{
  "openapi": "3.1.0",
  "info": {
    "title": "Genesis Player",
    "version": "1.0.0"
  },
  "servers": [
    {
      "url": "https://tinycore-genesis.pages.dev"
    }
  ],
  "paths": {
    "/api/v1/catalog": {
      "get": {
        "summary": "Public demo catalog",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        }
      }
    },
    "/api/v1/terms": {
      "get": {
        "summary": "Terms, scopes, expiry and shared rate limits",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        }
      }
    },
    "/api/v1/terms/accept": {
      "post": {
        "summary": "Record explicit dual-signed user delegation",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "delegation": {
                    "type": "object",
                    "properties": {
                      "userPublicKey": {
                        "type": "string",
                        "pattern": "^[A-Za-z0-9_-]{43}$"
                      },
                      "agentPublicKey": {
                        "type": "string",
                        "pattern": "^[A-Za-z0-9_-]{43}$"
                      },
                      "termsVersion": {
                        "const": "2026-11-10"
                      },
                      "authorizedDelegation": {
                        "const": true
                      },
                      "scopes": {
                        "type": "array",
                        "minItems": 1,
                        "maxItems": 2,
                        "uniqueItems": true,
                        "items": {
                          "enum": ["catalog:read", "launch:create"]
                        }
                      },
                      "callbackUrl": {
                        "type": "string",
                        "format": "uri"
                      },
                      "issuedAt": {
                        "type": "integer"
                      },
                      "expiresAt": {
                        "type": "integer"
                      },
                      "encryptionKey": {
                        "type": "object"
                      }
                    },
                    "required": [
                      "userPublicKey",
                      "agentPublicKey",
                      "termsVersion",
                      "authorizedDelegation",
                      "scopes",
                      "callbackUrl",
                      "issuedAt",
                      "expiresAt"
                    ]
                  },
                  "userSignature": {
                    "type": "string"
                  },
                  "agentSignature": {
                    "type": "string"
                  }
                },
                "required": ["delegation", "userSignature", "agentSignature"]
              }
            }
          }
        }
      }
    },
    "/api/v1/applications": {
      "post": {
        "summary": "Create pending application for administrator review",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "acceptanceId": {
                    "type": "string"
                  },
                  "signature": {
                    "type": "string"
                  }
                },
                "required": ["acceptanceId", "signature"]
              }
            }
          }
        }
      }
    },
    "/api/v1/applications/{id}": {
      "get": {
        "summary": "Signed status proof in X-Agent-Time and X-Agent-Signature",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        }
      }
    },
    "/api/v1/contact": {
      "post": {
        "summary": "Persist pending message; Idempotency-Key required",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "name": {
                    "type": "string",
                    "maxLength": 80
                  },
                  "email": {
                    "type": "string",
                    "maxLength": 254
                  },
                  "subject": {
                    "type": "string",
                    "maxLength": 120
                  },
                  "message": {
                    "type": "string",
                    "maxLength": 4000
                  },
                  "acceptTerms": {
                    "const": true
                  },
                  "termsVersion": {
                    "const": "2026-11-10"
                  }
                },
                "required": [
                  "name",
                  "email",
                  "subject",
                  "message",
                  "acceptTerms",
                  "termsVersion"
                ]
              }
            }
          }
        }
      }
    },
    "/api/v1/launch": {
      "post": {
        "summary": "Create browser-local launch URL",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "demo": {
                    "enum": ["paddle", "grid", "menu"]
                  }
                },
                "required": ["demo"]
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/keys/self": {
      "get": {
        "summary": "Read current key metadata",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/keys/rotate": {
      "post": {
        "summary": "Rotate current key",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {},
                "required": []
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/keys/revoke": {
      "post": {
        "summary": "Revoke current key",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {},
                "required": []
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/mcp": {
      "post": {
        "summary": "Stateless JSON-RPC MCP; each batch action counts",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "oneOf": [
                  {
                    "type": "object"
                  },
                  {
                    "type": "array",
                    "minItems": 1,
                    "maxItems": 30,
                    "items": {
                      "type": "object"
                    }
                  }
                ]
              }
            }
          }
        }
      }
    },
    "/api/v1/admin/applications": {
      "get": {
        "summary": "Administrator review records; filter status/limit/offset",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/contacts": {
      "get": {
        "summary": "Administrator review records; filter status/limit/offset",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/grants": {
      "get": {
        "summary": "Administrator review records; filter status/limit/offset",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/keys": {
      "get": {
        "summary": "Administrator review records; filter status/limit/offset",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/deliveries": {
      "get": {
        "summary": "Administrator review records; filter status/limit/offset",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/audit": {
      "get": {
        "summary": "Administrator review records; filter status/limit/offset",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/counts": {
      "get": {
        "summary": "Administrator review records; filter status/limit/offset",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/applications/{id}/approve": {
      "post": {
        "summary": "Administrator approve with atomic state transition",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "reason": {
                    "type": "string",
                    "maxLength": 500
                  }
                },
                "required": ["reason"]
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/applications/{id}/reject": {
      "post": {
        "summary": "Administrator reject with atomic state transition",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "reason": {
                    "type": "string",
                    "maxLength": 500
                  }
                },
                "required": ["reason"]
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/contacts/{id}/resolve": {
      "post": {
        "summary": "Administrator resolve with atomic state transition",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "reason": {
                    "type": "string",
                    "maxLength": 500
                  }
                },
                "required": ["reason"]
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/contacts/{id}/reject": {
      "post": {
        "summary": "Administrator reject with atomic state transition",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "reason": {
                    "type": "string",
                    "maxLength": 500
                  }
                },
                "required": ["reason"]
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/grants/{id}/revoke": {
      "post": {
        "summary": "Administrator revoke with atomic state transition",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "reason": {
                    "type": "string",
                    "maxLength": 500
                  }
                },
                "required": ["reason"]
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/keys/{id}/revoke": {
      "post": {
        "summary": "Administrator revoke with atomic state transition",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "reason": {
                    "type": "string",
                    "maxLength": 500
                  }
                },
                "required": ["reason"]
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    },
    "/api/v1/admin/deliveries/{id}/retry": {
      "post": {
        "summary": "Administrator retry with atomic state transition",
        "responses": {
          "200": {
            "description": "Successful response; see skill reference for body and asynchronous statuses"
          },
          "400": {
            "description": "Invalid input"
          },
          "401": {
            "description": "Expired, revoked, inactive or missing credential"
          },
          "403": {
            "description": "Scope, terms, approval or administrator authority required"
          },
          "409": {
            "description": "Conflict or already reviewed"
          },
          "429": {
            "description": "Shared rolling budget exhausted; Retry-After header"
          },
          "503": {
            "description": "Unavailable; request is not a successful operation"
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "reason": {
                    "type": "string",
                    "maxLength": 500
                  }
                },
                "required": ["reason"]
              }
            }
          }
        },
        "security": [
          {
            "bearer": []
          }
        ]
      }
    }
  },
  "components": {
    "securitySchemes": {
      "bearer": {
        "type": "http",
        "scheme": "bearer"
      }
    }
  },
  "x-terms": {
    "version": "2026-11-10",
    "maximumKeySeconds": 604800,
    "callerRollingOperations": 30,
    "callerRollingWindowSeconds": 60,
    "firstEnrollmentRequiresAdministratorApproval": true,
    "reference": "https://tinycore-genesis.pages.dev/agents"
  }
}