@1claw/openapi-spec 0.34.1 → 0.34.3

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "1Claw API",
-    "version": "2.19.0",
+    "version": "2.21.0",
     "description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
     "contact": {
       "email": "ops@1claw.xyz"
@@ -7370,6 +7370,16 @@
                 }
               }
             }
+          },
+          "409": {
+            "description": "User exists in a different organization. Contains a link_required payload with an OAuth authorize URL for cross-org consent.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PlatformUserLinkRequiredResponse"
+                }
+              }
+            }
           }
         }
       }
@@ -10869,6 +10879,10 @@
             "type": "boolean",
             "description": "Whether EIP-191 personal_sign is enabled."
           },
+          "raw_signing_enabled": {
+            "type": "boolean",
+            "description": "Whether the raw/precomputed-digest signing intent (eip712_digest) is enabled. Blind signing — bypasses transaction guardrails; OFF by default and human-set. Required for ERC-1271/ERC-7739 flows (e.g. Polymarket).\n"
+          },
           "api_key_expires_at": {
             "type": "string",
             "format": "date-time",
@@ -11980,6 +11994,7 @@
             "enum": [
               "personal_sign",
               "typed_data",
+              "eip712_digest",
               "transaction"
             ]
           },
@@ -11998,6 +12013,10 @@
             "type": "object",
             "description": "EIP-712 typed data JSON (for typed_data)"
           },
+          "hash": {
+            "type": "string",
+            "description": "Client-computed 32-byte digest (0x-prefixed) for the eip712_digest intent. Signed directly (blind signing); requires the agent's raw_signing_enabled flag. Use for ERC-1271/ERC-7739 nested EIP-712 flows (e.g. Polymarket) where the canonical hash is computed client-side.\n"
+          },
           "tx_type": {
             "type": "integer",
             "description": "EIP-2718 type: 0=legacy, 1=2930, 2=1559, 3=4844, 4=7702"
@@ -14754,6 +14773,58 @@
           },
           "email": {
             "type": "string"
+          },
+          "link_required": {
+            "$ref": "#/components/schemas/LinkRequiredInfo"
+          }
+        }
+      },
+      "PlatformUserLinkRequiredResponse": {
+        "type": "object",
+        "required": [
+          "is_new",
+          "email",
+          "link_required"
+        ],
+        "properties": {
+          "is_new": {
+            "type": "boolean",
+            "example": false
+          },
+          "email": {
+            "type": "string"
+          },
+          "link_required": {
+            "$ref": "#/components/schemas/LinkRequiredInfo"
+          }
+        }
+      },
+      "LinkRequiredInfo": {
+        "type": "object",
+        "required": [
+          "status",
+          "reason",
+          "authorize_url",
+          "app_slug"
+        ],
+        "properties": {
+          "status": {
+            "type": "string",
+            "enum": [
+              "link_required"
+            ]
+          },
+          "reason": {
+            "type": "string",
+            "example": "user_exists_in_other_org"
+          },
+          "authorize_url": {
+            "type": "string",
+            "format": "uri",
+            "description": "OAuth authorize URL the platform app should redirect the user to for consent."
+          },
+          "app_slug": {
+            "type": "string"
           }
         }
       },

package/openapi.yaml

@@ -2,7 +2,7 @@ openapi: 3.1.0
 
 info:
     title: 1Claw API
-    version: 2.19.0
+    version: 2.21.0
     description: |
         Secure secret management for AI agents. Provides vaults, secrets,
         policy-based access control, agent identity, Intents API,
@@ -4774,6 +4774,12 @@ paths:
                         application/json:
                             schema:
                                 $ref: "#/components/schemas/PlatformUserResponse"
+                "409":
+                    description: User exists in a different organization. Contains a link_required payload with an OAuth authorize URL for cross-org consent.
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/PlatformUserLinkRequiredResponse"
 
     /v1/platform/apps/{appId}/users:
         get:
@@ -7059,6 +7065,12 @@ components:
                 message_signing_enabled:
                     type: boolean
                     description: Whether EIP-191 personal_sign is enabled.
+                raw_signing_enabled:
+                    type: boolean
+                    description: >
+                        Whether the raw/precomputed-digest signing intent (eip712_digest) is
+                        enabled. Blind signing — bypasses transaction guardrails; OFF by default
+                        and human-set. Required for ERC-1271/ERC-7739 flows (e.g. Polymarket).
                 api_key_expires_at:
                     type: string
                     format: date-time
@@ -7820,7 +7832,7 @@ components:
             properties:
                 intent_type:
                     type: string
-                    enum: [personal_sign, typed_data, transaction]
+                    enum: [personal_sign, typed_data, eip712_digest, transaction]
                 chain:
                     type: string
                 signing_key_path:
@@ -7832,6 +7844,13 @@ components:
                 typed_data:
                     type: object
                     description: EIP-712 typed data JSON (for typed_data)
+                hash:
+                    type: string
+                    description: >
+                        Client-computed 32-byte digest (0x-prefixed) for the eip712_digest
+                        intent. Signed directly (blind signing); requires the agent's
+                        raw_signing_enabled flag. Use for ERC-1271/ERC-7739 nested EIP-712
+                        flows (e.g. Polymarket) where the canonical hash is computed client-side.
                 tx_type:
                     type: integer
                     description: "EIP-2718 type: 0=legacy, 1=2930, 2=1559, 3=4844, 4=7702"
@@ -9732,6 +9751,37 @@ components:
                     format: uuid
                 email:
                     type: string
+                link_required:
+                    $ref: "#/components/schemas/LinkRequiredInfo"
+
+        PlatformUserLinkRequiredResponse:
+            type: object
+            required: [is_new, email, link_required]
+            properties:
+                is_new:
+                    type: boolean
+                    example: false
+                email:
+                    type: string
+                link_required:
+                    $ref: "#/components/schemas/LinkRequiredInfo"
+
+        LinkRequiredInfo:
+            type: object
+            required: [status, reason, authorize_url, app_slug]
+            properties:
+                status:
+                    type: string
+                    enum: [link_required]
+                reason:
+                    type: string
+                    example: user_exists_in_other_org
+                authorize_url:
+                    type: string
+                    format: uri
+                    description: OAuth authorize URL the platform app should redirect the user to for consent.
+                app_slug:
+                    type: string
 
         PlatformConnectedUserResponse:
             type: object

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1claw/openapi-spec",
-  "version": "0.34.1",
+  "version": "0.34.3",
   "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API — generate clients in any language",
   "license": "MIT",
   "repository": {