@1claw/openapi-spec 0.5.0 → 0.7.0

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "1Claw API",
-    "version": "2.1.0",
+    "version": "2.2.0",
     "description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
     "contact": {
       "email": "ops@1claw.xyz"
@@ -16,6 +16,10 @@
     {
       "url": "https://api.1claw.xyz",
       "description": "Production"
+    },
+    {
+      "url": "https://shroud.1claw.xyz",
+      "description": "Shroud TEE Proxy (Intents API + LLM proxy)"
     }
   ],
   "security": [
@@ -1594,6 +1598,39 @@
         }
       }
     },
+    "/v1/agents/{agent_id}/rotate-identity-keys": {
+      "post": {
+        "tags": [
+          "Agents"
+        ],
+        "summary": "Rotate agent identity keys (SSH + ECDH)",
+        "description": "Rotates the agent's Ed25519 SSH keypair and P-256 ECDH keypair.\nNew private keys are stored in the __agent-keys vault; old keys are overwritten.\nUser-only endpoint — agents cannot rotate their own identity keys.\n",
+        "operationId": "rotateAgentIdentityKeys",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/AgentId"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Agent with updated public keys",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AgentResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
     "/v1/agents/{agent_id}/transactions": {
       "post": {
         "tags": [

package/openapi.yaml

@@ -2,7 +2,7 @@ openapi: 3.1.0
 
 info:
   title: 1Claw API
-  version: 2.1.0
+  version: 2.2.0
   description: |
     Secure secret management for AI agents. Provides vaults, secrets,
     policy-based access control, agent identity, Intents API,
@@ -18,6 +18,8 @@ servers:
     description: Development
   - url: https://api.1claw.xyz
     description: Production
+  - url: https://shroud.1claw.xyz
+    description: Shroud TEE Proxy (Intents API + LLM proxy)
 
 security:
   - BearerAuth: []
@@ -1014,6 +1016,29 @@ paths:
         "404":
           $ref: "#/components/responses/NotFound"
 
+  /v1/agents/{agent_id}/rotate-identity-keys:
+    post:
+      tags: [Agents]
+      summary: Rotate agent identity keys (SSH + ECDH)
+      description: |
+        Rotates the agent's Ed25519 SSH keypair and P-256 ECDH keypair.
+        New private keys are stored in the __agent-keys vault; old keys are overwritten.
+        User-only endpoint — agents cannot rotate their own identity keys.
+      operationId: rotateAgentIdentityKeys
+      parameters:
+        - $ref: "#/components/parameters/AgentId"
+      responses:
+        "200":
+          description: Agent with updated public keys
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AgentResponse"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          $ref: "#/components/responses/NotFound"
+
   # ---------------------------------------------------------------------------
   # Transactions (Intents API)
   # ---------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@1claw/openapi-spec",
-    "version": "0.5.0",
+    "version": "0.7.0",
     "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API — generate clients in any language",
     "license": "PolyForm-Noncommercial-1.0.0",
     "repository": {