@1claw/openapi-spec 0.59.2 → 0.59.5

package/openapi.yaml

@@ -6054,6 +6054,34 @@ paths:
                             schema:
                                 $ref: "#/components/schemas/ShroudAttestationResponse"
 
+    /v1/shroud/inspect-content:
+        post:
+            tags: [Shroud]
+            summary: Inspect text for security threats
+            description: |
+                Standalone content inspection (MCP `inspect_content` parity). Scans for command
+                injection, encoding tricks, social engineering, PII, and suspicious URLs.
+                Fail-closed — returns `safe: false` when high/critical threats match.
+                Accepts plt_ platform keys, agent JWTs, and user JWTs.
+            operationId: inspectContent
+            security:
+                - BearerAuth: []
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/InspectContentRequest"
+            responses:
+                "200":
+                    description: Inspection report
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/InspectContentResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+
     /v1/shroud/activity:
         get:
             tags: [Shroud]
@@ -6375,6 +6403,34 @@ paths:
                 "404":
                     $ref: "#/components/responses/NotFound"
 
+    /v1/platform/apps/{appId}/webhooks:
+        get:
+            tags: [Platform]
+            summary: Platform webhook delivery catalog
+            description: |
+                Returns whether `webhook_url` is configured and the event types delivered to
+                the platform app webhook (payload includes `connection_id` when applicable).
+                Org-scoped webhook subscriptions (`GET /v1/webhooks`) are separate.
+            operationId: getPlatformWebhooks
+            security:
+                - BearerAuth: []
+            parameters:
+                - name: appId
+                  in: path
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "200":
+                    description: Webhook configuration summary
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/PlatformWebhookInfoResponse"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
     /v1/platform/apps/{appId}/rotate-webhook-secret:
         post:
             tags: [Platform]
@@ -7483,6 +7539,42 @@ paths:
                                 $ref: "#/components/schemas/PendingApprovalListResponse"
                 "404":
                     $ref: "#/components/responses/NotFound"
+        post:
+            tags: [Platform]
+            summary: Create a pending consensus approval for a connection agent
+            description: |
+                Platform apps submit over-cap or consensus-gated actions on behalf of a
+                connected user's agent. When `policy_id` is omitted, the server resolves the
+                matching agent `consensus_trigger` policy from `action_payload` (chain, to, value).
+                Returns **202** with `pending_approval_id` and `payload_hash` for decide/execute.
+                Requires plt_ auth; agent must be provisioned on the connection.
+            operationId: createConnectionPendingApproval
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/ConnectionSubmitPendingApprovalRequest"
+            responses:
+                "202":
+                    description: Pending approval created
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/SubmitPendingApprovalResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+                "404":
+                    $ref: "#/components/responses/NotFound"
 
     /v1/platform/connections/{connectionId}/pending-approvals/{approvalId}:
         get:
@@ -7654,7 +7746,8 @@ paths:
             summary: Get a signing key for a connection agent by chain
             description: |
                 Returns public signing-key metadata for one chain on a connection agent.
-                Never includes private keys. plt_ auth only.
+                Network names (e.g. `base`, `sepolia`) resolve to canonical signing keys
+                (e.g. `ethereum`). Never includes private keys. plt_ auth only.
             operationId: getConnectionSigningKey
             security:
                 - BearerAuth: []
@@ -7722,6 +7815,320 @@ paths:
                 "404":
                     $ref: "#/components/responses/NotFound"
 
+    /v1/platform/connections/{connectionId}/agents/{agentId}:
+        patch:
+            tags: [Platform]
+            summary: Update limited agent settings for a connection
+            description: |
+                Platform-scoped agent update for connected end-users. Allows enabling Intents API,
+                Execution Intents, and updating the default system prompt without human dashboard access.
+                Agent must be provisioned on the connection. plt_ auth only.
+            operationId: patchConnectionAgent
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - in: path
+                  name: agentId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/PatchConnectionAgentRequest"
+            responses:
+                "200":
+                    description: Updated agent settings
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/PatchConnectionAgentResponse"
+                "400":
+                    $ref: "#/components/responses/BadRequest"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
+    /v1/platform/connections/{connectionId}/portfolio:
+        get:
+            tags: [Platform]
+            summary: Portfolio for connection agents
+            description: |
+                Aggregates signing-key and smart-account balances for agents provisioned on
+                the connection. plt_ auth only.
+            operationId: getConnectionPortfolio
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - in: query
+                  name: chains
+                  required: false
+                  schema:
+                      type: string
+                      description: Comma-separated chain filter (e.g. `ethereum,base`)
+                - in: query
+                  name: include_tokens
+                  required: false
+                  schema:
+                      type: boolean
+            responses:
+                "200":
+                    description: Connection-scoped portfolio
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/PortfolioResponse"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
+    /v1/platform/connections/{connectionId}/balances:
+        get:
+            tags: [Platform]
+            summary: Balances alias for connection portfolio
+            description: Alias of `GET .../portfolio`. plt_ auth only.
+            operationId: getConnectionBalances
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - in: query
+                  name: chains
+                  required: false
+                  schema:
+                      type: string
+            responses:
+                "200":
+                    description: Connection-scoped portfolio
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/PortfolioResponse"
+
+    /v1/platform/connections/{connectionId}/automations:
+        get:
+            tags: [Platform]
+            summary: List automations for connection agents
+            operationId: listConnectionAutomations
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "200":
+                    description: Automations scoped to connection agents
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/AutomationListResponse"
+        post:
+            tags: [Platform]
+            summary: Create automation for a connection agent
+            operationId: createConnectionAutomation
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/CreateAutomationRequest"
+            responses:
+                "201":
+                    description: Automation created
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/AutomationCreatedResponse"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+
+    /v1/platform/connections/{connectionId}/automations/{automationId}/runs/{runId}/cancel:
+        post:
+            tags: [Platform]
+            summary: Cancel an automation run (connection-scoped)
+            operationId: cancelConnectionAutomationRun
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - in: path
+                  name: automationId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - in: path
+                  name: runId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "200":
+                    description: Run cancelled
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/AutomationRunResponse"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
+    /v1/platform/connections/{connectionId}/memory/{namespace}/{key}:
+        get:
+            tags: [Platform]
+            summary: Get agent memory entry (connection-scoped)
+            operationId: getConnectionMemory
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - in: path
+                  name: namespace
+                  required: true
+                  schema:
+                      type: string
+                - in: path
+                  name: key
+                  required: true
+                  schema:
+                      type: string
+                - in: query
+                  name: agent_id
+                  required: false
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "200":
+                    description: Memory entry
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/MemoryEntry"
+                "403":
+                    $ref: "#/components/responses/Forbidden"
+                "404":
+                    $ref: "#/components/responses/NotFound"
+        put:
+            tags: [Platform]
+            summary: Upsert agent memory entry (connection-scoped)
+            operationId: putConnectionMemory
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - in: path
+                  name: namespace
+                  required: true
+                  schema:
+                      type: string
+                - in: path
+                  name: key
+                  required: true
+                  schema:
+                      type: string
+                - in: query
+                  name: agent_id
+                  required: false
+                  schema:
+                      type: string
+                      format: uuid
+            requestBody:
+                required: true
+                content:
+                    application/json:
+                        schema:
+                            $ref: "#/components/schemas/PutMemoryRequest"
+            responses:
+                "200":
+                    description: Memory entry stored
+                    content:
+                        application/json:
+                            schema:
+                                $ref: "#/components/schemas/MemoryEntry"
+        delete:
+            tags: [Platform]
+            summary: Delete agent memory entry (connection-scoped)
+            operationId: deleteConnectionMemory
+            security:
+                - BearerAuth: []
+            parameters:
+                - in: path
+                  name: connectionId
+                  required: true
+                  schema:
+                      type: string
+                      format: uuid
+                - in: path
+                  name: namespace
+                  required: true
+                  schema:
+                      type: string
+                - in: path
+                  name: key
+                  required: true
+                  schema:
+                      type: string
+                - in: query
+                  name: agent_id
+                  required: false
+                  schema:
+                      type: string
+                      format: uuid
+            responses:
+                "204":
+                    description: Deleted
+                "404":
+                    $ref: "#/components/responses/NotFound"
+
     /v1/platform/connections/{connectionId}/runtimes:
         post:
             tags: [Platform]
@@ -14959,6 +15366,31 @@ components:
                 curve:
                     type: string
 
+        PatchConnectionAgentRequest:
+            type: object
+            properties:
+                intents_api_enabled:
+                    type: boolean
+                execution_intents_enabled:
+                    type: boolean
+                system_prompt:
+                    type: string
+                    nullable: true
+
+        PatchConnectionAgentResponse:
+            type: object
+            properties:
+                agent_id:
+                    type: string
+                    format: uuid
+                intents_api_enabled:
+                    type: boolean
+                execution_intents_enabled:
+                    type: boolean
+                system_prompt:
+                    type: string
+                    nullable: true
+
         # Bankr Dynamic Key Vending
         LeaseBankrKeyRequest:
             type: object
@@ -21383,6 +21815,83 @@ components:
                 action_payload:
                     type: object
 
+        ConnectionSubmitPendingApprovalRequest:
+            type: object
+            required: [action_payload]
+            properties:
+                agent_id:
+                    type: string
+                    format: uuid
+                    description: Required when the connection has multiple agents
+                policy_id:
+                    type: string
+                    format: uuid
+                    description: Optional — auto-resolved from agent consensus policies when omitted
+                action:
+                    type: string
+                    default: transaction
+                action_payload:
+                    type: object
+                    description: Transaction/intent fields (chain, to, value, …) hashed for decide binding
+                summary:
+                    type: string
+                    description: Human-readable label included in webhook payloads
+
+        InspectContentRequest:
+            type: object
+            required: [content]
+            properties:
+                content:
+                    type: string
+                    maxLength: 102400
+                context:
+                    type: string
+                    enum: [input, output]
+                    description: Inspection context (reserved for future rules)
+
+        InspectContentResponse:
+            type: object
+            properties:
+                safe:
+                    type: boolean
+                verdict:
+                    type: string
+                    enum: [clean, malicious]
+                threat_count:
+                    type: integer
+                threats:
+                    type: array
+                    items:
+                        type: object
+                        properties:
+                            type:
+                                type: string
+                            pattern:
+                                type: string
+                            severity:
+                                type: string
+                unicode_normalized:
+                    type: boolean
+                normalized_content:
+                    type: string
+
+        PlatformWebhookInfoResponse:
+            type: object
+            properties:
+                app_id:
+                    type: string
+                    format: uuid
+                webhook_configured:
+                    type: boolean
+                webhook_url_host:
+                    type: string
+                platform_events:
+                    type: array
+                    items:
+                        type: string
+                org_webhooks_note:
+                    type: string
+
         SubmitPendingApprovalResponse:
             type: object
             properties:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1claw/openapi-spec",
-  "version": "0.59.2",
+  "version": "0.59.5",
   "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API — generate clients in any language",
   "license": "MIT",
   "repository": {