@1claw/openapi-spec 0.47.0 → 0.47.3

package/README.md

@@ -40,7 +40,16 @@ openapi-generator generate \
 import spec from "@1claw/openapi-spec/openapi.json";
 ```
 
-## What's in the spec (v0.44.4 — API `info.version` 2.33.0)
+## What's in the spec (v0.47.1)
+
+### Turnkey parity (v0.47)
+- **Portfolio** — `GET /v1/portfolio` (unified balance aggregator)
+- **Cedar policies** — `POST/GET/DELETE /v1/org/cedar-policies`, dry-run `POST .../test` (Team+ tier)
+- **OPA policies** — `POST/GET/DELETE /v1/org/opa-policies`, dry-run `POST .../test` (Business+ tier)
+- **Sub-organizations** — `POST/GET/DELETE /v1/org/sub-orgs`, permissions, users, wallet generation
+- **Smart account import** — `POST /v1/agents/{id}/smart-accounts/import`
+- **Signing key BYOK** — `POST /v1/agents/{id}/signing-keys/{chain}/import` (human-only, `X-Auth-Confirm`)
+- **Treasury wallet import** — `POST /v1/treasury/wallets/{chain}/import` (human-only, multi-chain send)
 
 ### OAuth & Platform enhancements (0.44.4)
 - **OAuth token revocation** — `POST /v1/oauth/revoke` (RFC 7009 token revocation)

package/openapi.json

@@ -6527,7 +6527,7 @@
           "Treasury Wallets"
         ],
         "summary": "Generate multi-chain wallets for the authenticated user",
-        "description": "Generates keypairs for the requested chains (or all supported chains if omitted).\nPrivate keys are stored in a per-org `__treasury-keys` vault with tier-appropriate\nMPC custody. Skips chains where the user already has an active wallet. Requires\nPro or higher billing tier. Human users only — agents get 403.\n",
+        "description": "Generates keypairs for the requested chains (or all supported chains if omitted).\nPrivate keys are stored in a per-org `__treasury-keys` vault with tier-appropriate\nMPC custody. Skips chains where the user already has an active wallet. Available\non all tiers (counts toward wallet quota). Human users only — agents get 403.\n",
         "operationId": "generateTreasuryWallets",
         "security": [
           {
@@ -6740,7 +6740,7 @@
           "Treasury Wallets"
         ],
         "summary": "Rotate the user's wallet key for a chain",
-        "description": "Generates a new keypair, deactivates the old wallet, and creates a\nnew active wallet. The old private key version is retained in the\nvault for audit. Requires Pro or higher.\n",
+        "description": "Generates a new keypair, deactivates the old wallet, and creates a\nnew active wallet. The old private key version is retained in the\nvault for audit. Counts toward wallet quota (does not require a paid plan).\n",
         "operationId": "rotateTreasuryWallet",
         "security": [
           {
@@ -14467,6 +14467,52 @@
         }
       }
     },
+    "/v1/org/sub-orgs/{sub_org_id}/permissions/{permission}": {
+      "delete": {
+        "tags": [
+          "Sub-Organizations"
+        ],
+        "summary": "Revoke a sub-organization permission",
+        "description": "Revoke a specific permission scope from the sub-organization.",
+        "operationId": "revokeSubOrgPermission",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "name": "sub_org_id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "name": "permission",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "The permission scope to revoke"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Permission revoked"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
     "/v1/org/sub-orgs/{sub_org_id}/wallets/generate": {
       "post": {
         "tags": [
@@ -14530,6 +14576,27 @@
             "BearerAuth": []
           }
         ],
+        "parameters": [
+          {
+            "name": "chains",
+            "in": "query",
+            "required": false,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Comma-separated list of chain names to filter by (e.g. \"ethereum,solana\")"
+          },
+          {
+            "name": "include_tokens",
+            "in": "query",
+            "required": false,
+            "schema": {
+              "type": "boolean",
+              "default": false
+            },
+            "description": "Whether to include token balances alongside native balances"
+          }
+        ],
         "responses": {
           "200": {
             "description": "Portfolio summary",
@@ -14577,7 +14644,14 @@
         },
         "responses": {
           "201": {
-            "description": "Smart account imported"
+            "description": "Smart account imported",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ImportSmartAccountResponse"
+                }
+              }
+            }
           },
           "400": {
             "$ref": "#/components/responses/BadRequest"
@@ -19232,6 +19306,9 @@
               "intent_transactions": {
                 "$ref": "#/components/schemas/UsageMeter"
               },
+              "wallets": {
+                "$ref": "#/components/schemas/UsageMeter"
+              },
               "shares": {
                 "$ref": "#/components/schemas/UsageMeter"
               }
@@ -25064,6 +25141,36 @@
             "description": "Verify on-chain Safe ownership"
           }
         }
+      },
+      "ImportSmartAccountResponse": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "agent_id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "chain": {
+            "type": "string"
+          },
+          "chain_id": {
+            "type": "integer"
+          },
+          "safe_address": {
+            "type": "string"
+          },
+          "nonce": {
+            "type": "integer",
+            "nullable": true
+          },
+          "created_at": {
+            "type": "string",
+            "format": "date-time"
+          }
+        }
       }
     }
   }

package/openapi.yaml

@@ -4229,8 +4229,8 @@ paths:
             description: |
                 Generates keypairs for the requested chains (or all supported chains if omitted).
                 Private keys are stored in a per-org `__treasury-keys` vault with tier-appropriate
-                MPC custody. Skips chains where the user already has an active wallet. Requires
-                Pro or higher billing tier. Human users only — agents get 403.
+                MPC custody. Skips chains where the user already has an active wallet. Available
+                on all tiers (counts toward wallet quota). Human users only — agents get 403.
             operationId: generateTreasuryWallets
             security:
                 - BearerAuth: []
@@ -4366,7 +4366,7 @@ paths:
             description: |
                 Generates a new keypair, deactivates the old wallet, and creates a
                 new active wallet. The old private key version is retained in the
-                vault for audit. Requires Pro or higher.
+                vault for audit. Counts toward wallet quota (does not require a paid plan).
             operationId: rotateTreasuryWallet
             security:
                 - BearerAuth: []
@@ -9230,6 +9230,35 @@ paths:
                 "404":
                     $ref: "#/components/responses/NotFound"
 
+    /v1/org/sub-orgs/{sub_org_id}/permissions/{permission}:
+        delete:
+            tags: [Sub-Organizations]
+            summary: Revoke a sub-organization permission
+            description: Revoke a specific permission scope from the sub-organization.
+            operationId: revokeSubOrgPermission
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: sub_org_id
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - name: permission
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                  description: The permission scope to revoke
+            responses:
+                "204":
+                    description: Permission revoked
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
     /v1/org/sub-orgs/{sub_org_id}/wallets/generate:
         post:
             tags: [Sub-Organizations]
@@ -9275,6 +9304,20 @@ paths:
             operationId: getPortfolio
             security:
                 - BearerAuth: []
+            parameters:
+                - name: chains
+                  in: query
+                  required: false
+                  schema:
+                      type: string
+                  description: Comma-separated list of chain names to filter by (e.g. "ethereum,solana")
+                - name: include_tokens
+                  in: query
+                  required: false
+                  schema:
+                      type: boolean
+                      default: false
+                  description: Whether to include token balances alongside native balances
             responses:
                 "200":
                     description: Portfolio summary
@@ -9310,6 +9353,10 @@ paths:
             responses:
                 "201":
                     description: Smart account imported
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/ImportSmartAccountResponse"
                 "400":
                     $ref: "#/components/responses/BadRequest"
                 "401":
@@ -12581,6 +12628,8 @@ components:
                             $ref: "#/components/schemas/UsageMeter"
                         intent_transactions:
                             $ref: "#/components/schemas/UsageMeter"
+                        wallets:
+                            $ref: "#/components/schemas/UsageMeter"
                         shares:
                             $ref: "#/components/schemas/UsageMeter"
 
@@ -16537,3 +16586,25 @@ components:
                     type: boolean
                     default: true
                     description: Verify on-chain Safe ownership
+
+        ImportSmartAccountResponse:
+            type: object
+            properties:
+                id:
+                    type: string
+                    format: uuid
+                agent_id:
+                    type: string
+                    format: uuid
+                chain:
+                    type: string
+                chain_id:
+                    type: integer
+                safe_address:
+                    type: string
+                nonce:
+                    type: integer
+                    nullable: true
+                created_at:
+                    type: string
+                    format: date-time

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@1claw/openapi-spec",
-  "version": "0.47.0",
-  "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API \u2014 generate clients in any language",
+  "version": "0.47.3",
+  "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API — generate clients in any language",
   "license": "MIT",
   "repository": {
     "type": "git",