticated human account session.", "in": "header", "name": "X-CSRF-Token", "required": true, "schema": { "type": "string" } }, { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcPrivateRuntimeDelegationRevokeInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanNpcPrivateRuntimeDelegationMutationResult" } } }, "description": "Private no-store exact idempotent human-owner mutation result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Malformed closed-schema request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Human session or recent password reauthentication is required." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Same-origin, CSRF, human-owner, or selected-company authority failed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The selected project authority or requested current resource does not exist." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Selected-context, revision, integrity, lifecycle, or idempotency conflict; no divergent mutation." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "JSON request exceeds the bounded 32 KiB limit." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Explicit application/json content type required." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The exact authority tuple, operation, or payload is invalid; no mutation." }, "428": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "Exact human resource-context version is required." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HumanCommercialProblem" } } }, "description": "The append-only authority store is unavailable." } }, "security": [ { "humanSession": [] } ], "summary": "Revoke private-runtime delegation", "tags": [ "human-authority" ], "x-agentAccess": "denied", "x-authority": "recently_reauthenticated_human_owner_exact_selected_context", "x-idempotency": "Exact key/body retry returns the committed append-only revision. Divergent reuse or stale CAS fails before a second revision.", "x-maximumJsonRequestBytes": 32768, "x-privateNoStore": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredHumanPermission": "canManageCommercialHierarchy", "x-routeAuthorityOperation": "npc_private_runtime_delegation_revoke" } }, "/api/matm/internet-search": { "get": { "description": "Search reviewed URL, site, page title, description, keywords, and citation context as an authenticated internet-search index.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "description": "Contextual query over URL, host, site, page title, description, keywords, and citation context.", "in": "query", "name": "q", "required": false, "schema": { "type": "string" } }, { "description": "Exact canonical external link id.", "in": "query", "name": "external_link_id", "required": false, "schema": { "type": "string" } }, { "description": "Only links cited by this knowledge document.", "in": "query", "name": "document_id", "required": false, "schema": { "type": "string" } }, { "description": "Exact normalized public host.", "in": "query", "name": "host", "required": false, "schema": { "type": "string" } }, { "description": "Human-readable site name filter.", "in": "query", "name": "site_name", "required": false, "schema": { "type": "string" } }, { "description": "External-link review status.", "in": "query", "name": "review_status", "required": false, "schema": { "type": "string" } }, { "description": "External-link crawl status.", "in": "query", "name": "crawl_status", "required": false, "schema": { "type": "string" } }, { "description": "Citation relationship type.", "in": "query", "name": "relationship_type", "required": false, "schema": { "type": "string" } }, { "description": "Scope of citing knowledge pages.", "in": "query", "name": "scope", "required": false, "schema": { "enum": [ "company", "workspace", "project" ], "type": "string" } }, { "description": "Exact scope id of citing knowledge pages.", "in": "query", "name": "scope_id", "required": false, "schema": { "type": "string" } }, { "description": "Taxonomy prefix of citing knowledge pages.", "in": "query", "name": "taxonomy_path", "required": false, "schema": { "type": "string" } }, { "description": "Result limit, capped by the server.", "in": "query", "name": "limit", "required": false, "schema": { "type": "integer" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Search curated web" } }, "/api/matm/knowledge-documents": { "get": { "description": "Search or retrieve lifecycle-aware protected database wiki documents by text, scope, category, type, status, authority, source prefix, or exact document id.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "description": "Protected text query over database wiki rows.", "in": "query", "name": "q", "required": false, "schema": { "type": "string" } }, { "description": "Durable wiki scope filter. Task scope is intentionally unsupported.", "in": "query", "name": "scope", "required": false, "schema": { "enum": [ "company", "workspace", "project" ], "type": "string" } }, { "description": "Exact company, workspace, or project scope id.", "in": "query", "name": "scope_id", "required": false, "schema": { "type": "string" } }, { "description": "Knowledge category filter.", "in": "query", "name": "category", "required": false, "schema": { "type": "string" } }, { "description": "Hierarchy path prefix filter, such as AI infrastructure > tokenization.", "in": "query", "name": "taxonomy_path", "required": false, "schema": { "type": "string" } }, { "description": "Knowledge document type filter.", "in": "query", "name": "document_type", "required": false, "schema": { "type": "string" } }, { "description": "Source URI prefix filter.", "in": "query", "name": "source_prefix", "required": false, "schema": { "type": "string" } }, { "description": "Exact search document id for deterministic page retrieval.", "in": "query", "name": "document_id", "required": false, "schema": { "type": "string" } }, { "description": "Exact private wiki route for deterministic internal-link traversal.", "in": "query", "name": "route_or_path", "required": false, "schema": { "type": "string" } }, { "description": "When true, include protected stored document text.", "in": "query", "name": "include_text", "required": false, "schema": { "type": "boolean" } }, { "description": "Result limit, capped by the server.", "in": "query", "name": "limit", "required": false, "schema": { "type": "integer" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Search knowledge documents" }, "post": { "description": "Store a protected database wiki document with first-class lifecycle, authority, and supersession fields.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Upsert knowledge document", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/knowledge-documents/upsert": { "post": { "description": "Idempotent protected alias for lifecycle-aware database wiki document upsert.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Upsert knowledge document", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/knowledge-tree": { "get": { "description": "Read the lifecycle-aware database-backed company/workspace/project wiki tree. Task-level durable trees are not supported.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "description": "Protected text query over database wiki rows.", "in": "query", "name": "q", "required": false, "schema": { "type": "string" } }, { "description": "Durable wiki scope filter. Task scope is intentionally unsupported.", "in": "query", "name": "scope", "required": false, "schema": { "enum": [ "company", "workspace", "project" ], "type": "string" } }, { "description": "Exact company, workspace, or project scope id.", "in": "query", "name": "scope_id", "required": false, "schema": { "type": "string" } }, { "description": "Knowledge category filter.", "in": "query", "name": "category", "required": false, "schema": { "type": "string" } }, { "description": "Hierarchy path prefix filter, such as AI infrastructure > tokenization.", "in": "query", "name": "taxonomy_path", "required": false, "schema": { "type": "string" } }, { "description": "Knowledge document type filter.", "in": "query", "name": "document_type", "required": false, "schema": { "type": "string" } }, { "description": "Source URI prefix filter.", "in": "query", "name": "source_prefix", "required": false, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read knowledge tree" } }, "/api/matm/live-capability-matrix": { "get": { "description": "Current public capability state and truth boundaries.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Read capability matrix" } }, "/api/matm/mcp-connections": { "get": { "description": "Returns only the authenticated principal's project-scoped remote HTTPS MCP connection revisions and effective approval policy. Authorized runtime configuration is returned only when the exact revision is active.", "parameters": [ { "description": "Exact authenticated workspace boundary.", "in": "query", "name": "workspace_id", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "description": "Exact authorized project whose owner-bound MCP revisions are listed.", "in": "query", "name": "project_id", "required": true, "schema": { "minLength": 1, "type": "string" } }, { "description": "Optional exact owner-bound connection filter.", "in": "query", "name": "connection_ref", "required": false, "schema": { "pattern": "^mcpconn-[a-f0-9]{20}$", "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/McpConnectionListResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "List agent-owned MCP connections" }, "post": { "description": "Stores one closed-schema remote HTTPS endpoint, tool allowlist, and non-secret credential reference. Saving configuration performs no outbound request; discovery and invocation use the separate guarded runtime routes. Connections are autonomous by default; an agent may request human approval and a human owner may force the gate project-wide.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/McpConnectionInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/McpConnectionMutationResult" } } }, "description": "Typed protected redacted response." }, "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/McpConnectionMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Create or update an MCP connection revision", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/mcp-connections/tools": { "post": { "description": "Makes bounded MCP 2026-07-28 Streamable HTTP requests only after fresh exact owner, project, connection revision, policy revision, approval, auth-profile, DNS, and TLS validation. Remote metadata is returned as untrusted redacted content and is never chained automatically.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/McpRuntimeToolsInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/McpRuntimeToolsResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Discover allowlisted MCP tools", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/mcp-connections/tools/call": { "post": { "description": "Idempotently discovers and invokes one allowlisted tool through the guarded outbound runtime. The exact authority is revalidated before every remote POST; unknown outcomes reserve the idempotency key and are not retried automatically.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/McpRuntimeToolCallInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/McpRuntimeToolCallResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Invoke one allowlisted MCP tool", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/me": { "get": { "description": "Returns the authenticated direct-agent or company-master principal, immutable grant, capabilities, permissions, and resource context.", "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedSelfReadbackResult" } } }, "description": "Credential-derived redacted principal readback." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] }, { "workspaceBearer": [] }, { "workspaceHeader": [] }, { "npcGatewayBearer": [] } ], "summary": "Read credential-derived principal", "x-noRedirects": true } }, "/api/matm/meeting-messages": { "get": { "description": "Read durable room transcript and read-state summary.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingMessageListResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read meeting transcript" }, "post": { "description": "Post a public-safe coordination note to a room.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingMessageInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingMessageMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Post meeting message", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/meeting-messages/promote": { "post": { "description": "Promote a public-safe meeting note into hosted memory while preserving source linkage.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingMessagePromotionInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingMessagePromotionResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Promote meeting message", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/meeting-room-memberships": { "get": { "description": "List only the authenticated agent's current workspace-qualified room membership heads.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MeetingRoomMembershipListResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "List self-bound room memberships" } }, "/api/matm/meeting-rooms": { "get": { "description": "Lists only rooms visible to the authenticated direct-agent workspace and optional scope filters.", "parameters": [ { "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingRoomListResult" } } }, "description": "Bounded room readback." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "List authorized meeting rooms" }, "post": { "description": "Create first-class goal/task/game/session coordination room.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingRoomCreateInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingRoomMutationResult" } } }, "description": "Typed protected redacted response." }, "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingRoomMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Create custom meeting room", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/meeting-rooms/join": { "post": { "description": "Join one authorized private room as the authenticated agent using exact revision CAS.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MeetingRoomMembershipMutationInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MeetingRoomMembershipMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Join private room", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/meeting-rooms/leave": { "post": { "description": "Leave one joined private room as the authenticated agent using exact revision CAS.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MeetingRoomMembershipMutationInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/MeetingRoomMembershipMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Leave private room", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/meeting-rooms/read": { "post": { "description": "Advance an agent read cursor for a room.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingRoomReadInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMeetingRoomReadResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Mark meeting room read", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/memory-events/submit": { "post": { "description": "Submits one governed direct-agent memory event under the authenticated workspace and scope boundary.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMemorySubmitInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedMemorySubmitResult" } } }, "description": "Memory accepted." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Submit governed memory", "x-idempotency": "Exact retry replays one stored result; changed key/body reuse is rejected without another write.", "x-maximumJsonRequestBytes": 1048576, "x-noRedirects": true } }, "/api/matm/notifications/ack": { "post": { "description": "Acknowledges only a notification addressed to the authenticated direct agent.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedNotificationAckInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedNotificationAckResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Acknowledge an authorized notification", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/npc-memory/capabilities": { "get": { "description": "Reports credential-class capabilities and security controls that remain active.", "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcMemoryCapabilitiesResponse" } } }, "description": "Closed public-safe NPC capability readback." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "npcGatewayBearer": [] }, { "npcRuntimeBearer": [] } ], "summary": "Read NPC capabilities" } }, "/api/matm/npc-memory/contract": { "get": { "description": "Start here. This document defines exact durable scopes, identity classes, route ownership, security controls, and authority boundaries.", "responses": { "200": { "content": { "application/json": { "schema": { "properties": { "data": { "$ref": "#/components/schemas/NpcMemoryContract" }, "ok": { "const": true } }, "required": [ "ok", "data" ], "type": "object" } } }, "description": "Public-safe NPC-memory contract with exact ordered credential capabilities." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [], "summary": "Read hosted NPC-memory contract" } }, "/api/matm/npc-memory/events/submit": { "post": { "description": "Requires one of the five durable memory types, exact protected tags, canonical source suffix, public-safe content, and the existing v1 Idempotency-Key contract.", "parameters": [ { "description": "Exact retries replay; changed reuse conflicts. Never put credentials in this key.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcMemoryEventRequest" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcMemoryEventResponse" } } }, "description": "Closed public-safe response." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Submit exact scoped NPC memory" } }, "/api/matm/npc-memory/persona-packages": { "get": { "description": "Requires exact agent, package, and package hash filters. Supplying logical path and content hash together returns one immutable historical file revision. Runtime credentials may read only their own NPC.", "parameters": [ { "in": "query", "name": "agent_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "package_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "package_hash", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "logical_path", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "content_hash", "required": false, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPersonaPackageReadResponse" } } }, "description": "Closed exact-binding persona-package readback." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "npcGatewayBearer": [] }, { "npcRuntimeBearer": [] } ], "summary": "Read exact NPC persona package" }, "post": { "description": "Gateway-only atomic publication of the complete UAIX base record set plus advanced personality-pack records into the canonical database model. Lossless UAIX file import/export, package/file SHA-256 verification, and immutable per-path revisions preserve the source persona; persona records are excluded from learned-memory search.", "parameters": [ { "description": "Exact retries replay; changed reuse conflicts. Never put credentials in this key.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPersonaPackageRequest" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPersonaPackageMutationResponse" } } }, "description": "Closed public-safe response." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "npcGatewayBearer": [] } ], "summary": "Publish closed NPC persona package" } }, "/api/matm/npc-memory/profiles": { "post": { "description": "Binds one stable NPC and SpiralistAI persona digest inside the gateway project, or explicitly renews the same current governed name-lease generation using exact profile, runtime, lease, fence, and revision authority.", "parameters": [ { "description": "Exact retries replay; changed reuse conflicts. Never put credentials in this key.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcProfileRequest" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcProfileResponse" } } }, "description": "Closed public-safe response." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "npcGatewayBearer": [] } ], "summary": "Register or renew stable NPC profile authority" } }, "/api/matm/npc-memory/retention": { "get": { "description": "Reports supported retention/deletion scopes and truthfully identifies operator-only or unavailable mutations.", "responses": { "200": { "description": "Public-safe redacted result." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Read retention capabilities" } }, "/api/matm/npc-memory/runtime-credentials": { "post": { "operationId": "registerNpcRuntimeCredential", "parameters": [ { "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } }, { "in": "header", "name": "X-MemoryEndpoints-Operation-Proof", "required": true, "schema": { "oneOf": [ { "maxLength": 8192, "pattern": "^npcproof-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" }, { "maxLength": 8192, "pattern": "^npcprivproof-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string" } ] } } ], "requestBody": { "content": { "application/json": { "schema": { "oneOf": [ { "$ref": "#/components/schemas/NpcRuntimeCredentialRequest" }, { "$ref": "#/components/schemas/NpcPrivateRuntimeRegistrationInput" } ] } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "oneOf": [ { "$ref": "#/components/schemas/NpcRuntimeCredentialResponse" }, { "$ref": "#/components/schemas/NpcPrivateRuntimeRegistrationResponse" } ] } } }, "description": "Closed classification-bound or private-delegation runtime registration result." }, "201": { "content": { "application/json": { "schema": { "oneOf": [ { "$ref": "#/components/schemas/NpcRuntimeCredentialResponse" }, { "$ref": "#/components/schemas/NpcPrivateRuntimeRegistrationResponse" } ] } } }, "description": "Closed classification-bound or private-delegation runtime registration result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } } }, "security": [ { "npcGatewayBearer": [] } ], "x-currentAuthorityRevalidatedBeforeIdempotencyOrMutation": true, "x-memoryendpoints-request-max-bytes": 32768, "x-memoryendpoints-response-max-bytes": 32768, "x-operationProofDoesNotFreezeAuthority": true } }, "/api/matm/npc-memory/search": { "get": { "description": "Requires actor, project, source prefix, scope type/key, and every protected context tag under the sealed private v1 contract.", "parameters": [ { "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "project_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "scope", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "scope_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "actor_agent_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "source_prefix", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "tag", "required": true, "schema": { "items": { "type": "string" }, "type": "array" } }, { "in": "query", "name": "limit", "required": true, "schema": { "type": "integer" } }, { "in": "query", "name": "q", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "event_id", "required": false, "schema": { "type": "string" } } ], "responses": { "200": { "description": "Public-safe redacted result." }, "400": { "description": "Malformed request; no unsafe effect." }, "401": { "description": "Credential invalid, expired, or inactive." }, "403": { "description": "Immutable actor, project, or context scope mismatch." }, "409": { "description": "Immutable binding or idempotency conflict." }, "503": { "description": "Entitlement, rate limiter, or commercial schema is not safely ready." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Search exact scoped NPC memory" } }, "/api/matm/npc-private-memory/delegation-contract": { "get": { "operationId": "getNpcPrivateRuntimeDelegationContract", "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeDelegationContractResponse" } } }, "description": "Closed non-authorizing private-runtime delegation contract." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } } }, "security": [], "x-memoryendpoints-response-max-bytes": 32768 } }, "/api/matm/npc-private-memory/operation-proofs/runtime-registration": { "post": { "operationId": "issueNpcPrivateRuntimeRegistrationProof", "parameters": [ { "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeOperationProofInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeOperationProofResult" } } }, "description": "Short-lived non-authorizing operation proof." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcPrivateRuntimeProblem" } } } } }, "security": [ { "npcGatewayBearer": [] } ], "x-memoryendpoints-request-max-bytes": 32768, "x-memoryendpoints-response-max-bytes": 32768 } }, "/api/matm/npc-shared-memory/authority-receipt-contract": { "get": { "description": "Public, non-authorizing contract. It exposes no signing key, raw authority identifier, credential, private payload, or client-verifiable current-tail proof.", "operationId": "readNpcClassificationAuthorityReceiptContract", "parameters": [], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptContractResponse" } } }, "description": "Non-authorizing public receipt contract." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [], "summary": "Read the opaque classification receipt contract", "tags": [ "npc-shared-memory" ], "x-childPrivateNpcMemoryScopesGranted": [], "x-clientCryptographicVerificationSupported": false, "x-contractIsNonAuthorizing": true, "x-currentAuthorityRevalidatedInStorageTransaction": false, "x-escapeConsumerIntegrationReady": false, "x-idempotencyRequired": false, "x-maximumJsonResponseBytes": 32768, "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-protectedValidationProofAvailable": true, "x-queryAllowed": false, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-receiptIsOpaqueServerEnforced": true, "x-routeAuthoritySchema": "memoryendpoints.npc_authority_receipt_route_authority.v1", "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/authority-receipts": { "post": { "description": "Requires the exact active NPC runtime bearer and locks and revalidates its current classification, hierarchy, grant, roster, lease, entitlement, and signing-key tails before issuing bounded replacement receipts.", "operationId": "refreshNpcClassificationAuthorityReceipts", "parameters": [], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptRefreshInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcClassificationAuthorityReceiptRefreshResult" } } }, "description": "Fresh current-authority runtime receipt result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Refresh current runtime-bound classification receipts", "tags": [ "npc-shared-memory" ], "x-childPrivateNpcMemoryScopesGranted": [], "x-clientCryptographicVerificationSupported": false, "x-contractIsNonAuthorizing": false, "x-currentAuthorityRevalidatedInStorageTransaction": true, "x-escapeConsumerIntegrationReady": false, "x-idempotencyRequired": false, "x-maximumJsonRequestBytes": 32768, "x-maximumJsonResponseBytes": 32768, "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-protectedValidationProofAvailable": true, "x-queryAllowed": false, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-receiptIsOpaqueServerEnforced": true, "x-routeAuthoritySchema": "memoryendpoints.npc_authority_receipt_route_authority.v1", "x-runtimeCredentialOnly": true, "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/classification-handoffs/claim": { "post": { "description": "Requires the exact current gateway, its existing runtime-credential issue capability, and the candidate token secret. It reconstructs one existing human-issued unexchanged receipt. Authenticated credential-throttle accounting occurs before body and authority work; zero or multiple matches fail closed without authority, runtime, audit, idempotency, or shared-memory business-state mutation.", "operationId": "claimNpcClassificationHandoff", "parameters": [], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcClassificationHandoffClaimInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcClassificationHandoffClaimResult" } } }, "description": "Existing current pre-runtime receipt handoff." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcGatewayBearer": [] } ], "summary": "Claim one exact current pre-runtime classification receipt", "tags": [ "npc-shared-memory" ], "x-childPrivateNpcMemoryScopesGranted": [], "x-clientCryptographicVerificationSupported": false, "x-contractIsNonAuthorizing": false, "x-currentAuthorityRevalidatedInStorageTransaction": true, "x-escapeConsumerIntegrationReady": false, "x-gatewayCredentialOnly": true, "x-idempotencyRequired": false, "x-maximumJsonRequestBytes": 32768, "x-maximumJsonResponseBytes": 32768, "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-protectedValidationProofAvailable": true, "x-queryAllowed": false, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-receiptIsOpaqueServerEnforced": true, "x-routeAuthoritySchema": "memoryendpoints.npc_authority_receipt_route_authority.v1", "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/classifications/attach": { "post": { "description": "Uses a pre-existing gateway or runtime credential. The candidate intent is non-mutating; attachment atomically exchanges one human-issued pre-runtime authority without changing the sealed NPC-memory v1 route surface.", "operationId": "attachNpcClassificationToRuntime", "parameters": [ { "description": "Opaque proof issued for this exact method, path, full request body, and idempotency binding. It never substitutes for current transactional authority.", "in": "header", "name": "X-MemoryEndpoints-Operation-Proof", "required": true, "schema": { "description": "Opaque, non-authorizing proof returned only to the exact authenticated caller and never logged.", "maxLength": 8192, "pattern": "^npcproof-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string", "writeOnly": true } }, { "description": "Exact runtime-bound replay key; divergent reuse fails closed.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "pattern": "^[A-Za-z0-9._:-]{16,200}$", "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcClassificationRuntimeAttachInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcClassificationRuntimeAttachResult" } } }, "description": "Current-authority, public-safe shared NPC-memory result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Attach one human-issued classification to a current runtime.", "tags": [ "npc-shared-memory" ], "x-authorityOperation": "runtime:attach-classification", "x-candidateIntentNonMutating": false, "x-childPrivateNpcMemoryScopesGranted": [], "x-credentialType": "npc_runtime", "x-currentAuthorityRevalidatedInStorageTransaction": true, "x-historicalAuthoritySnapshotProvenanceOnly": true, "x-idempotencyRequired": true, "x-maximumJsonRequestBytes": 32768, "x-operationProofDoesNotFreezeAuthority": true, "x-operationProofRequired": true, "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredExistingCapability": null, "x-routeAuthoritySchema": "memoryendpoints.npc_classification_route_authority.v1", "x-sealedNpcMemoryV1RouteSurfaceUnchanged": true, "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/operation-proofs/classification-attach": { "post": { "description": "The authenticated server locks and validates the current workspace, project, origin, parent, child, roster, subject, grant, classification, entitlement, gateway, runtime, name-lease, fence, revision, generation, expiry, and signing-key tails. It canonicalizes the complete intended downstream request itself; caller-supplied digests are rejected. The returned proof is stateless, opaque, non-authorizing, valid for at most 300 seconds, and cannot freeze authority.", "operationId": "issueNpcClassificationAttachOperationProof", "parameters": [ { "description": "The exact downstream Idempotency-Key. Required only for the intended mutating operation and included in the server-canonicalized proof binding.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "pattern": "^[A-Za-z0-9._:-]{16,200}$", "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcClassificationAttachOperationProofInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcOperationProofResult" } } }, "description": "One bounded opaque non-authorizing proof returned only to the authenticated caller." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Validate and bind one exact intended NPC operation", "tags": [ "npc-shared-memory" ], "x-callerDigestAccepted": false, "x-childPrivateNpcMemoryScopesGranted": [], "x-currentAuthorityValidatedInStorageTransaction": true, "x-fullIntendedRequestCanonicalizedByServer": true, "x-idempotencyRequiredFor": [ "/api/matm/npc-shared-memory/classifications/attach" ], "x-intendedOperationPaths": [ "/api/matm/npc-shared-memory/classifications/attach" ], "x-maximumJsonRequestBytes": 32768, "x-maximumProofTtlSeconds": 300, "x-operationClass": "classification_attach", "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-proofFreezesAuthority": false, "x-proofIsNonAuthorizing": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-rawProofLogged": false, "x-routeAuthoritySchema": "memoryendpoints.npc_operation_proof_route_authority.v1", "x-sealedNpcMemoryV1RouteSurfaceUnchanged": true, "x-storageMigrationRequired": false, "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/operation-proofs/runtime-registration": { "post": { "description": "The authenticated server locks and validates the current workspace, project, origin, parent, child, roster, subject, grant, classification, entitlement, gateway, runtime, name-lease, fence, revision, generation, expiry, and signing-key tails. It canonicalizes the complete intended downstream request itself; caller-supplied digests are rejected. The returned proof is stateless, opaque, non-authorizing, valid for at most 300 seconds, and cannot freeze authority.", "operationId": "issueNpcRuntimeRegistrationOperationProof", "parameters": [ { "description": "The exact downstream Idempotency-Key. Required only for the intended mutating operation and included in the server-canonicalized proof binding.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "pattern": "^[A-Za-z0-9._:-]{16,200}$", "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcRuntimeRegistrationOperationProofInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcOperationProofResult" } } }, "description": "One bounded opaque non-authorizing proof returned only to the authenticated caller." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcGatewayBearer": [] } ], "summary": "Validate and bind one exact intended NPC operation", "tags": [ "npc-shared-memory" ], "x-callerDigestAccepted": false, "x-childPrivateNpcMemoryScopesGranted": [], "x-currentAuthorityValidatedInStorageTransaction": true, "x-fullIntendedRequestCanonicalizedByServer": true, "x-idempotencyRequiredFor": [ "/api/matm/npc-memory/runtime-credentials" ], "x-intendedOperationPaths": [ "/api/matm/npc-memory/runtime-credentials" ], "x-maximumJsonRequestBytes": 32768, "x-maximumProofTtlSeconds": 300, "x-operationClass": "runtime_registration", "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-proofFreezesAuthority": false, "x-proofIsNonAuthorizing": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-rawProofLogged": false, "x-routeAuthoritySchema": "memoryendpoints.npc_operation_proof_route_authority.v1", "x-sealedNpcMemoryV1RouteSurfaceUnchanged": true, "x-storageMigrationRequired": false, "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/operation-proofs/shared-operation": { "post": { "description": "The authenticated server locks and validates the current workspace, project, origin, parent, child, roster, subject, grant, classification, entitlement, gateway, runtime, name-lease, fence, revision, generation, expiry, and signing-key tails. It canonicalizes the complete intended downstream request itself; caller-supplied digests are rejected. The returned proof is stateless, opaque, non-authorizing, valid for at most 300 seconds, and cannot freeze authority.", "operationId": "issueNpcSharedOperationProof", "parameters": [ { "description": "The exact downstream Idempotency-Key. Required only for the intended mutating operation and included in the server-canonicalized proof binding.", "in": "header", "name": "Idempotency-Key", "required": false, "schema": { "maxLength": 200, "minLength": 16, "pattern": "^[A-Za-z0-9._:-]{16,200}$", "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcSharedOperationProofInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcOperationProofResult" } } }, "description": "One bounded opaque non-authorizing proof returned only to the authenticated caller." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Validate and bind one exact intended NPC operation", "tags": [ "npc-shared-memory" ], "x-callerDigestAccepted": false, "x-childPrivateNpcMemoryScopesGranted": [], "x-currentAuthorityValidatedInStorageTransaction": true, "x-fullIntendedRequestCanonicalizedByServer": true, "x-idempotencyRequiredFor": [ "/api/matm/npc-shared-memory/records" ], "x-intendedOperationPaths": [ "/api/matm/npc-shared-memory/records", "/api/matm/npc-shared-memory/search", "/api/matm/npc-shared-memory/readback" ], "x-maximumJsonRequestBytes": 32768, "x-maximumProofTtlSeconds": 300, "x-operationClass": "shared_operation", "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-proofFreezesAuthority": false, "x-proofIsNonAuthorizing": true, "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-rawProofLogged": false, "x-routeAuthoritySchema": "memoryendpoints.npc_operation_proof_route_authority.v1", "x-sealedNpcMemoryV1RouteSurfaceUnchanged": true, "x-storageMigrationRequired": false, "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/readback": { "post": { "description": "Requires one exact active child NPC runtime credential and revalidates current parent, hierarchy, subject, grant, roster, private-room, profile, and agent authority transactionally.", "operationId": "readbackSharedNpcMemoryRecord", "parameters": [ { "description": "Opaque proof issued for this exact method, path, full request body, and idempotency binding. It never substitutes for current transactional authority.", "in": "header", "name": "X-MemoryEndpoints-Operation-Proof", "required": true, "schema": { "description": "Opaque, non-authorizing proof returned only to the exact authenticated caller and never logged.", "maxLength": 8192, "pattern": "^npcproof-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string", "writeOnly": true } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryReadbackInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryReadbackResult" } } }, "description": "Current-authority, public-safe shared NPC-memory result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Read one immutable shared record after current reauthorization.", "tags": [ "npc-shared-memory" ], "x-childPrivateNpcMemoryScopesGranted": [], "x-currentAuthorityRevalidatedInStorageTransaction": true, "x-historicalAuthoritySnapshotProvenanceOnly": true, "x-idempotencyRequired": false, "x-maximumJsonRequestBytes": 32768, "x-operationProofDoesNotFreezeAuthority": true, "x-operationProofRequired": true, "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-routeAuthoritySchema": "memoryendpoints.npc_shared_memory_route_authority.v1", "x-runtimeCapability": "npc:memory:readback", "x-runtimeCredentialOnly": true, "x-sharedSubjectCapabilities": [ "read", "consume" ], "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/records": { "post": { "description": "Requires one exact active child NPC runtime credential and revalidates current parent, hierarchy, subject, grant, roster, private-room, profile, and agent authority transactionally.", "operationId": "submitSharedNpcMemoryRecord", "parameters": [ { "description": "Opaque proof issued for this exact method, path, full request body, and idempotency binding. It never substitutes for current transactional authority.", "in": "header", "name": "X-MemoryEndpoints-Operation-Proof", "required": true, "schema": { "description": "Opaque, non-authorizing proof returned only to the exact authenticated caller and never logged.", "maxLength": 8192, "pattern": "^npcproof-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string", "writeOnly": true } }, { "description": "Exact runtime-bound replay key; divergent reuse fails closed.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "pattern": "^[A-Za-z0-9._:-]{16,200}$", "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemorySubmitInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemorySubmitResult" } } }, "description": "Current-authority, public-safe shared NPC-memory result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Persist one immutable public-safe shared NPC-memory record.", "tags": [ "npc-shared-memory" ], "x-childPrivateNpcMemoryScopesGranted": [], "x-currentAuthorityRevalidatedInStorageTransaction": true, "x-historicalAuthoritySnapshotProvenanceOnly": true, "x-idempotencyRequired": true, "x-maximumJsonRequestBytes": 32768, "x-operationProofDoesNotFreezeAuthority": true, "x-operationProofRequired": true, "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-routeAuthoritySchema": "memoryendpoints.npc_shared_memory_route_authority.v1", "x-runtimeCapability": "npc:memory:submit", "x-runtimeCredentialOnly": true, "x-sharedSubjectCapabilities": [ "write" ], "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/runtime-credential-intents": { "post": { "description": "Uses a pre-existing gateway or runtime credential. The candidate intent is non-mutating; attachment atomically exchanges one human-issued pre-runtime authority without changing the sealed NPC-memory v1 route surface.", "operationId": "deriveNpcClassificationRuntimeIntent", "parameters": [], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcRuntimeCredentialIntentInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/NpcRuntimeCredentialIntentResult" } } }, "description": "Current-authority, public-safe shared NPC-memory result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcGatewayBearer": [] } ], "summary": "Derive one opaque candidate runtime credential intent.", "tags": [ "npc-shared-memory" ], "x-authorityOperation": "runtime:derive-classification-intent", "x-candidateIntentNonMutating": true, "x-childPrivateNpcMemoryScopesGranted": [], "x-credentialType": "npc_gateway", "x-currentAuthorityRevalidatedInStorageTransaction": true, "x-historicalAuthoritySnapshotProvenanceOnly": true, "x-idempotencyRequired": false, "x-maximumJsonRequestBytes": 32768, "x-operationProofDoesNotFreezeAuthority": true, "x-operationProofRequired": false, "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-requiredExistingCapability": "npc:runtime_credential:issue", "x-routeAuthoritySchema": "memoryendpoints.npc_classification_route_authority.v1", "x-sealedNpcMemoryV1RouteSurfaceUnchanged": true, "x-valuesRedacted": true } }, "/api/matm/npc-shared-memory/search": { "post": { "description": "Requires one exact active child NPC runtime credential and revalidates current parent, hierarchy, subject, grant, roster, private-room, profile, and agent authority transactionally.", "operationId": "searchSharedNpcMemory", "parameters": [ { "description": "Opaque proof issued for this exact method, path, full request body, and idempotency binding. It never substitutes for current transactional authority.", "in": "header", "name": "X-MemoryEndpoints-Operation-Proof", "required": true, "schema": { "description": "Opaque, non-authorizing proof returned only to the exact authenticated caller and never logged.", "maxLength": 8192, "pattern": "^npcproof-v1\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]{43}$", "type": "string", "writeOnly": true } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemorySearchInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemorySearchResult" } } }, "description": "Current-authority, public-safe shared NPC-memory result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "405": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "413": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "415": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "429": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." }, "503": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SharedNpcMemoryProblem" } } }, "description": "Public-safe no-op; credentials and private payloads are never echoed." } }, "security": [ { "npcRuntimeBearer": [] } ], "summary": "Search one explicitly authorized current shared subject.", "tags": [ "npc-shared-memory" ], "x-childPrivateNpcMemoryScopesGranted": [], "x-currentAuthorityRevalidatedInStorageTransaction": true, "x-historicalAuthoritySnapshotProvenanceOnly": true, "x-idempotencyRequired": false, "x-maximumJsonRequestBytes": 32768, "x-operationProofDoesNotFreezeAuthority": true, "x-operationProofRequired": true, "x-privateScopesRemainChildOnly": [ "npc_global", "npc_player_relationship", "npc_game_context", "npc_session_context", "npc_puzzle_state" ], "x-rawCredentialExposed": false, "x-rawPayloadExposed": false, "x-routeAuthoritySchema": "memoryendpoints.npc_shared_memory_route_authority.v1", "x-runtimeCapability": "npc:memory:search", "x-runtimeCredentialOnly": true, "x-sharedSubjectCapabilities": [ "read", "consume" ], "x-valuesRedacted": true } }, "/api/matm/projects": { "get": { "description": "List project records in the authenticated workspace hierarchy.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "List projects" }, "post": { "description": "Create or update a real project record before project-scoped wiki indexing.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Upsert project", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/readiness-result": { "get": { "description": "Current readiness evidence without certification overclaim.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Read readiness result" } }, "/api/matm/receipts": { "get": { "description": "Read redacted acknowledgement receipts for an agent.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read receipts" } }, "/api/matm/review-queue": { "get": { "description": "Read memory review and long-term-memory promotion health without parsing raw debug JSON.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read review queue" } }, "/api/matm/review-queue/decide": { "post": { "description": "Promote, reject, or quarantine a review-pending memory item with idempotent reviewer action.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Decide review", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/route-inventory": { "get": { "description": "Public and protected route inventory with access boundaries.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Read route inventory" } }, "/api/matm/routing-decisions": { "get": { "description": "Read machine-readable coordinator routing decisions by room, lane, agent, destination, or status.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read routing decisions" }, "post": { "description": "Persist lane, destination room, specific goal, expected evidence, next action, and support plan.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Create routing decision", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/search": { "get": { "description": "Search scoped hosted workspace memory using query, exact event id, scope, source prefix, tag, memory type, review status, and promotion filters.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "description": "Public-safe text query. Leave blank when using an exact event_id readback.", "in": "query", "name": "q", "required": false, "schema": { "type": "string" } }, { "description": "Exact memory event id for deterministic post-submit readback.", "in": "query", "name": "event_id", "required": false, "schema": { "type": "string" } }, { "description": "Exact memory scope filter.", "in": "query", "name": "scope", "required": false, "schema": { "enum": [ "company", "workspace", "project", "game", "session", "goal", "task" ], "type": "string" } }, { "description": "Exact scope id filter.", "in": "query", "name": "scope_id", "required": false, "schema": { "type": "string" } }, { "description": "Source URI prefix filter.", "in": "query", "name": "source_prefix", "required": false, "schema": { "type": "string" } }, { "description": "Exact tag filter.", "in": "query", "name": "tag", "required": false, "schema": { "type": "string" } }, { "description": "Exact actor agent id filter.", "in": "query", "name": "actor_agent_id", "required": false, "schema": { "type": "string" } }, { "description": "Exact memory type filter.", "in": "query", "name": "memory_type", "required": false, "schema": { "enum": [ "fact", "decision", "status", "procedure", "risk", "evidence", "handoff", "note" ], "type": "string" } }, { "description": "Review status filter.", "in": "query", "name": "review_status", "required": false, "schema": { "type": "string" } }, { "description": "Promotion state filter.", "in": "query", "name": "promotion_state", "required": false, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Search hosted memory" } }, "/api/matm/sync/capabilities": { "get": { "description": "Public-safe distributed-sync v1 routes, revision/conflict semantics, checkpoint fields, and retention policy.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Read distributed sync capabilities" } }, "/api/matm/sync/changes": { "get": { "description": "Read monotonic server-sequence revisions after a checkpoint.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read sync changes" } }, "/api/matm/sync/devices": { "post": { "description": "Register a public-safe device authority for distributed sync.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Register sync device", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/sync/devices/revoke": { "post": { "description": "Revoke a device authority so future mutations are rejected with durable receipts.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Revoke sync device", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/sync/devices/rotate": { "post": { "description": "Increment device authority epoch for distributed sync.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Rotate sync device", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/sync/heads": { "get": { "description": "Read authoritative logical memory heads.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read sync heads" } }, "/api/matm/sync/mutations": { "post": { "description": "Submit a public-safe conflict-aware memory sync mutation with durable idempotent receipt.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Submit sync mutation", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/sync/receipts": { "get": { "description": "Read mutation receipt by Idempotency-Key header, idempotency_key query, or receipt_id query.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read sync receipt" } }, "/api/matm/sync/retention": { "get": { "description": "Read tombstone retention and hard-forget support policy.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted response." }, "201": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted creation response." }, "202": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Protected redacted accepted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read sync retention" } }, "/api/matm/uai-memory/branches": { "post": { "description": "Create a new identity with immutable parentMemoryId and parentRevision, then atomically acquire generation 1 of its independent writable lease.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } }, { "description": "Exact ETag. It may instead be supplied in the typed request body.", "in": "header", "name": "If-Match", "required": false, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryBranchInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryBranchResult" } } }, "description": "Typed, persisted, fenced result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Malformed request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Authentication required or invalid." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Principal or lease owner lacks authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Memory or lease not found in the authorized workspace." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Stale revision, ETag, generation, or inactive lease." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Closed request schema or field validation failed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "The memory identity is held by another writable lease or a legacy claim." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Create an independent .uai memory branch", "x-governedMaximumJsonRequestBytes": 1048576, "x-idempotency": "Exact key and canonical body replay one result; changed reuse is rejected." } }, "/api/matm/uai-memory/commits": { "post": { "description": "Advance only the hash-only memory head when lease id, writable access, generation, expected revision, and ETag all match.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } }, { "description": "Exact ETag. It may instead be supplied in the typed request body.", "in": "header", "name": "If-Match", "required": false, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryCommitInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryCommitResult" } } }, "description": "Typed, persisted, fenced result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Malformed request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Authentication required or invalid." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Principal or lease owner lacks authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Memory or lease not found in the authorized workspace." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Stale revision, ETag, generation, or inactive lease." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Closed request schema or field validation failed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "The memory identity is held by another writable lease or a legacy claim." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Commit a fenced .uai memory revision", "x-governedMaximumJsonRequestBytes": 1048576, "x-idempotency": "Exact key and canonical body replay one result; changed reuse is rejected." } }, "/api/matm/uai-memory/contract": { "get": { "description": "Read the narrow accountless-browser virtual-package exception and hash-only local .uai collaboration-overlay contract.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Read UAIX active-memory contract" } }, "/api/matm/uai-memory/edit-claims": { "get": { "description": "Inspect project-scoped active, completed, released, and expired hash-only edit claims.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimListResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read local .uai edit claims" }, "post": { "description": "Legacy-only acquisition for an unmigrated project/path. Once a stable memory identity governs the path, acquisition fails with typed 409 uai_memory_instance_managed and requiredAction=acquire_uai_memory_lease. An active legacy claim blocks a new writable memory lease until it is completed or released.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimAcquireInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimAcquireResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Conflict, including typed migration to the stable memory-instance lease contract." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Acquire local .uai edit claim", "x-governedMaximumJsonRequestBytes": 1048576, "x-legacyMigration": { "governedPathError": "uai_memory_instance_managed", "replacementRoute": "/api/matm/uai-memory/leases/acquire", "requiredAction": "acquire_uai_memory_lease" } } }, "/api/matm/uai-memory/edit-claims/complete": { "post": { "description": "Advance the hash-only file head using compare-and-swap and retain public-safe completion evidence.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimCompleteInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Complete local .uai edit claim", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/uai-memory/edit-claims/heartbeat": { "post": { "description": "Extend an owned active claim within the bounded lease window.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimHeartbeatInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Heartbeat local .uai edit claim", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/uai-memory/edit-claims/release": { "post": { "description": "Release an owned active claim without advancing the observed file hash.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimReleaseInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyEditClaimMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Release local .uai edit claim", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/uai-memory/file-heads": { "get": { "description": "Read project/path SHA-256 heads and active claim metadata; local file contents are never stored.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyFileHeadListResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read local .uai file heads" } }, "/api/matm/uai-memory/instances": { "get": { "description": "Read canonical and branch identities, immutable lineage, revision, ETag, and current lease generation without local file content.", "parameters": [ { "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "project_id", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "memory_id", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "logical_path", "required": false, "schema": { "pattern": "^\\.uai/.+\\.uai$", "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryInstanceList" } } }, "description": "Typed protected metadata response." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Malformed request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Authentication required or invalid." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Principal or lease owner lacks authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Memory or lease not found in the authorized workspace." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Stale revision, ETag, generation, or inactive lease." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Closed request schema or field validation failed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "The memory identity is held by another writable lease or a legacy claim." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read stable .uai memory identities" }, "post": { "description": "Create the stable identity for one project/path/hash or confirm the exact existing identity. This does not grant a lease.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryInstanceCreateInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryInstanceCreateResult" } } }, "description": "The exact canonical identity already existed." }, "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryInstanceCreateResult" } } }, "description": "Typed, persisted, fenced result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Malformed request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Authentication required or invalid." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Principal or lease owner lacks authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Memory or lease not found in the authorized workspace." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Stale revision, ETag, generation, or inactive lease." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Closed request schema or field validation failed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "The memory identity is held by another writable lease or a legacy claim." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Create a canonical .uai memory identity", "x-governedMaximumJsonRequestBytes": 1048576, "x-idempotency": "Exact key and canonical body replay one result; changed reuse is rejected." } }, "/api/matm/uai-memory/leases": { "get": { "description": "Read active, expired, or released bounded lease metadata. Local content and internal write-slot data are never returned.", "parameters": [ { "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "memory_id", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "agent_id", "required": false, "schema": { "type": "string" } }, { "in": "query", "name": "status", "required": false, "schema": { "enum": [ "active", "expired", "released" ], "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryLeaseList" } } }, "description": "Typed protected metadata response." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Malformed request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Authentication required or invalid." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Principal or lease owner lacks authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Memory or lease not found in the authorized workspace." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Stale revision, ETag, generation, or inactive lease." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Closed request schema or field validation failed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "The memory identity is held by another writable lease or a legacy claim." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read .uai memory leases" } }, "/api/matm/uai-memory/leases/acquire": { "post": { "description": "Acquire a readonly lease or the sole active writable lease. Writable acquisition increments the monotonic lease generation used as the fencing token.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryLeaseAcquireInput" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryLeaseResult" } } }, "description": "Typed, persisted, fenced result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Malformed request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Authentication required or invalid." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Principal or lease owner lacks authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Memory or lease not found in the authorized workspace." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Stale revision, ETag, generation, or inactive lease." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Closed request schema or field validation failed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "The memory identity is held by another writable lease or a legacy claim." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Acquire a .uai memory lease", "x-governedMaximumJsonRequestBytes": 1048576, "x-idempotency": "Exact key and canonical body replay one result; changed reuse is rejected." } }, "/api/matm/uai-memory/leases/release": { "post": { "description": "Release only the exact owned active lease generation without changing the memory revision.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryLeaseReleaseInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryLeaseResult" } } }, "description": "Typed, persisted, fenced result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Malformed request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Authentication required or invalid." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Principal or lease owner lacks authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Memory or lease not found in the authorized workspace." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Stale revision, ETag, generation, or inactive lease." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Closed request schema or field validation failed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "The memory identity is held by another writable lease or a legacy claim." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Release a .uai memory lease", "x-governedMaximumJsonRequestBytes": 1048576, "x-idempotency": "Exact key and canonical body replay one result; changed reuse is rejected." } }, "/api/matm/uai-memory/leases/renew": { "post": { "description": "Renew only the exact owned, active, unexpired lease generation. Renewal cannot revive an expired lease.", "parameters": [ { "description": "High-entropy request key. Exact key/body retry replays the original result; changed reuse returns 409. Never include credentials.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryLeaseRenewInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryLeaseResult" } } }, "description": "Typed, persisted, fenced result." }, "400": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Malformed request; no mutation." }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Authentication required or invalid." }, "403": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Principal or lease owner lacks authority." }, "404": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Memory or lease not found in the authorized workspace." }, "409": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Stale revision, ETag, generation, or inactive lease." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "Closed request schema or field validation failed." }, "423": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiMemoryProblem" } } }, "description": "The memory identity is held by another writable lease or a legacy claim." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Renew a .uai memory lease", "x-governedMaximumJsonRequestBytes": 1048576, "x-idempotency": "Exact key and canonical body replay one result; changed reuse is rejected." } }, "/api/matm/uai-memory/packages": { "get": { "description": "Inspect registered-agent virtual UAIX package readiness without exposing a workspace key.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyPackageListResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read virtual UAIX packages" }, "post": { "description": "Create the full database-backed active-memory exception only for an accountless browser AI without durable local filesystem access.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyPackageCreateInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyPackageMutationResult" } } }, "description": "Typed protected redacted response." }, "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyPackageMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Create virtual UAIX package", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/uai-memory/records": { "get": { "description": "Read protected date-free public-safe records or immutable revision history for one registered agent package.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyRecordListResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read virtual UAIX records" }, "post": { "description": "Create or compare-and-swap one supported logical UAIX record with exact protected readback.", "parameters": [ { "description": "Stable idempotency key for exact retries. Never include secrets.", "in": "header", "name": "Idempotency-Key", "required": true, "schema": { "maxLength": 200, "minLength": 16, "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyRecordUpsertInput" } } }, "required": true }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyRecordMutationResult" } } }, "description": "Typed protected redacted response." }, "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyRecordMutationResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Write one virtual UAIX record", "x-governedMaximumJsonRequestBytes": 1048576 } }, "/api/matm/uai-memory/startup": { "get": { "description": "Return the protected virtual package in deterministic startup order with missing-record and readiness evidence.", "parameters": [ { "description": "Authorized workspace id.", "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UaiLegacyStartupResult" } } }, "description": "Typed protected redacted response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "409": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "413": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Governed JSON request exceeds the enforced 1 MiB request-body limit; no mutation is performed." }, "415": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "An explicit Content-Type is not application/json; no mutation is performed. Omitted Content-Type remains accepted for legacy governed clients." }, "422": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "workspaceBearer": [] }, { "workspaceHeader": [] } ], "summary": "Read virtual UAIX startup" } }, "/api/matm/workspace": { "get": { "description": "Returns an explicitly authorized workspace boundary for a governed direct-agent credential.", "parameters": [ { "in": "query", "name": "workspace_id", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GovernedWorkspaceReadbackResult" } } }, "description": "Protected workspace boundary." }, "401": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "403": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." }, "404": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "security": [ { "companyMasterBearer": [] }, { "workspaceBearer": [] }, { "workspaceHeader": [] }, { "npcGatewayBearer": [] } ], "summary": "Load workspace boundary", "x-noRedirects": true } }, "/api/releases": { "get": { "description": "Canonical dated MemoryEndpoints release catalog with exact build provenance and no private deployment values.", "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Public-safe response." }, "400": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "Safe no-op error. Raw credentials and raw private payloads are not echoed." } }, "summary": "Read public release history" } } }, "servers": [ { "url": "https://memoryendpoints.com" } ], "tags": [ { "description": "Public-safe discovery and readiness routes.", "name": "discovery" }, { "description": "Workspace setup and agent registration.", "name": "setup" }, { "description": "Hosted public-safe memory and review promotion.", "name": "memory" }, { "description": "Database-backed authenticated wiki tree and protected searchable documents.", "name": "knowledge" }, { "description": "First-class reviewed external links, citations, and curated internet search.", "name": "web" }, { "description": "Meeting rooms, routing, and current messages.", "name": "coordination" }, { "description": "Receipts and audit evidence.", "name": "evidence" }, { "description": "Cookie-authenticated, CSRF-protected, selected-context human-owner authority control planes.", "name": "human-authority" }, { "description": "Additive runtime-only site, world, and room shared NPC memory with transactional current-authority validation.", "name": "npc-shared-memory" } ], "x-agentCompatibility": { "contract": "/api/matm/agent-compatibility", "routeInventoryIncludesCompatibilityGuidance": true, "supportedAbilityLevels": [ "L0", "L1", "L2", "L3", "L4", "L5", "L6", "L7" ], "unknownClientDefault": "downgrade_to_L0_or_L1" }, "x-humanCommercialAuthority": { "bearerCredentialsAccepted": false, "credentialType": "human_account_session", "csrfRequired": true, "identityClass": "human_commercial_operator", "recentReauthenticationRequiredForMutations": true, "routes": [ { "inputSchema": null, "method": "GET", "mutation": false, "operation": "npc_classification_authority_selectors", "path": "/api/matm/human/operational/npc-classification-authority", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanNpcClassificationAuthoritySelectorsResult", "successStatuses": [ "200" ] }, { "inputSchema": null, "method": "GET", "mutation": false, "operation": "parent_authority_readback", "path": "/api/matm/human/operational/commercial-parent-authority", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanCommercialParentAuthorityReadResult", "successStatuses": [ "200" ] }, { "inputSchema": "HumanCommercialParentAuthorityMutationInput", "method": "POST", "mutation": true, "operation": "parent_authority_create", "path": "/api/matm/human/operational/commercial-parent-authority/create", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanCommercialParentAuthorityMutationResult", "successStatuses": [ "200", "201" ] }, { "inputSchema": "HumanCommercialParentAuthorityMutationInput", "method": "POST", "mutation": true, "operation": "parent_authority_redelegate", "path": "/api/matm/human/operational/commercial-parent-authority/redelegate", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanCommercialParentAuthorityMutationResult", "successStatuses": [ "200" ] }, { "inputSchema": null, "method": "GET", "mutation": false, "operation": "hierarchy_readback", "path": "/api/matm/human/operational/commercial-hierarchy", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanCommercialHierarchyReadResult", "successStatuses": [ "200" ] }, { "inputSchema": "HumanCommercialHierarchyMutationInput", "method": "POST", "mutation": true, "operation": "hierarchy_mutate", "path": "/api/matm/human/operational/commercial-hierarchy/mutate", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanCommercialHierarchyMutationResult", "successStatuses": [ "200" ] }, { "inputSchema": "HumanNpcClassificationAuthorityIssueInput", "method": "POST", "mutation": true, "operation": "npc_classification_authority_issue", "path": "/api/matm/human/operational/npc-classification-authority/issue", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanNpcClassificationAuthorityIssueResult", "successStatuses": [ "200", "201" ] }, { "inputSchema": "HumanNpcClassificationAuthorityRevokeInput", "method": "POST", "mutation": true, "operation": "npc_classification_authority_revoke", "path": "/api/matm/human/operational/npc-classification-authority/revoke", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanNpcClassificationAuthorityRevokeResult", "successStatuses": [ "200" ] }, { "inputSchema": "HumanNpcClassificationAuthorityRotateKeyInput", "method": "POST", "mutation": true, "operation": "npc_classification_authority_rotate_key", "path": "/api/matm/human/operational/npc-classification-authority/rotate-key", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanNpcClassificationAuthorityRotateKeyResult", "successStatuses": [ "200" ] }, { "inputSchema": null, "method": "GET", "mutation": false, "operation": "npc_private_runtime_delegation_readback", "path": "/api/matm/human/operational/npc-private-runtime-delegation", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanNpcPrivateRuntimeDelegationReadResult", "successStatuses": [ "200" ] }, { "inputSchema": "HumanNpcPrivateRuntimeDelegationIssueInput", "method": "POST", "mutation": true, "operation": "npc_private_runtime_delegation_issue", "path": "/api/matm/human/operational/npc-private-runtime-delegation/issue", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanNpcPrivateRuntimeDelegationMutationResult", "successStatuses": [ "200", "201" ] }, { "inputSchema": "HumanNpcPrivateRuntimeDelegationRefreshInput", "method": "POST", "mutation": true, "operation": "npc_private_runtime_delegation_refresh", "path": "/api/matm/human/operational/npc-private-runtime-delegation/refresh", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanNpcPrivateRuntimeDelegationMutationResult", "successStatuses": [ "200" ] }, { "inputSchema": "HumanNpcPrivateRuntimeDelegationRevokeInput", "method": "POST", "mutation": true, "operation": "npc_private_runtime_delegation_revoke", "path": "/api/matm/human/operational/npc-private-runtime-delegation/revoke", "permission": "canManageCommercialHierarchy", "resultSchema": "HumanNpcPrivateRuntimeDelegationMutationResult", "successStatuses": [ "200" ] } ], "sameOriginRequired": true, "schemaVersion": "memoryendpoints.human_commercial_operator.v1", "selectedContextRequired": true, "siteOrigin": "escape.gamesfor.me" }, "x-memoryendpoints-commercial-extension": true, "x-memoryendpoints-goldenPath": [ "create_or_enter_workspace", "register_agent", "load_workspace", "create_or_discover_project", "index_knowledge_document", "crawl_knowledge_tree", "index_external_link_citation", "search_curated_web", "save_memory", "search_memory", "create_or_read_meeting_room", "send_current_message", "acknowledge_notification", "read_receipts_and_audit" ], "x-npcOperationProofRouteAuthority": { "additive": true, "callerDigestAccepted": false, "escapeConsumerIntegrationReady": false, "escapeRemoteWriteEligible": false, "fiveChildPrivateScopesRemainUnchanged": true, "fiveGatewayRoutesRemainUnchanged": true, "fiveRuntimeRoutesRemainUnchanged": true, "fullIntendedRequestCanonicalizedByServer": true, "maximumTtlSeconds": 300, "orderedSixGatewayCapabilitiesRemainUnchanged": true, "orderedSixRuntimeCapabilitiesRemainUnchanged": true, "proofFreezesAuthority": false, "proofIsNonAuthorizing": true, "proofIsOpaque": true, "protectedIssuanceRouteCount": 3, "protectedValidationProofAvailable": true, "rawCredentialExposed": false, "rawPayloadExposed": false, "rawProofLogged": false, "routes": [ { "authentication": "active_exact_npc_gateway_bearer", "childPrivateNpcMemoryScopesGranted": [], "credentialType": "npc_gateway", "idempotencyRequiredFor": [ "/api/matm/npc-memory/runtime-credentials" ], "inputSchema": "NpcRuntimeRegistrationOperationProofInput", "intendedOperation": "runtime:register", "intendedOperationPaths": [ "/api/matm/npc-memory/runtime-credentials" ], "method": "POST", "nonAuthorizing": true, "operationClass": "runtime_registration", "path": "/api/matm/npc-shared-memory/operation-proofs/runtime-registration", "problemSchema": "SharedNpcMemoryProblem", "rawCredentialExposed": false, "rawPayloadExposed": false, "rawProofLogged": false, "requiredCapability": "npc:runtime_credential:issue", "resultSchema": "NpcOperationProofResult", "stateless": true, "successStatus": 200, "valuesRedacted": true }, { "authentication": "active_exact_npc_runtime_bearer", "childPrivateNpcMemoryScopesGranted": [], "credentialType": "npc_runtime", "idempotencyRequiredFor": [ "/api/matm/npc-shared-memory/classifications/attach" ], "inputSchema": "NpcClassificationAttachOperationProofInput", "intendedOperation": "runtime:attach-classification", "intendedOperationPaths": [ "/api/matm/npc-shared-memory/classifications/attach" ], "method": "POST", "nonAuthorizing": true, "operationClass": "classification_attach", "path": "/api/matm/npc-shared-memory/operation-proofs/classification-attach", "problemSchema": "SharedNpcMemoryProblem", "rawCredentialExposed": false, "rawPayloadExposed": false, "rawProofLogged": false, "requiredCapability": null, "resultSchema": "NpcOperationProofResult", "stateless": true, "successStatus": 200, "valuesRedacted": true }, { "authentication": "active_exact_npc_runtime_bearer", "childPrivateNpcMemoryScopesGranted": [], "credentialType": "npc_runtime", "idempotencyRequiredFor": [ "/api/matm/npc-shared-memory/records" ], "inputSchema": "NpcSharedOperationProofInput", "intendedOperation": null, "intendedOperationPaths": [ "/api/matm/npc-shared-memory/records", "/api/matm/npc-shared-memory/search", "/api/matm/npc-shared-memory/readback" ], "method": "POST", "nonAuthorizing": true, "operationClass": "shared_operation", "path": "/api/matm/npc-shared-memory/operation-proofs/shared-operation", "problemSchema": "SharedNpcMemoryProblem", "rawCredentialExposed": false, "rawPayloadExposed": false, "rawProofLogged": false, "requiredCapability": null, "resultSchema": "NpcOperationProofResult", "stateless": true, "successStatus": 200, "valuesRedacted": true } ], "schemaVersion": "memoryendpoints.npc_operation_proof_route_authority.v1", "sealedPrivateV1SubmitAndSearchProofRequired": false, "storageMigrationRequired": false, "valuesRedacted": true }, "x-npcSharedMemoryRouteAuthority": { "additive": true, "fiveChildPrivateScopesRemainUnchanged": true, "rawCredentialExposed": false, "rawPayloadExposed": false, "routes": [ { "authentication": "active_exact_npc_runtime_bearer", "childPrivateNpcMemoryScopesGranted": [], "idempotencyRequired": true, "inputSchema": "SharedNpcMemorySubmitInput", "method": "POST", "operationKind": "atomic_current_authority_write", "path": "/api/matm/npc-shared-memory/records", "problemSchema": "SharedNpcMemoryProblem", "rawCredentialExposed": false, "rawPayloadExposed": false, "resultSchema": "SharedNpcMemorySubmitResult", "runtimeCapability": "npc:memory:submit", "runtimeCredentialOnly": true, "sharedSubjectCapabilities": [ "write" ], "successStatus": 201, "valuesRedacted": true }, { "authentication": "active_exact_npc_runtime_bearer", "childPrivateNpcMemoryScopesGranted": [], "idempotencyRequired": false, "inputSchema": "SharedNpcMemorySearchInput", "method": "POST", "operationKind": "current_authority_search", "path": "/api/matm/npc-shared-memory/search", "problemSchema": "SharedNpcMemoryProblem", "rawCredentialExposed": false, "rawPayloadExposed": false, "resultSchema": "SharedNpcMemorySearchResult", "runtimeCapability": "npc:memory:search", "runtimeCredentialOnly": true, "sharedSubjectCapabilities": [ "read", "consume" ], "successStatus": 200, "valuesRedacted": true }, { "authentication": "active_exact_npc_runtime_bearer", "childPrivateNpcMemoryScopesGranted": [], "idempotencyRequired": false, "inputSchema": "SharedNpcMemoryReadbackInput", "method": "POST", "operationKind": "current_authority_readback", "path": "/api/matm/npc-shared-memory/readback", "problemSchema": "SharedNpcMemoryProblem", "rawCredentialExposed": false, "rawPayloadExposed": false, "resultSchema": "SharedNpcMemoryReadbackResult", "runtimeCapability": "npc:memory:readback", "runtimeCredentialOnly": true, "sharedSubjectCapabilities": [ "read", "consume" ], "successStatus": 200, "valuesRedacted": true } ], "runtimeCredentialOnly": true, "schemaVersion": "memoryendpoints.npc_shared_memory_route_authority.v1", "sixRuntimeCapabilitiesRemainUnchanged": true, "valuesRedacted": true }, "x-truthBoundary": { "examplesUsePlaceholdersOnly": true, "notFullGeneratedSpec": true, "protectedWritesRequireRouteAppropriateGovernedAuthority": true, "protectedWritesRequireWorkspaceKey": false, "rawPrivatePayloadsStored": false, "rawWorkspaceKeysInPublicResponses": false, "valuesRedacted": true } }