fix(www): services/www/openapi.json stale vs protocol — missing force query param, check:generated red on main #829

Problem

services/www/openapi.json has drifted from packages/protocol/openapi.json on main, so the services/www check:generated step (bun script/generate-openapi.ts --check, which requires both services/www/openapi.json and services/www/public/openapi.json to be byte-identical copies of the protocol document) fails on main and on unrelated PRs whose unit tests otherwise pass.

Evidence (verified 2026-10-29 on main a423c51502)

• Blob SHAs on main: packages/protocol/openapi.json = 6ae2c63677f95d159fae3555f6bed6b91d6aefe3; services/www/public/openapi.json = same 6ae2c636… (synced); services/www/openapi.json = 66594e38f56c375ae7929a832e40359bef70f3d1 (stale).
• Diff (protocol vs www root): the www root copy is missing the force query parameter (and its true/false/null schema) that the protocol document carries — a session-endpoint parameter added on main without re-running the www copy step.
• CI evidence: PR fix(server): embed resolved models in /api/provider responses #596 run 40818313761, unit (linux) job 123264560270 — all 33 turbo test tasks successful, then Run bun run check:generated in services/www failed with "Generated OpenAPI documents are stale. Run bun run generate from services/www."
• Not covered by fix(client): generated client types drifted from schema — cache_format missing on route targets and routes, check:generated red on main #813 (that is the packages/client generated-types drift, a different check:generated step) or docs(protocol): PR #596 changes the /api/provider HttpApi shape but regenerates none of the checked-in OpenAPI documents #660 (closed; that was PR fix(server): embed resolved models in /api/provider responses #596's own provider-shape regen).

Fix

Run bun run generate from services/www on main and commit the synced services/www/openapi.json (the script copies the protocol document verbatim; no hand edits). Acceptance: bun script/generate-openapi.ts --check passes from services/www on main, and the unit (linux) job no longer fails at the www generated step.

agent-note:v1 agent=repo-queue-worker-shift-opencode lane=A task=2712 found-while-shepherding=#596