npm - @1claw/openapi-spec - Versions diffs - 0.44.1 → 0.45.0 - Mend

@1claw/openapi-spec 0.44.1 → 0.45.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/README.md CHANGED Viewed

@@ -40,7 +40,14 @@ openapi-generator generate \
 import spec from "@1claw/openapi-spec/openapi.json";
 ```
-## What's in the spec (v0.44.0 — API `info.version` 2.33.0)
+## What's in the spec (v0.44.4 — API `info.version` 2.33.0)
+### OAuth & Platform enhancements (0.44.4)
+- **OAuth token revocation** — `POST /v1/oauth/revoke` (RFC 7009 token revocation)
+- **Consent revocation** — `DELETE /v1/oauth/consents/{app_id}` (user revokes consent for a specific app)
+- **Platform marketplace** — `GET /v1/platform/marketplace` (public listing of approved platform apps)
+- **App statistics** — `GET /v1/platform/apps/{id}/stats` (usage and connection statistics for a platform app)
+- **Webhook secret rotation** — `POST /v1/platform/apps/{id}/rotate-webhook-secret` (rotate a platform app's webhook signing secret)
 ### Automations v2 & Channels (2.33)
 - **Automations v2** — Workflow engine with multi-step pipelines, 14 step types, `{{...}}` template variables, conditional logic (`skip_if`/`run_if`), 10 marketing presets, webhook/event/cron/manual triggers. Enriched list API with `last_run_status`, `total_runs`, `success_rate`, `agent_name`. Run detail with `context` JSONB. Assist NL→workflow drafting.

package/openapi.json CHANGED Viewed

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "1Claw API",
-    "version": "2.33.0",
+    "version": "2.34.0",
     "description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging. Automations (workflow_spec,\nwebhook tokens, event triggers, Assist), cloud runtimes with\ninteractive shell sessions, agent memory, and discovery.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
     "contact": {
       "email": "ops@1claw.xyz"
@@ -7712,6 +7712,106 @@
         }
       }
     },
+    "/v1/platform/apps/{appId}/stats": {
+      "get": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Get platform app statistics",
+        "description": "Returns aggregate statistics about a platform app's connected users, bootstraps, and grants.",
+        "operationId": "getPlatformAppStats",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "name": "appId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "App statistics",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PlatformAppStatsResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
+    "/v1/platform/apps/{appId}/rotate-webhook-secret": {
+      "post": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Rotate webhook secret",
+        "description": "Generate a new webhook signing secret for the platform app. The old secret is immediately invalidated. Returns the new secret (one-time).",
+        "operationId": "rotatePlatformWebhookSecret",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "name": "appId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "New webhook secret generated",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "webhook_secret"
+                  ],
+                  "properties": {
+                    "webhook_secret": {
+                      "type": "string",
+                      "description": "The new webhook signing secret (shown once)"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "description": "Only human users can rotate webhook secrets"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
     "/v1/platform/apps/{appId}/templates": {
       "post": {
         "tags": [
@@ -9911,6 +10011,117 @@
         }
       }
     },
+    "/v1/oauth/revoke": {
+      "post": {
+        "tags": [
+          "OAuth"
+        ],
+        "summary": "Revoke an OAuth token (RFC 7009)",
+        "description": "Revokes an access token or refresh token. The authorization server\ninvalidates the token so it can no longer be used. Follows RFC 7009.\n",
+        "operationId": "revokeOAuthToken",
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": [
+                  "token"
+                ],
+                "properties": {
+                  "token": {
+                    "type": "string",
+                    "description": "The token to revoke (access_token or refresh_token)"
+                  },
+                  "token_type_hint": {
+                    "type": "string",
+                    "enum": [
+                      "access_token",
+                      "refresh_token"
+                    ],
+                    "description": "Hint about the type of token being revoked"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Token revoked successfully (or was already invalid)",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "revoked": {
+                      "type": "boolean",
+                      "example": true
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/oauth/consents/{app_id}": {
+      "delete": {
+        "tags": [
+          "OAuth"
+        ],
+        "summary": "Revoke consent for a platform app",
+        "description": "Revokes the user's previously granted OAuth consent for a specific platform app.\nAll active tokens issued to the app are invalidated and the consent record is deleted.\n",
+        "operationId": "revokeOAuthConsent",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "name": "app_id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            },
+            "description": "The platform app ID whose consent to revoke"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Consent revoked",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "revoked": {
+                      "type": "boolean",
+                      "example": true
+                    },
+                    "app_id": {
+                      "type": "string",
+                      "format": "uuid"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
     "/v1/risk/events": {
       "get": {
         "tags": [
@@ -12084,6 +12295,66 @@
         }
       }
     },
+    "/v1/agents/org-directory": {
+      "get": {
+        "tags": [
+          "agents",
+          "discovery"
+        ],
+        "summary": "List org agents",
+        "description": "List agents within the caller's organization for sub-agent discovery.\nReturns agents with their capabilities, enabling agent-to-agent\ncoordination and discovery within an org. Requires authentication.\n",
+        "operationId": "listOrgDirectory",
+        "parameters": [
+          {
+            "name": "q",
+            "in": "query",
+            "schema": {
+              "type": "string"
+            },
+            "description": "Search query to filter agents by name or description"
+          },
+          {
+            "name": "tags",
+            "in": "query",
+            "schema": {
+              "type": "string"
+            },
+            "description": "Comma-separated tag filter"
+          },
+          {
+            "name": "page",
+            "in": "query",
+            "schema": {
+              "type": "integer",
+              "default": 1
+            }
+          },
+          {
+            "name": "page_size",
+            "in": "query",
+            "schema": {
+              "type": "integer",
+              "default": 20
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Org agent directory listing",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OrgDirectoryResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          }
+        }
+      }
+    },
     "/v1/agents/{agent_id}/discovery": {
       "patch": {
         "tags": [
@@ -12132,10 +12403,11 @@
     "/v1/platform/marketplace": {
       "get": {
         "tags": [
+          "Platform",
           "Discovery"
         ],
         "summary": "Public marketplace",
-        "description": "Browse the public platform marketplace of agents and apps.",
+        "description": "Browse the public platform marketplace of listed apps and agents. Returns approved platform apps with category, tags, pricing summaries, and screenshots.",
         "operationId": "listMarketplace",
         "security": [],
         "parameters": [
@@ -12162,6 +12434,14 @@
               "type": "string"
             },
             "description": "Search query"
+          },
+          {
+            "name": "category",
+            "in": "query",
+            "schema": {
+              "type": "string"
+            },
+            "description": "Filter by app category"
           }
         ],
         "responses": {
@@ -12170,7 +12450,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/DirectoryResponse"
+                  "$ref": "#/components/schemas/MarketplaceResponse"
                 }
               }
             }
@@ -12184,7 +12464,7 @@
           "Agent Chat"
         ],
         "summary": "Send chat message",
-        "description": "Send a message to an agent and receive a response via Shroud LLM.\nSupports SSE streaming when Accept: text/event-stream is set.\n",
+        "description": "Send a message to an agent and receive a response via Shroud LLM.\nSupports SSE streaming when Accept: text/event-stream is set.\n\nAgents can call this endpoint on other agents within the same\norganization for inter-agent communication (agent-to-agent chat).\nThe caller must be authenticated and belong to the same org as\nthe target agent.\n",
         "operationId": "sendChatMessage",
         "parameters": [
           {
@@ -19596,6 +19876,14 @@
                 "format": "uuid",
                 "nullable": true
               },
+              "agent_ids": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "format": "uuid"
+                },
+                "description": "All agent IDs provisioned by the template (when multiple agents are defined)"
+              },
               "policy_ids": {
                 "type": "array",
                 "items": {
@@ -19661,6 +19949,88 @@
           }
         }
       },
+      "PlatformAppStatsResponse": {
+        "type": "object",
+        "required": [
+          "total_connections",
+          "active_connections",
+          "claimed_connections",
+          "total_bootstraps",
+          "total_grants"
+        ],
+        "properties": {
+          "total_connections": {
+            "type": "integer",
+            "description": "Total number of user connections (all statuses)"
+          },
+          "active_connections": {
+            "type": "integer",
+            "description": "Number of active connections"
+          },
+          "claimed_connections": {
+            "type": "integer",
+            "description": "Number of claimed connections"
+          },
+          "total_bootstraps": {
+            "type": "integer",
+            "description": "Total bootstrap operations performed"
+          },
+          "total_grants": {
+            "type": "integer",
+            "description": "Total resource grants issued"
+          }
+        }
+      },
+      "MarketplaceResponse": {
+        "type": "object",
+        "properties": {
+          "apps": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "format": "uuid"
+                },
+                "name": {
+                  "type": "string"
+                },
+                "slug": {
+                  "type": "string"
+                },
+                "description": {
+                  "type": "string"
+                },
+                "logo_url": {
+                  "type": "string",
+                  "nullable": true
+                },
+                "category": {
+                  "type": "string",
+                  "nullable": true
+                },
+                "listing_tags": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "listing_screenshots": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "pricing_summary": {
+                  "type": "string",
+                  "nullable": true
+                }
+              }
+            }
+          }
+        }
+      },
       "ConnectedAppResponse": {
         "type": "object",
         "properties": {
@@ -20284,6 +20654,11 @@
             "type": "integer",
             "description": "Token lifetime in seconds"
           },
+          "refresh_token": {
+            "type": "string",
+            "nullable": true,
+            "description": "Refresh token for obtaining new access tokens (when offline_access scope was granted)"
+          },
           "id_token": {
             "type": "string",
             "nullable": true,
@@ -22051,6 +22426,82 @@
           }
         }
       },
+      "OrgDirectoryAgent": {
+        "type": "object",
+        "required": [
+          "id",
+          "name",
+          "intents_api_enabled",
+          "execution_intents_enabled",
+          "memory_enabled",
+          "shroud_enabled"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "name": {
+            "type": "string"
+          },
+          "public_description": {
+            "type": "string",
+            "nullable": true
+          },
+          "public_tags": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "a2a_url": {
+            "type": "string",
+            "nullable": true
+          },
+          "mcp_url": {
+            "type": "string",
+            "nullable": true
+          },
+          "intents_api_enabled": {
+            "type": "boolean"
+          },
+          "execution_intents_enabled": {
+            "type": "boolean"
+          },
+          "memory_enabled": {
+            "type": "boolean"
+          },
+          "shroud_enabled": {
+            "type": "boolean"
+          }
+        }
+      },
+      "OrgDirectoryResponse": {
+        "type": "object",
+        "required": [
+          "agents",
+          "total",
+          "page",
+          "page_size"
+        ],
+        "properties": {
+          "agents": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/OrgDirectoryAgent"
+            }
+          },
+          "total": {
+            "type": "integer"
+          },
+          "page": {
+            "type": "integer"
+          },
+          "page_size": {
+            "type": "integer"
+          }
+        }
+      },
       "UpdateDiscoveryRequest": {
         "type": "object",
         "properties": {
@@ -22223,6 +22674,25 @@
               "type": "string"
             },
             "description": "Platform-specific config.\nTelegram: { bot_token }.\nWhatsApp: { phone_number_id, access_token, verify_token }.\nDiscord: { bot_token, application_id }.\n"
+          },
+          "slash_commands_enabled": {
+            "type": "boolean",
+            "description": "Enable slash commands on this channel"
+          },
+          "voice_transcription_enabled": {
+            "type": "boolean",
+            "description": "Enable voice message transcription"
+          },
+          "sender_allowlist": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "List of allowed sender IDs"
+          },
+          "auto_respond_enabled": {
+            "type": "boolean",
+            "description": "Enable auto-respond"
           }
         }
       },
@@ -22240,6 +22710,21 @@
             "additionalProperties": {
               "type": "string"
             }
+          },
+          "slash_commands_enabled": {
+            "type": "boolean"
+          },
+          "voice_transcription_enabled": {
+            "type": "boolean"
+          },
+          "sender_allowlist": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "auto_respond_enabled": {
+            "type": "boolean"
           }
         }
       },
@@ -22284,6 +22769,36 @@
             "nullable": true,
             "description": "Channel-specific configuration JSON. May include:\n- sender_allowlist (array of strings): restrict which external senders can trigger the agent\n- auto_respond_enabled (boolean): whether the agent auto-responds to inbound messages\n"
           },
+          "slash_commands_enabled": {
+            "type": "boolean",
+            "description": "Whether slash commands are enabled for this channel"
+          },
+          "voice_transcription_enabled": {
+            "type": "boolean",
+            "description": "Whether voice message transcription is enabled"
+          },
+          "unified_conversation_id": {
+            "type": "string",
+            "format": "uuid",
+            "nullable": true,
+            "description": "ID linking this channel to a unified cross-platform conversation"
+          },
+          "is_home_platform": {
+            "type": "boolean",
+            "description": "Whether this is the agent's home platform channel"
+          },
+          "sender_allowlist": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "nullable": true,
+            "description": "List of allowed sender IDs for auto-respond"
+          },
+          "auto_respond_enabled": {
+            "type": "boolean",
+            "description": "Whether auto-respond is enabled for this channel"
+          },
           "created_at": {
             "type": "string",
             "format": "date-time"
@@ -22358,6 +22873,30 @@
           "media_url": {
             "type": "string"
           },
+          "is_voice_message": {
+            "type": "boolean",
+            "description": "Whether this message was a voice message"
+          },
+          "voice_file_id": {
+            "type": "string",
+            "nullable": true,
+            "description": "Telegram voice file ID"
+          },
+          "voice_duration_secs": {
+            "type": "integer",
+            "nullable": true,
+            "description": "Duration of voice message in seconds"
+          },
+          "transcription_status": {
+            "type": "string",
+            "nullable": true,
+            "enum": [
+              "pending",
+              "completed",
+              "failed"
+            ],
+            "description": "Status of voice transcription"
+          },
           "created_at": {
             "type": "string",
             "format": "date-time"

package/openapi.yaml CHANGED Viewed

@@ -2,7 +2,7 @@ openapi: 3.1.0
 info:
     title: 1Claw API
-    version: 2.33.0
+    version: 2.34.0
     description: |
         Secure secret management for AI agents. Provides vaults, secrets,
         policy-based access control, agent identity, Intents API,
@@ -4981,6 +4981,67 @@ paths:
                 "403":
                     description: Only human users can rotate platform keys
+    /v1/platform/apps/{appId}/stats:
+        get:
+            tags: [Platform]
+            summary: Get platform app statistics
+            description: Returns aggregate statistics about a platform app's connected users, bootstraps, and grants.
+            operationId: getPlatformAppStats
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: appId
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "200":
+                    description: App statistics
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/PlatformAppStatsResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+    /v1/platform/apps/{appId}/rotate-webhook-secret:
+        post:
+            tags: [Platform]
+            summary: Rotate webhook secret
+            description: Generate a new webhook signing secret for the platform app. The old secret is immediately invalidated. Returns the new secret (one-time).
+            operationId: rotatePlatformWebhookSecret
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: appId
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "200":
+                    description: New webhook secret generated
+                    content:
+                        application/json:
+                            schema:
+                                type: object
+                                required: [webhook_secret]
+                                properties:
+                                    webhook_secret:
+                                        type: string
+                                        description: The new webhook signing secret (shown once)
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    description: Only human users can rotate webhook secrets
+                "404":
+                    $ref: "#/components/responses/NotFound"
     /v1/platform/apps/{appId}/templates:
         post:
             tags: [Platform]
@@ -6310,6 +6371,79 @@ paths:
                 "401":
                     $ref: "#/components/responses/Unauthorized"
+    /v1/oauth/revoke:
+        post:
+            tags: [OAuth]
+            summary: Revoke an OAuth token (RFC 7009)
+            description: |
+                Revokes an access token or refresh token. The authorization server
+                invalidates the token so it can no longer be used. Follows RFC 7009.
+            operationId: revokeOAuthToken
+            security: []
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            type: object
+                            required: [token]
+                            properties:
+                                token:
+                                    type: string
+                                    description: The token to revoke (access_token or refresh_token)
+                                token_type_hint:
+                                    type: string
+                                    enum: [access_token, refresh_token]
+                                    description: Hint about the type of token being revoked
+            responses:
+                "200":
+                    description: Token revoked successfully (or was already invalid)
+                    content:
+                        application/json:
+                            schema:
+                                type: object
+                                properties:
+                                    revoked:
+                                        type: boolean
+                                        example: true
+    /v1/oauth/consents/{app_id}:
+        delete:
+            tags: [OAuth]
+            summary: Revoke consent for a platform app
+            description: |
+                Revokes the user's previously granted OAuth consent for a specific platform app.
+                All active tokens issued to the app are invalidated and the consent record is deleted.
+            operationId: revokeOAuthConsent
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: app_id
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                  description: The platform app ID whose consent to revoke
+            responses:
+                "200":
+                    description: Consent revoked
+                    content:
+                        application/json:
+                            schema:
+                                type: object
+                                properties:
+                                    revoked:
+                                        type: boolean
+                                        example: true
+                                    app_id:
+                                        type: string
+                                        format: uuid
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "404":
+                    $ref: "#/components/responses/NotFound"
     # ---------------------------------------------------------------------------
     # Risk Engine
     # ---------------------------------------------------------------------------
@@ -7703,6 +7837,46 @@ paths:
                             schema:
                                 $ref: "#/components/schemas/DirectoryResponse"
+    /v1/agents/org-directory:
+        get:
+            tags: [agents, discovery]
+            summary: List org agents
+            description: |
+                List agents within the caller's organization for sub-agent discovery.
+                Returns agents with their capabilities, enabling agent-to-agent
+                coordination and discovery within an org. Requires authentication.
+            operationId: listOrgDirectory
+            parameters:
+                - name: q
+                  in: query
+                  schema:
+                      type: string
+                  description: Search query to filter agents by name or description
+                - name: tags
+                  in: query
+                  schema:
+                      type: string
+                  description: Comma-separated tag filter
+                - name: page
+                  in: query
+                  schema:
+                      type: integer
+                      default: 1
+                - name: page_size
+                  in: query
+                  schema:
+                      type: integer
+                      default: 20
+            responses:
+                "200":
+                    description: Org agent directory listing
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/OrgDirectoryResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
     /v1/agents/{agent_id}/discovery:
         patch:
             tags: [Discovery]
@@ -7732,9 +7906,9 @@ paths:
     /v1/platform/marketplace:
         get:
-            tags: [Discovery]
+            tags: [Platform, Discovery]
             summary: Public marketplace
-            description: Browse the public platform marketplace of agents and apps.
+            description: Browse the public platform marketplace of listed apps and agents. Returns approved platform apps with category, tags, pricing summaries, and screenshots.
             operationId: listMarketplace
             security: []
             parameters:
@@ -7753,13 +7927,18 @@ paths:
                   schema:
                       type: string
                   description: Search query
+                - name: category
+                  in: query
+                  schema:
+                      type: string
+                  description: Filter by app category
             responses:
                 "200":
                     description: Marketplace listing
                     content:
                         application/json:
                             schema:
-                                $ref: "#/components/schemas/DirectoryResponse"
+                                $ref: "#/components/schemas/MarketplaceResponse"
     # ---------------------------------------------------------------------------
     # Agent Chat
@@ -7772,6 +7951,11 @@ paths:
             description: |
                 Send a message to an agent and receive a response via Shroud LLM.
                 Supports SSE streaming when Accept: text/event-stream is set.
+                Agents can call this endpoint on other agents within the same
+                organization for inter-agent communication (agent-to-agent chat).
+                The caller must be authenticated and belong to the same org as
+                the target agent.
             operationId: sendChatMessage
             parameters:
                 - $ref: "#/components/parameters/AgentId"
@@ -12910,6 +13094,12 @@ components:
                             type: string
                             format: uuid
                             nullable: true
+                        agent_ids:
+                            type: array
+                            items:
+                                type: string
+                                format: uuid
+                            description: All agent IDs provisioned by the template (when multiple agents are defined)
                         policy_ids:
                             type: array
                             items:
@@ -12955,6 +13145,61 @@ components:
                                 format: uuid
                             description: IDs of automations provisioned by the template
+        PlatformAppStatsResponse:
+            type: object
+            required: [total_connections, active_connections, claimed_connections, total_bootstraps, total_grants]
+            properties:
+                total_connections:
+                    type: integer
+                    description: Total number of user connections (all statuses)
+                active_connections:
+                    type: integer
+                    description: Number of active connections
+                claimed_connections:
+                    type: integer
+                    description: Number of claimed connections
+                total_bootstraps:
+                    type: integer
+                    description: Total bootstrap operations performed
+                total_grants:
+                    type: integer
+                    description: Total resource grants issued
+        MarketplaceResponse:
+            type: object
+            properties:
+                apps:
+                    type: array
+                    items:
+                        type: object
+                        properties:
+                            id:
+                                type: string
+                                format: uuid
+                            name:
+                                type: string
+                            slug:
+                                type: string
+                            description:
+                                type: string
+                            logo_url:
+                                type: string
+                                nullable: true
+                            category:
+                                type: string
+                                nullable: true
+                            listing_tags:
+                                type: array
+                                items:
+                                    type: string
+                            listing_screenshots:
+                                type: array
+                                items:
+                                    type: string
+                            pricing_summary:
+                                type: string
+                                nullable: true
         ConnectedAppResponse:
             type: object
             properties:
@@ -13367,6 +13612,10 @@ components:
                 expires_in:
                     type: integer
                     description: Token lifetime in seconds
+                refresh_token:
+                    type: string
+                    nullable: true
+                    description: Refresh token for obtaining new access tokens (when offline_access scope was granted)
                 id_token:
                     type: string
                     nullable: true
@@ -14507,6 +14756,52 @@ components:
                 per_page:
                     type: integer
+        OrgDirectoryAgent:
+            type: object
+            required: [id, name, intents_api_enabled, execution_intents_enabled, memory_enabled, shroud_enabled]
+            properties:
+                id:
+                    type: string
+                    format: uuid
+                name:
+                    type: string
+                public_description:
+                    type: string
+                    nullable: true
+                public_tags:
+                    type: array
+                    items:
+                        type: string
+                a2a_url:
+                    type: string
+                    nullable: true
+                mcp_url:
+                    type: string
+                    nullable: true
+                intents_api_enabled:
+                    type: boolean
+                execution_intents_enabled:
+                    type: boolean
+                memory_enabled:
+                    type: boolean
+                shroud_enabled:
+                    type: boolean
+        OrgDirectoryResponse:
+            type: object
+            required: [agents, total, page, page_size]
+            properties:
+                agents:
+                    type: array
+                    items:
+                        $ref: "#/components/schemas/OrgDirectoryAgent"
+                total:
+                    type: integer
+                page:
+                    type: integer
+                page_size:
+                    type: integer
         UpdateDiscoveryRequest:
             type: object
             properties:
@@ -14635,6 +14930,20 @@ components:
                         Telegram: { bot_token }.
                         WhatsApp: { phone_number_id, access_token, verify_token }.
                         Discord: { bot_token, application_id }.
+                slash_commands_enabled:
+                    type: boolean
+                    description: Enable slash commands on this channel
+                voice_transcription_enabled:
+                    type: boolean
+                    description: Enable voice message transcription
+                sender_allowlist:
+                    type: array
+                    items:
+                        type: string
+                    description: List of allowed sender IDs
+                auto_respond_enabled:
+                    type: boolean
+                    description: Enable auto-respond
         UpdateChannelRequest:
             type: object
@@ -14647,6 +14956,16 @@ components:
                     type: object
                     additionalProperties:
                         type: string
+                slash_commands_enabled:
+                    type: boolean
+                voice_transcription_enabled:
+                    type: boolean
+                sender_allowlist:
+                    type: array
+                    items:
+                        type: string
+                auto_respond_enabled:
+                    type: boolean
         ChannelResponse:
             type: object
@@ -14679,6 +14998,29 @@ components:
                         Channel-specific configuration JSON. May include:
                         - sender_allowlist (array of strings): restrict which external senders can trigger the agent
                         - auto_respond_enabled (boolean): whether the agent auto-responds to inbound messages
+                slash_commands_enabled:
+                    type: boolean
+                    description: Whether slash commands are enabled for this channel
+                voice_transcription_enabled:
+                    type: boolean
+                    description: Whether voice message transcription is enabled
+                unified_conversation_id:
+                    type: string
+                    format: uuid
+                    nullable: true
+                    description: ID linking this channel to a unified cross-platform conversation
+                is_home_platform:
+                    type: boolean
+                    description: Whether this is the agent's home platform channel
+                sender_allowlist:
+                    type: array
+                    items:
+                        type: string
+                    nullable: true
+                    description: List of allowed sender IDs for auto-respond
+                auto_respond_enabled:
+                    type: boolean
+                    description: Whether auto-respond is enabled for this channel
                 created_at:
                     type: string
                     format: date-time
@@ -14729,6 +15071,22 @@ components:
                     type: string
                 media_url:
                     type: string
+                is_voice_message:
+                    type: boolean
+                    description: Whether this message was a voice message
+                voice_file_id:
+                    type: string
+                    nullable: true
+                    description: Telegram voice file ID
+                voice_duration_secs:
+                    type: integer
+                    nullable: true
+                    description: Duration of voice message in seconds
+                transcription_status:
+                    type: string
+                    nullable: true
+                    enum: [pending, completed, failed]
+                    description: Status of voice transcription
                 created_at:
                     type: string
                     format: date-time

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@1claw/openapi-spec",
-  "version": "0.44.1",
+  "version": "0.45.0",
   "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API \u2014 generate clients in any language",
   "license": "MIT",
   "repository": {