From e11306613293a1a2a965e5f7c231115165630715 Mon Sep 17 00:00:00 2001
From: Steven Enamakel <enamakel@tinyhumans.ai>
Date: Fri, 25 Sep 2026 22:55:42 +0530
Subject: [PATCH] fix: restore legacy session route to SDK contract

---
 api/tinyhumans.backend.json    | 18 +++++++++++++++---
 src/generated_public_routes.rs |  1 +
 tests/openapi_sync.rs          | 10 ++++++----
 3 files changed, 22 insertions(+), 7 deletions(-)

diff --git a/api/tinyhumans.backend.json b/api/tinyhumans.backend.json
index 83317d2..b771114 100644
--- a/api/tinyhumans.backend.json
+++ b/api/tinyhumans.backend.json
@@ -8,9 +8,9 @@
     "url": "https://api.tinyhumans.ai/swagger.json",
     "title": "TinyHumans API",
     "version": "1.0.0",
-    "pathCount": 242,
-    "totalOperationCount": 268,
-    "operationCount": 211,
+    "pathCount": 243,
+    "totalOperationCount": 269,
+    "operationCount": 212,
     "supplementalOperationCount": 13,
     "excludedAdminOperationCount": 49,
     "excludedWebhookOperationCount": 12,
@@ -333,6 +333,18 @@
         "PUT /opencompany/instances/{slug}/custom-domain"
       ]
     },
+    {
+      "name": "orchestration",
+      "basePath": "/orchestration",
+      "auth": "bearer",
+      "operationCount": 1,
+      "tags": [
+        "Orchestration"
+      ],
+      "routes": [
+        "GET /orchestration/v1/sessions"
+      ]
+    },
     {
       "name": "payments",
       "basePath": "/payments",
diff --git a/src/generated_public_routes.rs b/src/generated_public_routes.rs
index 025bfbd..e69d193 100644
--- a/src/generated_public_routes.rs
+++ b/src/generated_public_routes.rs
@@ -150,6 +150,7 @@ pub const PUBLIC_ROUTES: &[(&str, &str)] = &[
     ("POST", "/opencompany/instances/{slug}/suspend"),
     ("POST", "/opencompany/instances/{slug}/update"),
     ("GET", "/opencompany/instances/usage"),
+    ("GET", "/orchestration/v1/sessions"),
     ("POST", "/payments/coinbase/charge"),
     ("GET", "/payments/coinbase/charge/{gatewayTransactionId}"),
     ("GET", "/payments/credits/auto-recharge"),
diff --git a/tests/openapi_sync.rs b/tests/openapi_sync.rs
index c104ecc..c24d124 100644
--- a/tests/openapi_sync.rs
+++ b/tests/openapi_sync.rs
@@ -151,8 +151,8 @@ fn generated_rust_routes_match_the_public_manifest() {
     //
     // 237 -> 202: the `/medulla/v1/*` and `/orchestration/v1/*` families are
     // gone with the orchestration model. The backend's part in Medulla is now
-    // the plan entitlement on `/auth/me`; nothing under those prefixes is
-    // served any more.
+    // the plan entitlement on `/auth/me`, apart from the authenticated empty
+    // session list kept for older OpenHuman clients.
     // 202 -> 203: `GET /payments/credits/lots`, the caller's live credit lots
     // and their expiries (subscription credit no longer rolls over; top-ups
     // last a year).
@@ -166,7 +166,8 @@ fn generated_rust_routes_match_the_public_manifest() {
     // them).
     // 208 -> 211: the Gemini integration — `POST .../gemini/models/{model}/generate-content`,
     // `POST .../gemini/live/sessions` and `GET .../gemini/live/sessions/{sessionId}`.
-    assert_eq!(manifest["source"]["operationCount"], 211);
+    // 211 -> 212: the retired orchestration session-list compatibility route.
+    assert_eq!(manifest["source"]["operationCount"], 212);
     // 14 -> 13: `GET /orchestration/v1/steering` left with that family.
     assert_eq!(manifest["source"]["supplementalOperationCount"], 13);
     // 37 -> 39: the two service-token operations on
@@ -206,7 +207,8 @@ fn generated_rust_routes_match_the_public_manifest() {
     // 206 -> 208: the two new public opencompany routes above
     // (`GET /opencompany/companies` and `POST /opencompany/instances/{slug}/update`).
     // 208 -> 211: the three Gemini routes.
-    assert_eq!(rust_routes.len(), 211);
+    // 211 -> 212: the retired orchestration session-list compatibility route.
+    assert_eq!(rust_routes.len(), 212);
     assert_eq!(rust_routes, manifest_routes);
     assert!(rust_routes
         .iter()