@1claw/openapi-spec 0.9.0 → 0.11.0

package/README.md

@@ -40,7 +40,7 @@ openapi-generator generate \
 import spec from "@1claw/openapi-spec/openapi.json";
 ```
 
-## What's in the spec (v2.1.0)
+## What's in the spec (v0.10.0)
 
 - **Vaults** — CRUD, CMEK enable/disable, key rotation with job tracking
 - **Secrets** — CRUD, versioning, CMEK-encrypted flag

package/openapi.json

@@ -4277,6 +4277,14 @@
           "oidc_client_id": {
             "type": "string",
             "description": "OIDC client ID (required for oidc_client_credentials auth)"
+          },
+          "shroud_enabled": {
+            "type": "boolean",
+            "default": false,
+            "description": "Enable Shroud LLM Proxy for this agent"
+          },
+          "shroud_config": {
+            "$ref": "#/components/schemas/ShroudConfig"
           }
         }
       },
@@ -4330,6 +4338,13 @@
               "type": "string",
               "format": "uuid"
             }
+          },
+          "shroud_enabled": {
+            "type": "boolean",
+            "description": "Enable/disable Shroud LLM Proxy"
+          },
+          "shroud_config": {
+            "$ref": "#/components/schemas/ShroudConfig"
           }
         }
       },
@@ -4341,6 +4356,7 @@
           "auth_method",
           "is_active",
           "intents_api_enabled",
+          "shroud_enabled",
           "created_at"
         ],
         "properties": {
@@ -4423,6 +4439,13 @@
             "type": "string",
             "description": "P-256 ECDH public key (base64 SEC1 uncompressed point, auto-generated at creation)"
           },
+          "shroud_enabled": {
+            "type": "boolean",
+            "description": "Whether this agent routes LLM traffic through the Shroud TEE proxy"
+          },
+          "shroud_config": {
+            "$ref": "#/components/schemas/ShroudConfig"
+          },
           "created_at": {
             "type": "string",
             "format": "date-time"
@@ -4489,6 +4512,327 @@
           "ecdh_public_key": {
             "type": "string",
             "description": "P-256 ECDH public key (base64 SEC1 uncompressed point)"
+          },
+          "shroud_enabled": {
+            "type": "boolean",
+            "description": "Whether this agent routes LLM traffic through the Shroud TEE proxy"
+          },
+          "shroud_config": {
+            "$ref": "#/components/schemas/ShroudConfig"
+          }
+        }
+      },
+      "ShroudConfig": {
+        "type": "object",
+        "description": "Per-agent Shroud LLM Proxy configuration",
+        "properties": {
+          "pii_policy": {
+            "type": "string",
+            "enum": [
+              "block",
+              "redact",
+              "warn",
+              "allow"
+            ],
+            "default": "redact",
+            "description": "How PII detections are handled"
+          },
+          "injection_threshold": {
+            "type": "number",
+            "minimum": 0,
+            "maximum": 1,
+            "default": 0.7,
+            "description": "Prompt injection score threshold (0.0–1.0). Requests above are blocked"
+          },
+          "context_injection_threshold": {
+            "type": "number",
+            "minimum": 0,
+            "maximum": 1,
+            "default": 0.7,
+            "description": "Context injection score threshold (0.0–1.0)"
+          },
+          "allowed_providers": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "LLM providers this agent may use (empty = all)"
+          },
+          "allowed_models": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Specific models allowed (empty = all)"
+          },
+          "denied_models": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Models explicitly blocked"
+          },
+          "max_tokens_per_request": {
+            "type": "integer",
+            "description": "Maximum input tokens per request"
+          },
+          "max_requests_per_minute": {
+            "type": "integer",
+            "description": "Rate limit (requests per minute)"
+          },
+          "max_requests_per_day": {
+            "type": "integer",
+            "description": "Rate limit (requests per day)"
+          },
+          "daily_budget_usd": {
+            "type": "number",
+            "description": "Daily LLM spend cap in USD (0 = unlimited)"
+          },
+          "enable_secret_redaction": {
+            "type": "boolean",
+            "default": true,
+            "description": "Whether vault secrets are redacted from prompts/responses"
+          },
+          "enable_response_filtering": {
+            "type": "boolean",
+            "default": true,
+            "description": "Whether response credential scanning is active"
+          },
+          "unicode_normalization": {
+            "$ref": "#/components/schemas/UnicodeNormalizationConfig"
+          },
+          "command_injection_detection": {
+            "$ref": "#/components/schemas/CommandInjectionConfig"
+          },
+          "social_engineering_detection": {
+            "$ref": "#/components/schemas/SocialEngineeringConfig"
+          },
+          "encoding_detection": {
+            "$ref": "#/components/schemas/EncodingDetectionConfig"
+          },
+          "network_detection": {
+            "$ref": "#/components/schemas/NetworkDetectionConfig"
+          },
+          "filesystem_detection": {
+            "$ref": "#/components/schemas/FilesystemDetectionConfig"
+          },
+          "sanitization_mode": {
+            "type": "string",
+            "enum": [
+              "block",
+              "surgical",
+              "log_only"
+            ],
+            "default": "block",
+            "description": "Global behavior when threats are detected (block=reject, surgical=remove only malicious parts, log_only=audit without action)"
+          },
+          "threat_logging": {
+            "type": "boolean",
+            "default": true,
+            "description": "Whether to log all detected threats to audit (even when action is allow/warn)"
+          }
+        }
+      },
+      "UnicodeNormalizationConfig": {
+        "type": "object",
+        "description": "Unicode normalization and homoglyph detection settings",
+        "properties": {
+          "enabled": {
+            "type": "boolean",
+            "default": true,
+            "description": "Enable Unicode normalization"
+          },
+          "strip_zero_width": {
+            "type": "boolean",
+            "default": true,
+            "description": "Remove zero-width and invisible Unicode characters"
+          },
+          "normalize_homoglyphs": {
+            "type": "boolean",
+            "default": true,
+            "description": "Replace look-alike characters (e.g., Cyrillic а → Latin a)"
+          },
+          "normalization_form": {
+            "type": "string",
+            "enum": [
+              "NFC",
+              "NFKC",
+              "NFD",
+              "NFKD"
+            ],
+            "default": "NFKC",
+            "description": "Unicode normalization form to apply"
+          }
+        }
+      },
+      "CommandInjectionConfig": {
+        "type": "object",
+        "description": "Shell/command injection detection settings",
+        "properties": {
+          "enabled": {
+            "type": "boolean",
+            "default": true,
+            "description": "Enable command injection detection"
+          },
+          "action": {
+            "type": "string",
+            "enum": [
+              "block",
+              "sanitize",
+              "warn",
+              "log"
+            ],
+            "default": "block",
+            "description": "Action when command injection is detected"
+          },
+          "patterns": {
+            "type": "string",
+            "enum": [
+              "default",
+              "strict",
+              "custom"
+            ],
+            "default": "default",
+            "description": "Pattern strictness level"
+          },
+          "custom_patterns": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Custom regex patterns for detection (only used when patterns=custom)"
+          }
+        }
+      },
+      "SocialEngineeringConfig": {
+        "type": "object",
+        "description": "Social engineering and manipulation detection settings",
+        "properties": {
+          "enabled": {
+            "type": "boolean",
+            "default": true,
+            "description": "Enable social engineering detection"
+          },
+          "action": {
+            "type": "string",
+            "enum": [
+              "block",
+              "warn",
+              "log"
+            ],
+            "default": "warn",
+            "description": "Action when manipulation attempts are detected"
+          },
+          "sensitivity": {
+            "type": "string",
+            "enum": [
+              "low",
+              "medium",
+              "high"
+            ],
+            "default": "medium",
+            "description": "Detection sensitivity level"
+          }
+        }
+      },
+      "EncodingDetectionConfig": {
+        "type": "object",
+        "description": "Encoding/obfuscation detection settings",
+        "properties": {
+          "enabled": {
+            "type": "boolean",
+            "default": true,
+            "description": "Enable encoding detection"
+          },
+          "action": {
+            "type": "string",
+            "enum": [
+              "block",
+              "decode",
+              "warn",
+              "log"
+            ],
+            "default": "warn",
+            "description": "Action when obfuscated content is detected"
+          },
+          "detect_base64": {
+            "type": "boolean",
+            "default": true,
+            "description": "Detect Base64-encoded content"
+          },
+          "detect_hex": {
+            "type": "boolean",
+            "default": true,
+            "description": "Detect hex-encoded content (\\\\x41, 0x41)"
+          },
+          "detect_unicode_escape": {
+            "type": "boolean",
+            "default": true,
+            "description": "Detect Unicode escape sequences (\\\\u0041)"
+          }
+        }
+      },
+      "NetworkDetectionConfig": {
+        "type": "object",
+        "description": "Suspicious URL/domain detection settings",
+        "properties": {
+          "enabled": {
+            "type": "boolean",
+            "default": true,
+            "description": "Enable network/URL detection"
+          },
+          "action": {
+            "type": "string",
+            "enum": [
+              "block",
+              "warn",
+              "log"
+            ],
+            "default": "warn",
+            "description": "Action when suspicious URLs are detected"
+          },
+          "blocked_domains": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Domains to always block (e.g., pastebin.com, ngrok.io)"
+          },
+          "allowed_domains": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Domains to always allow (allowlist mode when non-empty)"
+          }
+        }
+      },
+      "FilesystemDetectionConfig": {
+        "type": "object",
+        "description": "Filesystem path detection settings",
+        "properties": {
+          "enabled": {
+            "type": "boolean",
+            "default": false,
+            "description": "Enable filesystem path detection (disabled by default as it can be noisy)"
+          },
+          "action": {
+            "type": "string",
+            "enum": [
+              "block",
+              "sanitize",
+              "warn",
+              "log"
+            ],
+            "default": "log",
+            "description": "Action when filesystem paths are detected"
+          },
+          "blocked_paths": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Path patterns to block (e.g., /etc/passwd, ~/.ssh)"
           }
         }
       },