@1claw/openapi-spec 0.52.0 → 0.53.1

package/openapi.yaml

@@ -2,7 +2,7 @@ openapi: 3.1.0
 
 info:
     title: 1Claw API
-    version: 0.52.0
+    version: 0.53.1
     description: |
         Secure secret management for AI agents. Provides vaults, secrets,
         policy-based access control, agent identity, Intents API,
@@ -112,6 +112,12 @@ tags:
       description: Unified balance aggregator
     - name: Environment Variables
       description: Per-vault and org-shared environment variable management
+    - name: Wallet Access
+      description: Role-based wallet access policies for agents and users
+    - name: Credential Recovery
+      description: MFA/passkey/password recovery escape hatch with admin approval
+    - name: Shamir KEK
+      description: Shamir secret-sharing for org-level Key Encryption Keys
 
 # =============================================================================
 # PATHS
@@ -2041,19 +2047,25 @@ paths:
         get:
             tags: [Environment Variables]
             summary: Resolve environment variables
-            description: Resolve the final KEY=VALUE set for an environment with full precedence (shared < vault < branch override).
+            description: |
+                Resolve the final KEY=VALUE set for an environment with full precedence (shared < vault < branch override).
+                When the caller is an agent with `env_auto_resolve: true`, the `environment` query parameter may be omitted —
+                the server uses the agent's tagged environment from the JWT. Org setting `env.enforce_agent_environment_scope`
+                blocks agents from resolving vars outside their tagged environment.
             operationId: resolveEnvVars
             parameters:
                 - $ref: "#/components/parameters/VaultId"
                 - name: environment
                   in: query
-                  required: true
+                  required: false
                   schema:
                       type: string
+                  description: Target environment (production, preview, development, or custom). Required for human callers; optional for agents with env_auto_resolve when the agent has an environment tag.
                 - name: git_branch
                   in: query
                   schema:
                       type: string
+                  description: Optional git branch for preview branch overrides
             responses:
                 "200":
                     description: Resolved environment variables
@@ -4123,6 +4135,40 @@ paths:
                 "402":
                     $ref: "#/components/responses/PaymentRequired"
 
+    /v1/audit/verify:
+        get:
+            tags: [Audit]
+            summary: Verify audit hash chain integrity
+            operationId: verifyAuditChain
+            description: |
+                Verifies the HMAC-SHA256 integrity hash chain for audit events in the
+                calling organization. Returns whether the chain is valid, how many
+                events were verified, and the point of first break (if any).
+            parameters:
+                - name: from
+                  in: query
+                  schema:
+                      type: string
+                      format: date-time
+                - name: to
+                  in: query
+                  schema:
+                      type: string
+                      format: date-time
+                - name: limit
+                  in: query
+                  schema:
+                      type: integer
+                      default: 1000
+                      maximum: 10000
+            responses:
+                "200":
+                    description: Chain verification result
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/AuditVerifyResponse"
+
     # ---------------------------------------------------------------------------
     # Security (IP Rules)
     # ---------------------------------------------------------------------------
@@ -5422,6 +5468,27 @@ paths:
 
     # --- Shroud Activity ---
 
+    /v1/shroud/attestation:
+        get:
+            tags: [Shroud]
+            summary: TEE attestation proof (public)
+            operationId: getShroudAttestation
+            security: []
+            description: |
+                Public endpoint returning the TEE attestation proof for Shroud.
+                Returns the GCE Confidential VM identity token and image hash so
+                customers can verify Shroud is running inside a Confidential VM
+                before signing contracts. Served from shroud.1claw.xyz.
+            servers:
+                - url: https://shroud.1claw.xyz
+            responses:
+                "200":
+                    description: Attestation proof
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/ShroudAttestationResponse"
+
     /v1/shroud/activity:
         get:
             tags: [Shroud]
@@ -10184,167 +10251,575 @@ paths:
                 "403":
                     $ref: "#/components/responses/Forbidden"
 
-# =============================================================================
-# COMPONENTS
-# =============================================================================
+    # ---------------------------------------------------------------------------
+    # Wallet Access Policies
+    # ---------------------------------------------------------------------------
 
-components:
-    securitySchemes:
-        BearerAuth:
-            type: http
-            scheme: bearer
-            bearerFormat: JWT
-        ApiKeyAuth:
-            type: http
-            scheme: bearer
-            description: 1ck_ prefixed API key used as Bearer token
+    /v1/wallets/access-policies:
+        post:
+            tags: [Wallet Access]
+            summary: Create a wallet access policy
+            description: |
+                Create a role-based wallet access policy granting an agent or user
+                specific permissions (send, swap, receive) on a treasury wallet chain.
+            operationId: createWalletAccessPolicy
+            security:
+                - BearerAuth: []
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/CreateWalletAccessPolicyRequest"
+            responses:
+                "201":
+                    description: Policy created
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/WalletAccessPolicyResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+        get:
+            tags: [Wallet Access]
+            summary: List wallet access policies for the org
+            operationId: listWalletAccessPolicies
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: wallet_chain
+                  in: query
+                  schema:
+                      type: string
+                  description: Filter by chain (e.g. ethereum, solana)
+                - name: target_agent_id
+                  in: query
+                  schema:
+                      type: string
+                      format: uuid
+                  description: Filter by target agent
+            responses:
+                "200":
+                    description: Policy list
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/WalletAccessPolicyListResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
 
-    parameters:
-        VaultId:
-            name: vault_id
-            in: path
-            required: true
-            schema:
-                type: string
-                format: uuid
-        SecretPath:
-            name: path
-            in: path
-            required: true
-            schema:
-                type: string
-            description: Secret path (e.g. "db/credentials")
-        AgentId:
-            name: agent_id
-            in: path
-            required: true
-            schema:
-                type: string
-                format: uuid
-        PolicyId:
-            name: policy_id
-            in: path
-            required: true
-            schema:
-                type: string
-                format: uuid
-        CardId:
-            name: card_id
-            in: path
-            required: true
-            schema:
-                type: string
-                format: uuid
-        IncludeSignedTx:
-            name: include_signed_tx
-            in: query
-            required: false
-            description: >
-                Set to `true` or `1` to include the raw signed transaction hex in the response.
-                Omitted by default to reduce key exfiltration risk. Only the literal values "true" or "1" enable inclusion; any other value or omission returns responses without signed_tx.
-                Applies to GET /v1/agents/{agent_id}/transactions and GET /v1/agents/{agent_id}/transactions/{tx_id}.
-            schema:
-                type: boolean
-                default: false
-                example: false
+    /v1/wallets/access-policies/{id}:
+        delete:
+            tags: [Wallet Access]
+            summary: Delete a wallet access policy
+            operationId: deleteWalletAccessPolicy
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: id
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "204":
+                    description: Policy deleted
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+                "404":
+                    $ref: "#/components/responses/NotFound"
 
-    responses:
-        BadRequest:
-            description: Invalid request
-            content:
-                application/json:
-                    schema:
-                        $ref: "#/components/schemas/ProblemDetails"
-        Unauthorized:
-            description: Authentication required or invalid
-            content:
-                application/json:
-                    schema:
-                        $ref: "#/components/schemas/ProblemDetails"
-        Forbidden:
-            description: Insufficient permissions
-            content:
-                application/json:
-                    schema:
-                        $ref: "#/components/schemas/ProblemDetails"
-        NotFound:
-            description: Resource not found
-            content:
-                application/json:
-                    schema:
-                        $ref: "#/components/schemas/ProblemDetails"
-        PaymentRequired:
-            description: x402 payment required
-            content:
-                application/json:
-                    schema:
-                        $ref: "#/components/schemas/PaymentRequirement"
-        Conflict:
-            description: Resource already exists or conflict
-            content:
-                application/json:
-                    schema:
-                        $ref: "#/components/schemas/ProblemDetails"
+    # ---------------------------------------------------------------------------
+    # Credential Recovery
+    # ---------------------------------------------------------------------------
 
-    schemas:
-        OrderCardRequest:
-            type: object
-            required: [kind, amount_usd]
-            properties:
-                kind:
-                    type: string
-                    enum: [prepaid, gift_card]
-                amount_usd:
-                    type: string
-                    description: USD amount to load onto the card.
-                    example: "25.00"
-                laso_server_id:
-                    type: string
-                    description: Optional Laso gift-card server/brand id (gift cards only).
-                country:
-                    type: string
-                    description: Optional country (prepaid cards; defaults to US).
-        CardResponse:
-            type: object
-            description: Masked card view — never contains PAN/CVV.
-            required: [id, issuer, kind, currency, status, storage_mode, reveal_policy, created_at, updated_at]
-            properties:
-                id:
-                    type: string
-                    format: uuid
-                agent_id:
-                    type: string
-                    format: uuid
-                    nullable: true
-                issuer:
-                    type: string
-                    enum: [laso, manual]
-                kind:
-                    type: string
-                    enum: [prepaid, gift_card]
-                brand:
-                    type: string
-                last4:
-                    type: string
-                exp_month:
-                    type: integer
-                exp_year:
-                    type: integer
-                currency:
-                    type: string
-                order_amount_usd:
-                    type: string
-                balance:
-                    type: string
-                status:
-                    type: string
-                    enum: [ordering, pending, ready, depleted, expired, voided, orphaned_payment, awaiting_approval, rejected]
-                storage_mode:
-                    type: string
-                    enum: [reference, full]
-                reveal_policy:
-                    type: object
-                    additionalProperties: true
+    /v1/auth/credential-recovery/request:
+        post:
+            tags: [Credential Recovery]
+            summary: Initiate credential recovery
+            description: |
+                Start a credential recovery request for MFA reset, passkey reset,
+                or password reset. Requires admin approval per org policy.
+            operationId: requestCredentialRecovery
+            security:
+                - BearerAuth: []
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/CredentialRecoveryRequest"
+            responses:
+                "201":
+                    description: Recovery request created
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/CredentialRecoveryResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+
+    /v1/auth/credential-recovery/requests:
+        get:
+            tags: [Credential Recovery]
+            summary: List recovery requests for the org
+            description: Admin/owner only. Returns pending, approved, and rejected recovery requests.
+            operationId: listCredentialRecoveryRequests
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: status
+                  in: query
+                  schema:
+                      type: string
+                      enum: [pending_approval, approved, rejected, expired]
+                  description: Filter by status
+            responses:
+                "200":
+                    description: Recovery request list
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/CredentialRecoveryListResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+
+    /v1/auth/credential-recovery/requests/{id}/approve:
+        post:
+            tags: [Credential Recovery]
+            summary: Approve a recovery request
+            description: Admin/owner approves a pending recovery request. May return a one-time recovery code.
+            operationId: approveCredentialRecovery
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: id
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "200":
+                    description: Request approved
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/CredentialRecoveryApproveResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
+    /v1/auth/credential-recovery/requests/{id}/execute:
+        post:
+            tags: [Credential Recovery]
+            summary: Execute an approved credential recovery request
+            description: >-
+                Execute an approved credential recovery request after the delay
+                window has elapsed. Only org owners or admins can execute.
+            operationId: executeCredentialRecovery
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: id
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "200":
+                    description: Recovery executed
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/CredentialRecoveryExecuteResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
+    /v1/auth/credential-recovery/requests/{id}:
+        delete:
+            tags: [Credential Recovery]
+            summary: Cancel or reject a recovery request
+            operationId: cancelCredentialRecovery
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: id
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "204":
+                    description: Request cancelled
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
+    # ---------------------------------------------------------------------------
+    # Org Credential Recovery Policy
+    # ---------------------------------------------------------------------------
+
+    /v1/org/credential-recovery-policy:
+        get:
+            tags: [Credential Recovery]
+            summary: Get org credential recovery policy
+            operationId: getCredentialRecoveryPolicy
+            security:
+                - BearerAuth: []
+            responses:
+                "200":
+                    description: Recovery policy
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/CredentialRecoveryPolicyResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+        patch:
+            tags: [Credential Recovery]
+            summary: Update org credential recovery policy
+            operationId: updateCredentialRecoveryPolicy
+            security:
+                - BearerAuth: []
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/CredentialRecoveryPolicyRequest"
+            responses:
+                "200":
+                    description: Policy updated
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/CredentialRecoveryPolicyResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+
+    # ---------------------------------------------------------------------------
+    # Shamir KEK
+    # ---------------------------------------------------------------------------
+
+    /v1/org/shamir-kek/setup:
+        post:
+            tags: [Shamir KEK]
+            summary: Set up Shamir KEK for the org
+            description: |
+                Initialize a Shamir secret-sharing KEK for the org. Splits the master
+                key into shares distributed to custodians. Shares are returned one-time
+                only and must be stored securely by each custodian.
+            operationId: setupShamirKek
+            security:
+                - BearerAuth: []
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/ShamirKekSetupRequest"
+            responses:
+                "201":
+                    description: Shamir KEK configured (shares returned one-time)
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/ShamirKekSetupResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+
+    /v1/org/shamir-kek:
+        get:
+            tags: [Shamir KEK]
+            summary: Get Shamir KEK status
+            description: Returns the current Shamir KEK configuration status for the org.
+            operationId: getShamirKekStatus
+            security:
+                - BearerAuth: []
+            responses:
+                "200":
+                    description: Shamir KEK status
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/ShamirKekStatusResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+
+    /v1/org/shamir-kek/reconstruct:
+        post:
+            tags: [Shamir KEK]
+            summary: Reconstruct KEK from shares
+            description: |
+                Submit Shamir shares to reconstruct the org KEK. Requires at least
+                `threshold` valid shares. Used during disaster recovery.
+            operationId: reconstructShamirKek
+            security:
+                - BearerAuth: []
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/ShamirKekReconstructRequest"
+            responses:
+                "200":
+                    description: Reconstruction result
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/ShamirKekReconstructResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+
+    /v1/org/shamir-kek/recovery-codes:
+        get:
+            tags: [Shamir KEK]
+            summary: Get Shamir recovery codes (one-time)
+            description: |
+                Returns the one-time recovery codes for the Shamir KEK. These codes
+                can be used as an emergency fallback if custodian shares are lost.
+                Codes are only returned once — subsequent calls return 410.
+            operationId: getShamirKekRecoveryCodes
+            security:
+                - BearerAuth: []
+            responses:
+                "200":
+                    description: Recovery codes (one-time)
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/ShamirKekRecoveryCodesResponse"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+                "410":
+                    description: Codes already retrieved
+
+    /v1/org/shamir-kek/verify-recovery-code:
+        post:
+            tags: [Shamir KEK]
+            summary: Verify a Shamir recovery code
+            description: Check whether a recovery code is valid without consuming it.
+            operationId: verifyShamirKekRecoveryCode
+            security:
+                - BearerAuth: []
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/ShamirKekVerifyCodeRequest"
+            responses:
+                "200":
+                    description: Verification result
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/ShamirKekVerifyCodeResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+                "401":
+                    $ref: "#/components/responses/Unauthorized"
+
+# =============================================================================
+# COMPONENTS
+# =============================================================================
+
+components:
+    securitySchemes:
+        BearerAuth:
+            type: http
+            scheme: bearer
+            bearerFormat: JWT
+        ApiKeyAuth:
+            type: http
+            scheme: bearer
+            description: 1ck_ prefixed API key used as Bearer token
+
+    parameters:
+        VaultId:
+            name: vault_id
+            in: path
+            required: true
+            schema:
+                type: string
+                format: uuid
+        SecretPath:
+            name: path
+            in: path
+            required: true
+            schema:
+                type: string
+            description: Secret path (e.g. "db/credentials")
+        AgentId:
+            name: agent_id
+            in: path
+            required: true
+            schema:
+                type: string
+                format: uuid
+        PolicyId:
+            name: policy_id
+            in: path
+            required: true
+            schema:
+                type: string
+                format: uuid
+        CardId:
+            name: card_id
+            in: path
+            required: true
+            schema:
+                type: string
+                format: uuid
+        IncludeSignedTx:
+            name: include_signed_tx
+            in: query
+            required: false
+            description: >
+                Set to `true` or `1` to include the raw signed transaction hex in the response.
+                Omitted by default to reduce key exfiltration risk. Only the literal values "true" or "1" enable inclusion; any other value or omission returns responses without signed_tx.
+                Applies to GET /v1/agents/{agent_id}/transactions and GET /v1/agents/{agent_id}/transactions/{tx_id}.
+            schema:
+                type: boolean
+                default: false
+                example: false
+
+    responses:
+        BadRequest:
+            description: Invalid request
+            content:
+                application/json:
+                    schema:
+                        $ref: "#/components/schemas/ProblemDetails"
+        Unauthorized:
+            description: Authentication required or invalid
+            content:
+                application/json:
+                    schema:
+                        $ref: "#/components/schemas/ProblemDetails"
+        Forbidden:
+            description: Insufficient permissions
+            content:
+                application/json:
+                    schema:
+                        $ref: "#/components/schemas/ProblemDetails"
+        NotFound:
+            description: Resource not found
+            content:
+                application/json:
+                    schema:
+                        $ref: "#/components/schemas/ProblemDetails"
+        PaymentRequired:
+            description: x402 payment required
+            content:
+                application/json:
+                    schema:
+                        $ref: "#/components/schemas/PaymentRequirement"
+        Conflict:
+            description: Resource already exists or conflict
+            content:
+                application/json:
+                    schema:
+                        $ref: "#/components/schemas/ProblemDetails"
+
+    schemas:
+        OrderCardRequest:
+            type: object
+            required: [kind, amount_usd]
+            properties:
+                kind:
+                    type: string
+                    enum: [prepaid, gift_card]
+                amount_usd:
+                    type: string
+                    description: USD amount to load onto the card.
+                    example: "25.00"
+                laso_server_id:
+                    type: string
+                    description: Optional Laso gift-card server/brand id (gift cards only).
+                country:
+                    type: string
+                    description: Optional country (prepaid cards; defaults to US).
+        CardResponse:
+            type: object
+            description: Masked card view — never contains PAN/CVV.
+            required: [id, issuer, kind, currency, status, storage_mode, reveal_policy, created_at, updated_at]
+            properties:
+                id:
+                    type: string
+                    format: uuid
+                agent_id:
+                    type: string
+                    format: uuid
+                    nullable: true
+                issuer:
+                    type: string
+                    enum: [laso, manual]
+                kind:
+                    type: string
+                    enum: [prepaid, gift_card]
+                brand:
+                    type: string
+                last4:
+                    type: string
+                exp_month:
+                    type: integer
+                exp_year:
+                    type: integer
+                currency:
+                    type: string
+                order_amount_usd:
+                    type: string
+                balance:
+                    type: string
+                status:
+                    type: string
+                    enum: [ordering, pending, ready, depleted, expired, voided, orphaned_payment, awaiting_approval, rejected]
+                storage_mode:
+                    type: string
+                    enum: [reference, full]
+                reveal_policy:
+                    type: object
+                    additionalProperties: true
                 approval_id:
                     type: string
                     format: uuid
@@ -11174,6 +11649,19 @@ components:
                     $ref: "#/components/schemas/ConsensusTrigger"
                 tx_conditions:
                     $ref: "#/components/schemas/TxConditions"
+                approval_id:
+                    type: string
+                    format: uuid
+                    description: >
+                        Optional completed approval ID for control-plane consensus bypass.
+                        When control-plane consensus policies match, resubmit with this
+                        field after the approval has been executed.
+                policy_schema_version:
+                    type: integer
+                    default: 2
+                    description: |
+                        Policy schema version. Version 1 = legacy field-matching only.
+                        Version 2 = expression engine support in tx_conditions.
 
         UpdatePolicyRequest:
             type: object
@@ -11203,6 +11691,11 @@ components:
                     $ref: "#/components/schemas/ConsensusTrigger"
                 tx_conditions:
                     $ref: "#/components/schemas/TxConditions"
+                approval_id:
+                    type: string
+                    format: uuid
+                    description: >
+                        Optional completed approval ID for control-plane consensus bypass.
 
         PolicyResponse:
             type: object
@@ -11261,6 +11754,9 @@ components:
                     $ref: "#/components/schemas/ConsensusTrigger"
                 tx_conditions:
                     $ref: "#/components/schemas/TxConditions"
+                policy_schema_version:
+                    type: integer
+                    description: Policy schema version (1 = legacy, 2 = expression engine)
 
         PolicyListResponse:
             type: object
@@ -11468,6 +11964,12 @@ components:
                     type: boolean
                     default: false
                     description: When true, env var resolve endpoints auto-fill environment from this agent's tag.
+                approval_id:
+                    type: string
+                    format: uuid
+                    description: >
+                        Optional completed approval ID for control-plane consensus bypass
+                        when creating an agent under a control-plane governance policy.
 
         UpdateAgentRequest:
             type: object
@@ -12499,6 +13001,22 @@ components:
                         Optional pending approval ID. When consensus policies match,
                         clients resubmit with this field set to bypass the 202 gate
                         after the approval has been executed.
+                raw_transaction:
+                    type: string
+                    description: >
+                        Pre-built raw transaction as a base64-encoded byte string.
+                        When provided, the handler decodes and deep-inspects the
+                        transaction for policy evaluation before signing. Supported
+                        for non-EVM chains where the client constructs the
+                        transaction payload.
+                tron_transaction:
+                    type: object
+                    additionalProperties: true
+                    description: >
+                        Pre-built Tron transaction JSON object. When provided,
+                        the handler signs the transaction as-is using the Tron
+                        protobuf format. Enables full Tron transaction type
+                        coverage beyond simple TRX/TRC-20 transfers.
 
         SignTransactionRequest:
             type: object
@@ -12973,6 +13491,22 @@ components:
                         Optional pending approval ID. When consensus policies match,
                         clients resubmit with this field set to bypass the 202 gate
                         after the approval has been executed.
+                raw_transaction:
+                    type: string
+                    description: >
+                        Pre-built raw transaction as a base64-encoded byte string.
+                        When provided, the handler decodes and deep-inspects the
+                        transaction for policy evaluation before signing. Supported
+                        for non-EVM chains where the client constructs the
+                        transaction payload.
+                tron_transaction:
+                    type: object
+                    additionalProperties: true
+                    description: >
+                        Pre-built Tron transaction JSON object. When provided,
+                        the handler signs the transaction as-is using the Tron
+                        protobuf format. Enables full Tron transaction type
+                        coverage beyond simple TRX/TRC-20 transfers.
 
         SignIntentResponse:
             type: object
@@ -13699,6 +14233,67 @@ components:
                 count:
                     type: integer
 
+        AuditVerifyResponse:
+            type: object
+            required: [chain_valid, events_verified, events_checked, scheme]
+            properties:
+                chain_valid:
+                    type: boolean
+                    description: Whether the integrity hash chain is unbroken
+                events_verified:
+                    type: integer
+                    format: int64
+                    description: Number of events with valid integrity hashes
+                events_checked:
+                    type: integer
+                    description: Total events examined
+                broken_at_event_id:
+                    type: string
+                    format: uuid
+                    nullable: true
+                    description: First event where chain integrity broke (null if valid)
+                scheme:
+                    type: object
+                    properties:
+                        algorithm:
+                            type: string
+                            example: HMAC-SHA256
+                        chain_structure:
+                            type: string
+                        hash_field:
+                            type: string
+                        link_field:
+                            type: string
+                        documentation:
+                            type: string
+                            format: uri
+
+        ShroudAttestationResponse:
+            type: object
+            required: [attested, image_hash, identity_token, verification]
+            properties:
+                attested:
+                    type: boolean
+                    description: Whether TEE attestation was successfully fetched
+                image_hash:
+                    type: string
+                    description: Confidential VM image hash (compare against published Docker digest)
+                identity_token:
+                    type: string
+                    description: GCE metadata identity JWT (verify against Google public keys)
+                verification:
+                    type: object
+                    properties:
+                        steps:
+                            type: array
+                            items:
+                                type: string
+                        google_certs_url:
+                            type: string
+                            format: uri
+                        expected_audience:
+                            type: string
+
         AuditEvent:
             type: object
             properties:
@@ -17652,6 +18247,14 @@ components:
                         When true, conditions are also evaluated against inner calls
                         extracted from wrapper transactions (multicall, Safe execTransaction,
                         ERC-4337 handleOps). A match on any inner call counts as an overall match.
+                expression:
+                    type: string
+                    maxLength: 1024
+                    description: |
+                        Mini expression DSL for policy conditions (schema version 2+).
+                        References transaction context fields (chain, value_wei, to_address,
+                        function_selector, etc.) with boolean operators. Fail-closed on parse
+                        or evaluation errors. Example: `chain == 'ethereum' && value_wei > 1000000000000000000`
 
         ConsensusTrigger:
             type: object
@@ -17725,6 +18328,17 @@ components:
                 always:
                     type: boolean
                     description: When true, this entry always matches regardless of other fields
+                action_in:
+                    type: array
+                    items:
+                        type: string
+                    description: Control-plane actions to match (e.g. policy.create, signing_key.export)
+                action_kind_in:
+                    type: array
+                    items:
+                        type: string
+                    description: |
+                        Version-agnostic action kind groups (e.g. signing_key.*, policy.*, member.*)
 
         TimeWindow:
             type: object
@@ -17837,6 +18451,18 @@ components:
                           description: |
                               Control-plane actions to match, e.g. policy.create, policy.update,
                               policy.delete, signing_key.export, member.role_change, member.remove
+                - type: object
+                  required: [type, action_kinds]
+                  properties:
+                      type:
+                          type: string
+                          enum: [action_kind_in]
+                      action_kinds:
+                          type: array
+                          items:
+                              type: string
+                          description: |
+                              Version-agnostic action kind groups, e.g. signing_key.*, policy.*, member.*
 
         ApprovalRequirement:
             type: object
@@ -18364,3 +18990,338 @@ components:
                         type: string
                 comment:
                     type: string
+
+        # -----------------------------------------------------------------
+        # Wallet Access Policy schemas
+        # -----------------------------------------------------------------
+
+        CreateWalletAccessPolicyRequest:
+            type: object
+            required: [wallet_chain, permissions]
+            properties:
+                wallet_chain:
+                    type: string
+                    description: Chain for which the policy applies (e.g. ethereum, solana)
+                target_agent_id:
+                    type: string
+                    format: uuid
+                    description: Agent granted access (mutually exclusive with target_user_id)
+                target_user_id:
+                    type: string
+                    format: uuid
+                    description: User granted access (mutually exclusive with target_agent_id)
+                permissions:
+                    type: array
+                    items:
+                        type: string
+                        enum: [send, swap, receive]
+                conditions:
+                    type: object
+                    properties:
+                        max_value_per_tx_eth:
+                            type: string
+                            description: Max value per transaction in ETH
+                        daily_limit_eth:
+                            type: string
+                            description: Daily spend limit in ETH
+                        allowed_chains:
+                            type: array
+                            items:
+                                type: string
+                        allowed_tokens:
+                            type: array
+                            items:
+                                type: string
+                expires_at:
+                    type: string
+                    format: date-time
+
+        WalletAccessPolicyResponse:
+            type: object
+            properties:
+                id:
+                    type: string
+                    format: uuid
+                org_id:
+                    type: string
+                    format: uuid
+                wallet_chain:
+                    type: string
+                target_agent_id:
+                    type: string
+                    format: uuid
+                    nullable: true
+                target_user_id:
+                    type: string
+                    format: uuid
+                    nullable: true
+                permissions:
+                    type: array
+                    items:
+                        type: string
+                        enum: [send, swap, receive]
+                conditions:
+                    type: object
+                    nullable: true
+                    properties:
+                        max_value_per_tx_eth:
+                            type: string
+                            nullable: true
+                        daily_limit_eth:
+                            type: string
+                            nullable: true
+                        allowed_chains:
+                            type: array
+                            items:
+                                type: string
+                            nullable: true
+                        allowed_tokens:
+                            type: array
+                            items:
+                                type: string
+                            nullable: true
+                expires_at:
+                    type: string
+                    format: date-time
+                    nullable: true
+                created_at:
+                    type: string
+                    format: date-time
+
+        WalletAccessPolicyListResponse:
+            type: object
+            properties:
+                policies:
+                    type: array
+                    items:
+                        $ref: "#/components/schemas/WalletAccessPolicyResponse"
+
+        # -----------------------------------------------------------------
+        # Credential Recovery schemas
+        # -----------------------------------------------------------------
+
+        CredentialRecoveryRequest:
+            type: object
+            required: [recovery_type]
+            properties:
+                recovery_type:
+                    type: string
+                    enum: [mfa_reset, passkey_reset, password_reset]
+                reason:
+                    type: string
+                    description: Optional justification for the recovery request
+
+        CredentialRecoveryResponse:
+            type: object
+            properties:
+                request_id:
+                    type: string
+                    format: uuid
+                status:
+                    type: string
+                    enum: [pending_approval, approved, rejected, expired]
+                recovery_type:
+                    type: string
+                    enum: [mfa_reset, passkey_reset, password_reset]
+                created_at:
+                    type: string
+                    format: date-time
+
+        CredentialRecoveryListResponse:
+            type: object
+            properties:
+                requests:
+                    type: array
+                    items:
+                        $ref: "#/components/schemas/CredentialRecoveryResponse"
+
+        CredentialRecoveryApproveResponse:
+            type: object
+            properties:
+                request_id:
+                    type: string
+                    format: uuid
+                status:
+                    type: string
+                    enum: [approved]
+                recovery_code:
+                    type: string
+                    nullable: true
+                    description: One-time recovery code (only present for certain recovery types)
+
+        CredentialRecoveryExecuteResponse:
+            type: object
+            properties:
+                request_id:
+                    type: string
+                    format: uuid
+                status:
+                    type: string
+                    enum: [executed]
+                recovery_type:
+                    type: string
+                executed_at:
+                    type: string
+                    format: date-time
+
+        CredentialRecoveryPolicyResponse:
+            type: object
+            properties:
+                enabled:
+                    type: boolean
+                require_admin_approval:
+                    type: boolean
+                delay_hours:
+                    type: integer
+                    description: Waiting period before recovery takes effect
+                allowed_types:
+                    type: array
+                    items:
+                        type: string
+                        enum: [mfa_reset, passkey_reset, password_reset]
+
+        CredentialRecoveryPolicyRequest:
+            type: object
+            properties:
+                enabled:
+                    type: boolean
+                require_admin_approval:
+                    type: boolean
+                delay_hours:
+                    type: integer
+                allowed_types:
+                    type: array
+                    items:
+                        type: string
+                        enum: [mfa_reset, passkey_reset, password_reset]
+
+        # -----------------------------------------------------------------
+        # Shamir KEK schemas
+        # -----------------------------------------------------------------
+
+        ShamirKekSetupRequest:
+            type: object
+            required: [threshold, total_shares, custodian_emails]
+            properties:
+                threshold:
+                    type: integer
+                    enum: [2, 3]
+                    description: Minimum shares required to reconstruct the KEK
+                total_shares:
+                    type: integer
+                    enum: [3, 5]
+                    description: Total number of shares to generate
+                custodian_emails:
+                    type: array
+                    items:
+                        type: string
+                        format: email
+                    description: Email addresses of share custodians
+
+        ShamirKekSetupResponse:
+            type: object
+            properties:
+                kek_id:
+                    type: string
+                threshold:
+                    type: integer
+                total_shares:
+                    type: integer
+                shares:
+                    type: array
+                    description: One-time share distribution (never returned again)
+                    items:
+                        type: object
+                        properties:
+                            index:
+                                type: integer
+                            custodian_email:
+                                type: string
+                                format: email
+                            share_b64:
+                                type: string
+                                description: Base64-encoded share
+                custody_mode:
+                    type: string
+                created_at:
+                    type: string
+                    format: date-time
+
+        ShamirKekStatusResponse:
+            type: object
+            properties:
+                configured:
+                    type: boolean
+                kek_id:
+                    type: string
+                    nullable: true
+                threshold:
+                    type: integer
+                    nullable: true
+                total_shares:
+                    type: integer
+                    nullable: true
+                custody_mode:
+                    type: string
+                    nullable: true
+                custodians:
+                    type: array
+                    nullable: true
+                    items:
+                        type: object
+                        properties:
+                            email:
+                                type: string
+                                format: email
+                            share_provided:
+                                type: boolean
+                created_at:
+                    type: string
+                    format: date-time
+                    nullable: true
+
+        ShamirKekReconstructRequest:
+            type: object
+            required: [shares]
+            properties:
+                shares:
+                    type: array
+                    items:
+                        type: object
+                        required: [index, share_b64]
+                        properties:
+                            index:
+                                type: integer
+                            share_b64:
+                                type: string
+                                description: Base64-encoded share
+
+        ShamirKekReconstructResponse:
+            type: object
+            properties:
+                status:
+                    type: string
+                    enum: [accepted, reconstructed]
+                message:
+                    type: string
+
+        ShamirKekRecoveryCodesResponse:
+            type: object
+            properties:
+                codes:
+                    type: array
+                    items:
+                        type: string
+
+        ShamirKekVerifyCodeRequest:
+            type: object
+            required: [code]
+            properties:
+                code:
+                    type: string
+
+        ShamirKekVerifyCodeResponse:
+            type: object
+            properties:
+                valid:
+                    type: boolean