@1claw/openapi-spec 0.59.0 → 0.59.5

package/openapi.json

@@ -6218,6 +6218,60 @@
         }
       }
     },
+    "/v1/org/onboarding/status": {
+      "get": {
+        "tags": [
+          "Organization"
+        ],
+        "summary": "Onboarding funnel status",
+        "description": "Returns welcome-bundle and MCP connection progress for the connect wizard.",
+        "operationId": "getOnboardingStatus",
+        "responses": {
+          "200": {
+            "description": "Onboarding status",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OnboardingStatus"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/onboarding/provision": {
+      "post": {
+        "tags": [
+          "Organization"
+        ],
+        "summary": "Provision MCP onboarding bundle",
+        "description": "Creates welcome vault + sample secret, MCP agent, and default ** policy. Returns one-time API key and stdio MCP config.",
+        "operationId": "provisionOnboarding",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/OnboardingProvisionRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Provisioned resources",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OnboardingProvisionResponse"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/v1/org/status": {
       "get": {
         "tags": [
@@ -9320,6 +9374,46 @@
         }
       }
     },
+    "/v1/shroud/inspect-content": {
+      "post": {
+        "tags": [
+          "Shroud"
+        ],
+        "summary": "Inspect text for security threats",
+        "description": "Standalone content inspection (MCP `inspect_content` parity). Scans for command\ninjection, encoding tricks, social engineering, PII, and suspicious URLs.\nFail-closed — returns `safe: false` when high/critical threats match.\nAccepts plt_ platform keys, agent JWTs, and user JWTs.\n",
+        "operationId": "inspectContent",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/InspectContentRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Inspection report",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/InspectContentResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          }
+        }
+      }
+    },
     "/v1/shroud/activity": {
       "get": {
         "tags": [
@@ -9844,6 +9938,47 @@
         }
       }
     },
+    "/v1/platform/apps/{appId}/webhooks": {
+      "get": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Platform webhook delivery catalog",
+        "description": "Returns whether `webhook_url` is configured and the event types delivered to\nthe platform app webhook (payload includes `connection_id` when applicable).\nOrg-scoped webhook subscriptions (`GET /v1/webhooks`) are separate.\n",
+        "operationId": "getPlatformWebhooks",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "name": "appId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Webhook configuration summary",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PlatformWebhookInfoResponse"
+                }
+              }
+            }
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
     "/v1/platform/apps/{appId}/rotate-webhook-secret": {
       "post": {
         "tags": [
@@ -11618,6 +11753,58 @@
             "$ref": "#/components/responses/NotFound"
           }
         }
+      },
+      "post": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Create a pending consensus approval for a connection agent",
+        "description": "Platform apps submit over-cap or consensus-gated actions on behalf of a\nconnected user's agent. When `policy_id` is omitted, the server resolves the\nmatching agent `consensus_trigger` policy from `action_payload` (chain, to, value).\nReturns **202** with `pending_approval_id` and `payload_hash` for decide/execute.\nRequires plt_ auth; agent must be provisioned on the connection.\n",
+        "operationId": "createConnectionPendingApproval",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ConnectionSubmitPendingApprovalRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "202": {
+            "description": "Pending approval created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SubmitPendingApprovalResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
       }
     },
     "/v1/platform/connections/{connectionId}/pending-approvals/{approvalId}": {
@@ -11819,16 +12006,630 @@
             "description": "Already decided"
           }
         }
-      }
-    },
-    "/v1/platform/connections/{connectionId}/signing-keys/{chain}": {
+      }
+    },
+    "/v1/platform/connections/{connectionId}/signing-keys": {
+      "get": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "List signing keys for a connection agent",
+        "description": "Returns public signing-key metadata (chain, address, public_key, curve) for\nagent(s) provisioned on the connection. Never includes private keys.\nWhen multiple agents exist, pass `agent_id` query param. plt_ auth only.\n",
+        "operationId": "listConnectionSigningKeys",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "query",
+            "name": "agent_id",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Signing keys for the connection agent",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ConnectionSigningKeyListResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Multiple agents — agent_id required"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
+    "/v1/platform/connections/{connectionId}/signing-keys/{chain}": {
+      "get": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Get a signing key for a connection agent by chain",
+        "description": "Returns public signing-key metadata for one chain on a connection agent.\nNetwork names (e.g. `base`, `sepolia`) resolve to canonical signing keys\n(e.g. `ethereum`). Never includes private keys. plt_ auth only.\n",
+        "operationId": "getConnectionSigningKey",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "path",
+            "name": "chain",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "agent_id",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Signing key metadata",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ConnectionSigningKeyDetailResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Multiple agents — agent_id required"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      },
+      "delete": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Deactivate a signing key for a connection agent",
+        "description": "Deactivates the signing key for an agent provisioned on the connection.\nWhen multiple agents exist, pass `agent_id` query param. plt_ auth only.\n",
+        "operationId": "deactivateConnectionSigningKey",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "path",
+            "name": "chain",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "agent_id",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Key deactivated"
+          },
+          "400": {
+            "description": "Multiple agents — agent_id required"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
+    "/v1/platform/connections/{connectionId}/agents/{agentId}": {
+      "patch": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Update limited agent settings for a connection",
+        "description": "Platform-scoped agent update for connected end-users. Allows enabling Intents API,\nExecution Intents, and updating the default system prompt without human dashboard access.\nAgent must be provisioned on the connection. plt_ auth only.\n",
+        "operationId": "patchConnectionAgent",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "path",
+            "name": "agentId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchConnectionAgentRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Updated agent settings",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchConnectionAgentResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
+    "/v1/platform/connections/{connectionId}/portfolio": {
+      "get": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Portfolio for connection agents",
+        "description": "Aggregates signing-key and smart-account balances for agents provisioned on\nthe connection. plt_ auth only.\n",
+        "operationId": "getConnectionPortfolio",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "query",
+            "name": "chains",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "description": "Comma-separated chain filter (e.g. `ethereum,base`)"
+            }
+          },
+          {
+            "in": "query",
+            "name": "include_tokens",
+            "required": false,
+            "schema": {
+              "type": "boolean"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Connection-scoped portfolio",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PortfolioResponse"
+                }
+              }
+            }
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
+    "/v1/platform/connections/{connectionId}/balances": {
+      "get": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Balances alias for connection portfolio",
+        "description": "Alias of `GET .../portfolio`. plt_ auth only.",
+        "operationId": "getConnectionBalances",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "query",
+            "name": "chains",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Connection-scoped portfolio",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PortfolioResponse"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/v1/platform/connections/{connectionId}/automations": {
+      "get": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "List automations for connection agents",
+        "operationId": "listConnectionAutomations",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Automations scoped to connection agents",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AutomationListResponse"
+                }
+              }
+            }
+          }
+        }
+      },
+      "post": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Create automation for a connection agent",
+        "operationId": "createConnectionAutomation",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CreateAutomationRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": "Automation created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AutomationCreatedResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        }
+      }
+    },
+    "/v1/platform/connections/{connectionId}/automations/{automationId}/runs/{runId}/cancel": {
+      "post": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Cancel an automation run (connection-scoped)",
+        "operationId": "cancelConnectionAutomationRun",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "path",
+            "name": "automationId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "path",
+            "name": "runId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Run cancelled",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AutomationRunResponse"
+                }
+              }
+            }
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
+    "/v1/platform/connections/{connectionId}/memory/{namespace}/{key}": {
+      "get": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Get agent memory entry (connection-scoped)",
+        "operationId": "getConnectionMemory",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "path",
+            "name": "namespace",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "path",
+            "name": "key",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "agent_id",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Memory entry",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/MemoryEntry"
+                }
+              }
+            }
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      },
+      "put": {
+        "tags": [
+          "Platform"
+        ],
+        "summary": "Upsert agent memory entry (connection-scoped)",
+        "operationId": "putConnectionMemory",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "name": "connectionId",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "in": "path",
+            "name": "namespace",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "path",
+            "name": "key",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "agent_id",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutMemoryRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Memory entry stored",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/MemoryEntry"
+                }
+              }
+            }
+          }
+        }
+      },
       "delete": {
         "tags": [
           "Platform"
         ],
-        "summary": "Deactivate a signing key for a connection agent",
-        "description": "Deactivates the signing key for an agent provisioned on the connection.\nWhen multiple agents exist, pass `agent_id` query param. plt_ auth only.\n",
-        "operationId": "deactivateConnectionSigningKey",
+        "summary": "Delete agent memory entry (connection-scoped)",
+        "operationId": "deleteConnectionMemory",
         "security": [
           {
             "BearerAuth": []
@@ -11846,7 +12647,15 @@
           },
           {
             "in": "path",
-            "name": "chain",
+            "name": "namespace",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "in": "path",
+            "name": "key",
             "required": true,
             "schema": {
               "type": "string"
@@ -11864,10 +12673,7 @@
         ],
         "responses": {
           "204": {
-            "description": "Key deactivated"
-          },
-          "400": {
-            "description": "Multiple agents — agent_id required"
+            "description": "Deleted"
           },
           "404": {
             "$ref": "#/components/responses/NotFound"
@@ -22758,6 +23564,93 @@
           }
         }
       },
+      "ConnectionSigningKeyPublic": {
+        "type": "object",
+        "properties": {
+          "chain": {
+            "type": "string"
+          },
+          "address": {
+            "type": "string"
+          },
+          "public_key": {
+            "type": "string"
+          },
+          "curve": {
+            "type": "string"
+          }
+        }
+      },
+      "ConnectionSigningKeyListResponse": {
+        "type": "object",
+        "properties": {
+          "agent_id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "keys": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/ConnectionSigningKeyPublic"
+            }
+          }
+        }
+      },
+      "ConnectionSigningKeyDetailResponse": {
+        "type": "object",
+        "properties": {
+          "agent_id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "chain": {
+            "type": "string"
+          },
+          "address": {
+            "type": "string"
+          },
+          "public_key": {
+            "type": "string"
+          },
+          "curve": {
+            "type": "string"
+          }
+        }
+      },
+      "PatchConnectionAgentRequest": {
+        "type": "object",
+        "properties": {
+          "intents_api_enabled": {
+            "type": "boolean"
+          },
+          "execution_intents_enabled": {
+            "type": "boolean"
+          },
+          "system_prompt": {
+            "type": "string",
+            "nullable": true
+          }
+        }
+      },
+      "PatchConnectionAgentResponse": {
+        "type": "object",
+        "properties": {
+          "agent_id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "intents_api_enabled": {
+            "type": "boolean"
+          },
+          "execution_intents_enabled": {
+            "type": "boolean"
+          },
+          "system_prompt": {
+            "type": "string",
+            "nullable": true
+          }
+        }
+      },
       "LeaseBankrKeyRequest": {
         "type": "object",
         "properties": {
@@ -23725,6 +24618,82 @@
           }
         }
       },
+      "OnboardingStatus": {
+        "type": "object",
+        "required": [
+          "has_vault",
+          "has_agent",
+          "has_policy",
+          "has_sample_secret",
+          "first_secret_read",
+          "welcome_bundle_complete"
+        ],
+        "properties": {
+          "has_vault": {
+            "type": "boolean"
+          },
+          "has_agent": {
+            "type": "boolean"
+          },
+          "has_policy": {
+            "type": "boolean"
+          },
+          "has_sample_secret": {
+            "type": "boolean"
+          },
+          "first_secret_read": {
+            "type": "boolean"
+          },
+          "welcome_bundle_complete": {
+            "type": "boolean"
+          },
+          "default_vault_id": {
+            "type": "string",
+            "format": "uuid",
+            "nullable": true
+          }
+        }
+      },
+      "OnboardingProvisionRequest": {
+        "type": "object",
+        "properties": {
+          "agent_name": {
+            "type": "string"
+          },
+          "client": {
+            "type": "string"
+          }
+        }
+      },
+      "OnboardingProvisionResponse": {
+        "type": "object",
+        "required": [
+          "agent_id",
+          "api_key",
+          "vault_id",
+          "mcp_stdio_config",
+          "verify_prompt"
+        ],
+        "properties": {
+          "agent_id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "api_key": {
+            "type": "string"
+          },
+          "vault_id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "mcp_stdio_config": {
+            "type": "object"
+          },
+          "verify_prompt": {
+            "type": "string"
+          }
+        }
+      },
       "AgentKeysVaultResponse": {
         "type": "object",
         "properties": {
@@ -25915,6 +26884,11 @@
             "format": "date-time",
             "nullable": true,
             "description": "Optional expiration time for the platform API key. Set to null to clear."
+          },
+          "siwe_domain": {
+            "type": "string",
+            "nullable": true,
+            "description": "Hostname allowed in SIWE messages for wallet sign-in (EIP-4361)."
           }
         }
       },
@@ -26055,6 +27029,11 @@
             "nullable": true,
             "description": "When the platform API key was last rotated."
           },
+          "siwe_domain": {
+            "type": "string",
+            "nullable": true,
+            "description": "Hostname allowed in SIWE messages for wallet sign-in (EIP-4361)."
+          },
           "created_at": {
             "type": "string",
             "format": "date-time"
@@ -26099,7 +27078,7 @@
           },
           "spec": {
             "type": "object",
-            "description": "Template specification defining vault, agents, policies, and signing keys to bootstrap.\nTop-level fields: `vault` (object with name, description), `agents` (array of agent specs\nwith name, description, shroud_enabled, intents, shroud_config), `policies` (array with\nvault_ref, principal_ref, paths, permissions, conditions), and `signing_keys` (array of\n`{ chain }` objects — supported chains: ethereum, bitcoin, solana, xrp, cardano, tron).\nWhen `signing_keys` is present, HSM-backed signing keys are auto-provisioned for the\nbootstrapped agent.\n"
+            "description": "Template specification defining vault, agents, policies, and signing keys to bootstrap.\nTop-level fields: `vault` (object with name, description), `agents` (array of agent specs),\n`policies` (array with vault_ref, principal_ref, paths, permissions, conditions), and\n`signing_keys` (array of `{ chain }` objects — supported chains: ethereum, bitcoin, solana,\nxrp, cardano, tron). When `signing_keys` is present, HSM-backed signing keys are\nauto-provisioned for the bootstrapped agent.\n\nEach agent entry accepts Intents API and Execution Intents flags under any of these aliases\n(direct API field name, boolean shorthand, or `{ enabled: true }` object):\n- Intents API → `intents_api_enabled`, `intents: true`, or `intents: { enabled: true }`\n  (maps to `agents.intents_api_enabled`)\n- Execution Intents → `execution_intents_enabled`, `execution: true`, or\n  `execution: { enabled: true }` (maps to `agents.execution_intents_enabled`)\n\nOther agent fields: `name`, `description`, `shroud_enabled`, `shroud_config`, `system_prompt`,\n`environment`, `signing_keys`, `provision_eoa`, `memory`, `runtime`, `default_llm_provider`.\n"
           }
         }
       },
@@ -32093,6 +33072,121 @@
           }
         }
       },
+      "ConnectionSubmitPendingApprovalRequest": {
+        "type": "object",
+        "required": [
+          "action_payload"
+        ],
+        "properties": {
+          "agent_id": {
+            "type": "string",
+            "format": "uuid",
+            "description": "Required when the connection has multiple agents"
+          },
+          "policy_id": {
+            "type": "string",
+            "format": "uuid",
+            "description": "Optional — auto-resolved from agent consensus policies when omitted"
+          },
+          "action": {
+            "type": "string",
+            "default": "transaction"
+          },
+          "action_payload": {
+            "type": "object",
+            "description": "Transaction/intent fields (chain, to, value, …) hashed for decide binding"
+          },
+          "summary": {
+            "type": "string",
+            "description": "Human-readable label included in webhook payloads"
+          }
+        }
+      },
+      "InspectContentRequest": {
+        "type": "object",
+        "required": [
+          "content"
+        ],
+        "properties": {
+          "content": {
+            "type": "string",
+            "maxLength": 102400
+          },
+          "context": {
+            "type": "string",
+            "enum": [
+              "input",
+              "output"
+            ],
+            "description": "Inspection context (reserved for future rules)"
+          }
+        }
+      },
+      "InspectContentResponse": {
+        "type": "object",
+        "properties": {
+          "safe": {
+            "type": "boolean"
+          },
+          "verdict": {
+            "type": "string",
+            "enum": [
+              "clean",
+              "malicious"
+            ]
+          },
+          "threat_count": {
+            "type": "integer"
+          },
+          "threats": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "type": {
+                  "type": "string"
+                },
+                "pattern": {
+                  "type": "string"
+                },
+                "severity": {
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "unicode_normalized": {
+            "type": "boolean"
+          },
+          "normalized_content": {
+            "type": "string"
+          }
+        }
+      },
+      "PlatformWebhookInfoResponse": {
+        "type": "object",
+        "properties": {
+          "app_id": {
+            "type": "string",
+            "format": "uuid"
+          },
+          "webhook_configured": {
+            "type": "boolean"
+          },
+          "webhook_url_host": {
+            "type": "string"
+          },
+          "platform_events": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "org_webhooks_note": {
+            "type": "string"
+          }
+        }
+      },
       "SubmitPendingApprovalResponse": {
         "type": "object",
         "properties": {