@1claw/openapi-spec 0.23.0 → 0.23.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/openapi.json +108 -2
- package/openapi.yaml +79 -2
- package/package.json +1 -1
package/openapi.json
CHANGED
|
@@ -2787,6 +2787,89 @@
|
|
|
2787
2787
|
}
|
|
2788
2788
|
}
|
|
2789
2789
|
},
|
|
2790
|
+
"/v1/agents/{agent_id}/signing-keys/{chain}/export": {
|
|
2791
|
+
"post": {
|
|
2792
|
+
"tags": [
|
|
2793
|
+
"Signing Keys"
|
|
2794
|
+
],
|
|
2795
|
+
"summary": "Export a signing key (private key included)",
|
|
2796
|
+
"description": "Export the private key for an agent's signing key. Requires re-authentication\nvia the X-Auth-Confirm header containing the user's account password.\nHuman users only — agents cannot export keys.\n",
|
|
2797
|
+
"operationId": "exportSigningKey",
|
|
2798
|
+
"parameters": [
|
|
2799
|
+
{
|
|
2800
|
+
"$ref": "#/components/parameters/AgentId"
|
|
2801
|
+
},
|
|
2802
|
+
{
|
|
2803
|
+
"name": "chain",
|
|
2804
|
+
"in": "path",
|
|
2805
|
+
"required": true,
|
|
2806
|
+
"schema": {
|
|
2807
|
+
"type": "string"
|
|
2808
|
+
}
|
|
2809
|
+
},
|
|
2810
|
+
{
|
|
2811
|
+
"name": "X-Auth-Confirm",
|
|
2812
|
+
"in": "header",
|
|
2813
|
+
"required": true,
|
|
2814
|
+
"description": "Account password for re-authentication",
|
|
2815
|
+
"schema": {
|
|
2816
|
+
"type": "string",
|
|
2817
|
+
"format": "password"
|
|
2818
|
+
}
|
|
2819
|
+
}
|
|
2820
|
+
],
|
|
2821
|
+
"responses": {
|
|
2822
|
+
"200": {
|
|
2823
|
+
"description": "Signing key exported successfully",
|
|
2824
|
+
"content": {
|
|
2825
|
+
"application/json": {
|
|
2826
|
+
"schema": {
|
|
2827
|
+
"type": "object",
|
|
2828
|
+
"required": [
|
|
2829
|
+
"chain",
|
|
2830
|
+
"curve",
|
|
2831
|
+
"public_key",
|
|
2832
|
+
"private_key",
|
|
2833
|
+
"key_version",
|
|
2834
|
+
"agent_id"
|
|
2835
|
+
],
|
|
2836
|
+
"properties": {
|
|
2837
|
+
"chain": {
|
|
2838
|
+
"type": "string"
|
|
2839
|
+
},
|
|
2840
|
+
"curve": {
|
|
2841
|
+
"type": "string"
|
|
2842
|
+
},
|
|
2843
|
+
"public_key": {
|
|
2844
|
+
"type": "string"
|
|
2845
|
+
},
|
|
2846
|
+
"address": {
|
|
2847
|
+
"type": "string"
|
|
2848
|
+
},
|
|
2849
|
+
"private_key": {
|
|
2850
|
+
"type": "string"
|
|
2851
|
+
},
|
|
2852
|
+
"key_version": {
|
|
2853
|
+
"type": "integer"
|
|
2854
|
+
},
|
|
2855
|
+
"agent_id": {
|
|
2856
|
+
"type": "string",
|
|
2857
|
+
"format": "uuid"
|
|
2858
|
+
}
|
|
2859
|
+
}
|
|
2860
|
+
}
|
|
2861
|
+
}
|
|
2862
|
+
}
|
|
2863
|
+
},
|
|
2864
|
+
"403": {
|
|
2865
|
+
"$ref": "#/components/responses/Forbidden"
|
|
2866
|
+
},
|
|
2867
|
+
"404": {
|
|
2868
|
+
"$ref": "#/components/responses/NotFound"
|
|
2869
|
+
}
|
|
2870
|
+
}
|
|
2871
|
+
}
|
|
2872
|
+
},
|
|
2790
2873
|
"/v1/agents/{agent_id}/sign": {
|
|
2791
2874
|
"post": {
|
|
2792
2875
|
"tags": [
|
|
@@ -4472,7 +4555,7 @@
|
|
|
4472
4555
|
"Treasury Wallets"
|
|
4473
4556
|
],
|
|
4474
4557
|
"summary": "Export the private key for a treasury wallet",
|
|
4475
|
-
"description": "Returns the raw private key hex for the user's active wallet on\nthe given chain. Audit-logged as `treasury_wallet.export`.\nHuman users only.\n",
|
|
4558
|
+
"description": "Returns the raw private key hex for the user's active wallet on\nthe given chain. Requires re-authentication via the `X-Auth-Confirm`\nheader (account password). Audit-logged as `treasury_wallet.export`.\nHuman users only.\n",
|
|
4476
4559
|
"operationId": "exportTreasuryWallet",
|
|
4477
4560
|
"security": [
|
|
4478
4561
|
{
|
|
@@ -4487,6 +4570,16 @@
|
|
|
4487
4570
|
"schema": {
|
|
4488
4571
|
"type": "string"
|
|
4489
4572
|
}
|
|
4573
|
+
},
|
|
4574
|
+
{
|
|
4575
|
+
"name": "X-Auth-Confirm",
|
|
4576
|
+
"in": "header",
|
|
4577
|
+
"required": true,
|
|
4578
|
+
"description": "Account password for re-authentication",
|
|
4579
|
+
"schema": {
|
|
4580
|
+
"type": "string",
|
|
4581
|
+
"format": "password"
|
|
4582
|
+
}
|
|
4490
4583
|
}
|
|
4491
4584
|
],
|
|
4492
4585
|
"responses": {
|
|
@@ -10196,6 +10289,10 @@
|
|
|
10196
10289
|
"type": "string",
|
|
10197
10290
|
"format": "uri"
|
|
10198
10291
|
},
|
|
10292
|
+
"oidc_audience": {
|
|
10293
|
+
"type": "string",
|
|
10294
|
+
"description": "Expected audience claim for OIDC token validation"
|
|
10295
|
+
},
|
|
10199
10296
|
"redirect_uris": {
|
|
10200
10297
|
"type": "array",
|
|
10201
10298
|
"items": {
|
|
@@ -10245,6 +10342,10 @@
|
|
|
10245
10342
|
"oidc_issuer": {
|
|
10246
10343
|
"type": "string"
|
|
10247
10344
|
},
|
|
10345
|
+
"oidc_audience": {
|
|
10346
|
+
"type": "string",
|
|
10347
|
+
"description": "Expected audience claim for OIDC token validation"
|
|
10348
|
+
},
|
|
10248
10349
|
"redirect_uris": {
|
|
10249
10350
|
"type": "array",
|
|
10250
10351
|
"items": {
|
|
@@ -10310,6 +10411,11 @@
|
|
|
10310
10411
|
"type": "string",
|
|
10311
10412
|
"nullable": true
|
|
10312
10413
|
},
|
|
10414
|
+
"oidc_audience": {
|
|
10415
|
+
"type": "string",
|
|
10416
|
+
"nullable": true,
|
|
10417
|
+
"description": "Expected audience claim for OIDC token validation"
|
|
10418
|
+
},
|
|
10313
10419
|
"redirect_uris": {
|
|
10314
10420
|
"type": "array",
|
|
10315
10421
|
"items": {
|
|
@@ -10380,7 +10486,7 @@
|
|
|
10380
10486
|
},
|
|
10381
10487
|
"spec": {
|
|
10382
10488
|
"type": "object",
|
|
10383
|
-
"description": "Template specification defining vault, agents, and
|
|
10489
|
+
"description": "Template specification defining vault, agents, policies, and signing keys to bootstrap.\nTop-level fields: `vault` (object with name, description), `agents` (array of agent specs\nwith name, description, shroud_enabled, intents, shroud_config), `policies` (array with\nvault_ref, principal_ref, paths, permissions, conditions), and `signing_keys` (array of\n`{ chain }` objects — supported chains: ethereum, bitcoin, solana, xrp, cardano, tron).\nWhen `signing_keys` is present, HSM-backed signing keys are auto-provisioned for the\nbootstrapped agent.\n"
|
|
10384
10490
|
}
|
|
10385
10491
|
}
|
|
10386
10492
|
},
|
package/openapi.yaml
CHANGED
|
@@ -1845,6 +1845,58 @@ paths:
|
|
|
1845
1845
|
"404":
|
|
1846
1846
|
$ref: "#/components/responses/NotFound"
|
|
1847
1847
|
|
|
1848
|
+
/v1/agents/{agent_id}/signing-keys/{chain}/export:
|
|
1849
|
+
post:
|
|
1850
|
+
tags: [Signing Keys]
|
|
1851
|
+
summary: Export a signing key (private key included)
|
|
1852
|
+
description: |
|
|
1853
|
+
Export the private key for an agent's signing key. Requires re-authentication
|
|
1854
|
+
via the X-Auth-Confirm header containing the user's account password.
|
|
1855
|
+
Human users only — agents cannot export keys.
|
|
1856
|
+
operationId: exportSigningKey
|
|
1857
|
+
parameters:
|
|
1858
|
+
- $ref: "#/components/parameters/AgentId"
|
|
1859
|
+
- name: chain
|
|
1860
|
+
in: path
|
|
1861
|
+
required: true
|
|
1862
|
+
schema:
|
|
1863
|
+
type: string
|
|
1864
|
+
- name: X-Auth-Confirm
|
|
1865
|
+
in: header
|
|
1866
|
+
required: true
|
|
1867
|
+
description: Account password for re-authentication
|
|
1868
|
+
schema:
|
|
1869
|
+
type: string
|
|
1870
|
+
format: password
|
|
1871
|
+
responses:
|
|
1872
|
+
"200":
|
|
1873
|
+
description: Signing key exported successfully
|
|
1874
|
+
content:
|
|
1875
|
+
application/json:
|
|
1876
|
+
schema:
|
|
1877
|
+
type: object
|
|
1878
|
+
required: [chain, curve, public_key, private_key, key_version, agent_id]
|
|
1879
|
+
properties:
|
|
1880
|
+
chain:
|
|
1881
|
+
type: string
|
|
1882
|
+
curve:
|
|
1883
|
+
type: string
|
|
1884
|
+
public_key:
|
|
1885
|
+
type: string
|
|
1886
|
+
address:
|
|
1887
|
+
type: string
|
|
1888
|
+
private_key:
|
|
1889
|
+
type: string
|
|
1890
|
+
key_version:
|
|
1891
|
+
type: integer
|
|
1892
|
+
agent_id:
|
|
1893
|
+
type: string
|
|
1894
|
+
format: uuid
|
|
1895
|
+
"403":
|
|
1896
|
+
$ref: "#/components/responses/Forbidden"
|
|
1897
|
+
"404":
|
|
1898
|
+
$ref: "#/components/responses/NotFound"
|
|
1899
|
+
|
|
1848
1900
|
# ---------------------------------------------------------------------------
|
|
1849
1901
|
# Unified Signing Intent
|
|
1850
1902
|
# ---------------------------------------------------------------------------
|
|
@@ -2931,7 +2983,8 @@ paths:
|
|
|
2931
2983
|
summary: Export the private key for a treasury wallet
|
|
2932
2984
|
description: |
|
|
2933
2985
|
Returns the raw private key hex for the user's active wallet on
|
|
2934
|
-
the given chain.
|
|
2986
|
+
the given chain. Requires re-authentication via the `X-Auth-Confirm`
|
|
2987
|
+
header (account password). Audit-logged as `treasury_wallet.export`.
|
|
2935
2988
|
Human users only.
|
|
2936
2989
|
operationId: exportTreasuryWallet
|
|
2937
2990
|
security:
|
|
@@ -2942,6 +2995,13 @@ paths:
|
|
|
2942
2995
|
required: true
|
|
2943
2996
|
schema:
|
|
2944
2997
|
type: string
|
|
2998
|
+
- name: X-Auth-Confirm
|
|
2999
|
+
in: header
|
|
3000
|
+
required: true
|
|
3001
|
+
description: Account password for re-authentication
|
|
3002
|
+
schema:
|
|
3003
|
+
type: string
|
|
3004
|
+
format: password
|
|
2945
3005
|
responses:
|
|
2946
3006
|
"200":
|
|
2947
3007
|
description: Private key exported
|
|
@@ -6848,6 +6908,9 @@ components:
|
|
|
6848
6908
|
oidc_issuer:
|
|
6849
6909
|
type: string
|
|
6850
6910
|
format: uri
|
|
6911
|
+
oidc_audience:
|
|
6912
|
+
type: string
|
|
6913
|
+
description: Expected audience claim for OIDC token validation
|
|
6851
6914
|
redirect_uris:
|
|
6852
6915
|
type: array
|
|
6853
6916
|
items:
|
|
@@ -6878,6 +6941,9 @@ components:
|
|
|
6878
6941
|
type: string
|
|
6879
6942
|
oidc_issuer:
|
|
6880
6943
|
type: string
|
|
6944
|
+
oidc_audience:
|
|
6945
|
+
type: string
|
|
6946
|
+
description: Expected audience claim for OIDC token validation
|
|
6881
6947
|
redirect_uris:
|
|
6882
6948
|
type: array
|
|
6883
6949
|
items:
|
|
@@ -6919,6 +6985,10 @@ components:
|
|
|
6919
6985
|
oidc_issuer:
|
|
6920
6986
|
type: string
|
|
6921
6987
|
nullable: true
|
|
6988
|
+
oidc_audience:
|
|
6989
|
+
type: string
|
|
6990
|
+
nullable: true
|
|
6991
|
+
description: Expected audience claim for OIDC token validation
|
|
6922
6992
|
redirect_uris:
|
|
6923
6993
|
type: array
|
|
6924
6994
|
items:
|
|
@@ -6964,7 +7034,14 @@ components:
|
|
|
6964
7034
|
type: string
|
|
6965
7035
|
spec:
|
|
6966
7036
|
type: object
|
|
6967
|
-
description:
|
|
7037
|
+
description: |
|
|
7038
|
+
Template specification defining vault, agents, policies, and signing keys to bootstrap.
|
|
7039
|
+
Top-level fields: `vault` (object with name, description), `agents` (array of agent specs
|
|
7040
|
+
with name, description, shroud_enabled, intents, shroud_config), `policies` (array with
|
|
7041
|
+
vault_ref, principal_ref, paths, permissions, conditions), and `signing_keys` (array of
|
|
7042
|
+
`{ chain }` objects — supported chains: ethereum, bitcoin, solana, xrp, cardano, tron).
|
|
7043
|
+
When `signing_keys` is present, HSM-backed signing keys are auto-provisioned for the
|
|
7044
|
+
bootstrapped agent.
|
|
6968
7045
|
|
|
6969
7046
|
PlatformTemplateResponse:
|
|
6970
7047
|
type: object
|