@1claw/openapi-spec 0.12.0 → 0.14.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 1Claw Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -40,7 +40,7 @@ openapi-generator generate \
 import spec from "@1claw/openapi-spec/openapi.json";
 ```
 
-## What's in the spec (v0.12.0)
+## What's in the spec (v0.14.0)
 
 - **Vaults** — CRUD, CMEK enable/disable, key rotation with job tracking
 - **Secrets** — CRUD, versioning, CMEK-encrypted flag
@@ -59,4 +59,4 @@ import spec from "@1claw/openapi-spec/openapi.json";
 
 ## License
 
-PolyForm Noncommercial 1.0.0
+[MIT](./LICENSE)

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "1Claw API",
-    "version": "2.4.1",
+    "version": "2.5.0",
     "description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
     "contact": {
       "email": "ops@1claw.xyz"
@@ -256,6 +256,43 @@
         }
       }
     },
+    "/v1/auth/jwt-public-key": {
+      "get": {
+        "tags": [
+          "Authentication"
+        ],
+        "summary": "Get JWT verification public key",
+        "description": "Returns the Ed25519 public key used to sign JWTs.\nUse this to verify tokens independently (e.g. in a TEE proxy or\ngateway). No authentication required.\n",
+        "operationId": "getJwtPublicKey",
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "JWT public key",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "alg",
+                    "public_key_base64"
+                  ],
+                  "properties": {
+                    "alg": {
+                      "type": "string",
+                      "example": "EdDSA"
+                    },
+                    "public_key_base64": {
+                      "type": "string",
+                      "description": "Base64-encoded Ed25519 public key"
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/v1/auth/signup": {
       "post": {
         "tags": [

package/openapi.yaml

@@ -2,7 +2,7 @@ openapi: 3.1.0
 
 info:
     title: 1Claw API
-    version: 2.4.1
+    version: 2.5.0
     description: |
         Secure secret management for AI agents. Provides vaults, secrets,
         policy-based access control, agent identity, Intents API,
@@ -169,6 +169,32 @@ paths:
                 "401":
                     $ref: "#/components/responses/Unauthorized"
 
+    /v1/auth/jwt-public-key:
+        get:
+            tags: [Authentication]
+            summary: Get JWT verification public key
+            description: |
+                Returns the Ed25519 public key used to sign JWTs.
+                Use this to verify tokens independently (e.g. in a TEE proxy or
+                gateway). No authentication required.
+            operationId: getJwtPublicKey
+            security: []
+            responses:
+                "200":
+                    description: JWT public key
+                    content:
+                        application/json:
+                            schema:
+                                type: object
+                                required: [alg, public_key_base64]
+                                properties:
+                                    alg:
+                                        type: string
+                                        example: EdDSA
+                                    public_key_base64:
+                                        type: string
+                                        description: Base64-encoded Ed25519 public key
+
     /v1/auth/signup:
         post:
             tags: [Authentication]

package/package.json

@@ -1,8 +1,8 @@
 {
     "name": "@1claw/openapi-spec",
-    "version": "0.12.0",
+    "version": "0.14.0",
     "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API — generate clients in any language",
-    "license": "PolyForm-Noncommercial-1.0.0",
+    "license": "MIT",
     "repository": {
         "type": "git",
         "url": "https://github.com/1clawAI/1claw.git",