@1claw/openapi-spec 0.6.0 → 0.8.0

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "1Claw API",
-    "version": "2.1.0",
+    "version": "2.3.0",
     "description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
     "contact": {
       "email": "ops@1claw.xyz"
@@ -16,6 +16,10 @@
     {
       "url": "https://api.1claw.xyz",
       "description": "Production"
+    },
+    {
+      "url": "https://shroud.1claw.xyz",
+      "description": "Shroud TEE Proxy (Intents API + LLM proxy)"
     }
   ],
   "security": [
@@ -1594,6 +1598,39 @@
         }
       }
     },
+    "/v1/agents/{agent_id}/rotate-identity-keys": {
+      "post": {
+        "tags": [
+          "Agents"
+        ],
+        "summary": "Rotate agent identity keys (SSH + ECDH)",
+        "description": "Rotates the agent's Ed25519 SSH keypair and P-256 ECDH keypair.\nNew private keys are stored in the __agent-keys vault; old keys are overwritten.\nUser-only endpoint — agents cannot rotate their own identity keys.\n",
+        "operationId": "rotateAgentIdentityKeys",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/AgentId"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Agent with updated public keys",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AgentResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
     "/v1/agents/{agent_id}/transactions": {
       "post": {
         "tags": [
@@ -2983,7 +3020,7 @@
         ],
         "summary": "Set org billing tier (without Stripe)",
         "operationId": "adminSetBillingTier",
-        "description": "Manually set an organization's billing tier to free, pro, or business.\nFor testing and manual upgrades — does not create a Stripe subscription.\nSetting to \"pro\" or \"business\" sets period_end to +1 year.\nSetting to \"free\" clears subscription data.\n",
+        "description": "Manually set an organization's billing tier to free, pro, business, or enterprise.\nFor testing, manual upgrades, and trial grants — does not create a Stripe subscription.\nSetting to \"pro\", \"business\", or \"enterprise\" sets period_end to now + duration_days (default 365).\nSetting to \"free\" clears subscription data. Use duration_days: 90 for a 3-month trial.\n",
         "parameters": [
           {
             "name": "org_id",
@@ -5539,8 +5576,15 @@
             "enum": [
               "free",
               "pro",
-              "business"
+              "business",
+              "enterprise"
             ]
+          },
+          "duration_days": {
+            "type": "integer",
+            "description": "How many days the tier lasts (default 365). Use 90 for a 3-month trial.",
+            "minimum": 1,
+            "maximum": 3650
           }
         }
       },

package/openapi.yaml

@@ -2,7 +2,7 @@ openapi: 3.1.0
 
 info:
   title: 1Claw API
-  version: 2.1.0
+  version: 2.3.0
   description: |
     Secure secret management for AI agents. Provides vaults, secrets,
     policy-based access control, agent identity, Intents API,
@@ -18,6 +18,8 @@ servers:
     description: Development
   - url: https://api.1claw.xyz
     description: Production
+  - url: https://shroud.1claw.xyz
+    description: Shroud TEE Proxy (Intents API + LLM proxy)
 
 security:
   - BearerAuth: []
@@ -1014,6 +1016,29 @@ paths:
         "404":
           $ref: "#/components/responses/NotFound"
 
+  /v1/agents/{agent_id}/rotate-identity-keys:
+    post:
+      tags: [Agents]
+      summary: Rotate agent identity keys (SSH + ECDH)
+      description: |
+        Rotates the agent's Ed25519 SSH keypair and P-256 ECDH keypair.
+        New private keys are stored in the __agent-keys vault; old keys are overwritten.
+        User-only endpoint — agents cannot rotate their own identity keys.
+      operationId: rotateAgentIdentityKeys
+      parameters:
+        - $ref: "#/components/parameters/AgentId"
+      responses:
+        "200":
+          description: Agent with updated public keys
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AgentResponse"
+        "403":
+          $ref: "#/components/responses/Forbidden"
+        "404":
+          $ref: "#/components/responses/NotFound"
+
   # ---------------------------------------------------------------------------
   # Transactions (Intents API)
   # ---------------------------------------------------------------------------
@@ -1901,10 +1926,10 @@ paths:
       summary: Set org billing tier (without Stripe)
       operationId: adminSetBillingTier
       description: |
-        Manually set an organization's billing tier to free, pro, or business.
-        For testing and manual upgrades — does not create a Stripe subscription.
-        Setting to "pro" or "business" sets period_end to +1 year.
-        Setting to "free" clears subscription data.
+        Manually set an organization's billing tier to free, pro, business, or enterprise.
+        For testing, manual upgrades, and trial grants — does not create a Stripe subscription.
+        Setting to "pro", "business", or "enterprise" sets period_end to now + duration_days (default 365).
+        Setting to "free" clears subscription data. Use duration_days: 90 for a 3-month trial.
       parameters:
         - name: org_id
           in: path
@@ -3670,7 +3695,12 @@ components:
       properties:
         tier:
           type: string
-          enum: [free, pro, business]
+          enum: [free, pro, business, enterprise]
+        duration_days:
+          type: integer
+          description: How many days the tier lasts (default 365). Use 90 for a 3-month trial.
+          minimum: 1
+          maximum: 3650
 
     # --- x402 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@1claw/openapi-spec",
-    "version": "0.6.0",
+    "version": "0.8.0",
     "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API — generate clients in any language",
     "license": "PolyForm-Noncommercial-1.0.0",
     "repository": {