diff --git a/AGENTS.md b/AGENTS.md
index 17f1eb8..4cc206a 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -11,7 +11,7 @@ from an agent, see [`skills/fleet-runner/SKILL.md`](skills/fleet-runner/SKILL.md
 | `collector/` | The brain: Fastify + `node:sqlite`, the queue, the dashboard (`dash/`), the host executor |
 | `collector/src/workloads/explore/` | Exploratory QA: a vision model drives an app from mission cards (`collector/examples/missions/`); see `docs/explore/internals.md` |
 | `collector/src/api/v1/` | The control API. `routes.ts` is the single route table: it registers the routes, generates `openapi.json` and the typed client |
-| `collector/src/client/` | The generated client (`api.gen.ts`) and its transport. The CLI and the MCP server use nothing else |
+| `collector/src/client/` | The generated client (`api.gen.ts`) and its transport. The CLI and the MCP server use nothing else; the dashboard (`dash/src/client.ts`) uses it for everything `/api/v1` offers, and `scripts/check-dash-requests.ts` fails the suite if it calls a deprecated route |
 | `fleet/` | The `fleet` / `fleetr` command: runs a brain or a runner, plus the work commands, `fleet mcp` and the remote gateway |
 | `desktop/` | A Tauri menu-bar app around `fleet`. A front door, not a runner; compiled in CI on macOS and launched in CI on Linux (`desktop/ci/launch-smoke.sh`), never run on a Mac |
 | `runner-machine/`, `runner-android/`, `runner-ios/`, `runner-roku/`, `collector/runner-web/` | Runners. They speak the runner protocol (`/devices/register`, `/devices/:id/next-job`, `/results`), not `/api/v1` |
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0743d71..a891b37 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -174,6 +174,24 @@ a CI job fails when they disagree.
   `npm run shoot:live`, filtered to what was online and to the `bug-garden`
   fixture app; docs/brand.md says why a throwaway collector cannot make them.
   ([#90](https://github.com/addisdev/fleet-runner/pull/90))
+- **The dashboard reads devices, jobs, templates and schedules through
+  `/api/v1`.** It called the deprecated `GET /api/devices`, `/api/jobs` and
+  their detail routes, and enqueued with `POST /api/jobs`, with response types
+  written by hand, so the server could change a field and the dashboard would
+  show a blank column with nothing failing. It now uses the generated client
+  for every read and change `/api/v1` offers, and its types are the client's.
+  The `/api/v1` schemas state every field the dashboard reads, so
+  `check-api-v1` fails when a handler stops sending one, and a new suite step
+  fails if `dash/src` calls a route the deprecation headers mark. To carry the
+  Devices and Jobs filter menus, `GET /api/v1/devices` and `/api/v1/jobs` now
+  return `facets`, and `/api/v1/jobs` takes `has_error=true`. Two things a
+  person can see: the composer's spec is checked strictly, so an unknown
+  top-level field or params outside the workload's manifest is refused with
+  the path named instead of failing later, and its jobs record `source: dash`.
+  Enqueueing is no longer behind `FLEET_DASH_TOKEN`, as `POST /jobs` never
+  was. Findings, the Overview, results, system, events, the live stream and the
+  other changes stay on `/api/*` until `/api/v1` has them.
+  ([#97](https://github.com/addisdev/fleet-runner/pull/97))
 
 ### Fixed
 
@@ -288,6 +306,12 @@ a CI job fails when they disagree.
   case-sensitively where the harness does not. It now reads `absent_text` and
   matches case-insensitively, as the bug garden's README says.
   ([#88](https://github.com/addisdev/fleet-runner/pull/88))
+- **`/api/v1` cancel and retry were always refused with `FLEET_DASH_TOKEN`
+  set.** They hand the request to the guarded `/api/jobs/:id/cancel` and
+  `/retry`, and dropped `X-Fleet-Token` on the way, so with the guard on every
+  one answered 401 whatever the caller sent. The header is now carried, and
+  the refusal says `unauthorized` rather than `internal`.
+  ([#97](https://github.com/addisdev/fleet-runner/pull/97))
 
 ### Now verified
 
diff --git a/collector/dash/src/TokenBanner.tsx b/collector/dash/src/TokenBanner.tsx
index 6697f8d..792f520 100644
--- a/collector/dash/src/TokenBanner.tsx
+++ b/collector/dash/src/TokenBanner.tsx
@@ -3,15 +3,16 @@
 //
 // The alternative is what happened before it existed: you click something
 // ordinary, like renaming a device, and get a 401 naming an HTTP header. The
-// requirement is knowable up front — /api/health reports it — so say so up
+// requirement is knowable up front — /api/v1/health reports it — so say so up
 // front, and take the token right here rather than sending someone to another
 // screen to find the field.
 import { useState } from "preact/hooks";
-import { useApi, type Health } from "./api.js";
+import { useLoad } from "./api.js";
+import { fleet, read } from "./client.js";
 import { useToken } from "./mutate.js";
 
 export function TokenBanner() {
-  const health = useApi<Health>("/api/health", [], 0);
+  const health = useLoad("health", () => read(fleet.getHealth()), [], 0);
   const [token, setToken] = useToken();
   const [draft, setDraft] = useState("");
 
diff --git a/collector/dash/src/api.ts b/collector/dash/src/api.ts
index 2e13d0a..35cd59b 100644
--- a/collector/dash/src/api.ts
+++ b/collector/dash/src/api.ts
@@ -2,6 +2,7 @@
 import { useEffect, useRef, useState } from "preact/hooks";
 import { onLive } from "./live.js";
 import { tokenHeader } from "./token.js";
+import type { JobDetail } from "./client.js";
 
 export class ApiError extends Error {
   constructor(
@@ -38,18 +39,31 @@ export type Loadable<T> = { data: T | null; error: Error | null; loading: boolea
  * of "3m ago" and lease countdowns goes stale on its own, with no event to say so.
  */
 export function useApi<T>(path: string | null, topics: string[] = [], refreshMs = 0): Loadable<T> {
+  return useLoad<T>(path, () => api<T>(path!), topics, refreshMs);
+}
+
+/**
+ * useApi for anything that returns a promise -- the generated /api/v1 client,
+ * mostly. `key` stands in for the path: it changes exactly when the request
+ * would, and null means "not yet".
+ */
+export function useLoad<T>(key: string | null, load: () => Promise<T>, topics: string[] = [], refreshMs = 0): Loadable<T> {
   const [data, setData] = useState<T | null>(null);
   const [error, setError] = useState<Error | null>(null);
-  const [loading, setLoading] = useState(path !== null);
+  const [loading, setLoading] = useState(key !== null);
   const [nonce, setNonce] = useState(0);
   // Guards against a slow first response overwriting a fast second one.
   const seq = useRef(0);
+  // The loader closes over the render that made it; the effect below runs on
+  // key changes only, so it reads the newest one from here.
+  const loader = useRef(load);
+  loader.current = load;
 
   useEffect(() => {
-    if (path === null) return;
+    if (key === null) return;
     const mine = ++seq.current;
     setLoading(true);
-    api<T>(path)
+    loader.current()
       .then((d) => {
         if (seq.current === mine) {
           setData(d);
@@ -62,7 +76,7 @@ export function useApi<T>(path: string | null, topics: string[] = [], refreshMs
       .finally(() => {
         if (seq.current === mine) setLoading(false);
       });
-  }, [path, nonce]);
+  }, [key, nonce]);
 
   const reload = () => setNonce((n) => n + 1);
 
@@ -88,28 +102,16 @@ export function useApi<T>(path: string | null, topics: string[] = [], refreshMs
   return { data, error, loading, reload };
 }
 
-// --- response shapes (mirrors src/api/*.ts) ---
-
-export type DeviceStatus = "online" | "stale" | "offline";
+// --- response shapes ---
+//
+// Devices, jobs and their details come from /api/v1, so their types are the
+// generated client's (collector/src/client/api.gen.ts), re-exported here for
+// the pages that import them from this file. Do not redeclare them: a copy is
+// how the dashboard drifted from the server before.
+export type { Device, DeviceDetail, DeviceList, Job, JobDetail, JobList } from "./client.js";
+export type ResultRow = JobDetail["results"][number];
 
-export type Beacon = {
-  battery_pct: number | null;
-  charging: boolean | null;
-  thermal: string | null;
-  mem_mb: number | null;
-  mem_method: string | null;
-  process_alive: boolean | null;
-  job_id: string | null;
-  /**
-   * Set when this device is running a job for a DIFFERENT collector.
-   *
-   * Rendered rather than ignored because "busy for another brain" and "idle,
-   * and nothing here is offering it work" look identical on this screen and are
-   * opposite problems -- one is working, the other is a queue that is not
-   * matching.
-   */
-  busy: { job_id: string | null; collector: string | null } | null;
-} | null;
+// The rest mirror unversioned /api/* routes that /api/v1 does not offer yet.
 
 export type Peer = {
   url: string;
@@ -126,76 +128,6 @@ export type Peers = {
   configured: number;
 };
 
-export type Device = {
-  device_id: string;
-  name: string | null;
-  notes: string | null;
-  descriptor: Record<string, unknown>;
-  /** Effective pools: the override when set, otherwise what the runner reports. */
-  pools: string[];
-  /** null = an agent that predates capability routing; it is offered everything. */
-  capabilities: string[] | null;
-  /** /24 the agent last registered from. Distinguishes "offline" from "elsewhere". */
-  last_net: string | null;
-  pools_reported: string[];
-  pools_override: string[] | null;
-  /**
-   * What the agent says it runs. An open string, not a union: the fleet gained
-   * a laptop, a TV, a watch and a browser tab after this type was written, and
-   * a union here would have had to be edited before any of them could show up
-   * correctly. Agents that predate the field are still reported as ios/android
-   * by the collector's fallback.
-   */
-  platform: string;
-  /** Form factor, when the agent declared one: phone, tablet, laptop, tv, watch, sbc, browser… */
-  kind: string | null;
-  /** Seconds of silence an ephemeral agent survives; null for a shelf device. */
-  ttl_s: number | null;
-  /** True once an ephemeral agent's window closed. Such devices are hidden unless asked for. */
-  expired: boolean;
-  simulator: boolean;
-  status: DeviceStatus;
-  age_s: number | null;
-  last_seen: string | null;
-  beacon: Beacon;
-  current_job: string | null;
-  lock: { job_id: string; acquired_at: string | null } | null;
-};
-
-export type Job = {
-  job_id: string;
-  workload: string;
-  executor: "device" | "host";
-  /** `skipped`: claimed and closed without running anything (no device matched,
-   *  the app was not installed, a dependency skipped). Not a pass. */
-  status: "waiting" | "queued" | "claimed" | "done" | "failed" | "cancelled" | "skipped";
-  /** Job ids this one waits for; it stays `waiting` until they are all done. */
-  depends_on?: string[] | null;
-  /** Whether a higher-priority job may ask this one to checkpoint and step aside. */
-  preemptible?: boolean;
-  claimed_by: string | null;
-  attempts: number;
-  max_attempts: number;
-  priority: number;
-  template_id: string | null;
-  lease_ttl_s: number;
-  lease_deadline: string | null;
-  lease_remaining_s: number | null;
-  duration_s: number | null;
-  last_error: string | null;
-  created_at: string | null;
-  claimed_at: string | null;
-  finished_at: string | null;
-  pool: string | null;
-  match: string | null;
-  device_id: string | null;
-  exclusive: boolean;
-  backend: string | null;
-  model: string | null;
-  app: string | null;
-  report_to: Record<string, string> | null;
-};
-
 export type Overview = {
   generated_at: string;
   devices: {
@@ -252,38 +184,6 @@ export type Overview = {
   health: Health;
 };
 
-export type DeviceList = {
-  total: number;
-  /** Facets over every device, not the filtered set, so a filter never empties its own menu. */
-  pools: string[];
-  platforms: string[];
-  kinds: string[];
-  devices: Device[];
-};
-
-export type DeviceDetail = Device & {
-  counts: { results: number; beacons: number };
-  jobs: {
-    job_id: string;
-    workload: string;
-    executor: string;
-    status: Job["status"];
-    created_at: string | null;
-    finished_at: string | null;
-    attempts: number;
-    max_attempts: number;
-    last_error: string | null;
-  }[];
-  benchmarks: {
-    job_id: string;
-    at: string | null;
-    model: string;
-    quant: string | null;
-    backend: string;
-    metrics: Record<string, any> | null;
-  }[];
-};
-
 export type BeaconSample = {
   ts: string | null;
   battery_pct: number | null;
@@ -297,44 +197,6 @@ export type BeaconSample = {
 
 export type BeaconHistory = { device_id: string; hours: number; count: number; samples: BeaconSample[] };
 
-export type JobList = {
-  page: number;
-  per_page: number;
-  total: number;
-  pages: number;
-  status_counts: Record<string, number>;
-  workloads: string[];
-  pools: string[];
-  jobs: Job[];
-};
-
-export type ResultRow = {
-  device_id: string;
-  iter: number;
-  created_at: string | null;
-  payload: Record<string, any>;
-};
-
-export type JobDetail = Job & {
-  spec: Record<string, any>;
-  parent: string | null;
-  children: Job[];
-  siblings: Job[];
-  results: ResultRow[];
-  beacons: (BeaconSample & { device_id: string })[];
-  artifacts: {
-    sha256: string;
-    name: string | null;
-    size: number | null;
-    created_at: string | null;
-    in_store: boolean;
-    role: "input" | "output";
-  }[];
-  locks: { device_id: string; acquired_at: string | null }[];
-  status_report: { target: string; state: string; posted: boolean; detail: string | null; created_at: string | null } | null;
-  derived_timeline: { at: string | null; what: string }[];
-};
-
 export type RecentResults = {
   results: {
     job_id: string;
@@ -351,6 +213,7 @@ export type RecentResults = {
 
 export type Locks = { locks: { device_id: string; job_id: string; acquired_at: string | null; held_s: number }[] };
 
+/** The health block inside /api/overview. The token banner reads /api/v1/health instead. */
 export type Health = {
   ok: boolean;
   instance: string;
diff --git a/collector/dash/src/client.ts b/collector/dash/src/client.ts
new file mode 100644
index 0000000..0be0e04
--- /dev/null
+++ b/collector/dash/src/client.ts
@@ -0,0 +1,64 @@
+// The dashboard's door into /api/v1: the generated client, with the dashboard's
+// own way of carrying a token.
+//
+// The client and its types are generated from the route table, so a field the
+// server renames is a compile error here rather than a blank column. Where the
+// dashboard needs something /api/v1 does not offer, the page still calls the
+// unversioned /api/* route through api.ts or mutate.ts.
+import { FleetApiError, FleetClient } from "../../src/client/index.js";
+import type { DeviceList, JobSpecInput } from "../../src/client/index.js";
+import { getToken, tokenHeader } from "./token.js";
+
+export type * from "../../src/client/index.js";
+
+/**
+ * Same origin, and the token as `X-Fleet-Token` read at call time: that is the
+ * header FLEET_DASH_TOKEN's guard checks, and FLEET_AUTH=tokens accepts it as
+ * readily as `Authorization: Bearer`. The banner can change the token at any
+ * moment, so it is not baked into the client.
+ */
+export const fleet = new FleetClient({
+  baseUrl: location.origin,
+  source: "dash",
+  fetch: (input, init) =>
+    fetch(input, {
+      ...init,
+      headers: { accept: "application/json", ...(init?.headers as Record<string, string> | undefined), ...tokenHeader() },
+    }),
+});
+
+/** Turn a v1 refusal into the sentence a person should read. */
+function explain(e: unknown, mutation: boolean): Error {
+  if (!(e instanceof FleetApiError)) return e as Error;
+  // Naming the missing header is true and useless. Say what to do -- the same
+  // words mutate.ts uses for the routes not yet in /api/v1.
+  if (mutation && e.status === 401)
+    return new FleetApiError(401, e.code, getToken()
+      ? "That dashboard token was rejected. Check it on the System screen."
+      : "This collector needs a dashboard token — paste it in the banner above, or on the System screen.");
+  // A spec the strict schema refuses: say where, not only that.
+  const errors = (e.details as { schema_errors?: { path: string; message: string }[] } | undefined)?.schema_errors;
+  if (errors?.length)
+    return new FleetApiError(e.status, e.code, `${e.message}: ${errors.map((x) => `${x.path || "/"} ${x.message}`).join("; ")}`, e.hint, e.details);
+  return e;
+}
+
+/** A read through the client, with errors in the dashboard's words. */
+export const read = <T>(p: Promise<T>): Promise<T> => p.catch((e) => Promise.reject(explain(e, false)));
+
+/** A change through the client: a 401 says to paste a token, as every other button does. */
+export const change = <T>(p: Promise<T>): Promise<T> => p.catch((e) => Promise.reject(explain(e, true)));
+
+/**
+ * Every device, however many pages that takes. The shelf is one screen, and
+ * the unversioned route it replaced answered with all of them at once.
+ */
+export async function allDevices(query: Parameters<FleetClient["listDevices"]>[0] = {}): Promise<DeviceList> {
+  const first = await fleet.listDevices({ ...query, per_page: 500 });
+  const items = [...first.items];
+  for (let page = 2; page <= first.pages; page++) items.push(...(await fleet.listDevices({ ...query, per_page: 500, page })).items);
+  return { ...first, items, page: 1, per_page: items.length || first.per_page, pages: 1 };
+}
+
+/** The composer's spec is free-form JSON a person typed; the server is what checks it. */
+export const asSpec = (spec: Record<string, unknown>) => spec as JobSpecInput;
diff --git a/collector/dash/src/names.ts b/collector/dash/src/names.ts
index 77523ac..61a42fd 100644
--- a/collector/dash/src/names.ts
+++ b/collector/dash/src/names.ts
@@ -9,6 +9,7 @@
 // Every screen that prints a device id goes through here instead. One fetch,
 // shared, refreshed when a device changes — not one request per table row.
 import { useEffect, useState } from "preact/hooks";
+import { allDevices } from "./client.js";
 import { onLive } from "./live.js";
 
 type Names = Record<string, string>;
@@ -18,10 +19,9 @@ let inflight: Promise<Names> | null = null;
 const watchers = new Set<(n: Names) => void>();
 
 async function load(): Promise<Names> {
-  const res = await fetch("/api/devices");
-  const body = (await res.json()) as { devices: { device_id: string; name: string | null }[] };
+  const body = await allDevices();
   cache = Object.fromEntries(
-    body.devices.filter((d) => d.name).map((d) => [d.device_id, d.name as string]),
+    body.items.filter((d) => d.name).map((d) => [d.device_id, d.name as string]),
   );
   for (const w of watchers) w(cache);
   return cache;
diff --git a/collector/dash/src/pages/Alerts.tsx b/collector/dash/src/pages/Alerts.tsx
index 20c73dc..b1884f0 100644
--- a/collector/dash/src/pages/Alerts.tsx
+++ b/collector/dash/src/pages/Alerts.tsx
@@ -1,10 +1,14 @@
 // Alerts: what the collector thinks is wrong right now, and what it thought
 // was wrong earlier.
-import { useApi } from "../api.js";
+import { useApi, useLoad } from "../api.js";
+import { fleet, read } from "../client.js";
 import { mutate, useMutation } from "../mutate.js";
 import { useQuery } from "../router.js";
 import { Actions, Button, ErrorBox, Link, Loaded, Panel, Pill, Stat, agoFrom, clock, duration } from "../ui.js";
 
+// This screen reads /api/alerts, not /api/v1/alerts: it shows the counts per
+// state, whether a webhook is set and the thresholds, which v1 does not return.
+// The banner below needs only the list, and reads it from v1.
 export type Alert = {
   id: number;
   rule: string;
@@ -147,8 +151,8 @@ export function Alerts() {
 
 /** The banner every screen carries. Silent unless something is actually open. */
 export function AlertBanner() {
-  const state = useApi<AlertList>("/api/alerts?state=open", ["alert", "job", "device"], 60_000);
-  const open = state.data?.alerts ?? [];
+  const state = useLoad("alerts open", () => read(fleet.listAlerts({ state: "open" })), ["alert", "job", "device"], 60_000);
+  const open = state.data?.items ?? [];
   if (open.length === 0) return null;
   const worst = open.some((a) => a.severity === "critical") ? "critical" : "warning";
   return (
diff --git a/collector/dash/src/pages/Compose.tsx b/collector/dash/src/pages/Compose.tsx
index c053258..54755ff 100644
--- a/collector/dash/src/pages/Compose.tsx
+++ b/collector/dash/src/pages/Compose.tsx
@@ -5,11 +5,14 @@
 // before anything is enqueued, and the equivalent curl is shown throughout — so
 // the form teaches the API rather than hiding it.
 import { useEffect, useState } from "preact/hooks";
-import { api, useApi, type DeviceList } from "../api.js";
+import { useLoad } from "../api.js";
+import { allDevices, asSpec, change, fleet, read } from "../client.js";
 import { mutate, useMutation } from "../mutate.js";
 import { navigate, useQuery } from "../router.js";
 import { Actions, Button, ErrorBox, Field, Json, Loaded, Panel, Pill, Select } from "../ui.js";
 
+// The generated Template says only that spec is an object; the composer reads
+// a saved spec the way it reads its own free-form half, as loosely typed JSON.
 type Template = { id: string; name: string | null; spec: Record<string, any> };
 
 // Defaults per workload, matching schemas/job.schema.json. These are starting
@@ -94,8 +97,12 @@ function stamp(workload: string) {
 
 export function Compose() {
   const [q] = useQuery();
-  const devices = useApi<DeviceList>("/api/devices", ["device"]);
-  const templates = useApi<{ templates: Template[] }>("/api/templates", ["template"]);
+  const devices = useLoad("devices", () => read(allDevices()), ["device"]);
+  const templates = useLoad(
+    "templates",
+    () => read(fleet.listTemplates({ per_page: 500 })).then((t) => ({ templates: t.items as Template[] })),
+    ["template"],
+  );
 
   const [workload, setWorkload] = useState(q.get("workload") ?? "benchmark");
   const [jobId, setJobId] = useState(stamp(q.get("workload") ?? "benchmark"));
@@ -190,7 +197,9 @@ export function Compose() {
   }, [pool, matchExpr, deviceId, executor, workload]);
 
   const enqueue = useMutation(async () => {
-    const out = await mutate<{ ok: boolean; job_id?: string; fanout?: string[] }>("POST", "/api/jobs", spec);
+    // /api/v1 checks the spec strictly: an unknown top-level field or params
+    // the workload's manifest does not allow is refused, with the paths named.
+    const out = await change(fleet.createJob(asSpec(spec ?? {})));
     // Fan-out returns children; a single job returns its id. Land on whichever
     // page can actually show what just happened.
     if (out.fanout?.length) navigate(`/jobs?q=${encodeURIComponent(jobId)}`);
@@ -208,7 +217,7 @@ export function Compose() {
   });
 
   const curl = spec
-    ? `curl -X POST ${location.origin}/jobs \\\n  -H 'content-type: application/json' \\\n  -d '${JSON.stringify(spec)}'`
+    ? `curl -X POST ${location.origin}/api/v1/jobs \\\n  -H 'content-type: application/json' \\\n  -d '${JSON.stringify(spec)}'`
     : "";
 
   return (
@@ -235,11 +244,11 @@ export function Compose() {
           {(d) => (
             <>
               <div class="filters">
-                <Select label="pool" value={pool} options={d.pools} onChange={setPool} />
+                <Select label="pool" value={pool} options={d.facets.pools} onChange={setPool} />
                 <Select
                   label="pin to device"
                   value={deviceId}
-                  options={d.devices.map((dev) => dev.device_id)}
+                  options={d.items.map((dev) => dev.device_id)}
                   onChange={setDeviceId}
                 />
                 <Field label="match expression" hint="e.g. ram_mb >= 4000 && os ~ 'android'">
diff --git a/collector/dash/src/pages/DeviceDetail.tsx b/collector/dash/src/pages/DeviceDetail.tsx
index 7115311..a7e7e31 100644
--- a/collector/dash/src/pages/DeviceDetail.tsx
+++ b/collector/dash/src/pages/DeviceDetail.tsx
@@ -1,5 +1,6 @@
 import { useState } from "preact/hooks";
-import { useApi, type BeaconHistory, type DeviceDetail as Detail } from "../api.js";
+import { useApi, useLoad, type BeaconHistory, type DeviceDetail as Detail } from "../api.js";
+import { fleet, read } from "../client.js";
 import { ThermalStrip, TimeSeries, runs } from "../chart.js";
 import { mutate, useMutation } from "../mutate.js";
 import { navigate, useQuery } from "../router.js";
@@ -98,7 +99,8 @@ export function DeviceDetail({ id }: { id: string }) {
   const [q, setQuery] = useQuery();
   const hours = Number(q.get("hours") ?? 24) || 24;
 
-  const state = useApi<Detail>(`/api/devices/${encodeURIComponent(id)}`, ["device", "beacon", "job", "lock"], 30_000);
+  const state = useLoad<Detail>(`device ${id}`, () => read(fleet.getDevice(id)), ["device", "beacon", "job", "lock"], 30_000);
+  // Beacon history is not in /api/v1 yet.
   const beacons = useApi<BeaconHistory>(`/api/devices/${encodeURIComponent(id)}/beacons?hours=${hours}`, ["beacon"], 60_000);
 
   return (
@@ -216,29 +218,34 @@ export function DeviceDetail({ id }: { id: string }) {
                       <th class="right">Peak mem</th>
                       <th>When</th>
                     </tr>
-                    {d.benchmarks.map((b) => (
-                      <tr key={b.job_id}>
-                        <td>
-                          <Link to={`/jobs/${encodeURIComponent(b.job_id)}`}>
-                            {b.model}
-                            {b.quant ? ` ${b.quant}` : ""}
-                          </Link>
-                        </td>
-                        <td class="dim">{b.backend}</td>
-                        <td class="num">{num(b.metrics?.prefill_tok_s)}</td>
-                        <td class="num">
-                          <strong>{num(b.metrics?.decode_tok_s)}</strong>
-                        </td>
-                        <td class="num">{num(b.metrics?.ttft_ms, 0)}</td>
-                        {/* Memory always carries the method that produced it: iOS
-                            phys_footprint and Android PSS are different quantities. */}
-                        <td class="num">
-                          {b.metrics?.peak_mem_mb ?? "—"}{" "}
-                          <span class="faint">{b.metrics?.mem_method ?? "?"}</span>
-                        </td>
-                        <td class="dim">{clock(b.at)}</td>
-                      </tr>
-                    ))}
+                    {d.benchmarks.map((b) => {
+                      // Metrics are whatever the runner reported; num() and the
+                      // "—" fallbacks below are what make a missing one safe.
+                      const m = b.metrics as Record<string, any> | null;
+                      return (
+                        <tr key={b.job_id}>
+                          <td>
+                            <Link to={`/jobs/${encodeURIComponent(b.job_id)}`}>
+                              {b.model}
+                              {b.quant ? ` ${b.quant}` : ""}
+                            </Link>
+                          </td>
+                          <td class="dim">{b.backend}</td>
+                          <td class="num">{num(m?.prefill_tok_s)}</td>
+                          <td class="num">
+                            <strong>{num(m?.decode_tok_s)}</strong>
+                          </td>
+                          <td class="num">{num(m?.ttft_ms, 0)}</td>
+                          {/* Memory always carries the method that produced it: iOS
+                              phys_footprint and Android PSS are different quantities. */}
+                          <td class="num">
+                            {m?.peak_mem_mb ?? "—"}{" "}
+                            <span class="faint">{m?.mem_method ?? "?"}</span>
+                          </td>
+                          <td class="dim">{clock(b.at)}</td>
+                        </tr>
+                      );
+                    })}
                   </table>
                 </div>
               )}
diff --git a/collector/dash/src/pages/Devices.tsx b/collector/dash/src/pages/Devices.tsx
index 01c237c..3de3db4 100644
--- a/collector/dash/src/pages/Devices.tsx
+++ b/collector/dash/src/pages/Devices.tsx
@@ -1,7 +1,8 @@
 // The shelf. What is online, what it is doing, and how to get to it.
 import { useState } from "preact/hooks";
-import { useApi, type Device, type DeviceList } from "../api.js";
+import { useLoad, type Device } from "../api.js";
 import { ArtNoDevices } from "../art.js";
+import { allDevices, read } from "../client.js";
 import { DeviceArt } from "../deviceArt.js";
 import { deviceArtKind } from "../deviceKind.js";
 import { Icon } from "../icons.js";
@@ -324,19 +325,18 @@ export function Devices() {
   // because the choice lives in the URL, a link to either stays that view.
   const view = q.get("view") === "table" ? "table" : "shelf";
 
-  const params = new URLSearchParams();
-  for (const [k, v] of [
-    ["status", status],
-    ["pool", pool],
-    ["platform", platform],
-    ["kind", kind],
-    ["q", search],
-    ["simulator", hideSims ? "false" : ""],
-  ] as const)
-    if (v) params.set(k, v);
+  const query = {
+    status: status || undefined,
+    pool: pool || undefined,
+    platform: platform || undefined,
+    kind: kind || undefined,
+    q: search || undefined,
+    simulator: hideSims ? false : undefined,
+  };
 
-  const state = useApi<DeviceList>(
-    `/api/devices${params.toString() ? `?${params}` : ""}`,
+  const state = useLoad(
+    `devices ${JSON.stringify(query)}`,
+    () => read(allDevices(query)),
     ["device", "beacon", "job", "lock"],
     30_000,
   );
@@ -359,13 +359,13 @@ export function Devices() {
                 onClear={() => setQuery({ status: null, pool: null, platform: null, kind: null, q: null, simulator: null })}
               >
                 <Select label="status" value={status} options={["online", "stale", "offline"]} onChange={(v) => setQuery({ status: v })} />
-                <Select label="pool" value={pool} options={d.pools} onChange={(v) => setQuery({ pool: v })} />
+                <Select label="pool" value={pool} options={d.facets.pools} onChange={(v) => setQuery({ pool: v })} />
                 {/* Faceted from the response, never hard-coded: the platform set is
                     open, so a literal list here would hide every device the fleet
                     learned to run on after this file was written. */}
-                <Select label="platform" value={platform} options={d.platforms} onChange={(v) => setQuery({ platform: v })} />
-                {d.kinds.length > 1 && (
-                  <Select label="kind" value={kind} options={d.kinds} onChange={(v) => setQuery({ kind: v })} />
+                <Select label="platform" value={platform} options={d.facets.platforms} onChange={(v) => setQuery({ platform: v })} />
+                {d.facets.kinds.length > 1 && (
+                  <Select label="kind" value={kind} options={d.facets.kinds} onChange={(v) => setQuery({ kind: v })} />
                 )}
                 <Search label="find" value={search} placeholder="id, model, SoC" onChange={(v) => setQuery({ q: v })} />
                 <label class="field checkbox">
@@ -384,25 +384,25 @@ export function Devices() {
               </Filters>
             </Panel>
 
-            <Panel title={`${d.devices.length} device${d.devices.length === 1 ? "" : "s"}`}>
-              {d.devices.length === 0 ? (
+            <Panel title={`${d.items.length} device${d.items.length === 1 ? "" : "s"}`}>
+              {d.items.length === 0 ? (
                 <ArtNoDevices
                   caption={active ? "No device matches these filters." : "No devices yet. Scan the code to enrol one."}
                 />
               ) : view === "shelf" ? (
-                <Shelf devices={d.devices} onDone={state.reload} />
+                <Shelf devices={d.items} onDone={state.reload} />
               ) : (
-                <Table devices={d.devices} onDone={state.reload} />
+                <Table devices={d.items} onDone={state.reload} />
               )}
             </Panel>
 
             <Panel title="Pools">
               <div class="stats">
-                {d.pools.length === 0 ? (
+                {d.facets.pools.length === 0 ? (
                   <p class="empty">No pools yet.</p>
                 ) : (
-                  d.pools.map((p) => (
-                    <Stat key={p} label={p} value={d.devices.filter((dev) => dev.pools.includes(p)).length} />
+                  d.facets.pools.map((p) => (
+                    <Stat key={p} label={p} value={d.items.filter((dev) => dev.pools.includes(p)).length} />
                   ))
                 )}
               </div>
diff --git a/collector/dash/src/pages/Enroll.tsx b/collector/dash/src/pages/Enroll.tsx
index 5e626ad..298d433 100644
--- a/collector/dash/src/pages/Enroll.tsx
+++ b/collector/dash/src/pages/Enroll.tsx
@@ -6,7 +6,8 @@
 // panel that watches the registry and tells you the moment the device appears.
 import { useEffect, useState } from "preact/hooks";
 import qrcode from "qrcode-generator";
-import { useApi, type DeviceList } from "../api.js";
+import { useApi } from "../api.js";
+import { allDevices } from "../client.js";
 import { onLive } from "../live.js";
 import { Link, Loaded, Panel, Pill, bytes, clock } from "../ui.js";
 
@@ -61,8 +62,8 @@ export function Enroll() {
   useEffect(() => {
     if (!before) return;
     const check = async () => {
-      const list = (await (await fetch("/api/devices")).json()) as DeviceList;
-      const fresh = list.devices.map((d) => d.device_id).filter((id) => !before.has(id));
+      const list = await allDevices();
+      const fresh = list.items.map((d) => d.device_id).filter((id) => !before.has(id));
       if (fresh.length) setArrived(fresh);
     };
     void check();
diff --git a/collector/dash/src/pages/JobDetail.tsx b/collector/dash/src/pages/JobDetail.tsx
index 8d98a71..bb2d9e5 100644
--- a/collector/dash/src/pages/JobDetail.tsx
+++ b/collector/dash/src/pages/JobDetail.tsx
@@ -1,5 +1,6 @@
 import { useEffect, useState } from "preact/hooks";
-import { useApi, type JobDetail as Detail, type ResultRow } from "../api.js";
+import { useLoad, type JobDetail as Detail, type ResultRow } from "../api.js";
+import { change, fleet, read } from "../client.js";
 import { Workload } from "../icons.js";
 import { mutate, useMutation } from "../mutate.js";
 import { navigate } from "../router.js";
@@ -7,10 +8,8 @@ import { useDeviceNames } from "../names.js";
 import { Actions, Button, ConfirmButton, CopyId, DeviceName, ErrorBox, Json, Link, Loaded, Panel, Pill, Stat, bytes, clock, duration, num } from "../ui.js";
 import { JobRows, LeaseCell } from "./Jobs.js";
 
-// The collector gained a 'waiting' status with dependency chains. `Job` in
-// api.ts still describes the older set, and that type is shared with every
-// other page, so the status is read as a plain string here rather than
-// pretending the union is complete.
+// Read as a plain string so a status the client does not know yet still
+// falls through to the generic wording rather than failing to compile.
 const statusOf = (job: { status: string }) => job.status as string;
 
 /** One line that says what a result row actually reported, per workload. */
@@ -111,12 +110,13 @@ function Preemptible({ job }: { job: Detail }) {
 
 function JobActions({ job, onDone }: { job: Detail; onDone: () => void }) {
   const cancel = useMutation(async () => {
-    const r = await mutate<{ note: string }>("POST", `/api/jobs/${encodeURIComponent(job.job_id)}/cancel`, {});
+    // The reason is the one the unversioned route wrote, so last_error reads as it always has.
+    const r = await change(fleet.cancelJob(job.job_id, { reason: "cancelled from the dashboard" }));
     onDone();
     return r;
   });
   const retry = useMutation(async () => {
-    const r = await mutate<{ job_id: string }>("POST", `/api/jobs/${encodeURIComponent(job.job_id)}/retry`, {});
+    const r = await change(fleet.retryJob(job.job_id, {}));
     navigate(`/jobs/${encodeURIComponent(r.job_id)}`);
     return r;
   });
@@ -172,13 +172,13 @@ function JobActions({ job, onDone }: { job: Detail; onDone: () => void }) {
         )}
       </Actions>
       {[cancel, retry, raise, lower].map((m, i) => (m.error ? <ErrorBox key={i} error={m.error} /> : null))}
-      {cancel.result && <p class="empty">{(cancel.result as { note: string }).note}</p>}
+      {cancel.result && <p class="empty">{cancel.result.note}</p>}
     </>
   );
 }
 
 export function JobDetail({ id }: { id: string }) {
-  const state = useApi<Detail>(`/api/jobs/${encodeURIComponent(id)}`, ["job", "result", "beacon", "lock"], 15_000);
+  const state = useLoad<Detail>(`job ${id}`, () => read(fleet.getJob(id)), ["job", "result", "beacon", "lock"], 15_000);
   const names = useDeviceNames();
 
   return (
diff --git a/collector/dash/src/pages/Jobs.tsx b/collector/dash/src/pages/Jobs.tsx
index c1c363e..fc2b7a2 100644
--- a/collector/dash/src/pages/Jobs.tsx
+++ b/collector/dash/src/pages/Jobs.tsx
@@ -1,4 +1,5 @@
-import { useApi, type Job, type JobList } from "../api.js";
+import { useLoad, type Job } from "../api.js";
+import { fleet, read } from "../client.js";
 import { useQuery } from "../router.js";
 import { Workload } from "../icons.js";
 import { useDeviceNames } from "../names.js";
@@ -92,20 +93,19 @@ export function Jobs() {
   const hasError = q.get("has_error") === "true";
   const page = Number(q.get("page") ?? 1) || 1;
 
-  const params = new URLSearchParams();
-  for (const [k, v] of [
-    ["status", status],
-    ["workload", workload],
-    ["executor", executor],
-    ["pool", pool],
-    ["device", device],
-    ["q", search],
-    ["has_error", hasError ? "true" : ""],
-    ["page", page > 1 ? String(page) : ""],
-  ] as const)
-    if (v) params.set(k, v);
+  const query = {
+    status: status || undefined,
+    workload: workload || undefined,
+    // The URL is typed by people; anything but the two executors is no filter, as before.
+    executor: executor === "device" || executor === "host" ? (executor as "device" | "host") : undefined,
+    pool: pool || undefined,
+    device: device || undefined,
+    q: search || undefined,
+    has_error: hasError || undefined,
+    page: page > 1 ? page : undefined,
+  };
 
-  const state = useApi<JobList>(`/api/jobs${params.toString() ? `?${params}` : ""}`, ["job", "result"], 30_000);
+  const state = useLoad(`jobs ${JSON.stringify(query)}`, () => read(fleet.listJobs(query)), ["job", "result"], 30_000);
   const active = !!(status || workload || executor || pool || device || search || hasError);
 
   return (
@@ -132,16 +132,16 @@ export function Jobs() {
                   // 'waiting' leads because it is the one status a person goes
                   // looking for: a chain that has not started is invisible in
                   // every other view, including the overview's queue depth.
-                  options={["waiting", "queued", "claimed", "done", "failed", "skipped", "cancelled"].map((s) => ({
+                  options={(["waiting", "queued", "claimed", "done", "failed", "skipped", "cancelled"] as const).map((s) => ({
                     value: s,
-                    label: `${s} (${d.status_counts[s] ?? 0})`,
+                    label: `${s} (${d.facets.status_counts[s] ?? 0})`,
                   }))}
                   onChange={(v) => setQuery({ status: v })}
                 />
 
-                <Select label="workload" value={workload} options={d.workloads} onChange={(v) => setQuery({ workload: v })} />
+                <Select label="workload" value={workload} options={d.facets.workloads} onChange={(v) => setQuery({ workload: v })} />
                 <Select label="executor" value={executor} options={["device", "host"]} onChange={(v) => setQuery({ executor: v })} />
-                <Select label="pool" value={pool} options={d.pools} onChange={(v) => setQuery({ pool: v })} />
+                <Select label="pool" value={pool} options={d.facets.pools} onChange={(v) => setQuery({ pool: v })} />
                 <Search label="find" value={search} placeholder="job id" onChange={(v) => setQuery({ q: v })} />
                 <label class="field checkbox">
                   <input type="checkbox" checked={hasError} onChange={(e) => setQuery({ has_error: (e.target as HTMLInputElement).checked ? "true" : null })} />
@@ -159,12 +159,12 @@ export function Jobs() {
             </Panel>
 
             <Panel title={`${d.total} job${d.total === 1 ? "" : "s"}`}>
-              {d.jobs.length === 0 ? (
+              {d.items.length === 0 ? (
                 <p class="empty">No job matches these filters.</p>
               ) : (
                 <>
                   <div class="scroll">
-                    <JobRows jobs={d.jobs} />
+                    <JobRows jobs={d.items} />
                   </div>
                   <Pager page={d.page} pages={d.pages} total={d.total} onPage={(p) => setQuery({ page: String(p) })} />
                 </>
diff --git a/collector/dash/src/pages/Schedules.tsx b/collector/dash/src/pages/Schedules.tsx
index 74fd88a..b0e55e4 100644
--- a/collector/dash/src/pages/Schedules.tsx
+++ b/collector/dash/src/pages/Schedules.tsx
@@ -2,28 +2,12 @@
 // D4 — but the legacy dashboard listed every schedule including the disabled
 // ones, and the overview only shows the next few enabled, so without this page
 // a disabled nightly run is invisible in the SPA.
-import { useApi } from "../api.js";
+import { useLoad } from "../api.js";
+import { fleet, read, type Schedule } from "../client.js";
 import { mutate, useMutation } from "../mutate.js";
 import { navigate } from "../router.js";
 import { Actions, Button, ConfirmButton, ErrorBox, Json, Loaded, Panel, Pill, Stat, clock, duration } from "../ui.js";
 
-type Schedule = {
-  id: string;
-  cron: string;
-  enabled: boolean;
-  last_run: string | null;
-  next_run: string | null;
-  next_run_in_s: number | null;
-  prev_expected: string | null;
-  missed: boolean;
-  late_by_s: number | null;
-  workload: string | null;
-  executor: string | null;
-  fanout: boolean;
-  pool: string | null;
-  template: Record<string, unknown>;
-};
-
 function ScheduleActions({ s, onDone }: { s: Schedule; onDone: () => void }) {
   const toggle = useMutation(async () => {
     const r = await mutate("PATCH", `/api/schedules/${encodeURIComponent(s.id)}`, { enabled: !s.enabled });
@@ -62,7 +46,12 @@ function ScheduleActions({ s, onDone }: { s: Schedule; onDone: () => void }) {
 }
 
 export function Schedules() {
-  const state = useApi<{ schedules: Schedule[] }>("/api/schedules", ["schedule", "job"], 30_000);
+  const state = useLoad(
+    "schedules",
+    () => read(fleet.listSchedules()).then((l) => ({ schedules: l.items })),
+    ["schedule", "job"],
+    30_000,
+  );
 
   return (
     <>
diff --git a/collector/dash/vite.config.ts b/collector/dash/vite.config.ts
index 00d023d..23ba3f1 100644
--- a/collector/dash/vite.config.ts
+++ b/collector/dash/vite.config.ts
@@ -1,3 +1,4 @@
+import { fileURLToPath } from "node:url";
 import { defineConfig } from "vite";
 
 // No @preact/preset-vite: esbuild's automatic JSX runtime pointed at preact
@@ -17,6 +18,12 @@ export default defineConfig({
   },
   server: {
     port: 5178,
+    // The /api/v1 client is generated into the collector's src/client/ and
+    // imported from there, outside this project's root, so the dev server is
+    // told it may serve that one directory too. The build needs no such thing.
+    fs: {
+      allow: [fileURLToPath(new URL(".", import.meta.url)), fileURLToPath(new URL("../src/client", import.meta.url))],
+    },
     // `npm run dev` in this directory talks to a real collector, so the SPA
     // never needs a mock API. Point FLEET_URL at another host to develop the
     // dashboard against the live fleet.
diff --git a/collector/openapi.json b/collector/openapi.json
index 348612f..e7a46c9 100644
--- a/collector/openapi.json
+++ b/collector/openapi.json
@@ -227,7 +227,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Devices.",
+            "description": "Devices, and the facets a filter menu is built from.",
             "content": {
               "application/json": {
                 "schema": {
@@ -540,6 +540,15 @@
               "type": "string"
             }
           },
+          {
+            "name": "has_error",
+            "in": "query",
+            "required": false,
+            "description": "true: only jobs with a last_error.",
+            "schema": {
+              "type": "boolean"
+            }
+          },
           {
             "name": "page",
             "in": "query",
@@ -565,7 +574,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Jobs.",
+            "description": "Jobs, and the facets a filter menu is built from.",
             "content": {
               "application/json": {
                 "schema": {
@@ -1873,13 +1882,65 @@
               "null"
             ]
           },
+          "mem_method": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "How mem_mb was measured: iOS phys_footprint and Android PSS are different quantities."
+          },
+          "process_alive": {
+            "type": [
+              "boolean",
+              "null"
+            ]
+          },
           "job_id": {
             "type": [
               "string",
               "null"
             ]
+          },
+          "busy": {
+            "description": "Set when the device is running a job for a different collector.",
+            "oneOf": [
+              {
+                "type": "null"
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "job_id": {
+                    "type": [
+                      "string",
+                      "null"
+                    ]
+                  },
+                  "collector": {
+                    "type": [
+                      "string",
+                      "null"
+                    ]
+                  }
+                },
+                "required": [
+                  "job_id",
+                  "collector"
+                ]
+              }
+            ]
           }
-        }
+        },
+        "required": [
+          "battery_pct",
+          "charging",
+          "thermal",
+          "mem_mb",
+          "mem_method",
+          "process_alive",
+          "job_id",
+          "busy"
+        ]
       },
       "CancelInput": {
         "type": "object",
@@ -2083,14 +2144,24 @@
         "required": [
           "device_id",
           "name",
+          "notes",
           "descriptor",
           "pools",
+          "pools_reported",
+          "pools_override",
           "capabilities",
+          "last_net",
+          "ttl_s",
+          "expired",
           "platform",
           "kind",
           "simulator",
           "status",
-          "last_seen"
+          "age_s",
+          "last_seen",
+          "beacon",
+          "current_job",
+          "lock"
         ]
       },
       "DeviceDetail": {
@@ -2102,23 +2173,123 @@
             "type": "object",
             "properties": {
               "counts": {
-                "type": "object"
+                "type": "object",
+                "properties": {
+                  "results": {
+                    "type": "integer"
+                  },
+                  "beacons": {
+                    "type": "integer"
+                  }
+                },
+                "required": [
+                  "results",
+                  "beacons"
+                ]
               },
               "jobs": {
                 "type": "array",
                 "items": {
-                  "type": "object"
+                  "type": "object",
+                  "properties": {
+                    "job_id": {
+                      "type": "string"
+                    },
+                    "workload": {
+                      "type": "string"
+                    },
+                    "executor": {
+                      "type": "string"
+                    },
+                    "status": {
+                      "type": "string"
+                    },
+                    "created_at": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    },
+                    "finished_at": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    },
+                    "attempts": {
+                      "type": "integer"
+                    },
+                    "max_attempts": {
+                      "type": "integer"
+                    },
+                    "last_error": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    }
+                  },
+                  "required": [
+                    "job_id",
+                    "workload",
+                    "executor",
+                    "status",
+                    "created_at",
+                    "finished_at",
+                    "attempts",
+                    "max_attempts",
+                    "last_error"
+                  ]
                 }
               },
               "benchmarks": {
                 "type": "array",
                 "items": {
-                  "type": "object"
+                  "type": "object",
+                  "properties": {
+                    "job_id": {
+                      "type": "string"
+                    },
+                    "at": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    },
+                    "model": {
+                      "type": "string"
+                    },
+                    "quant": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    },
+                    "backend": {
+                      "type": "string"
+                    },
+                    "metrics": {
+                      "type": [
+                        "object",
+                        "null"
+                      ]
+                    }
+                  },
+                  "required": [
+                    "job_id",
+                    "at",
+                    "model",
+                    "quant",
+                    "backend",
+                    "metrics"
+                  ]
                 }
               }
             },
             "required": [
-              "jobs"
+              "counts",
+              "jobs",
+              "benchmarks"
             ]
           }
         ]
@@ -2143,6 +2314,35 @@
           },
           "pages": {
             "type": "integer"
+          },
+          "facets": {
+            "type": "object",
+            "properties": {
+              "pools": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "platforms": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "kinds": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            },
+            "required": [
+              "pools",
+              "platforms",
+              "kinds"
+            ],
+            "description": "Over every device, not the filtered set, so choosing a filter never empties its own menu."
           }
         },
         "required": [
@@ -2150,7 +2350,8 @@
           "page",
           "per_page",
           "total",
-          "pages"
+          "pages",
+          "facets"
         ]
       },
       "DeviceOutcome": {
@@ -2609,9 +2810,30 @@
           "workload",
           "executor",
           "status",
+          "claimed_by",
           "attempts",
           "max_attempts",
+          "priority",
+          "template_id",
+          "depends_on",
+          "lease_ttl_s",
+          "lease_deadline",
+          "lease_remaining_s",
+          "duration_s",
+          "last_error",
           "created_at",
+          "claimed_at",
+          "finished_at",
+          "pool",
+          "match",
+          "device_id",
+          "wants_executor",
+          "exclusive",
+          "preemptible",
+          "backend",
+          "model",
+          "app",
+          "report_to",
           "requested_by",
           "source"
         ]
@@ -2771,13 +2993,62 @@
               "locks": {
                 "type": "array",
                 "items": {
-                  "type": "object"
+                  "type": "object",
+                  "properties": {
+                    "device_id": {
+                      "type": "string"
+                    },
+                    "acquired_at": {
+                      "type": [
+                        "string",
+                        "null"
+                      ]
+                    }
+                  },
+                  "required": [
+                    "device_id",
+                    "acquired_at"
+                  ]
                 }
               },
               "status_report": {
-                "type": [
-                  "object",
-                  "null"
+                "oneOf": [
+                  {
+                    "type": "null"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "target": {
+                        "type": "string"
+                      },
+                      "state": {
+                        "type": "string"
+                      },
+                      "posted": {
+                        "type": "boolean"
+                      },
+                      "detail": {
+                        "type": [
+                          "string",
+                          "null"
+                        ]
+                      },
+                      "created_at": {
+                        "type": [
+                          "string",
+                          "null"
+                        ]
+                      }
+                    },
+                    "required": [
+                      "target",
+                      "state",
+                      "posted",
+                      "detail",
+                      "created_at"
+                    ]
+                  }
                 ]
               },
               "derived_timeline": {
@@ -2804,8 +3075,15 @@
             },
             "required": [
               "spec",
+              "parent",
+              "children",
+              "siblings",
               "results",
-              "artifacts"
+              "beacons",
+              "artifacts",
+              "locks",
+              "status_report",
+              "derived_timeline"
             ]
           }
         ]
@@ -2830,6 +3108,56 @@
           },
           "pages": {
             "type": "integer"
+          },
+          "facets": {
+            "type": "object",
+            "properties": {
+              "status_counts": {
+                "type": "object",
+                "properties": {
+                  "waiting": {
+                    "type": "integer"
+                  },
+                  "queued": {
+                    "type": "integer"
+                  },
+                  "claimed": {
+                    "type": "integer"
+                  },
+                  "done": {
+                    "type": "integer"
+                  },
+                  "failed": {
+                    "type": "integer"
+                  },
+                  "cancelled": {
+                    "type": "integer"
+                  },
+                  "skipped": {
+                    "type": "integer"
+                  }
+                },
+                "required": []
+              },
+              "workloads": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "pools": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            },
+            "required": [
+              "status_counts",
+              "workloads",
+              "pools"
+            ],
+            "description": "Over the whole table, not this page: jobs per status, and every workload and pool a job has named."
           }
         },
         "required": [
@@ -2837,7 +3165,8 @@
           "page",
           "per_page",
           "total",
-          "pages"
+          "pages",
+          "facets"
         ]
       },
       "JobSpecInput": {
@@ -3458,12 +3787,71 @@
               "string",
               "null"
             ]
+          },
+          "next_run_in_s": {
+            "type": [
+              "integer",
+              "null"
+            ]
+          },
+          "prev_expected": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "When it should last have fired."
+          },
+          "missed": {
+            "type": "boolean",
+            "description": "Enabled, has fired before, and its last expected firing did not happen."
+          },
+          "late_by_s": {
+            "type": [
+              "integer",
+              "null"
+            ]
+          },
+          "workload": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "executor": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "fanout": {
+            "type": "boolean"
+          },
+          "pool": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "template": {
+            "type": "object",
+            "description": "The job spec each firing enqueues."
           }
         },
         "required": [
           "id",
           "cron",
-          "enabled"
+          "enabled",
+          "last_run",
+          "next_run",
+          "next_run_in_s",
+          "prev_expected",
+          "missed",
+          "late_by_s",
+          "workload",
+          "executor",
+          "fanout",
+          "pool",
+          "template"
         ]
       },
       "ScheduleList": {
diff --git a/collector/scripts/check-api-v1.ts b/collector/scripts/check-api-v1.ts
index 25f8b31..dd14411 100644
--- a/collector/scripts/check-api-v1.ts
+++ b/collector/scripts/check-api-v1.ts
@@ -159,6 +159,14 @@ await refusal("cancelling a finished job is 409 conflict", fleet.cancelJob(creat
   const c = await fleet.cancelJob(r.job_id, { reason: "contract check" });
   conforms("cancelJob", "CancelResult", c);
   check("cancel names what it cancelled", c.cancelled.includes(r.job_id));
+  // The dashboard's Jobs screen builds its filter menus and its "has error"
+  // box from these; they used to exist only on the unversioned /api/jobs.
+  const errored = await fleet.listJobs({ has_error: true });
+  check("listJobs has_error=true finds the cancelled job, and only jobs with an error",
+    errored.items.some((j) => j.job_id === r.job_id) && errored.items.every((j) => j.last_error !== null));
+  check("listJobs facets count every status, over the whole table",
+    (errored.facets.status_counts.cancelled ?? 0) >= 1 && (errored.facets.status_counts.done ?? 0) >= 1, JSON.stringify(errored.facets.status_counts));
+  check("listJobs facets name the workloads", errored.facets.workloads.includes("benchmark"), JSON.stringify(errored.facets.workloads));
 }
 await refusal("unknown job is 404 not_found", fleet.getJobSummary("no-such-job"), 404, "not_found");
 
@@ -193,7 +201,13 @@ console.log("results, artifacts, fleet");
   check("an HTML artifact is never served inline", (page.headers.get("content-disposition") ?? "").startsWith("attachment"));
   await refusal("a malformed sha is 400", fleet.getArtifact("nothex"), 400, "bad_request");
 }
-conforms("listDevices", "DeviceList", await fleet.listDevices({ pool: "v1check" }));
+{
+  const devices = await fleet.listDevices({ pool: "v1check" });
+  conforms("listDevices", "DeviceList", devices);
+  // Facets are over every device, so a filter never empties its own menu.
+  const narrowed = await fleet.listDevices({ pool: "no-such-pool" });
+  check("listDevices facets ignore the filter", narrowed.items.length === 0 && narrowed.facets.pools.includes("v1check"), JSON.stringify(narrowed.facets));
+}
 conforms("getDevice", "DeviceDetail", await fleet.getDevice(DEVICE));
 conforms("listTemplates", "TemplateList", await fleet.listTemplates());
 conforms("listSchedules", "ScheduleList", await fleet.listSchedules());
diff --git a/collector/scripts/check-auth.ts b/collector/scripts/check-auth.ts
index 9d8ccf1..65953c0 100644
--- a/collector/scripts/check-auth.ts
+++ b/collector/scripts/check-auth.ts
@@ -80,6 +80,7 @@ async function call(method: string, url: string, o: Opts = {}) {
 
 let server: ChildProcess | undefined;
 let peer: ChildProcess | undefined;
+let guarded: ChildProcess | undefined;
 let log = "";
 try {
   server = spawn(process.execPath, [TSX, "src/server.ts"], {
@@ -331,13 +332,62 @@ try {
     check("/api/health tells the dashboard every read needs a token", health.status === 200 && health.body.auth === "tokens" && health.body.guard === true);
     check("the dashboard's reads carry X-Fleet-Token", (await call("GET", "/api/devices", { headers: { "x-fleet-token": READ } })).status === 200);
     check("and fail without it", (await call("GET", "/api/devices")).status === 401);
+    // The dashboard reads devices and jobs through the generated v1 client,
+    // which it gives the same header rather than a bearer token.
+    check("its /api/v1 reads carry X-Fleet-Token too", (await call("GET", "/api/v1/devices", { headers: { "x-fleet-token": READ } })).status === 200);
+    const mine = await call("POST", "/api/v1/jobs", { headers: { "x-fleet-token": ALICE, "x-fleet-source": "dash" }, body: spec });
+    check("and so does its enqueue, recorded as from the dashboard", mine.status === 201, `${mine.status} ${JSON.stringify(mine.body)}`);
+    const s = await call("GET", `/api/v1/jobs/${mine.body.job_id}/summary`, { token: READ });
+    check("as alice, via dash", s.body.requested_by === "alice" && s.body.source === "dash", JSON.stringify([s.body.requested_by, s.body.source]));
+  }
+
+  console.log("FLEET_DASH_TOKEN with auth off: /api/v1 cancel and retry carry the guard");
+  {
+    // A third collector: no tokens, only the dashboard's speed bump. v1 cancel
+    // and retry forward to the guarded unversioned routes, and used to drop
+    // the header on the way, so every one was a 401 whatever was sent.
+    const port3 = await freePort();
+    const BASE3 = `http://127.0.0.1:${port3}`;
+    guarded = spawn(process.execPath, [TSX, "src/server.ts"], {
+      cwd: ROOT,
+      env: {
+        ...process.env,
+        FLEET_PORT: String(port3), FLEET_BIND: "127.0.0.1",
+        FLEET_DATA_DIR: path.join(dir, "data3"), FLEET_ARTIFACT_DIR: path.join(dir, "artifacts3"),
+        FLEET_LOG_FILE: path.join(dir, "collector3.log"), FLEET_TOKENS_FILE: path.join(dir, "tokens3.json"),
+        FLEET_AUTH: "", FLEET_AUTH_PROTOCOL: "", FLEET_DASH_TOKEN: "speed-bump",
+        FLEET_SWEEP_MS: "60000", FLEET_SCHEDULER_TICK_MS: "60000",
+      },
+      stdio: ["ignore", "pipe", "pipe"],
+    });
+    guarded.stdout?.on("data", (d) => { log += d; });
+    guarded.stderr?.on("data", (d) => { log += d; });
+    await up(BASE3, guarded);
+    const at = async (method: string, url: string, body?: unknown, headers: Record<string, string> = {}) => {
+      const res = await fetch(`${BASE3}${url}`, {
+        method, headers: { ...headers, ...(body !== undefined ? { "content-type": "application/json" } : {}) },
+        body: body === undefined ? undefined : JSON.stringify(body),
+      });
+      return { status: res.status, body: (await res.json().catch(() => null)) as any };
+    };
+    await at("POST", "/devices/register", { ...device, device_id: "guard-dev" });
+    const job = await at("POST", "/api/v1/jobs", { ...spec, targets: { device_id: "guard-dev" } });
+    check("enqueue is open, as POST /jobs is", job.status === 201, `${job.status} ${JSON.stringify(job.body)}`);
+    const bare = await at("POST", `/api/v1/jobs/${job.body.job_id}/cancel`, {});
+    check("cancel without the token is refused, as unauthorized", bare.status === 401 && bare.body.error.code === "unauthorized", JSON.stringify(bare));
+    const wrong = await at("POST", `/api/v1/jobs/${job.body.job_id}/cancel`, {}, { "x-fleet-token": "nope" });
+    check("and with the wrong one", wrong.status === 401, String(wrong.status));
+    const ok = await at("POST", `/api/v1/jobs/${job.body.job_id}/cancel`, { reason: "cancelled from the dashboard" }, { "x-fleet-token": "speed-bump" });
+    check("cancel with the token works", ok.status === 200 && ok.body.cancelled?.[0] === job.body.job_id, `${ok.status} ${JSON.stringify(ok.body)}`);
+    const again = await at("POST", `/api/v1/jobs/${job.body.job_id}/retry`, {}, { "x-fleet-token": "speed-bump" });
+    check("and so does retry", again.status === 201 && again.body.retry_of === job.body.job_id, `${again.status} ${JSON.stringify(again.body)}`);
   }
 } catch (e) {
   failures++;
   console.error(`  FAIL  ${(e as Error).message}`);
 } finally {
   if (failures) console.error(`\n--- collector output ---\n${log.slice(-4000)}`);
-  for (const child of [server, peer]) {
+  for (const child of [server, peer, guarded]) {
     if (!child || child.exitCode !== null) continue;
     const exited = new Promise<void>((resolve) => child.once("exit", () => resolve()));
     child.kill("SIGTERM");
diff --git a/collector/scripts/check-dash-requests.ts b/collector/scripts/check-dash-requests.ts
new file mode 100644
index 0000000..0256119
--- /dev/null
+++ b/collector/scripts/check-dash-requests.ts
@@ -0,0 +1,72 @@
+// The dashboard makes no request the deprecation headers mark.
+//
+// The dashboard reads devices and jobs through the generated /api/v1 client.
+// Nothing stops a new screen from reaching for `useApi("/api/jobs")` again, and
+// it would work -- the old routes keep answering -- so the only place it would
+// show is a Deprecation header nobody reads. This reads the dashboard's source
+// and holds every request it can see against the same table that sets those
+// headers (src/api/v1/deprecations.ts).
+//
+// Text, not a type check: a request is a string literal handed to useApi,
+// fetch or mutate, and template holes (`${id}`) stand for one path segment.
+// Usage: tsx scripts/check-dash-requests.ts
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { SUCCESSORS } from "../src/api/v1/deprecations.js";
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const DASH = path.join(ROOT, "dash/src");
+
+function sources(dir: string): string[] {
+  return readdirSync(dir).flatMap((name) => {
+    const p = path.join(dir, name);
+    return statSync(p).isDirectory() ? sources(p) : /\.(ts|tsx)$/.test(name) ? [p] : [];
+  });
+}
+
+/**
+ * A literal as the request path it becomes. A hole after a slash is one
+ * segment (`/api/jobs/${id}`); a hole glued to a segment is a query string
+ * being appended (`/api/jobs${qs}`), so it goes, as does a literal query.
+ */
+const asPath = (lit: string) => lit.replace(/(\/)?\$\{[^}]*\}/g, (_m, slash) => (slash ? "/x" : "")).split("?")[0];
+
+type Request = { file: string; line: number; method: string; path: string };
+const requests: Request[] = [];
+
+for (const file of sources(DASH)) {
+  const src = readFileSync(file, "utf8");
+  const lineOf = (i: number) => src.slice(0, i).split("\n").length;
+  const seen = new Set<number>();
+  const add = (i: number, method: string, lit: string) => {
+    seen.add(i);
+    requests.push({ file: path.relative(ROOT, file), line: lineOf(i), method, path: asPath(lit) });
+  };
+  // mutate("POST", "/api/...") says its method.
+  for (const m of src.matchAll(/mutate(?:<[^>]*>)?\(\s*"(POST|PATCH|DELETE)"\s*,\s*(["'`])(.*?)\2/g))
+    add(m.index! + m[0].lastIndexOf(m[3]) - 1, m[1], m[3]);
+  // fetch("...") without a method is a GET; with one, take it.
+  for (const m of src.matchAll(/fetch\(\s*(["'`])(.*?)\1\s*(,\s*\{[^}]*?method:\s*"(\w+)")?/g))
+    add(m.index! + m[0].indexOf(m[2]) - 1, m[4] ?? "GET", m[2]);
+  // Anything else that names an unversioned API path is read: useApi, an
+  // <img src>, the EventSource.
+  for (const m of src.matchAll(/(["'`])(\/api\/(?!v1\/)(?:[^"'`\s$]|\$\{[^}]*\})*)/g)) if (!seen.has(m.index!)) add(m.index!, "GET", m[2]);
+}
+
+let failures = 0;
+for (const r of requests) {
+  const hit = SUCCESSORS.find(([method, re]) => method === r.method && re.test(r.path));
+  if (!hit) continue;
+  failures++;
+  const m = hit[1].exec(r.path)!;
+  console.error(`  FAIL  ${r.file}:${r.line} ${r.method} ${r.path} is deprecated -- use ${hit[2](m)} through dash/src/client.ts`);
+}
+
+// A scan that finds nothing is a scan that stopped working, not a clean bill.
+if (requests.length < 20) {
+  failures++;
+  console.error(`  FAIL  found only ${requests.length} requests in dash/src -- this check needs updating`);
+}
+console.log(failures ? `\n${failures} FAILED` : `  ok — ${requests.length} requests in dash/src, none deprecated`);
+process.exit(failures ? 1 : 0);
diff --git a/collector/scripts/test.ts b/collector/scripts/test.ts
index 8d98c6a..1899872 100644
--- a/collector/scripts/test.ts
+++ b/collector/scripts/test.ts
@@ -128,10 +128,17 @@ if (!existsSync(path.join(ROOT, "dash/node_modules"))) {
   failed = true;
 }
 
+// The dashboard reads devices and jobs through the generated /api/v1 client.
+// The old routes still answer, so a screen that went back to them would work
+// and say so only in a header; this reads the source for that instead.
+step("the dashboard calls no deprecated route");
+if (!(await run(process.execPath, [TSX, "scripts/check-dash-requests.ts"]))) failed = true;
+
 // --- 3. the icon set keeps up with the workloads -------------------------
 // WORKLOAD_ICON says it covers every workload the collector accepts, and
-// nothing but this step enforces it. The dashboard deliberately does not
-// import collector types, so the two lists can only be compared as text —
+// nothing but this step enforces it. The dashboard imports the generated
+// client and nothing else of the collector's, so the two lists can only be
+// compared as text —
 // which means a regex that stops matching has to fail the step, not pass it
 // quietly, or the check silently stops checking.
 step("every workload has an icon");
diff --git a/collector/src/api/v1/deprecations.ts b/collector/src/api/v1/deprecations.ts
index 97865cf..6b5feba 100644
--- a/collector/src/api/v1/deprecations.ts
+++ b/collector/src/api/v1/deprecations.ts
@@ -15,7 +15,7 @@ import type { FastifyInstance } from "fastify";
 /** 2026-10-14, when /api/v1 shipped, as the RFC 9745 `@<epoch seconds>` form. */
 const SINCE = `@${Math.floor(Date.UTC(2026, 9, 14) / 1000)}`;
 
-const SUCCESSORS: [method: string, pattern: RegExp, successor: (m: RegExpExecArray) => string][] = [
+export const SUCCESSORS: [method: string, pattern: RegExp, successor: (m: RegExpExecArray) => string][] = [
   ["GET", /^\/api\/devices$/, () => "/api/v1/devices"],
   ["GET", /^\/api\/devices\/([^/]+)$/, (m) => `/api/v1/devices/${m[1]}`],
   ["GET", /^\/api\/jobs$/, () => "/api/v1/jobs"],
diff --git a/collector/src/api/v1/routes.ts b/collector/src/api/v1/routes.ts
index 8207281..53defec 100644
--- a/collector/src/api/v1/routes.ts
+++ b/collector/src/api/v1/routes.ts
@@ -125,7 +125,9 @@ async function inner<T>(app: FastifyInstance, req: FastifyRequest, method: "GET"
   const body = res.body ? (JSON.parse(res.body) as Record<string, unknown>) : {};
   if (res.statusCode >= 400) {
     const message = typeof body.error === "string" ? body.error : `upstream ${res.statusCode}`;
-    const code: ErrorCode = res.statusCode === 404 ? "not_found" : res.statusCode === 409 ? "conflict" : res.statusCode === 400 ? "bad_request" : "internal";
+    const code: ErrorCode =
+      res.statusCode === 404 ? "not_found" : res.statusCode === 409 ? "conflict" : res.statusCode === 400 ? "bad_request"
+        : res.statusCode === 401 ? "unauthorized" : res.statusCode === 403 ? "forbidden" : "internal";
     throw new ApiError(res.statusCode, code, message);
   }
   return body as T;
@@ -537,10 +539,12 @@ export const ROUTES: Route[] = [
       { name: "expired", in: "query", type: "boolean", description: "Include expired ephemeral agents." },
       ...PAGE,
     ],
-    responses: [{ status: 200, description: "Devices.", schema: "list:Device" }],
+    responses: [{ status: 200, description: "Devices, and the facets a filter menu is built from.", schema: "DeviceList" }],
     handler: async ({ app, req, q }) => {
-      const body = await inner<{ devices: unknown[] }>(app, req, "GET", `/api/devices${qs(q, ["status", "pool", "platform", "kind", "simulator", "q", "expired"])}`);
-      return pageOf(body.devices, q);
+      const body = await inner<{ devices: unknown[]; pools: string[]; platforms: string[]; kinds: string[] }>(
+        app, req, "GET", `/api/devices${qs(q, ["status", "pool", "platform", "kind", "simulator", "q", "expired"])}`,
+      );
+      return { ...pageOf(body.devices, q), facets: { pools: body.pools, platforms: body.platforms, kinds: body.kinds } };
     },
   },
   {
@@ -609,17 +613,24 @@ export const ROUTES: Route[] = [
       { name: "q", in: "query", type: "string", description: "Substring of the job id." },
       { name: "from", in: "query", type: "string", description: "Created at or after (ISO 8601)." },
       { name: "to", in: "query", type: "string", description: "Created at or before (ISO 8601)." },
+      { name: "has_error", in: "query", type: "boolean", description: "true: only jobs with a last_error." },
       ...PAGE,
     ],
-    responses: [{ status: 200, description: "Jobs.", schema: "list:Job" }],
+    responses: [{ status: 200, description: "Jobs, and the facets a filter menu is built from.", schema: "JobList" }],
     handler: async ({ app, req, q }) => {
       const query: Query = { ...q };
       if (q.mine === true) query.requested_by = authOf(req).actor ?? "\u0000nobody";
-      const body = await inner<{ jobs: unknown[]; page: number; per_page: number; total: number }>(
+      const body = await inner<{
+        jobs: unknown[]; page: number; per_page: number; total: number;
+        status_counts: Record<string, number>; workloads: string[]; pools: string[];
+      }>(
         app, req, "GET",
-        `/api/jobs${qs(query, ["status", "workload", "executor", "device", "pool", "requested_by", "source", "q", "from", "to", "page", "per_page"])}`,
+        `/api/jobs${qs(query, ["status", "workload", "executor", "device", "pool", "requested_by", "source", "q", "from", "to", "has_error", "page", "per_page"])}`,
       );
-      return list(body.jobs, body.page, body.per_page, body.total);
+      return {
+        ...list(body.jobs, body.page, body.per_page, body.total),
+        facets: { status_counts: body.status_counts, workloads: body.workloads, pools: body.pools },
+      };
     },
   },
   {
diff --git a/collector/src/api/v1/schemas.ts b/collector/src/api/v1/schemas.ts
index 90c2500..8b5598e 100644
--- a/collector/src/api/v1/schemas.ts
+++ b/collector/src/api/v1/schemas.ts
@@ -101,12 +101,22 @@ export const SCHEMAS: Record<string, Schema> = {
     },
   ),
 
+  // Every field the dashboard reads is stated and required, because the
+  // dashboard's types are these types: a field a handler stops sending fails
+  // check-api-v1 rather than blanking a column.
   Beacon: {
     type: ["object", "null"],
     properties: {
       battery_pct: { type: ["number", "null"] }, charging: { type: ["boolean", "null"] }, thermal: nstr,
-      mem_mb: { type: ["number", "null"] }, job_id: nstr,
+      mem_mb: { type: ["number", "null"] },
+      mem_method: { ...nstr, description: "How mem_mb was measured: iOS phys_footprint and Android PSS are different quantities." },
+      process_alive: { type: ["boolean", "null"] }, job_id: nstr,
+      busy: {
+        description: "Set when the device is running a job for a different collector.",
+        oneOf: [{ type: "null" }, object({ job_id: nstr, collector: nstr })],
+      },
     },
+    required: ["battery_pct", "charging", "thermal", "mem_mb", "mem_method", "process_alive", "job_id", "busy"],
   },
 
   Device: object(
@@ -120,16 +130,29 @@ export const SCHEMAS: Record<string, Schema> = {
       beacon: ref("Beacon"), current_job: nstr,
       lock: { oneOf: [{ type: "null" }, object({ job_id: str, acquired_at: nstr })] },
     },
-    ["device_id", "name", "descriptor", "pools", "capabilities", "platform", "kind", "simulator", "status", "last_seen"],
   ),
 
   DeviceDetail: {
     allOf: [
       ref("Device"),
-      object({ counts: obj, jobs: arr(obj), benchmarks: arr(obj) }, ["jobs"]),
+      object({
+        counts: object({ results: int, beacons: int }),
+        jobs: arr(object({
+          job_id: str, workload: str, executor: str, status: str, created_at: nstr, finished_at: nstr,
+          attempts: int, max_attempts: int, last_error: nstr,
+        })),
+        benchmarks: arr(object({ job_id: str, at: nstr, model: str, quant: nstr, backend: str, metrics: nobj })),
+      }),
     ],
   },
 
+  DeviceList: listWith("Device", {
+    facets: {
+      ...object({ pools: strs, platforms: strs, kinds: strs }),
+      description: "Over every device, not the filtered set, so choosing a filter never empties its own menu.",
+    },
+  }),
+
   Job: object(
     {
       job_id: str, workload: str, executor: { enum: ["device", "host"] },
@@ -142,9 +165,22 @@ export const SCHEMAS: Record<string, Schema> = {
       requested_by: { ...nstr, description: "Verified only when the collector runs with FLEET_AUTH=tokens." },
       source: { ...nstr, description: "Which front door: mcp, cli, ci, dash, schedule, api." },
     },
-    ["job_id", "workload", "executor", "status", "attempts", "max_attempts", "created_at", "requested_by", "source"],
   ),
 
+  JobList: listWith("Job", {
+    facets: {
+      ...object({
+        status_counts: object(
+          Object.fromEntries(["waiting", "queued", "claimed", "done", "failed", "cancelled", "skipped"].map((s) => [s, int])),
+          [],
+        ),
+        workloads: strs,
+        pools: strs,
+      }),
+      description: "Over the whole table, not this page: jobs per status, and every workload and pool a job has named.",
+    },
+  }),
+
   JobDetail: {
     allOf: [
       ref("Job"),
@@ -154,9 +190,12 @@ export const SCHEMAS: Record<string, Schema> = {
           results: arr(object({ device_id: str, iter: int, created_at: nstr, payload: obj })),
           beacons: arr(obj),
           artifacts: arr(object({ sha256: str, name: nstr, size: nint, created_at: nstr, in_store: bool, role: { enum: ["input", "output"] } })),
-          locks: arr(obj), status_report: nobj, derived_timeline: arr(object({ at: nstr, what: str })),
+          locks: arr(object({ device_id: str, acquired_at: nstr })),
+          status_report: {
+            oneOf: [{ type: "null" }, object({ target: str, state: str, posted: bool, detail: nstr, created_at: nstr })],
+          },
+          derived_timeline: arr(object({ at: nstr, what: str })),
         },
-        ["spec", "results", "artifacts"],
       ),
     ],
   },
@@ -244,7 +283,13 @@ export const SCHEMAS: Record<string, Schema> = {
   ),
 
   Template: object({ id: str, name: nstr, spec: obj, created_at: nstr, updated_at: nstr }),
-  Schedule: object({ id: str, cron: str, enabled: bool, last_run: nstr, next_run: nstr }, ["id", "cron", "enabled"]),
+  Schedule: object({
+    id: str, cron: str, enabled: bool, last_run: nstr, next_run: nstr, next_run_in_s: nint,
+    prev_expected: { ...nstr, description: "When it should last have fired." },
+    missed: { ...bool, description: "Enabled, has fired before, and its last expected firing did not happen." },
+    late_by_s: nint, workload: nstr, executor: nstr, fanout: bool, pool: nstr,
+    template: { ...obj, description: "The job spec each firing enqueues." },
+  }),
   Alert: object({ id: { type: ["integer", "string"] }, rule: str, subject: nstr, severity: str, state: str, message: nstr }, ["id", "rule", "state"]),
 
   Result: object(
@@ -298,8 +343,13 @@ function SCHEMA_ERROR_INNER(): Schema {
 
 /** A paginated list of `item`. Every list in v1 has this envelope. */
 export function listOf(item: string): Schema {
+  return listWith(item, {});
+}
+
+/** The list envelope plus fields of its own, such as the facets a filter menu is built from. */
+function listWith(item: string, extra: Record<string, Schema>): Schema {
   return object(
-    { items: arr(ref(item)), page: int, per_page: int, total: int, pages: int },
+    { items: arr(ref(item)), page: int, per_page: int, total: int, pages: int, ...extra },
   );
 }
 
diff --git a/collector/src/auth.ts b/collector/src/auth.ts
index 07716f7..efead8e 100644
--- a/collector/src/auth.ts
+++ b/collector/src/auth.ts
@@ -433,5 +433,10 @@ export function forward(app: FastifyInstance, from: FastifyRequest | null, opts:
   if (ctx?.actor) headers["x-fleet-actor"] = ctx.actor;
   if (ctx?.source) headers["x-fleet-source"] = ctx.source;
   if (ctx?.verified) headers["x-fleet-verified"] = "1";
+  // FLEET_DASH_TOKEN's guard (api/guard.ts) reads this header on the route
+  // forwarded *to*. Dropping it here made every /api/v1 cancel and retry a 401
+  // on a collector with the guard set, whatever the caller sent.
+  const dash = from?.headers["x-fleet-token"];
+  if (typeof dash === "string" && dash) headers["x-fleet-token"] = dash;
   return app.inject({ ...opts, headers: { ...(opts.headers ?? {}), ...headers } });
 }
diff --git a/collector/src/client/api.gen.ts b/collector/src/client/api.gen.ts
index 4493d39..f83fc40 100644
--- a/collector/src/client/api.gen.ts
+++ b/collector/src/client/api.gen.ts
@@ -71,11 +71,19 @@ export type AuditEntryList = {
 };
 
 export type Beacon = {
-  battery_pct?: number | null;
-  charging?: boolean | null;
-  thermal?: string | null;
-  mem_mb?: number | null;
-  job_id?: string | null;
+  battery_pct: number | null;
+  charging: boolean | null;
+  thermal: string | null;
+  mem_mb: number | null;
+  /** How mem_mb was measured: iOS phys_footprint and Android PSS are different quantities. */
+  mem_method: string | null;
+  process_alive: boolean | null;
+  job_id: string | null;
+  /** Set when the device is running a job for a different collector. */
+  busy: (null | {
+    job_id: string | null;
+    collector: string | null;
+  });
 } | null;
 
 export type CancelInput = {
@@ -100,35 +108,55 @@ export type CandidateDevice = {
 export type Device = {
   device_id: string;
   name: string | null;
-  notes?: string | null;
+  notes: string | null;
   descriptor: Record<string, unknown>;
   /** Effective pools: the override when set, otherwise what the runner reported. */
   pools: string[];
-  pools_reported?: string[];
-  pools_override?: string[] | null;
+  pools_reported: string[];
+  pools_override: string[] | null;
   /** null: an agent that predates capabilities, offered everything. */
   capabilities: string[] | null;
-  last_net?: string | null;
-  ttl_s?: number | null;
-  expired?: boolean;
+  last_net: string | null;
+  ttl_s: number | null;
+  expired: boolean;
   platform: string;
   kind: string | null;
   simulator: boolean;
   status: "online" | "stale" | "offline";
-  age_s?: number | null;
+  age_s: number | null;
   last_seen: string | null;
-  beacon?: Beacon;
-  current_job?: string | null;
-  lock?: (null | {
+  beacon: Beacon;
+  current_job: string | null;
+  lock: (null | {
     job_id: string;
     acquired_at: string | null;
   });
 };
 
 export type DeviceDetail = Device & {
-  counts?: Record<string, unknown>;
-  jobs: (Record<string, unknown>)[];
-  benchmarks?: (Record<string, unknown>)[];
+  counts: {
+    results: number;
+    beacons: number;
+  };
+  jobs: {
+    job_id: string;
+    workload: string;
+    executor: string;
+    status: string;
+    created_at: string | null;
+    finished_at: string | null;
+    attempts: number;
+    max_attempts: number;
+    last_error: string | null;
+  }[];
+  benchmarks: {
+    job_id: string;
+    at: string | null;
+    model: string;
+    quant: string | null;
+    backend: string;
+    metrics: Record<string, unknown> | null;
+  }[];
 };
 
 export type DeviceList = {
@@ -137,6 +165,12 @@ export type DeviceList = {
   per_page: number;
   total: number;
   pages: number;
+  /** Over every device, not the filtered set, so choosing a filter never empties its own menu. */
+  facets: {
+    pools: string[];
+    platforms: string[];
+    kinds: string[];
+  };
 };
 
 export type DeviceOutcome = {
@@ -212,30 +246,30 @@ export type Job = {
   workload: string;
   executor: "device" | "host";
   status: "waiting" | "queued" | "claimed" | "done" | "failed" | "cancelled" | "skipped";
-  claimed_by?: string | null;
+  claimed_by: string | null;
   attempts: number;
   max_attempts: number;
-  priority?: number;
-  template_id?: string | null;
-  depends_on?: string[];
-  lease_ttl_s?: number;
-  lease_deadline?: string | null;
-  lease_remaining_s?: number | null;
-  duration_s?: number | null;
-  last_error?: string | null;
+  priority: number;
+  template_id: string | null;
+  depends_on: string[];
+  lease_ttl_s: number;
+  lease_deadline: string | null;
+  lease_remaining_s: number | null;
+  duration_s: number | null;
+  last_error: string | null;
   created_at: string | null;
-  claimed_at?: string | null;
-  finished_at?: string | null;
-  pool?: string | null;
-  match?: string | null;
-  device_id?: string | null;
-  wants_executor?: string | null;
-  exclusive?: boolean;
-  preemptible?: boolean;
-  backend?: string | null;
-  model?: string | null;
-  app?: string | null;
-  report_to?: Record<string, unknown> | null;
+  claimed_at: string | null;
+  finished_at: string | null;
+  pool: string | null;
+  match: string | null;
+  device_id: string | null;
+  wants_executor: string | null;
+  exclusive: boolean;
+  preemptible: boolean;
+  backend: string | null;
+  model: string | null;
+  app: string | null;
+  report_to: Record<string, unknown> | null;
   /** Verified only when the collector runs with FLEET_AUTH=tokens. */
   requested_by: string | null;
   /** Which front door: mcp, cli, ci, dash, schedule, api. */
@@ -256,16 +290,16 @@ export type JobCreated = {
 
 export type JobDetail = Job & {
   spec: Record<string, unknown>;
-  parent?: string | null;
-  children?: Job[];
-  siblings?: Job[];
+  parent: string | null;
+  children: Job[];
+  siblings: Job[];
   results: {
     device_id: string;
     iter: number;
     created_at: string | null;
     payload: Record<string, unknown>;
   }[];
-  beacons?: (Record<string, unknown>)[];
+  beacons: (Record<string, unknown>)[];
   artifacts: {
     sha256: string;
     name: string | null;
@@ -274,9 +308,18 @@ export type JobDetail = Job & {
     in_store: boolean;
     role: "input" | "output";
   }[];
-  locks?: (Record<string, unknown>)[];
-  status_report?: Record<string, unknown> | null;
-  derived_timeline?: {
+  locks: {
+    device_id: string;
+    acquired_at: string | null;
+  }[];
+  status_report: (null | {
+    target: string;
+    state: string;
+    posted: boolean;
+    detail: string | null;
+    created_at: string | null;
+  });
+  derived_timeline: {
     at: string | null;
     what: string;
   }[];
@@ -288,6 +331,20 @@ export type JobList = {
   per_page: number;
   total: number;
   pages: number;
+  /** Over the whole table, not this page: jobs per status, and every workload and pool a job has named. */
+  facets: {
+    status_counts: {
+      waiting?: number;
+      queued?: number;
+      claimed?: number;
+      done?: number;
+      failed?: number;
+      cancelled?: number;
+      skipped?: number;
+    };
+    workloads: string[];
+    pools: string[];
+  };
 };
 
 /** A Fleet Runner job spec (schema 1). `schema` and `job_id` may be omitted; the API fills in 1 and a generated id. A caller that sets job_id is choosing an idempotency key: a second POST with the same id is refused with duplicate_job. GET /api/v1/workloads/{name} returns a complete example for each workload. */
@@ -455,8 +512,20 @@ export type Schedule = {
   id: string;
   cron: string;
   enabled: boolean;
-  last_run?: string | null;
-  next_run?: string | null;
+  last_run: string | null;
+  next_run: string | null;
+  next_run_in_s: number | null;
+  /** When it should last have fired. */
+  prev_expected: string | null;
+  /** Enabled, has fired before, and its last expected firing did not happen. */
+  missed: boolean;
+  late_by_s: number | null;
+  workload: string | null;
+  executor: string | null;
+  fanout: boolean;
+  pool: string | null;
+  /** The job spec each firing enqueues. */
+  template: Record<string, unknown>;
 };
 
 export type ScheduleList = {
@@ -629,7 +698,7 @@ export class FleetClient extends Transport {
    *
    * `GET /api/v1/jobs` · scope: read
    */
-  listJobs(query?: { status?: string; workload?: string; executor?: "device" | "host"; device?: string; pool?: string; requested_by?: string; mine?: boolean; source?: string; q?: string; from?: string; to?: string; page?: number; per_page?: number }, opts?: CallOptions): Promise<JobList> {
+  listJobs(query?: { status?: string; workload?: string; executor?: "device" | "host"; device?: string; pool?: string; requested_by?: string; mine?: boolean; source?: string; q?: string; from?: string; to?: string; has_error?: boolean; page?: number; per_page?: number }, opts?: CallOptions): Promise<JobList> {
     return this.request<JobList>("GET", `/api/v1/jobs`, { ...opts, query });
   }
 
diff --git a/docs/api.md b/docs/api.md
index 6d66b68..1f8c7da 100644
--- a/docs/api.md
+++ b/docs/api.md
@@ -2,8 +2,12 @@
 
 Three audiences. **Scripts, CI, the CLI and AI agents** use the control API
 under `/api/v1`. **Runners** use [the protocol](protocol.md), and that is the
-only part a runner needs. **The dashboard** uses the unversioned `/api/*`
-routes described further down, which predate `/api/v1`.
+only part a runner needs. **The dashboard** reads devices, jobs, templates,
+schedules and its alert banner through `/api/v1`, with the generated client,
+and uses the unversioned `/api/*` routes described further down for what
+`/api/v1` does not offer yet: the Overview, results, findings, evals, visual
+diffs, system, events, the live stream, and every change other than enqueue,
+cancel and retry.
 
 ## Control API (`/api/v1`)
 
@@ -17,10 +21,10 @@ disagree: the test suite fails if they do.
 |---|---|---|
 | `GET /api/v1/health` | none | Version, auth mode, `api: "v1"` |
 | `GET /api/v1/whoami` | none | Who the collector thinks you are, and your scopes |
-| `GET /api/v1/devices` · `/devices/{id}` | read | The shelf, with status (`online`, `stale`, `offline`) and current job |
+| `GET /api/v1/devices` · `/devices/{id}` | read | The shelf, with status (`online`, `stale`, `offline`) and current job. The list carries `facets` (`pools`, `platforms`, `kinds`) over every device, not only the filtered ones |
 | `GET /api/v1/workloads` · `/workloads/{name}` | read | What the fleet can run: executor, params schema, a valid example spec, how many live agents can take it |
 | `GET /api/v1/templates` | read | Saved job templates |
-| `GET /api/v1/jobs` | read | Jobs; filter by `status` (`waiting`, `queued`, `claimed`, `done`, `failed`, `cancelled`, `skipped`), `workload`, `executor` (`device` or `host`), `device`, `pool`, `source`, `requested_by`, `mine=true`, `q` (substring of the job id), `from`/`to` |
+| `GET /api/v1/jobs` | read | Jobs; filter by `status` (`waiting`, `queued`, `claimed`, `done`, `failed`, `cancelled`, `skipped`), `workload`, `executor` (`device` or `host`), `device`, `pool`, `source`, `requested_by`, `mine=true`, `q` (substring of the job id), `from`/`to`, `has_error=true`. The list carries `facets` over the whole table: `status_counts`, `workloads`, `pools` |
 | `POST /api/v1/jobs` | run | Enqueue. 201 with the job id, its status, and links to its summary and wait URLs. 422 `no_capable_agent` when no live agent declares the workload (or backend); 400 `no_matching_devices` for a fan-out that matches nothing, and 400 `no_build` when `latest` names no published build |
 | `POST /api/v1/jobs/validate` | run | Dry run: schema errors by path, the devices it would land on, warnings. Always 200 |
 | `GET /api/v1/jobs/{id}` | read | One job, with its spec |
@@ -46,7 +50,7 @@ disagree: the test suite fails if they do.
 **Job specs are validated strictly** against `job.schema.json`: an unknown
 top-level field is refused rather than ignored, so a typo is an error and not
 a setting that silently did nothing. A workload's params are checked against
-its manifest. This is `/api/v1/jobs` (and so `fleetr run`) only: the legacy
+its manifest. This is `/api/v1/jobs` (and so `fleetr run` and the dashboard's composer) only: the legacy
 `POST /jobs` and `POST /api/jobs` do not refuse unknown fields. They do make
 the same two auth checks `/api/v1` makes with tokens on (the `shell` workload
 needs `admin`; cancel and retry are for the job's owner or `admin`); see
@@ -264,6 +268,11 @@ send `X-Fleet-Token`. With `FLEET_AUTH=tokens` it steps aside: the scoped token
 has already been checked, and every mutation needs `run` or `admin` (see
 [Authentication](deploy/auth.md)).
 
+The dashboard's composer enqueues through `POST /api/v1/jobs`, which the guard
+does not cover, as it does not cover `POST /jobs`. `/api/v1` cancel and retry
+do carry it: they hand the request to the guarded routes above, `X-Fleet-Token`
+included.
+
 **It is deliberately unset on the reference deployment.** The collector is LAN
 and tailnet only with auth off, `POST /jobs` is open then anyway so `curl` and
 CI keep working, and
diff --git a/docs/dashboard.md b/docs/dashboard.md
index 4004b1c..ceaee02 100644
--- a/docs/dashboard.md
+++ b/docs/dashboard.md
@@ -58,6 +58,12 @@ be composed, enqueued, cancelled, retried and reprioritised; devices can be
 renamed, annotated and re-pooled; schedules enabled, fired now and deleted;
 artifacts uploaded and garbage-collected.
 
+**The composer enqueues through `POST /api/v1/jobs`**, so the spec is checked
+strictly: an unknown top-level field, or params the workload's manifest does
+not allow, is refused with each problem named by path, where the older
+`POST /api/jobs` took the spec and let the job fail later. The curl it shows
+is the same request. Jobs it enqueues record `source: dash`.
+
 Alerts appear as a banner on every screen. The layout works on a phone, and `?`
 lists the keyboard shortcuts — `g j` jobs, `g d` devices, `g f` findings, `g n` new job,
 `/` search, and on a finding `r`, `d`, `n` or `a` for its verdict (real,