@1claw/openapi-spec 0.61.0 → 0.61.2

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "1Claw API",
-    "version": "0.61.0",
+    "version": "0.61.2",
     "description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging. Automations (workflow_spec,\nwebhook tokens, event triggers, Assist), cloud runtimes with\ninteractive shell sessions, agent memory, and discovery.\n\n## Domains\n\n`api.1claw.co` is canonical: it is the OIDC issuer, the `aud` the API\nmints, and the first entry in `servers` — a generated client takes its\nbase URL from there, and the previous ordering pointed every SDK at the\ndomain the issuer had already left. `api.1claw.xyz` still answers and is\nstill accepted on token validation, because tokens minted before the\nmove carry it; it is never minted now.\n\nOne deliberate exception: the Shroud attestation identity token is\nrequested from GCP with `audience: https://api.1claw.xyz`, so\n`/v1/shroud/attestation` reports that as its `expected_audience`. That\nis accurate rather than stale — the audience is a verification contract\nwith anyone already checking the token, and moving it is a breaking\nchange for them, not a rename.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
     "contact": {
       "email": "ops@1claw.co"
@@ -26896,17 +26896,25 @@
       },
       "AgentTokenRequest": {
         "type": "object",
-        "required": [
-          "api_key"
-        ],
+        "description": "Exactly one credential, decided by the agent's auth_method: api_key for api_key agents, oidc_token for oidc_client_credentials agents. mTLS agents send neither and present a client certificate through the TLS terminator.",
         "properties": {
           "agent_id": {
             "type": "string",
             "format": "uuid",
-            "description": "Optional when using key-only auth (ocv_ keys auto-resolve agent)"
+            "description": "Optional for api_key agents (ocv_ keys auto-resolve from their prefix). Required for OIDC and mTLS agents, which have no key to look up by."
           },
           "api_key": {
-            "type": "string"
+            "type": "string",
+            "description": "The ocv_ key, for auth_method api_key."
+          },
+          "oidc_token": {
+            "type": "string",
+            "description": "Token minted by the agent's OIDC provider, for auth_method oidc_client_credentials. Verified against the issuer and audience on the agent record, so nothing long-lived is stored where the agent runs."
+          },
+          "dpop_jwk": {
+            "type": "object",
+            "additionalProperties": true,
+            "description": "Optional DPoP public key (JWK) binding the issued JWT to a client keypair."
           }
         }
       },
@@ -28049,6 +28057,57 @@
           "name"
         ],
         "properties": {
+          "default_llm_provider": {
+            "type": "string",
+            "description": "Default LLM provider for automations and Shroud."
+          },
+          "default_llm_model": {
+            "type": "string",
+            "description": "Default LLM model for automations and Shroud."
+          },
+          "discoverable": {
+            "type": "boolean",
+            "description": "List this agent in the cross-org agent directory."
+          },
+          "public_description": {
+            "type": "string",
+            "description": "Description shown on the public directory listing."
+          },
+          "public_tags": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Tags shown on the public directory listing."
+          },
+          "skip_default_policy": {
+            "type": "boolean",
+            "description": "Skip creating the default access policy for this agent."
+          },
+          "address_screening_policy": {
+            "type": "object",
+            "additionalProperties": true,
+            "description": "Address screening policy applied to transaction recipients."
+          },
+          "memory_enabled": {
+            "type": "boolean",
+            "description": "Enable durable key-value and semantic memory for this agent. Required before PUT /v1/agents/{agent_id}/memory/{namespace}/{key} will accept a write; without it that endpoint returns 403."
+          },
+          "memory_namespace_allowlist": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Namespaces this agent may use. Empty or omitted means unrestricted."
+          },
+          "memory_max_entry_bytes": {
+            "type": [
+              "integer",
+              "null"
+            ],
+            "format": "int32",
+            "description": "Maximum size of a single memory entry value. Null uses the platform default (64 KiB)."
+          },
           "name": {
             "type": "string"
           },
@@ -28351,6 +28410,96 @@
       "UpdateAgentRequest": {
         "type": "object",
         "properties": {
+          "smart_account_address": {
+            "type": "string",
+            "description": "Smart account address associated with this agent."
+          },
+          "smart_account_chain": {
+            "type": "string",
+            "description": "Chain name for the smart account."
+          },
+          "smart_account_chain_id": {
+            "type": "integer",
+            "format": "int32",
+            "description": "EVM chain id for the smart account."
+          },
+          "smart_account_nonce": {
+            "type": "string",
+            "description": "Smart account deployment nonce."
+          },
+          "smart_account_init_data": {
+            "type": "object",
+            "additionalProperties": true,
+            "description": "Smart account initialisation data."
+          },
+          "message_signing_enabled": {
+            "type": "boolean",
+            "description": "Allow this agent to sign arbitrary messages."
+          },
+          "eip712_domain_allowlist": {
+            "type": "object",
+            "additionalProperties": true,
+            "description": "EIP-712 domains this agent may sign under."
+          },
+          "eip712_default_policy": {
+            "type": "string",
+            "description": "Default policy applied to EIP-712 signing requests."
+          },
+          "raw_signing_enabled": {
+            "type": "boolean",
+            "description": "Allow this agent to sign raw digests."
+          },
+          "default_llm_provider": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "Default LLM provider for automations and Shroud."
+          },
+          "default_llm_model": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "Default LLM model for automations and Shroud."
+          },
+          "discoverable": {
+            "type": "boolean",
+            "description": "List this agent in the cross-org agent directory."
+          },
+          "public_description": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "Description shown on the public directory listing."
+          },
+          "public_tags": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Tags shown on the public directory listing."
+          },
+          "memory_enabled": {
+            "type": "boolean",
+            "description": "Enable durable key-value and semantic memory for this agent. Required before PUT /v1/agents/{agent_id}/memory/{namespace}/{key} will accept a write; without it that endpoint returns 403."
+          },
+          "memory_namespace_allowlist": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Namespaces this agent may use. Empty or omitted means unrestricted."
+          },
+          "memory_max_entry_bytes": {
+            "type": [
+              "integer",
+              "null"
+            ],
+            "format": "int32",
+            "description": "Maximum size of a single memory entry value. Null uses the platform default (64 KiB)."
+          },
           "name": {
             "type": "string"
           },
@@ -28665,6 +28814,25 @@
           "created_at"
         ],
         "properties": {
+          "memory_enabled": {
+            "type": "boolean",
+            "description": "Whether durable key-value and semantic memory is enabled. Omitted when false: the server skips serializing this field unless it is true, so an absent key means disabled."
+          },
+          "memory_namespace_allowlist": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Namespaces this agent may use. Omitted when empty, which means unrestricted."
+          },
+          "memory_max_entry_bytes": {
+            "type": [
+              "integer",
+              "null"
+            ],
+            "format": "int32",
+            "description": "Maximum size of a single memory entry value. Omitted when unset, which means the platform default (64 KiB)."
+          },
           "id": {
             "type": "string",
             "format": "uuid"
@@ -38426,8 +38594,10 @@
             "type": "string"
           },
           "public_description": {
-            "type": "string",
-            "nullable": true
+            "type": [
+              "string",
+              "null"
+            ]
           },
           "public_tags": {
             "type": "array",

package/openapi.yaml

@@ -2,7 +2,7 @@ openapi: 3.1.0
 
 info:
     title: 1Claw API
-    version: "0.61.0"
+    version: "0.61.2"
     description: |
         Secure secret management for AI agents. Provides vaults, secrets,
         policy-based access control, agent identity, Intents API,
@@ -17267,15 +17267,35 @@ components:
 
         AgentTokenRequest:
             type: object
-            required: [api_key]
+            description: >-
+                Exactly one credential, decided by the agent's auth_method:
+                api_key for api_key agents, oidc_token for
+                oidc_client_credentials agents. mTLS agents send neither and
+                present a client certificate through the TLS terminator.
             properties:
                 agent_id:
                     type: string
                     format: uuid
-                    description: Optional when using key-only auth (ocv_ keys auto-resolve agent)
+                    description: >-
+                        Optional for api_key agents (ocv_ keys auto-resolve from
+                        their prefix). Required for OIDC and mTLS agents, which
+                        have no key to look up by.
                 api_key:
                     type: string
-
+                    description: The ocv_ key, for auth_method api_key.
+                oidc_token:
+                    type: string
+                    description: >-
+                        Token minted by the agent's OIDC provider, for
+                        auth_method oidc_client_credentials. Verified against the
+                        issuer and audience on the agent record, so nothing
+                        long-lived is stored where the agent runs.
+                dpop_jwk:
+                    type: object
+                    additionalProperties: true
+                    description: >-
+                        Optional DPoP public key (JWK) binding the issued JWT to
+                        a client keypair.
         UserApiKeyTokenRequest:
             type: object
             required: [api_key]
@@ -18083,6 +18103,47 @@ components:
             type: object
             required: [name]
             properties:
+                default_llm_provider:
+                    type: string
+                    description: Default LLM provider for automations and Shroud.
+                default_llm_model:
+                    type: string
+                    description: Default LLM model for automations and Shroud.
+                discoverable:
+                    type: boolean
+                    description: List this agent in the cross-org agent directory.
+                public_description:
+                    type: string
+                    description: Description shown on the public directory listing.
+                public_tags:
+                    type: array
+                    items:
+                        type: string
+                    description: Tags shown on the public directory listing.
+                skip_default_policy:
+                    type: boolean
+                    description: Skip creating the default access policy for this agent.
+                address_screening_policy:
+                    type: object
+                    additionalProperties: true
+                    description: Address screening policy applied to transaction recipients.
+                memory_enabled:
+                    type: boolean
+                    description: >-
+                        Enable durable key-value and semantic memory for this agent.
+                        Required before PUT /v1/agents/{agent_id}/memory/{namespace}/{key}
+                        will accept a write; without it that endpoint returns 403.
+                memory_namespace_allowlist:
+                    type: array
+                    items:
+                        type: string
+                    description: Namespaces this agent may use. Empty or omitted means unrestricted.
+                memory_max_entry_bytes:
+                    type: [integer, "null"]
+                    format: int32
+                    description: >-
+                        Maximum size of a single memory entry value. Null uses the
+                        platform default (64 KiB).
                 name:
                     type: string
                 description:
@@ -18323,6 +18384,70 @@ components:
         UpdateAgentRequest:
             type: object
             properties:
+                smart_account_address:
+                    type: string
+                    description: Smart account address associated with this agent.
+                smart_account_chain:
+                    type: string
+                    description: Chain name for the smart account.
+                smart_account_chain_id:
+                    type: integer
+                    format: int32
+                    description: EVM chain id for the smart account.
+                smart_account_nonce:
+                    type: string
+                    description: Smart account deployment nonce.
+                smart_account_init_data:
+                    type: object
+                    additionalProperties: true
+                    description: Smart account initialisation data.
+                message_signing_enabled:
+                    type: boolean
+                    description: Allow this agent to sign arbitrary messages.
+                eip712_domain_allowlist:
+                    type: object
+                    additionalProperties: true
+                    description: EIP-712 domains this agent may sign under.
+                eip712_default_policy:
+                    type: string
+                    description: Default policy applied to EIP-712 signing requests.
+                raw_signing_enabled:
+                    type: boolean
+                    description: Allow this agent to sign raw digests.
+                default_llm_provider:
+                    type: [string, "null"]
+                    description: Default LLM provider for automations and Shroud.
+                default_llm_model:
+                    type: [string, "null"]
+                    description: Default LLM model for automations and Shroud.
+                discoverable:
+                    type: boolean
+                    description: List this agent in the cross-org agent directory.
+                public_description:
+                    type: [string, "null"]
+                    description: Description shown on the public directory listing.
+                public_tags:
+                    type: array
+                    items:
+                        type: string
+                    description: Tags shown on the public directory listing.
+                memory_enabled:
+                    type: boolean
+                    description: >-
+                        Enable durable key-value and semantic memory for this agent.
+                        Required before PUT /v1/agents/{agent_id}/memory/{namespace}/{key}
+                        will accept a write; without it that endpoint returns 403.
+                memory_namespace_allowlist:
+                    type: array
+                    items:
+                        type: string
+                    description: Namespaces this agent may use. Empty or omitted means unrestricted.
+                memory_max_entry_bytes:
+                    type: [integer, "null"]
+                    format: int32
+                    description: >-
+                        Maximum size of a single memory entry value. Null uses the
+                        platform default (64 KiB).
                 name:
                     type: string
                 scopes:
@@ -18586,6 +18711,25 @@ components:
                     created_at,
                 ]
             properties:
+                memory_enabled:
+                    type: boolean
+                    description: >-
+                        Whether durable key-value and semantic memory is enabled.
+                        Omitted when false: the server skips serializing this field
+                        unless it is true, so an absent key means disabled.
+                memory_namespace_allowlist:
+                    type: array
+                    items:
+                        type: string
+                    description: >-
+                        Namespaces this agent may use. Omitted when empty, which
+                        means unrestricted.
+                memory_max_entry_bytes:
+                    type: [integer, "null"]
+                    format: int32
+                    description: >-
+                        Maximum size of a single memory entry value. Omitted when
+                        unset, which means the platform default (64 KiB).
                 id:
                     type: string
                     format: uuid
@@ -25132,8 +25276,7 @@ components:
                 name:
                     type: string
                 public_description:
-                    type: string
-                    nullable: true
+                    type: [string, "null"]
                 public_tags:
                     type: array
                     items:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1claw/openapi-spec",
-  "version": "0.61.0",
+  "version": "0.61.2",
   "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API \u2014 generate clients in any language",
   "license": "MIT",
   "repository": {