@1claw/sdk 0.22.2 → 0.24.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1119,6 +1119,28 @@ export interface paths {
1119
1119
  patch?: never;
1120
1120
  trace?: never;
1121
1121
  };
1122
+ "/v1/agents/{agent_id}/signing-keys/{chain}/export": {
1123
+ parameters: {
1124
+ query?: never;
1125
+ header?: never;
1126
+ path?: never;
1127
+ cookie?: never;
1128
+ };
1129
+ get?: never;
1130
+ put?: never;
1131
+ /**
1132
+ * Export a signing key (private key included)
1133
+ * @description Export the private key for an agent's signing key. Requires re-authentication
1134
+ * via the X-Auth-Confirm header containing the user's account password.
1135
+ * Human users only — agents cannot export keys.
1136
+ */
1137
+ post: operations["exportSigningKey"];
1138
+ delete?: never;
1139
+ options?: never;
1140
+ head?: never;
1141
+ patch?: never;
1142
+ trace?: never;
1143
+ };
1122
1144
  "/v1/agents/{agent_id}/sign": {
1123
1145
  parameters: {
1124
1146
  query?: never;
@@ -1856,7 +1878,8 @@ export interface paths {
1856
1878
  /**
1857
1879
  * Export the private key for a treasury wallet
1858
1880
  * @description Returns the raw private key hex for the user's active wallet on
1859
- * the given chain. Audit-logged as `treasury_wallet.export`.
1881
+ * the given chain. Requires re-authentication via the `X-Auth-Confirm`
1882
+ * header (account password). Audit-logged as `treasury_wallet.export`.
1860
1883
  * Human users only.
1861
1884
  */
1862
1885
  post: operations["exportTreasuryWallet"];
@@ -2060,15 +2083,516 @@ export interface paths {
2060
2083
  patch?: never;
2061
2084
  trace?: never;
2062
2085
  };
2063
- "/v1/health": {
2086
+ "/v1/health": {
2087
+ parameters: {
2088
+ query?: never;
2089
+ header?: never;
2090
+ path?: never;
2091
+ cookie?: never;
2092
+ };
2093
+ /** Service health check */
2094
+ get: operations["healthCheck"];
2095
+ put?: never;
2096
+ post?: never;
2097
+ delete?: never;
2098
+ options?: never;
2099
+ head?: never;
2100
+ patch?: never;
2101
+ trace?: never;
2102
+ };
2103
+ "/v1/health/hsm": {
2104
+ parameters: {
2105
+ query?: never;
2106
+ header?: never;
2107
+ path?: never;
2108
+ cookie?: never;
2109
+ };
2110
+ /** HSM connectivity check */
2111
+ get: operations["healthHsm"];
2112
+ put?: never;
2113
+ post?: never;
2114
+ delete?: never;
2115
+ options?: never;
2116
+ head?: never;
2117
+ patch?: never;
2118
+ trace?: never;
2119
+ };
2120
+ "/v1/shroud/activity": {
2121
+ parameters: {
2122
+ query?: never;
2123
+ header?: never;
2124
+ path?: never;
2125
+ cookie?: never;
2126
+ };
2127
+ /**
2128
+ * List Shroud activity events
2129
+ * @description Returns recent Shroud proxy activity for the organization (LLM requests, inspections, policy actions).
2130
+ */
2131
+ get: {
2132
+ parameters: {
2133
+ query?: {
2134
+ /** @description Filter by agent ID */
2135
+ agent_id?: string;
2136
+ /** @description Filter by action (allowed, blocked, warned) */
2137
+ action?: string;
2138
+ /** @description Maximum events to return */
2139
+ limit?: number;
2140
+ /** @description Pagination offset */
2141
+ offset?: number;
2142
+ };
2143
+ header?: never;
2144
+ path?: never;
2145
+ cookie?: never;
2146
+ };
2147
+ requestBody?: never;
2148
+ responses: {
2149
+ /** @description Activity events */
2150
+ 200: {
2151
+ headers: {
2152
+ [name: string]: unknown;
2153
+ };
2154
+ content: {
2155
+ "application/json": {
2156
+ events?: components["schemas"]["ShroudActivityEvent"][];
2157
+ total?: number;
2158
+ };
2159
+ };
2160
+ };
2161
+ /** @description Unauthorized */
2162
+ 401: {
2163
+ headers: {
2164
+ [name: string]: unknown;
2165
+ };
2166
+ content?: never;
2167
+ };
2168
+ };
2169
+ };
2170
+ put?: never;
2171
+ /**
2172
+ * Ingest Shroud activity event (internal)
2173
+ * @description Called by the Shroud proxy to record activity events. Not intended for external use.
2174
+ */
2175
+ post: {
2176
+ parameters: {
2177
+ query?: never;
2178
+ header?: never;
2179
+ path?: never;
2180
+ cookie?: never;
2181
+ };
2182
+ requestBody: {
2183
+ content: {
2184
+ "application/json": components["schemas"]["IngestShroudActivityRequest"];
2185
+ };
2186
+ };
2187
+ responses: {
2188
+ /** @description Event recorded */
2189
+ 201: {
2190
+ headers: {
2191
+ [name: string]: unknown;
2192
+ };
2193
+ content?: never;
2194
+ };
2195
+ /** @description Unauthorized */
2196
+ 401: {
2197
+ headers: {
2198
+ [name: string]: unknown;
2199
+ };
2200
+ content?: never;
2201
+ };
2202
+ };
2203
+ };
2204
+ delete?: never;
2205
+ options?: never;
2206
+ head?: never;
2207
+ patch?: never;
2208
+ trace?: never;
2209
+ };
2210
+ "/v1/shroud/threat-summary": {
2211
+ parameters: {
2212
+ query?: never;
2213
+ header?: never;
2214
+ path?: never;
2215
+ cookie?: never;
2216
+ };
2217
+ /**
2218
+ * Shroud threat analytics summary
2219
+ * @description Aggregated threat metrics for the organization from `shroud_activity` (detectors, blocked counts, recent flagged requests). Query `period` selects the window; the previous window of equal length is used for request volume trend.
2220
+ */
2221
+ get: {
2222
+ parameters: {
2223
+ query?: {
2224
+ /** @description Rolling window ending now */
2225
+ period?: "1h" | "24h" | "7d" | "30d";
2226
+ };
2227
+ header?: never;
2228
+ path?: never;
2229
+ cookie?: never;
2230
+ };
2231
+ requestBody?: never;
2232
+ responses: {
2233
+ /** @description Threat summary */
2234
+ 200: {
2235
+ headers: {
2236
+ [name: string]: unknown;
2237
+ };
2238
+ content: {
2239
+ "application/json": components["schemas"]["ShroudThreatSummary"];
2240
+ };
2241
+ };
2242
+ /** @description Invalid period */
2243
+ 400: {
2244
+ headers: {
2245
+ [name: string]: unknown;
2246
+ };
2247
+ content?: never;
2248
+ };
2249
+ /** @description Unauthorized */
2250
+ 401: {
2251
+ headers: {
2252
+ [name: string]: unknown;
2253
+ };
2254
+ content?: never;
2255
+ };
2256
+ };
2257
+ };
2258
+ put?: never;
2259
+ post?: never;
2260
+ delete?: never;
2261
+ options?: never;
2262
+ head?: never;
2263
+ patch?: never;
2264
+ trace?: never;
2265
+ };
2266
+ "/v1/platform/apps": {
2267
+ parameters: {
2268
+ query?: never;
2269
+ header?: never;
2270
+ path?: never;
2271
+ cookie?: never;
2272
+ };
2273
+ /**
2274
+ * List platform apps
2275
+ * @description List all platform apps in the organization.
2276
+ */
2277
+ get: {
2278
+ parameters: {
2279
+ query?: never;
2280
+ header?: never;
2281
+ path?: never;
2282
+ cookie?: never;
2283
+ };
2284
+ requestBody?: never;
2285
+ responses: {
2286
+ /** @description List of platform apps */
2287
+ 200: {
2288
+ headers: {
2289
+ [name: string]: unknown;
2290
+ };
2291
+ content: {
2292
+ "application/json": components["schemas"]["PlatformAppResponse"][];
2293
+ };
2294
+ };
2295
+ };
2296
+ };
2297
+ put?: never;
2298
+ /**
2299
+ * Register a platform app
2300
+ * @description Register a new platform app for building on top of 1Claw. Returns an API key (plt_ prefix) that must be saved immediately.
2301
+ */
2302
+ post: {
2303
+ parameters: {
2304
+ query?: never;
2305
+ header?: never;
2306
+ path?: never;
2307
+ cookie?: never;
2308
+ };
2309
+ requestBody: {
2310
+ content: {
2311
+ "application/json": components["schemas"]["CreatePlatformAppRequest"];
2312
+ };
2313
+ };
2314
+ responses: {
2315
+ /** @description Platform app created */
2316
+ 201: {
2317
+ headers: {
2318
+ [name: string]: unknown;
2319
+ };
2320
+ content: {
2321
+ "application/json": components["schemas"]["PlatformAppCreatedResponse"];
2322
+ };
2323
+ };
2324
+ /** @description Invalid request */
2325
+ 400: {
2326
+ headers: {
2327
+ [name: string]: unknown;
2328
+ };
2329
+ content?: never;
2330
+ };
2331
+ /** @description Only human users can register platform apps */
2332
+ 403: {
2333
+ headers: {
2334
+ [name: string]: unknown;
2335
+ };
2336
+ content?: never;
2337
+ };
2338
+ };
2339
+ };
2340
+ delete?: never;
2341
+ options?: never;
2342
+ head?: never;
2343
+ patch?: never;
2344
+ trace?: never;
2345
+ };
2346
+ "/v1/platform/apps/{appId}": {
2347
+ parameters: {
2348
+ query?: never;
2349
+ header?: never;
2350
+ path?: never;
2351
+ cookie?: never;
2352
+ };
2353
+ /** Get platform app details */
2354
+ get: {
2355
+ parameters: {
2356
+ query?: never;
2357
+ header?: never;
2358
+ path: {
2359
+ appId: string;
2360
+ };
2361
+ cookie?: never;
2362
+ };
2363
+ requestBody?: never;
2364
+ responses: {
2365
+ /** @description Platform app details */
2366
+ 200: {
2367
+ headers: {
2368
+ [name: string]: unknown;
2369
+ };
2370
+ content: {
2371
+ "application/json": components["schemas"]["PlatformAppResponse"];
2372
+ };
2373
+ };
2374
+ /** @description Not found */
2375
+ 404: {
2376
+ headers: {
2377
+ [name: string]: unknown;
2378
+ };
2379
+ content?: never;
2380
+ };
2381
+ };
2382
+ };
2383
+ put?: never;
2384
+ post?: never;
2385
+ /** Delete platform app */
2386
+ delete: {
2387
+ parameters: {
2388
+ query?: never;
2389
+ header?: never;
2390
+ path: {
2391
+ appId: string;
2392
+ };
2393
+ cookie?: never;
2394
+ };
2395
+ requestBody?: never;
2396
+ responses: {
2397
+ /** @description Deleted */
2398
+ 204: {
2399
+ headers: {
2400
+ [name: string]: unknown;
2401
+ };
2402
+ content?: never;
2403
+ };
2404
+ /** @description Only human users can delete platform apps */
2405
+ 403: {
2406
+ headers: {
2407
+ [name: string]: unknown;
2408
+ };
2409
+ content?: never;
2410
+ };
2411
+ };
2412
+ };
2413
+ options?: never;
2414
+ head?: never;
2415
+ /** Update platform app */
2416
+ patch: {
2417
+ parameters: {
2418
+ query?: never;
2419
+ header?: never;
2420
+ path: {
2421
+ appId: string;
2422
+ };
2423
+ cookie?: never;
2424
+ };
2425
+ requestBody: {
2426
+ content: {
2427
+ "application/json": components["schemas"]["UpdatePlatformAppRequest"];
2428
+ };
2429
+ };
2430
+ responses: {
2431
+ /** @description Updated platform app */
2432
+ 200: {
2433
+ headers: {
2434
+ [name: string]: unknown;
2435
+ };
2436
+ content: {
2437
+ "application/json": components["schemas"]["PlatformAppResponse"];
2438
+ };
2439
+ };
2440
+ };
2441
+ };
2442
+ trace?: never;
2443
+ };
2444
+ "/v1/platform/apps/{appId}/templates": {
2445
+ parameters: {
2446
+ query?: never;
2447
+ header?: never;
2448
+ path?: never;
2449
+ cookie?: never;
2450
+ };
2451
+ /** List templates */
2452
+ get: {
2453
+ parameters: {
2454
+ query?: never;
2455
+ header?: never;
2456
+ path: {
2457
+ appId: string;
2458
+ };
2459
+ cookie?: never;
2460
+ };
2461
+ requestBody?: never;
2462
+ responses: {
2463
+ /** @description List of templates */
2464
+ 200: {
2465
+ headers: {
2466
+ [name: string]: unknown;
2467
+ };
2468
+ content: {
2469
+ "application/json": components["schemas"]["PlatformTemplateResponse"][];
2470
+ };
2471
+ };
2472
+ };
2473
+ };
2474
+ put?: never;
2475
+ /**
2476
+ * Create bootstrap template
2477
+ * @description Create a template that defines what vault, agents, and policies to bootstrap for each connected user.
2478
+ */
2479
+ post: {
2480
+ parameters: {
2481
+ query?: never;
2482
+ header?: never;
2483
+ path: {
2484
+ appId: string;
2485
+ };
2486
+ cookie?: never;
2487
+ };
2488
+ requestBody: {
2489
+ content: {
2490
+ "application/json": components["schemas"]["CreateTemplateRequest"];
2491
+ };
2492
+ };
2493
+ responses: {
2494
+ /** @description Template created */
2495
+ 201: {
2496
+ headers: {
2497
+ [name: string]: unknown;
2498
+ };
2499
+ content: {
2500
+ "application/json": components["schemas"]["PlatformTemplateResponse"];
2501
+ };
2502
+ };
2503
+ };
2504
+ };
2505
+ delete?: never;
2506
+ options?: never;
2507
+ head?: never;
2508
+ patch?: never;
2509
+ trace?: never;
2510
+ };
2511
+ "/v1/platform/users/upsert": {
2512
+ parameters: {
2513
+ query?: never;
2514
+ header?: never;
2515
+ path?: never;
2516
+ cookie?: never;
2517
+ };
2518
+ get?: never;
2519
+ put?: never;
2520
+ /**
2521
+ * Provision or look up a platform user
2522
+ * @description Upserts a user using either an OIDC subject_token (verified against the platform app's JWKS) or an email address. Returns the user handle and connection ID.
2523
+ */
2524
+ post: {
2525
+ parameters: {
2526
+ query?: never;
2527
+ header?: never;
2528
+ path?: never;
2529
+ cookie?: never;
2530
+ };
2531
+ requestBody: {
2532
+ content: {
2533
+ "application/json": components["schemas"]["UpsertPlatformUserRequest"];
2534
+ };
2535
+ };
2536
+ responses: {
2537
+ /** @description Existing user found */
2538
+ 200: {
2539
+ headers: {
2540
+ [name: string]: unknown;
2541
+ };
2542
+ content: {
2543
+ "application/json": components["schemas"]["PlatformUserResponse"];
2544
+ };
2545
+ };
2546
+ /** @description New user created */
2547
+ 201: {
2548
+ headers: {
2549
+ [name: string]: unknown;
2550
+ };
2551
+ content: {
2552
+ "application/json": components["schemas"]["PlatformUserResponse"];
2553
+ };
2554
+ };
2555
+ };
2556
+ };
2557
+ delete?: never;
2558
+ options?: never;
2559
+ head?: never;
2560
+ patch?: never;
2561
+ trace?: never;
2562
+ };
2563
+ "/v1/platform/apps/{appId}/users": {
2064
2564
  parameters: {
2065
2565
  query?: never;
2066
2566
  header?: never;
2067
2567
  path?: never;
2068
2568
  cookie?: never;
2069
2569
  };
2070
- /** Service health check */
2071
- get: operations["healthCheck"];
2570
+ /**
2571
+ * List connected users
2572
+ * @description List all users connected to this platform app.
2573
+ */
2574
+ get: {
2575
+ parameters: {
2576
+ query?: never;
2577
+ header?: never;
2578
+ path: {
2579
+ appId: string;
2580
+ };
2581
+ cookie?: never;
2582
+ };
2583
+ requestBody?: never;
2584
+ responses: {
2585
+ /** @description Connected users */
2586
+ 200: {
2587
+ headers: {
2588
+ [name: string]: unknown;
2589
+ };
2590
+ content: {
2591
+ "application/json": components["schemas"]["PlatformConnectedUserResponse"][];
2592
+ };
2593
+ };
2594
+ };
2595
+ };
2072
2596
  put?: never;
2073
2597
  post?: never;
2074
2598
  delete?: never;
@@ -2077,24 +2601,52 @@ export interface paths {
2077
2601
  patch?: never;
2078
2602
  trace?: never;
2079
2603
  };
2080
- "/v1/health/hsm": {
2604
+ "/v1/platform/connections/{connectionId}/bootstrap": {
2081
2605
  parameters: {
2082
2606
  query?: never;
2083
2607
  header?: never;
2084
2608
  path?: never;
2085
2609
  cookie?: never;
2086
2610
  };
2087
- /** HSM connectivity check */
2088
- get: operations["healthHsm"];
2611
+ get?: never;
2089
2612
  put?: never;
2090
- post?: never;
2613
+ /**
2614
+ * Bootstrap resources for a connected user
2615
+ * @description Executes a template to create vault, agent, and policies for the connected user. Returns a claim URL and token for the user to claim their resources.
2616
+ */
2617
+ post: {
2618
+ parameters: {
2619
+ query?: never;
2620
+ header?: never;
2621
+ path: {
2622
+ connectionId: string;
2623
+ };
2624
+ cookie?: never;
2625
+ };
2626
+ requestBody: {
2627
+ content: {
2628
+ "application/json": components["schemas"]["BootstrapRequest"];
2629
+ };
2630
+ };
2631
+ responses: {
2632
+ /** @description Resources bootstrapped */
2633
+ 201: {
2634
+ headers: {
2635
+ [name: string]: unknown;
2636
+ };
2637
+ content: {
2638
+ "application/json": components["schemas"]["BootstrapResponse"];
2639
+ };
2640
+ };
2641
+ };
2642
+ };
2091
2643
  delete?: never;
2092
2644
  options?: never;
2093
2645
  head?: never;
2094
2646
  patch?: never;
2095
2647
  trace?: never;
2096
2648
  };
2097
- "/v1/shroud/activity": {
2649
+ "/v1/platform/apps/{appId}/audit": {
2098
2650
  parameters: {
2099
2651
  query?: never;
2100
2652
  header?: never;
@@ -2102,129 +2654,119 @@ export interface paths {
2102
2654
  cookie?: never;
2103
2655
  };
2104
2656
  /**
2105
- * List Shroud activity events
2106
- * @description Returns recent Shroud proxy activity for the organization (LLM requests, inspections, policy actions).
2657
+ * Platform audit log
2658
+ * @description Returns audit events related to this platform app.
2107
2659
  */
2108
2660
  get: {
2109
2661
  parameters: {
2110
2662
  query?: {
2111
- /** @description Filter by agent ID */
2112
- agent_id?: string;
2113
- /** @description Filter by action (allowed, blocked, warned) */
2114
- action?: string;
2115
- /** @description Maximum events to return */
2116
2663
  limit?: number;
2117
- /** @description Pagination offset */
2118
2664
  offset?: number;
2119
2665
  };
2120
2666
  header?: never;
2121
- path?: never;
2667
+ path: {
2668
+ appId: string;
2669
+ };
2122
2670
  cookie?: never;
2123
2671
  };
2124
2672
  requestBody?: never;
2125
2673
  responses: {
2126
- /** @description Activity events */
2674
+ /** @description Audit events */
2127
2675
  200: {
2128
2676
  headers: {
2129
2677
  [name: string]: unknown;
2130
2678
  };
2131
2679
  content: {
2132
2680
  "application/json": {
2133
- events?: components["schemas"]["ShroudActivityEvent"][];
2134
- total?: number;
2681
+ events?: Record<string, never>[];
2135
2682
  };
2136
2683
  };
2137
2684
  };
2138
- /** @description Unauthorized */
2139
- 401: {
2140
- headers: {
2141
- [name: string]: unknown;
2142
- };
2143
- content?: never;
2144
- };
2145
2685
  };
2146
2686
  };
2147
2687
  put?: never;
2688
+ post?: never;
2689
+ delete?: never;
2690
+ options?: never;
2691
+ head?: never;
2692
+ patch?: never;
2693
+ trace?: never;
2694
+ };
2695
+ "/v1/platform/connected-apps": {
2696
+ parameters: {
2697
+ query?: never;
2698
+ header?: never;
2699
+ path?: never;
2700
+ cookie?: never;
2701
+ };
2148
2702
  /**
2149
- * Ingest Shroud activity event (internal)
2150
- * @description Called by the Shroud proxy to record activity events. Not intended for external use.
2703
+ * List connected apps (user side)
2704
+ * @description Returns platform apps connected to the calling user's account.
2151
2705
  */
2152
- post: {
2706
+ get: {
2153
2707
  parameters: {
2154
2708
  query?: never;
2155
2709
  header?: never;
2156
2710
  path?: never;
2157
2711
  cookie?: never;
2158
2712
  };
2159
- requestBody: {
2160
- content: {
2161
- "application/json": components["schemas"]["IngestShroudActivityRequest"];
2162
- };
2163
- };
2713
+ requestBody?: never;
2164
2714
  responses: {
2165
- /** @description Event recorded */
2166
- 201: {
2715
+ /** @description Connected apps */
2716
+ 200: {
2167
2717
  headers: {
2168
2718
  [name: string]: unknown;
2169
2719
  };
2170
- content?: never;
2171
- };
2172
- /** @description Unauthorized */
2173
- 401: {
2174
- headers: {
2175
- [name: string]: unknown;
2720
+ content: {
2721
+ "application/json": {
2722
+ connected_apps?: components["schemas"]["ConnectedAppResponse"][];
2723
+ };
2176
2724
  };
2177
- content?: never;
2178
2725
  };
2179
2726
  };
2180
2727
  };
2728
+ put?: never;
2729
+ post?: never;
2181
2730
  delete?: never;
2182
2731
  options?: never;
2183
2732
  head?: never;
2184
2733
  patch?: never;
2185
2734
  trace?: never;
2186
2735
  };
2187
- "/v1/shroud/threat-summary": {
2736
+ "/v1/platform/connected-apps/{connectionId}": {
2188
2737
  parameters: {
2189
2738
  query?: never;
2190
2739
  header?: never;
2191
2740
  path?: never;
2192
2741
  cookie?: never;
2193
2742
  };
2743
+ get?: never;
2744
+ put?: never;
2745
+ post?: never;
2194
2746
  /**
2195
- * Shroud threat analytics summary
2196
- * @description Aggregated threat metrics for the organization from `shroud_activity` (detectors, blocked counts, recent flagged requests). Query `period` selects the window; the previous window of equal length is used for request volume trend.
2747
+ * Disconnect a platform app
2748
+ * @description Disconnect the calling user from a platform app.
2197
2749
  */
2198
- get: {
2750
+ delete: {
2199
2751
  parameters: {
2200
- query?: {
2201
- /** @description Rolling window ending now */
2202
- period?: "1h" | "24h" | "7d" | "30d";
2203
- };
2752
+ query?: never;
2204
2753
  header?: never;
2205
- path?: never;
2754
+ path: {
2755
+ connectionId: string;
2756
+ };
2206
2757
  cookie?: never;
2207
2758
  };
2208
2759
  requestBody?: never;
2209
2760
  responses: {
2210
- /** @description Threat summary */
2211
- 200: {
2212
- headers: {
2213
- [name: string]: unknown;
2214
- };
2215
- content: {
2216
- "application/json": components["schemas"]["ShroudThreatSummary"];
2217
- };
2218
- };
2219
- /** @description Invalid period */
2220
- 400: {
2761
+ /** @description Disconnected */
2762
+ 204: {
2221
2763
  headers: {
2222
2764
  [name: string]: unknown;
2223
2765
  };
2224
2766
  content?: never;
2225
2767
  };
2226
- /** @description Unauthorized */
2227
- 401: {
2768
+ /** @description Connection not found */
2769
+ 404: {
2228
2770
  headers: {
2229
2771
  [name: string]: unknown;
2230
2772
  };
@@ -2232,9 +2774,6 @@ export interface paths {
2232
2774
  };
2233
2775
  };
2234
2776
  };
2235
- put?: never;
2236
- post?: never;
2237
- delete?: never;
2238
2777
  options?: never;
2239
2778
  head?: never;
2240
2779
  patch?: never;
@@ -3967,6 +4506,176 @@ export interface components {
3967
4506
  status?: "healthy" | "degraded";
3968
4507
  version?: string;
3969
4508
  };
4509
+ CreatePlatformAppRequest: {
4510
+ name: string;
4511
+ slug: string;
4512
+ description?: string;
4513
+ /** Format: uri */
4514
+ oidc_jwks_url?: string;
4515
+ /** Format: uri */
4516
+ oidc_issuer?: string;
4517
+ /** @description Expected audience claim for OIDC token validation */
4518
+ oidc_audience?: string;
4519
+ redirect_uris?: string[];
4520
+ /**
4521
+ * @default platform_pays
4522
+ * @enum {string}
4523
+ */
4524
+ billing_model: "platform_pays" | "user_pays" | "hybrid";
4525
+ /**
4526
+ * @default silent
4527
+ * @enum {string}
4528
+ */
4529
+ auth_mode: "silent" | "user_signin" | "configurable";
4530
+ max_connected_users?: number | null;
4531
+ };
4532
+ UpdatePlatformAppRequest: {
4533
+ name?: string;
4534
+ description?: string;
4535
+ logo_url?: string;
4536
+ oidc_jwks_url?: string;
4537
+ oidc_issuer?: string;
4538
+ /** @description Expected audience claim for OIDC token validation */
4539
+ oidc_audience?: string;
4540
+ redirect_uris?: string[];
4541
+ webhook_url?: string;
4542
+ /** @enum {string} */
4543
+ billing_model?: "platform_pays" | "user_pays" | "hybrid";
4544
+ /** @enum {string} */
4545
+ auth_mode?: "silent" | "user_signin" | "configurable";
4546
+ max_connected_users?: number | null;
4547
+ is_active?: boolean;
4548
+ };
4549
+ PlatformAppResponse: {
4550
+ /** Format: uuid */
4551
+ id?: string;
4552
+ name?: string;
4553
+ slug?: string;
4554
+ description?: string;
4555
+ logo_url?: string | null;
4556
+ api_key_prefix?: string;
4557
+ oidc_jwks_url?: string | null;
4558
+ oidc_issuer?: string | null;
4559
+ /** @description Expected audience claim for OIDC token validation */
4560
+ oidc_audience?: string | null;
4561
+ redirect_uris?: string[];
4562
+ webhook_url?: string | null;
4563
+ is_active?: boolean;
4564
+ billing_model?: string;
4565
+ auth_mode?: string;
4566
+ max_connected_users?: number | null;
4567
+ connected_users?: number;
4568
+ /** Format: date-time */
4569
+ created_at?: string;
4570
+ /** Format: date-time */
4571
+ updated_at?: string;
4572
+ };
4573
+ PlatformAppCreatedResponse: components["schemas"]["PlatformAppResponse"] & {
4574
+ /** @description The platform API key. Save immediately - it cannot be retrieved again. */
4575
+ api_key: string;
4576
+ };
4577
+ CreateTemplateRequest: {
4578
+ name: string;
4579
+ description?: string;
4580
+ /**
4581
+ * @description Template specification defining vault, agents, policies, and signing keys to bootstrap.
4582
+ * Top-level fields: `vault` (object with name, description), `agents` (array of agent specs
4583
+ * with name, description, shroud_enabled, intents, shroud_config), `policies` (array with
4584
+ * vault_ref, principal_ref, paths, permissions, conditions), and `signing_keys` (array of
4585
+ * `{ chain }` objects — supported chains: ethereum, bitcoin, solana, xrp, cardano, tron).
4586
+ * When `signing_keys` is present, HSM-backed signing keys are auto-provisioned for the
4587
+ * bootstrapped agent.
4588
+ */
4589
+ spec: Record<string, never>;
4590
+ };
4591
+ PlatformTemplateResponse: {
4592
+ /** Format: uuid */
4593
+ id?: string;
4594
+ /** Format: uuid */
4595
+ platform_app_id?: string;
4596
+ name?: string;
4597
+ description?: string;
4598
+ version?: number;
4599
+ spec?: Record<string, never>;
4600
+ is_active?: boolean;
4601
+ /** Format: date-time */
4602
+ created_at?: string;
4603
+ /** Format: date-time */
4604
+ updated_at?: string;
4605
+ };
4606
+ UpsertPlatformUserRequest: {
4607
+ /** @description OIDC JWT from the platform's IdP (verified against JWKS) */
4608
+ subject_token?: string;
4609
+ /** @default urn:ietf:params:oauth:token-type:jwt */
4610
+ subject_token_type: string;
4611
+ /**
4612
+ * Format: email
4613
+ * @description Fallback when subject_token is not provided
4614
+ */
4615
+ email?: string;
4616
+ display_name?: string;
4617
+ };
4618
+ PlatformUserResponse: {
4619
+ /** Format: uuid */
4620
+ user_handle?: string;
4621
+ is_new?: boolean;
4622
+ /** Format: uuid */
4623
+ connection_id?: string;
4624
+ email?: string;
4625
+ };
4626
+ PlatformConnectedUserResponse: {
4627
+ /** Format: uuid */
4628
+ connection_id?: string;
4629
+ /** Format: uuid */
4630
+ user_id?: string;
4631
+ external_subject?: string;
4632
+ status?: string;
4633
+ vault_ids?: string[];
4634
+ agent_ids?: string[];
4635
+ /** Format: date-time */
4636
+ created_at?: string;
4637
+ /** Format: date-time */
4638
+ claimed_at?: string | null;
4639
+ };
4640
+ BootstrapRequest: {
4641
+ /**
4642
+ * Format: uuid
4643
+ * @description Template to use. Falls back to the app's default template.
4644
+ */
4645
+ template_id?: string;
4646
+ /**
4647
+ * Format: uri
4648
+ * @description URL to redirect the user to after claiming resources.
4649
+ */
4650
+ return_to?: string;
4651
+ };
4652
+ BootstrapResponse: {
4653
+ /** Format: uri */
4654
+ claim_url?: string;
4655
+ claim_token?: string;
4656
+ /** @description Seconds until the claim token expires */
4657
+ expires_in?: number;
4658
+ /** Format: uuid */
4659
+ connection_id?: string;
4660
+ summary?: {
4661
+ /** Format: uuid */
4662
+ vault_id?: string | null;
4663
+ /** Format: uuid */
4664
+ agent_id?: string | null;
4665
+ policy_ids?: string[];
4666
+ };
4667
+ };
4668
+ ConnectedAppResponse: {
4669
+ /** Format: uuid */
4670
+ connection_id?: string;
4671
+ app_name?: string;
4672
+ app_slug?: string;
4673
+ status?: string;
4674
+ vault_ids?: string[];
4675
+ agent_ids?: string[];
4676
+ /** Format: date-time */
4677
+ created_at?: string;
4678
+ };
3970
4679
  };
3971
4680
  responses: {
3972
4681
  /** @description Invalid request */
@@ -5926,6 +6635,43 @@ export interface operations {
5926
6635
  404: components["responses"]["NotFound"];
5927
6636
  };
5928
6637
  };
6638
+ exportSigningKey: {
6639
+ parameters: {
6640
+ query?: never;
6641
+ header: {
6642
+ /** @description Account password for re-authentication */
6643
+ "X-Auth-Confirm": string;
6644
+ };
6645
+ path: {
6646
+ agent_id: components["parameters"]["AgentId"];
6647
+ chain: string;
6648
+ };
6649
+ cookie?: never;
6650
+ };
6651
+ requestBody?: never;
6652
+ responses: {
6653
+ /** @description Signing key exported successfully */
6654
+ 200: {
6655
+ headers: {
6656
+ [name: string]: unknown;
6657
+ };
6658
+ content: {
6659
+ "application/json": {
6660
+ chain: string;
6661
+ curve: string;
6662
+ public_key: string;
6663
+ address?: string;
6664
+ private_key: string;
6665
+ key_version: number;
6666
+ /** Format: uuid */
6667
+ agent_id: string;
6668
+ };
6669
+ };
6670
+ };
6671
+ 403: components["responses"]["Forbidden"];
6672
+ 404: components["responses"]["NotFound"];
6673
+ };
6674
+ };
5929
6675
  signIntent: {
5930
6676
  parameters: {
5931
6677
  query?: never;
@@ -7084,7 +7830,10 @@ export interface operations {
7084
7830
  exportTreasuryWallet: {
7085
7831
  parameters: {
7086
7832
  query?: never;
7087
- header?: never;
7833
+ header: {
7834
+ /** @description Account password for re-authentication */
7835
+ "X-Auth-Confirm": string;
7836
+ };
7088
7837
  path: {
7089
7838
  chain: string;
7090
7839
  };