@1claw/openapi-spec 0.61.57 → 0.61.59

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/openapi.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "openapi": "3.1.0",
3
3
  "info": {
4
4
  "title": "1Claw API",
5
- "version": "0.61.57",
5
+ "version": "0.61.59",
6
6
  "description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging. Automations (workflow_spec,\nwebhook tokens, event triggers, Assist), cloud runtimes with\ninteractive shell sessions, agent memory, and discovery.\n\n## Domains\n\n`api.1claw.co` is canonical: it is the OIDC issuer, the `aud` the API\nmints, and the first entry in `servers` — a generated client takes its\nbase URL from there, and the previous ordering pointed every SDK at the\ndomain the issuer had already left. `api.1claw.xyz` still answers and is\nstill accepted on token validation, because tokens minted before the\nmove carry it; it is never minted now.\n\nOne deliberate exception: the Shroud attestation identity token is\nrequested from GCP with `audience: https://api.1claw.xyz`, so\n`/v1/shroud/attestation` reports that as its `expected_audience`. That\nis accurate rather than stale — the audience is a verification contract\nwith anyone already checking the token, and moving it is a breaking\nchange for them, not a rename.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
7
7
  "contact": {
8
8
  "email": "ops@1claw.co"
@@ -37841,7 +37841,23 @@
37841
37841
  },
37842
37842
  "agent_api_key": {
37843
37843
  "type": "string",
37844
- "description": "Returned once, at creation, and never retrievable again."
37844
+ "description": "The first agent's key, kept so existing clients keep parsing.\nPrefer `agent_api_keys`.\n"
37845
+ },
37846
+ "agent_api_keys": {
37847
+ "type": "array",
37848
+ "description": "Every agent created by this call, with its one-time API key.\nReturned once and never retrievable again: a platform app\ncannot rotate a key in the end user's org, so a key missed\nhere is gone. The singular `agent_api_key` is the first of\nthese and is kept for compatibility.\n",
37849
+ "items": {
37850
+ "type": "object",
37851
+ "properties": {
37852
+ "agent_id": {
37853
+ "type": "string",
37854
+ "format": "uuid"
37855
+ },
37856
+ "api_key": {
37857
+ "type": "string"
37858
+ }
37859
+ }
37860
+ }
37845
37861
  },
37846
37862
  "agent_evm_address": {
37847
37863
  "type": "string"
@@ -41384,6 +41400,13 @@
41384
41400
  "null"
41385
41401
  ]
41386
41402
  },
41403
+ "max_agents_per_connection": {
41404
+ "type": [
41405
+ "integer",
41406
+ "null"
41407
+ ],
41408
+ "description": "Agents one connection may hold, enforced by\n`POST /v1/platform/connections/{connectionId}/agents`. `null`\nclears the override back to the built-in default; it does not\nmean unlimited.\n"
41409
+ },
41387
41410
  "is_active": {
41388
41411
  "type": "boolean"
41389
41412
  },
@@ -42302,7 +42325,23 @@
42302
42325
  "string",
42303
42326
  "null"
42304
42327
  ],
42305
- "description": "One-time agent API key (ocv_ prefix). Store securely — not retrievable later."
42328
+ "description": "First agent's one-time API key (ocv_ prefix). Kept for\ncompatibility; prefer `agent_api_keys`, which covers every\nagent the template created.\n"
42329
+ },
42330
+ "agent_api_keys": {
42331
+ "type": "array",
42332
+ "description": "Every agent created, with its one-time API key. Returned once:\na platform app cannot rotate a key in the end user's org, so a\nmulti-agent template used to strand agents 2..N with\ncredentials nobody could recover.\n",
42333
+ "items": {
42334
+ "type": "object",
42335
+ "properties": {
42336
+ "agent_id": {
42337
+ "type": "string",
42338
+ "format": "uuid"
42339
+ },
42340
+ "api_key": {
42341
+ "type": "string"
42342
+ }
42343
+ }
42344
+ }
42306
42345
  },
42307
42346
  "agent_evm_address": {
42308
42347
  "type": [
package/openapi.yaml CHANGED
@@ -2,7 +2,7 @@ openapi: 3.1.0
2
2
 
3
3
  info:
4
4
  title: 1Claw API
5
- version: "0.61.57"
5
+ version: "0.61.59"
6
6
  description: |
7
7
  Secure secret management for AI agents. Provides vaults, secrets,
8
8
  policy-based access control, agent identity, Intents API,
@@ -24438,7 +24438,25 @@ components:
24438
24438
  format: uuid
24439
24439
  agent_api_key:
24440
24440
  type: string
24441
- description: Returned once, at creation, and never retrievable again.
24441
+ description: |
24442
+ The first agent's key, kept so existing clients keep parsing.
24443
+ Prefer `agent_api_keys`.
24444
+ agent_api_keys:
24445
+ type: array
24446
+ description: |
24447
+ Every agent created by this call, with its one-time API key.
24448
+ Returned once and never retrievable again: a platform app
24449
+ cannot rotate a key in the end user's org, so a key missed
24450
+ here is gone. The singular `agent_api_key` is the first of
24451
+ these and is kept for compatibility.
24452
+ items:
24453
+ type: object
24454
+ properties:
24455
+ agent_id:
24456
+ type: string
24457
+ format: uuid
24458
+ api_key:
24459
+ type: string
24442
24460
  agent_evm_address:
24443
24461
  type: string
24444
24462
  signing_keys:
@@ -26861,6 +26879,13 @@ components:
26861
26879
  enum: [silent, user_signin, configurable]
26862
26880
  max_connected_users:
26863
26881
  type: [integer, "null"]
26882
+ max_agents_per_connection:
26883
+ type: [integer, "null"]
26884
+ description: |
26885
+ Agents one connection may hold, enforced by
26886
+ `POST /v1/platform/connections/{connectionId}/agents`. `null`
26887
+ clears the override back to the built-in default; it does not
26888
+ mean unlimited.
26864
26889
  is_active:
26865
26890
  type: boolean
26866
26891
  api_key_expires_at:
@@ -27422,7 +27447,25 @@ components:
27422
27447
  description: Chains with provisioned signing keys
27423
27448
  agent_api_key:
27424
27449
  type: [string, "null"]
27425
- description: One-time agent API key (ocv_ prefix). Store securely — not retrievable later.
27450
+ description: |
27451
+ First agent's one-time API key (ocv_ prefix). Kept for
27452
+ compatibility; prefer `agent_api_keys`, which covers every
27453
+ agent the template created.
27454
+ agent_api_keys:
27455
+ type: array
27456
+ description: |
27457
+ Every agent created, with its one-time API key. Returned once:
27458
+ a platform app cannot rotate a key in the end user's org, so a
27459
+ multi-agent template used to strand agents 2..N with
27460
+ credentials nobody could recover.
27461
+ items:
27462
+ type: object
27463
+ properties:
27464
+ agent_id:
27465
+ type: string
27466
+ format: uuid
27467
+ api_key:
27468
+ type: string
27426
27469
  agent_evm_address:
27427
27470
  type: [string, "null"]
27428
27471
  description: EOA address when provision_eoa is true in the template
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@1claw/openapi-spec",
3
- "version": "0.61.57",
3
+ "version": "0.61.59",
4
4
  "description": "OpenAPI 3.1.0 specification for the 1Claw Vault API \u2014 generate clients in any language",
5
5
  "license": "MIT",
6
6
  "repository": {