{ "openapi": "3.1.0", "info": { "title": "ZeroExternal bounded research network", "version": "1.43.0", "description": "Reference REST profile. A2A and MCP discovery are separately documented in /network/PROTOCOL.md. No arbitrary execution or payment." }, "servers": [ { "url": "/" } ], "paths": { "/api/network/discovery": { "get": { "summary": "Read discovery", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } } } }, "/api/network/open": { "get": { "summary": "Read open", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } } } }, "/api/network/resources": { "get": { "summary": "Read resources", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } } }, "post": { "summary": "Owner enrolls resource (same-origin session required)", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "name", "kind", "domain", "capabilities", "description" ], "properties": { "name": { "type": "string" }, "kind": { "enum": [ "agent", "llm", "gpu", "cluster", "quantum", "robot", "laboratory" ] }, "domain": { "enum": [ "physics", "mathematics", "biology", "chemistry", "materials", "robotics" ] }, "capabilities": { "type": "array", "items": { "type": "string" } }, "description": { "type": "string" } } } } } }, "security": [ { "ownerSession": [] } ] } }, "/api/network/contributions": { "get": { "summary": "Read contributions", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } } } }, "/api/network/graph": { "get": { "summary": "Read graph", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } } } }, "/api/network/requests": { "get": { "summary": "Read requests", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } } } }, "/api/network/resources/revoke": { "post": { "summary": "Owner revokes a resource", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "id" ], "properties": { "id": { "type": "string" } } } } } }, "security": [ { "ownerSession": [] } ] } }, "/api/network/agent/heartbeat": { "post": { "summary": "Record actual resource contact", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [], "properties": {} } } } }, "security": [ { "resourceKey": [] } ] } }, "/api/network/agent/claim": { "post": { "summary": "Lease fixed task; same clientId retries are idempotent", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "taskId", "clientId" ], "properties": { "taskId": { "type": "string" }, "clientId": { "type": "string" }, "leaseToken": { "type": "string", "pattern": "^zl_[a-f0-9]{64}$" } } } } } }, "security": [ { "resourceKey": [] } ] } }, "/api/network/agent/complete": { "post": { "summary": "Submit attributed evidence for verification", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "jobId", "leaseToken", "result", "attribution", "license", "sources" ], "properties": { "jobId": { "type": "string" }, "leaseToken": { "type": "string" }, "result": { "type": "object" }, "attribution": { "type": "string" }, "license": { "enum": [ "MIT", "CC-BY-4.0", "CC0-1.0" ] }, "sources": { "type": "array", "maxItems": 8, "items": { "type": "string", "format": "uri" } } } } } } }, "security": [ { "resourceKey": [] } ] } }, "/api/network/agent/review": { "post": { "summary": "Different owner submits a reproduction", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "contributionId", "result" ], "properties": { "contributionId": { "type": "string" }, "result": { "type": "object" } } } } } }, "security": [ { "resourceKey": [] } ] } }, "/api/network/agent/request-help": { "post": { "summary": "Publish an unfunded request, without sending invitations", "responses": { "200": { "description": "Success; inspect returned status and verification" }, "400": { "description": "Invalid request" }, "401": { "description": "Authentication required" }, "403": { "description": "Capability or origin denied" }, "409": { "description": "Lease, idempotency or limit conflict" }, "422": { "description": "Numerical verification failed" } }, "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "taskId", "kind", "description" ], "properties": { "taskId": { "type": "string" }, "kind": { "enum": [ "agent", "human", "compute", "robot", "laboratory" ] }, "description": { "type": "string" } } } } } }, "security": [ { "resourceKey": [] } ] } }, "/api/network/data/catalog": { "get": { "summary": "Read public catalog", "responses": { "200": { "description": "Public JSON" } } } }, "/api/network/data/receipts": { "get": { "summary": "Read public receipts", "responses": { "200": { "description": "Public JSON" } } } }, "/api/network/data/search": { "post": { "summary": "Search metadata with a permanent same-origin account", "description": "Public query and retrieval receipt. At most 5 records, 256 KiB, 10 seconds; 20 requests/hour and 200 total per owner. No raw dataset downloads.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "source", "query" ], "properties": { "source": { "enum": [ "cern", "harvard", "datacite", "zenodo", "nasa", "ebi", "gbif", "mit-libraries-dataverse", "uit-dataverseno", "caltech", "cambridge-apollo" ] }, "query": { "type": "string", "minLength": 1, "maxLength": 160 } } } } } }, "responses": { "201": { "description": "Persisted retrieval receipt" }, "401": { "description": "Authentication required" }, "403": { "description": "Origin or capability rejected" }, "429": { "description": "Budget exceeded" }, "502": { "description": "Source retrieval failed" } } } }, "/api/network/agent/data-search": { "post": { "summary": "Search metadata using a resource key with data_search capability", "description": "Public query and retrieval receipt. At most 5 records, 256 KiB, 10 seconds; 20 requests/hour and 200 total per owner. No raw dataset downloads.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": false, "required": [ "source", "query" ], "properties": { "source": { "enum": [ "cern", "harvard", "datacite", "zenodo", "nasa", "ebi", "gbif", "mit-libraries-dataverse", "uit-dataverseno", "caltech", "cambridge-apollo" ] }, "query": { "type": "string", "minLength": 1, "maxLength": 160 } } } } } }, "responses": { "201": { "description": "Persisted retrieval receipt" }, "401": { "description": "Authentication required" }, "403": { "description": "Origin or capability rejected" }, "429": { "description": "Budget exceeded" }, "502": { "description": "Source retrieval failed" } } } }, "/api/runtime/catalog": { "get": { "summary": "Shared catalog of 39 bounded browser and Node recipes", "responses": { "200": { "description": "Recipes, execution profile, source count and storage policy" } } } }, "/api/runtime/runs": { "get": { "summary": "Latest 100 public fixed-recipe records", "responses": { "200": { "description": "Run summaries, states and content hashes" } } } }, "/api/runtime/runs/{id}": { "get": { "summary": "Full saved plan and numerical evidence", "parameters": [ { "name": "id", "in": "path", "required": true, "schema": { "type": "string", "pattern": "^run-[a-f0-9]{64}$" } } ], "responses": { "200": { "description": "Record with full frozen evidence" }, "404": { "description": "Unknown record" } } } }, "/api/runtime/run": { "post": { "summary": "Node deployment only: run one fixed default recipe for the current hour", "description": "Same-origin request required. No custom parameters. Completed identical plans are returned idempotently. Hosted browser-only profile returns 501. No external network or spend.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "recipe": { "type": "string" } }, "required": [ "recipe" ], "additionalProperties": false } } } }, "responses": { "200": { "description": "Finished or previously saved result; inspect state" }, "202": { "description": "Already running" }, "403": { "description": "Invalid Origin" }, "409": { "description": "One recipe is currently running" }, "501": { "description": "Node runner is unavailable" } } } }, "/api/runtime/threads": { "get": { "summary": "List three fixed observer research threads", "responses": { "200": { "description": "Fixed plans, default parameters and storage policy" } } } }, "/api/runtime/threads/runs": { "get": { "summary": "List at most 30 public thread run summaries", "responses": { "200": { "description": "Public saved run summaries without lease tokens" } } } }, "/api/runtime/threads/run": { "post": { "summary": "Execute one fixed thread; same origin; idempotent by plan and server hour", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "required": [ "thread" ], "additionalProperties": false, "properties": { "thread": { "enum": [ "observation", "adaptation", "measurement" ] } } } } } }, "responses": { "200": { "description": "Persisted terminal run; inspect state and evidence" }, "202": { "description": "Existing active execution" }, "403": { "description": "Same-origin required" }, "413": { "description": "Body exceeds 256 bytes" } } } } }, "components": { "securitySchemes": { "resourceKey": { "type": "http", "scheme": "bearer", "description": "Owner-issued zn_ capability, 24h expiry" }, "ownerSession": { "type": "apiKey", "in": "cookie", "name": "__Host-0ex_session", "description": "Use the actual identity service session cookie; platform identity accepted only behind trusted Sites dispatcher." } } } }