The OpenAPI document describes making an app (POST /api/v1/apps) and listing apps (GET /api/v1/apps) #3672

For building apps fast from any harness: src/contract/openapi.ts describes repositories, issues, pulls, the map and plan, but not /api/v1/apps. A harness reading the description cannot find out how to start an app.

Done:

• [ ] Both routes are in the document, with the inputs the route actually reads (name, owner, description, visibility, agent, pick) and the refusals it answers (unverified, app_limit, no_such_agent, a taken name), each naming its auth.
• [ ] A test checks that every field the route reads is described, so the description cannot drift from src/http/api.ts without failing.

Files: src/contract/openapi.ts, a test under test/. Fits: whoever keeps the OpenAPI document.