@1claw/openapi-spec 0.34.0 → 0.34.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -40,7 +40,21 @@ openapi-generator generate \
40
40
  import spec from "@1claw/openapi-spec/openapi.json";
41
41
  ```
42
42
 
43
- ## What's in the spec (v0.32.1 — API `info.version` 2.18.0)
43
+ ## What's in the spec (v0.34.1 — API `info.version` 2.19.0)
44
+
45
+ ### Risk Engine & DPoP (2.19)
46
+ - **Risk events** — `GET /v1/risk/events` (list, filterable by severity/principal_type)
47
+ - **Risk verdicts** — `GET /v1/risk/verdicts` (active verdicts), `GET /v1/risk/verdicts/{type}/{id}` (single principal verdict)
48
+ - **Honeytokens** — `GET/POST/DELETE /v1/risk/honeytokens` (canary secret CRUD with trigger counts)
49
+ - **DPoP** — RFC 9449 Demonstration of Proof-of-Possession token binding (planned spec addition)
50
+
51
+ ### Webhooks (2.19)
52
+ - **Webhook CRUD** — `POST/GET /v1/webhooks`, `GET/PATCH/DELETE /v1/webhooks/{id}`. Events: `wallet.transfer.*`, `proposal.*`, `agent.transaction.*`, `signing_key.rotated`, `policy.*`
53
+
54
+ ### OAuth & Email OTP (2.19)
55
+ - **OAuth2 authorization server** — `GET/POST /v1/oauth/authorize`, `POST /v1/oauth/token`, `GET /v1/oauth/userinfo` ("Sign in with 1Claw")
56
+ - **Email OTP** — `POST /v1/auth/email-otp/send`, `POST /v1/auth/email-otp/verify` (passwordless login)
57
+ - **Spend policies** — `POST/GET/DELETE /v1/platform/apps/{id}/spend-policies`, `PUT /v1/platform/connections/{id}/spend-policy`, `GET /v1/treasury/wallets/spend-policy`
44
58
 
45
59
  ### Bankr dynamic key vending (2.18)
46
60
  - **Bankr keys** — `POST /v1/agents/{id}/bankr-keys/lease`, `GET /v1/agents/{id}/bankr-keys`, `DELETE /v1/agents/{id}/bankr-keys/{lease_id}`. Partner key vending for scoped, TTL-bound `bk_usr_` wallet API keys.
package/openapi.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "openapi": "3.1.0",
3
3
  "info": {
4
4
  "title": "1Claw API",
5
- "version": "2.18.0",
5
+ "version": "2.19.0",
6
6
  "description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
7
7
  "contact": {
8
8
  "email": "ops@1claw.xyz"
@@ -15616,6 +15616,11 @@
15616
15616
  "type": "string",
15617
15617
  "nullable": true
15618
15618
  },
15619
+ "severity": {
15620
+ "type": "string",
15621
+ "nullable": true,
15622
+ "description": "Computed severity at event time (low, medium, high, critical)"
15623
+ },
15619
15624
  "payload": {
15620
15625
  "type": "object",
15621
15626
  "additionalProperties": true
package/openapi.yaml CHANGED
@@ -2,7 +2,7 @@ openapi: 3.1.0
2
2
 
3
3
  info:
4
4
  title: 1Claw API
5
- version: 2.18.0
5
+ version: 2.19.0
6
6
  description: |
7
7
  Secure secret management for AI agents. Provides vaults, secrets,
8
8
  policy-based access control, agent identity, Intents API,
@@ -10305,6 +10305,10 @@ components:
10305
10305
  user_agent:
10306
10306
  type: string
10307
10307
  nullable: true
10308
+ severity:
10309
+ type: string
10310
+ nullable: true
10311
+ description: "Computed severity at event time (low, medium, high, critical)"
10308
10312
  payload:
10309
10313
  type: object
10310
10314
  additionalProperties: true
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@1claw/openapi-spec",
3
- "version": "0.34.0",
3
+ "version": "0.34.1",
4
4
  "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API — generate clients in any language",
5
5
  "license": "MIT",
6
6
  "repository": {