@1claw/sdk 0.22.2 → 0.24.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -1
- package/dist/core/client.d.ts +3 -0
- package/dist/core/client.d.ts.map +1 -1
- package/dist/core/client.js +2 -0
- package/dist/core/client.js.map +1 -1
- package/dist/generated/api-types.d.ts +820 -71
- package/dist/generated/api-types.d.ts.map +1 -1
- package/dist/resources/platform.d.ts +35 -0
- package/dist/resources/platform.d.ts.map +1 -0
- package/dist/resources/platform.js +58 -0
- package/dist/resources/platform.js.map +1 -0
- package/dist/resources/signing-keys.d.ts +3 -1
- package/dist/resources/signing-keys.d.ts.map +1 -1
- package/dist/resources/signing-keys.js +4 -0
- package/dist/resources/signing-keys.js.map +1 -1
- package/dist/resources/treasury-wallets.d.ts +6 -1
- package/dist/resources/treasury-wallets.d.ts.map +1 -1
- package/dist/resources/treasury-wallets.js +7 -2
- package/dist/resources/treasury-wallets.js.map +1 -1
- package/dist/types.d.ts +132 -0
- package/dist/types.d.ts.map +1 -1
- package/package.json +1 -1
|
@@ -1119,6 +1119,28 @@ export interface paths {
|
|
|
1119
1119
|
patch?: never;
|
|
1120
1120
|
trace?: never;
|
|
1121
1121
|
};
|
|
1122
|
+
"/v1/agents/{agent_id}/signing-keys/{chain}/export": {
|
|
1123
|
+
parameters: {
|
|
1124
|
+
query?: never;
|
|
1125
|
+
header?: never;
|
|
1126
|
+
path?: never;
|
|
1127
|
+
cookie?: never;
|
|
1128
|
+
};
|
|
1129
|
+
get?: never;
|
|
1130
|
+
put?: never;
|
|
1131
|
+
/**
|
|
1132
|
+
* Export a signing key (private key included)
|
|
1133
|
+
* @description Export the private key for an agent's signing key. Requires re-authentication
|
|
1134
|
+
* via the X-Auth-Confirm header containing the user's account password.
|
|
1135
|
+
* Human users only — agents cannot export keys.
|
|
1136
|
+
*/
|
|
1137
|
+
post: operations["exportSigningKey"];
|
|
1138
|
+
delete?: never;
|
|
1139
|
+
options?: never;
|
|
1140
|
+
head?: never;
|
|
1141
|
+
patch?: never;
|
|
1142
|
+
trace?: never;
|
|
1143
|
+
};
|
|
1122
1144
|
"/v1/agents/{agent_id}/sign": {
|
|
1123
1145
|
parameters: {
|
|
1124
1146
|
query?: never;
|
|
@@ -1856,7 +1878,8 @@ export interface paths {
|
|
|
1856
1878
|
/**
|
|
1857
1879
|
* Export the private key for a treasury wallet
|
|
1858
1880
|
* @description Returns the raw private key hex for the user's active wallet on
|
|
1859
|
-
* the given chain.
|
|
1881
|
+
* the given chain. Requires re-authentication via the `X-Auth-Confirm`
|
|
1882
|
+
* header (account password). Audit-logged as `treasury_wallet.export`.
|
|
1860
1883
|
* Human users only.
|
|
1861
1884
|
*/
|
|
1862
1885
|
post: operations["exportTreasuryWallet"];
|
|
@@ -2060,15 +2083,516 @@ export interface paths {
|
|
|
2060
2083
|
patch?: never;
|
|
2061
2084
|
trace?: never;
|
|
2062
2085
|
};
|
|
2063
|
-
"/v1/health": {
|
|
2086
|
+
"/v1/health": {
|
|
2087
|
+
parameters: {
|
|
2088
|
+
query?: never;
|
|
2089
|
+
header?: never;
|
|
2090
|
+
path?: never;
|
|
2091
|
+
cookie?: never;
|
|
2092
|
+
};
|
|
2093
|
+
/** Service health check */
|
|
2094
|
+
get: operations["healthCheck"];
|
|
2095
|
+
put?: never;
|
|
2096
|
+
post?: never;
|
|
2097
|
+
delete?: never;
|
|
2098
|
+
options?: never;
|
|
2099
|
+
head?: never;
|
|
2100
|
+
patch?: never;
|
|
2101
|
+
trace?: never;
|
|
2102
|
+
};
|
|
2103
|
+
"/v1/health/hsm": {
|
|
2104
|
+
parameters: {
|
|
2105
|
+
query?: never;
|
|
2106
|
+
header?: never;
|
|
2107
|
+
path?: never;
|
|
2108
|
+
cookie?: never;
|
|
2109
|
+
};
|
|
2110
|
+
/** HSM connectivity check */
|
|
2111
|
+
get: operations["healthHsm"];
|
|
2112
|
+
put?: never;
|
|
2113
|
+
post?: never;
|
|
2114
|
+
delete?: never;
|
|
2115
|
+
options?: never;
|
|
2116
|
+
head?: never;
|
|
2117
|
+
patch?: never;
|
|
2118
|
+
trace?: never;
|
|
2119
|
+
};
|
|
2120
|
+
"/v1/shroud/activity": {
|
|
2121
|
+
parameters: {
|
|
2122
|
+
query?: never;
|
|
2123
|
+
header?: never;
|
|
2124
|
+
path?: never;
|
|
2125
|
+
cookie?: never;
|
|
2126
|
+
};
|
|
2127
|
+
/**
|
|
2128
|
+
* List Shroud activity events
|
|
2129
|
+
* @description Returns recent Shroud proxy activity for the organization (LLM requests, inspections, policy actions).
|
|
2130
|
+
*/
|
|
2131
|
+
get: {
|
|
2132
|
+
parameters: {
|
|
2133
|
+
query?: {
|
|
2134
|
+
/** @description Filter by agent ID */
|
|
2135
|
+
agent_id?: string;
|
|
2136
|
+
/** @description Filter by action (allowed, blocked, warned) */
|
|
2137
|
+
action?: string;
|
|
2138
|
+
/** @description Maximum events to return */
|
|
2139
|
+
limit?: number;
|
|
2140
|
+
/** @description Pagination offset */
|
|
2141
|
+
offset?: number;
|
|
2142
|
+
};
|
|
2143
|
+
header?: never;
|
|
2144
|
+
path?: never;
|
|
2145
|
+
cookie?: never;
|
|
2146
|
+
};
|
|
2147
|
+
requestBody?: never;
|
|
2148
|
+
responses: {
|
|
2149
|
+
/** @description Activity events */
|
|
2150
|
+
200: {
|
|
2151
|
+
headers: {
|
|
2152
|
+
[name: string]: unknown;
|
|
2153
|
+
};
|
|
2154
|
+
content: {
|
|
2155
|
+
"application/json": {
|
|
2156
|
+
events?: components["schemas"]["ShroudActivityEvent"][];
|
|
2157
|
+
total?: number;
|
|
2158
|
+
};
|
|
2159
|
+
};
|
|
2160
|
+
};
|
|
2161
|
+
/** @description Unauthorized */
|
|
2162
|
+
401: {
|
|
2163
|
+
headers: {
|
|
2164
|
+
[name: string]: unknown;
|
|
2165
|
+
};
|
|
2166
|
+
content?: never;
|
|
2167
|
+
};
|
|
2168
|
+
};
|
|
2169
|
+
};
|
|
2170
|
+
put?: never;
|
|
2171
|
+
/**
|
|
2172
|
+
* Ingest Shroud activity event (internal)
|
|
2173
|
+
* @description Called by the Shroud proxy to record activity events. Not intended for external use.
|
|
2174
|
+
*/
|
|
2175
|
+
post: {
|
|
2176
|
+
parameters: {
|
|
2177
|
+
query?: never;
|
|
2178
|
+
header?: never;
|
|
2179
|
+
path?: never;
|
|
2180
|
+
cookie?: never;
|
|
2181
|
+
};
|
|
2182
|
+
requestBody: {
|
|
2183
|
+
content: {
|
|
2184
|
+
"application/json": components["schemas"]["IngestShroudActivityRequest"];
|
|
2185
|
+
};
|
|
2186
|
+
};
|
|
2187
|
+
responses: {
|
|
2188
|
+
/** @description Event recorded */
|
|
2189
|
+
201: {
|
|
2190
|
+
headers: {
|
|
2191
|
+
[name: string]: unknown;
|
|
2192
|
+
};
|
|
2193
|
+
content?: never;
|
|
2194
|
+
};
|
|
2195
|
+
/** @description Unauthorized */
|
|
2196
|
+
401: {
|
|
2197
|
+
headers: {
|
|
2198
|
+
[name: string]: unknown;
|
|
2199
|
+
};
|
|
2200
|
+
content?: never;
|
|
2201
|
+
};
|
|
2202
|
+
};
|
|
2203
|
+
};
|
|
2204
|
+
delete?: never;
|
|
2205
|
+
options?: never;
|
|
2206
|
+
head?: never;
|
|
2207
|
+
patch?: never;
|
|
2208
|
+
trace?: never;
|
|
2209
|
+
};
|
|
2210
|
+
"/v1/shroud/threat-summary": {
|
|
2211
|
+
parameters: {
|
|
2212
|
+
query?: never;
|
|
2213
|
+
header?: never;
|
|
2214
|
+
path?: never;
|
|
2215
|
+
cookie?: never;
|
|
2216
|
+
};
|
|
2217
|
+
/**
|
|
2218
|
+
* Shroud threat analytics summary
|
|
2219
|
+
* @description Aggregated threat metrics for the organization from `shroud_activity` (detectors, blocked counts, recent flagged requests). Query `period` selects the window; the previous window of equal length is used for request volume trend.
|
|
2220
|
+
*/
|
|
2221
|
+
get: {
|
|
2222
|
+
parameters: {
|
|
2223
|
+
query?: {
|
|
2224
|
+
/** @description Rolling window ending now */
|
|
2225
|
+
period?: "1h" | "24h" | "7d" | "30d";
|
|
2226
|
+
};
|
|
2227
|
+
header?: never;
|
|
2228
|
+
path?: never;
|
|
2229
|
+
cookie?: never;
|
|
2230
|
+
};
|
|
2231
|
+
requestBody?: never;
|
|
2232
|
+
responses: {
|
|
2233
|
+
/** @description Threat summary */
|
|
2234
|
+
200: {
|
|
2235
|
+
headers: {
|
|
2236
|
+
[name: string]: unknown;
|
|
2237
|
+
};
|
|
2238
|
+
content: {
|
|
2239
|
+
"application/json": components["schemas"]["ShroudThreatSummary"];
|
|
2240
|
+
};
|
|
2241
|
+
};
|
|
2242
|
+
/** @description Invalid period */
|
|
2243
|
+
400: {
|
|
2244
|
+
headers: {
|
|
2245
|
+
[name: string]: unknown;
|
|
2246
|
+
};
|
|
2247
|
+
content?: never;
|
|
2248
|
+
};
|
|
2249
|
+
/** @description Unauthorized */
|
|
2250
|
+
401: {
|
|
2251
|
+
headers: {
|
|
2252
|
+
[name: string]: unknown;
|
|
2253
|
+
};
|
|
2254
|
+
content?: never;
|
|
2255
|
+
};
|
|
2256
|
+
};
|
|
2257
|
+
};
|
|
2258
|
+
put?: never;
|
|
2259
|
+
post?: never;
|
|
2260
|
+
delete?: never;
|
|
2261
|
+
options?: never;
|
|
2262
|
+
head?: never;
|
|
2263
|
+
patch?: never;
|
|
2264
|
+
trace?: never;
|
|
2265
|
+
};
|
|
2266
|
+
"/v1/platform/apps": {
|
|
2267
|
+
parameters: {
|
|
2268
|
+
query?: never;
|
|
2269
|
+
header?: never;
|
|
2270
|
+
path?: never;
|
|
2271
|
+
cookie?: never;
|
|
2272
|
+
};
|
|
2273
|
+
/**
|
|
2274
|
+
* List platform apps
|
|
2275
|
+
* @description List all platform apps in the organization.
|
|
2276
|
+
*/
|
|
2277
|
+
get: {
|
|
2278
|
+
parameters: {
|
|
2279
|
+
query?: never;
|
|
2280
|
+
header?: never;
|
|
2281
|
+
path?: never;
|
|
2282
|
+
cookie?: never;
|
|
2283
|
+
};
|
|
2284
|
+
requestBody?: never;
|
|
2285
|
+
responses: {
|
|
2286
|
+
/** @description List of platform apps */
|
|
2287
|
+
200: {
|
|
2288
|
+
headers: {
|
|
2289
|
+
[name: string]: unknown;
|
|
2290
|
+
};
|
|
2291
|
+
content: {
|
|
2292
|
+
"application/json": components["schemas"]["PlatformAppResponse"][];
|
|
2293
|
+
};
|
|
2294
|
+
};
|
|
2295
|
+
};
|
|
2296
|
+
};
|
|
2297
|
+
put?: never;
|
|
2298
|
+
/**
|
|
2299
|
+
* Register a platform app
|
|
2300
|
+
* @description Register a new platform app for building on top of 1Claw. Returns an API key (plt_ prefix) that must be saved immediately.
|
|
2301
|
+
*/
|
|
2302
|
+
post: {
|
|
2303
|
+
parameters: {
|
|
2304
|
+
query?: never;
|
|
2305
|
+
header?: never;
|
|
2306
|
+
path?: never;
|
|
2307
|
+
cookie?: never;
|
|
2308
|
+
};
|
|
2309
|
+
requestBody: {
|
|
2310
|
+
content: {
|
|
2311
|
+
"application/json": components["schemas"]["CreatePlatformAppRequest"];
|
|
2312
|
+
};
|
|
2313
|
+
};
|
|
2314
|
+
responses: {
|
|
2315
|
+
/** @description Platform app created */
|
|
2316
|
+
201: {
|
|
2317
|
+
headers: {
|
|
2318
|
+
[name: string]: unknown;
|
|
2319
|
+
};
|
|
2320
|
+
content: {
|
|
2321
|
+
"application/json": components["schemas"]["PlatformAppCreatedResponse"];
|
|
2322
|
+
};
|
|
2323
|
+
};
|
|
2324
|
+
/** @description Invalid request */
|
|
2325
|
+
400: {
|
|
2326
|
+
headers: {
|
|
2327
|
+
[name: string]: unknown;
|
|
2328
|
+
};
|
|
2329
|
+
content?: never;
|
|
2330
|
+
};
|
|
2331
|
+
/** @description Only human users can register platform apps */
|
|
2332
|
+
403: {
|
|
2333
|
+
headers: {
|
|
2334
|
+
[name: string]: unknown;
|
|
2335
|
+
};
|
|
2336
|
+
content?: never;
|
|
2337
|
+
};
|
|
2338
|
+
};
|
|
2339
|
+
};
|
|
2340
|
+
delete?: never;
|
|
2341
|
+
options?: never;
|
|
2342
|
+
head?: never;
|
|
2343
|
+
patch?: never;
|
|
2344
|
+
trace?: never;
|
|
2345
|
+
};
|
|
2346
|
+
"/v1/platform/apps/{appId}": {
|
|
2347
|
+
parameters: {
|
|
2348
|
+
query?: never;
|
|
2349
|
+
header?: never;
|
|
2350
|
+
path?: never;
|
|
2351
|
+
cookie?: never;
|
|
2352
|
+
};
|
|
2353
|
+
/** Get platform app details */
|
|
2354
|
+
get: {
|
|
2355
|
+
parameters: {
|
|
2356
|
+
query?: never;
|
|
2357
|
+
header?: never;
|
|
2358
|
+
path: {
|
|
2359
|
+
appId: string;
|
|
2360
|
+
};
|
|
2361
|
+
cookie?: never;
|
|
2362
|
+
};
|
|
2363
|
+
requestBody?: never;
|
|
2364
|
+
responses: {
|
|
2365
|
+
/** @description Platform app details */
|
|
2366
|
+
200: {
|
|
2367
|
+
headers: {
|
|
2368
|
+
[name: string]: unknown;
|
|
2369
|
+
};
|
|
2370
|
+
content: {
|
|
2371
|
+
"application/json": components["schemas"]["PlatformAppResponse"];
|
|
2372
|
+
};
|
|
2373
|
+
};
|
|
2374
|
+
/** @description Not found */
|
|
2375
|
+
404: {
|
|
2376
|
+
headers: {
|
|
2377
|
+
[name: string]: unknown;
|
|
2378
|
+
};
|
|
2379
|
+
content?: never;
|
|
2380
|
+
};
|
|
2381
|
+
};
|
|
2382
|
+
};
|
|
2383
|
+
put?: never;
|
|
2384
|
+
post?: never;
|
|
2385
|
+
/** Delete platform app */
|
|
2386
|
+
delete: {
|
|
2387
|
+
parameters: {
|
|
2388
|
+
query?: never;
|
|
2389
|
+
header?: never;
|
|
2390
|
+
path: {
|
|
2391
|
+
appId: string;
|
|
2392
|
+
};
|
|
2393
|
+
cookie?: never;
|
|
2394
|
+
};
|
|
2395
|
+
requestBody?: never;
|
|
2396
|
+
responses: {
|
|
2397
|
+
/** @description Deleted */
|
|
2398
|
+
204: {
|
|
2399
|
+
headers: {
|
|
2400
|
+
[name: string]: unknown;
|
|
2401
|
+
};
|
|
2402
|
+
content?: never;
|
|
2403
|
+
};
|
|
2404
|
+
/** @description Only human users can delete platform apps */
|
|
2405
|
+
403: {
|
|
2406
|
+
headers: {
|
|
2407
|
+
[name: string]: unknown;
|
|
2408
|
+
};
|
|
2409
|
+
content?: never;
|
|
2410
|
+
};
|
|
2411
|
+
};
|
|
2412
|
+
};
|
|
2413
|
+
options?: never;
|
|
2414
|
+
head?: never;
|
|
2415
|
+
/** Update platform app */
|
|
2416
|
+
patch: {
|
|
2417
|
+
parameters: {
|
|
2418
|
+
query?: never;
|
|
2419
|
+
header?: never;
|
|
2420
|
+
path: {
|
|
2421
|
+
appId: string;
|
|
2422
|
+
};
|
|
2423
|
+
cookie?: never;
|
|
2424
|
+
};
|
|
2425
|
+
requestBody: {
|
|
2426
|
+
content: {
|
|
2427
|
+
"application/json": components["schemas"]["UpdatePlatformAppRequest"];
|
|
2428
|
+
};
|
|
2429
|
+
};
|
|
2430
|
+
responses: {
|
|
2431
|
+
/** @description Updated platform app */
|
|
2432
|
+
200: {
|
|
2433
|
+
headers: {
|
|
2434
|
+
[name: string]: unknown;
|
|
2435
|
+
};
|
|
2436
|
+
content: {
|
|
2437
|
+
"application/json": components["schemas"]["PlatformAppResponse"];
|
|
2438
|
+
};
|
|
2439
|
+
};
|
|
2440
|
+
};
|
|
2441
|
+
};
|
|
2442
|
+
trace?: never;
|
|
2443
|
+
};
|
|
2444
|
+
"/v1/platform/apps/{appId}/templates": {
|
|
2445
|
+
parameters: {
|
|
2446
|
+
query?: never;
|
|
2447
|
+
header?: never;
|
|
2448
|
+
path?: never;
|
|
2449
|
+
cookie?: never;
|
|
2450
|
+
};
|
|
2451
|
+
/** List templates */
|
|
2452
|
+
get: {
|
|
2453
|
+
parameters: {
|
|
2454
|
+
query?: never;
|
|
2455
|
+
header?: never;
|
|
2456
|
+
path: {
|
|
2457
|
+
appId: string;
|
|
2458
|
+
};
|
|
2459
|
+
cookie?: never;
|
|
2460
|
+
};
|
|
2461
|
+
requestBody?: never;
|
|
2462
|
+
responses: {
|
|
2463
|
+
/** @description List of templates */
|
|
2464
|
+
200: {
|
|
2465
|
+
headers: {
|
|
2466
|
+
[name: string]: unknown;
|
|
2467
|
+
};
|
|
2468
|
+
content: {
|
|
2469
|
+
"application/json": components["schemas"]["PlatformTemplateResponse"][];
|
|
2470
|
+
};
|
|
2471
|
+
};
|
|
2472
|
+
};
|
|
2473
|
+
};
|
|
2474
|
+
put?: never;
|
|
2475
|
+
/**
|
|
2476
|
+
* Create bootstrap template
|
|
2477
|
+
* @description Create a template that defines what vault, agents, and policies to bootstrap for each connected user.
|
|
2478
|
+
*/
|
|
2479
|
+
post: {
|
|
2480
|
+
parameters: {
|
|
2481
|
+
query?: never;
|
|
2482
|
+
header?: never;
|
|
2483
|
+
path: {
|
|
2484
|
+
appId: string;
|
|
2485
|
+
};
|
|
2486
|
+
cookie?: never;
|
|
2487
|
+
};
|
|
2488
|
+
requestBody: {
|
|
2489
|
+
content: {
|
|
2490
|
+
"application/json": components["schemas"]["CreateTemplateRequest"];
|
|
2491
|
+
};
|
|
2492
|
+
};
|
|
2493
|
+
responses: {
|
|
2494
|
+
/** @description Template created */
|
|
2495
|
+
201: {
|
|
2496
|
+
headers: {
|
|
2497
|
+
[name: string]: unknown;
|
|
2498
|
+
};
|
|
2499
|
+
content: {
|
|
2500
|
+
"application/json": components["schemas"]["PlatformTemplateResponse"];
|
|
2501
|
+
};
|
|
2502
|
+
};
|
|
2503
|
+
};
|
|
2504
|
+
};
|
|
2505
|
+
delete?: never;
|
|
2506
|
+
options?: never;
|
|
2507
|
+
head?: never;
|
|
2508
|
+
patch?: never;
|
|
2509
|
+
trace?: never;
|
|
2510
|
+
};
|
|
2511
|
+
"/v1/platform/users/upsert": {
|
|
2512
|
+
parameters: {
|
|
2513
|
+
query?: never;
|
|
2514
|
+
header?: never;
|
|
2515
|
+
path?: never;
|
|
2516
|
+
cookie?: never;
|
|
2517
|
+
};
|
|
2518
|
+
get?: never;
|
|
2519
|
+
put?: never;
|
|
2520
|
+
/**
|
|
2521
|
+
* Provision or look up a platform user
|
|
2522
|
+
* @description Upserts a user using either an OIDC subject_token (verified against the platform app's JWKS) or an email address. Returns the user handle and connection ID.
|
|
2523
|
+
*/
|
|
2524
|
+
post: {
|
|
2525
|
+
parameters: {
|
|
2526
|
+
query?: never;
|
|
2527
|
+
header?: never;
|
|
2528
|
+
path?: never;
|
|
2529
|
+
cookie?: never;
|
|
2530
|
+
};
|
|
2531
|
+
requestBody: {
|
|
2532
|
+
content: {
|
|
2533
|
+
"application/json": components["schemas"]["UpsertPlatformUserRequest"];
|
|
2534
|
+
};
|
|
2535
|
+
};
|
|
2536
|
+
responses: {
|
|
2537
|
+
/** @description Existing user found */
|
|
2538
|
+
200: {
|
|
2539
|
+
headers: {
|
|
2540
|
+
[name: string]: unknown;
|
|
2541
|
+
};
|
|
2542
|
+
content: {
|
|
2543
|
+
"application/json": components["schemas"]["PlatformUserResponse"];
|
|
2544
|
+
};
|
|
2545
|
+
};
|
|
2546
|
+
/** @description New user created */
|
|
2547
|
+
201: {
|
|
2548
|
+
headers: {
|
|
2549
|
+
[name: string]: unknown;
|
|
2550
|
+
};
|
|
2551
|
+
content: {
|
|
2552
|
+
"application/json": components["schemas"]["PlatformUserResponse"];
|
|
2553
|
+
};
|
|
2554
|
+
};
|
|
2555
|
+
};
|
|
2556
|
+
};
|
|
2557
|
+
delete?: never;
|
|
2558
|
+
options?: never;
|
|
2559
|
+
head?: never;
|
|
2560
|
+
patch?: never;
|
|
2561
|
+
trace?: never;
|
|
2562
|
+
};
|
|
2563
|
+
"/v1/platform/apps/{appId}/users": {
|
|
2064
2564
|
parameters: {
|
|
2065
2565
|
query?: never;
|
|
2066
2566
|
header?: never;
|
|
2067
2567
|
path?: never;
|
|
2068
2568
|
cookie?: never;
|
|
2069
2569
|
};
|
|
2070
|
-
/**
|
|
2071
|
-
|
|
2570
|
+
/**
|
|
2571
|
+
* List connected users
|
|
2572
|
+
* @description List all users connected to this platform app.
|
|
2573
|
+
*/
|
|
2574
|
+
get: {
|
|
2575
|
+
parameters: {
|
|
2576
|
+
query?: never;
|
|
2577
|
+
header?: never;
|
|
2578
|
+
path: {
|
|
2579
|
+
appId: string;
|
|
2580
|
+
};
|
|
2581
|
+
cookie?: never;
|
|
2582
|
+
};
|
|
2583
|
+
requestBody?: never;
|
|
2584
|
+
responses: {
|
|
2585
|
+
/** @description Connected users */
|
|
2586
|
+
200: {
|
|
2587
|
+
headers: {
|
|
2588
|
+
[name: string]: unknown;
|
|
2589
|
+
};
|
|
2590
|
+
content: {
|
|
2591
|
+
"application/json": components["schemas"]["PlatformConnectedUserResponse"][];
|
|
2592
|
+
};
|
|
2593
|
+
};
|
|
2594
|
+
};
|
|
2595
|
+
};
|
|
2072
2596
|
put?: never;
|
|
2073
2597
|
post?: never;
|
|
2074
2598
|
delete?: never;
|
|
@@ -2077,24 +2601,52 @@ export interface paths {
|
|
|
2077
2601
|
patch?: never;
|
|
2078
2602
|
trace?: never;
|
|
2079
2603
|
};
|
|
2080
|
-
"/v1/
|
|
2604
|
+
"/v1/platform/connections/{connectionId}/bootstrap": {
|
|
2081
2605
|
parameters: {
|
|
2082
2606
|
query?: never;
|
|
2083
2607
|
header?: never;
|
|
2084
2608
|
path?: never;
|
|
2085
2609
|
cookie?: never;
|
|
2086
2610
|
};
|
|
2087
|
-
|
|
2088
|
-
get: operations["healthHsm"];
|
|
2611
|
+
get?: never;
|
|
2089
2612
|
put?: never;
|
|
2090
|
-
|
|
2613
|
+
/**
|
|
2614
|
+
* Bootstrap resources for a connected user
|
|
2615
|
+
* @description Executes a template to create vault, agent, and policies for the connected user. Returns a claim URL and token for the user to claim their resources.
|
|
2616
|
+
*/
|
|
2617
|
+
post: {
|
|
2618
|
+
parameters: {
|
|
2619
|
+
query?: never;
|
|
2620
|
+
header?: never;
|
|
2621
|
+
path: {
|
|
2622
|
+
connectionId: string;
|
|
2623
|
+
};
|
|
2624
|
+
cookie?: never;
|
|
2625
|
+
};
|
|
2626
|
+
requestBody: {
|
|
2627
|
+
content: {
|
|
2628
|
+
"application/json": components["schemas"]["BootstrapRequest"];
|
|
2629
|
+
};
|
|
2630
|
+
};
|
|
2631
|
+
responses: {
|
|
2632
|
+
/** @description Resources bootstrapped */
|
|
2633
|
+
201: {
|
|
2634
|
+
headers: {
|
|
2635
|
+
[name: string]: unknown;
|
|
2636
|
+
};
|
|
2637
|
+
content: {
|
|
2638
|
+
"application/json": components["schemas"]["BootstrapResponse"];
|
|
2639
|
+
};
|
|
2640
|
+
};
|
|
2641
|
+
};
|
|
2642
|
+
};
|
|
2091
2643
|
delete?: never;
|
|
2092
2644
|
options?: never;
|
|
2093
2645
|
head?: never;
|
|
2094
2646
|
patch?: never;
|
|
2095
2647
|
trace?: never;
|
|
2096
2648
|
};
|
|
2097
|
-
"/v1/
|
|
2649
|
+
"/v1/platform/apps/{appId}/audit": {
|
|
2098
2650
|
parameters: {
|
|
2099
2651
|
query?: never;
|
|
2100
2652
|
header?: never;
|
|
@@ -2102,129 +2654,119 @@ export interface paths {
|
|
|
2102
2654
|
cookie?: never;
|
|
2103
2655
|
};
|
|
2104
2656
|
/**
|
|
2105
|
-
*
|
|
2106
|
-
* @description Returns
|
|
2657
|
+
* Platform audit log
|
|
2658
|
+
* @description Returns audit events related to this platform app.
|
|
2107
2659
|
*/
|
|
2108
2660
|
get: {
|
|
2109
2661
|
parameters: {
|
|
2110
2662
|
query?: {
|
|
2111
|
-
/** @description Filter by agent ID */
|
|
2112
|
-
agent_id?: string;
|
|
2113
|
-
/** @description Filter by action (allowed, blocked, warned) */
|
|
2114
|
-
action?: string;
|
|
2115
|
-
/** @description Maximum events to return */
|
|
2116
2663
|
limit?: number;
|
|
2117
|
-
/** @description Pagination offset */
|
|
2118
2664
|
offset?: number;
|
|
2119
2665
|
};
|
|
2120
2666
|
header?: never;
|
|
2121
|
-
path
|
|
2667
|
+
path: {
|
|
2668
|
+
appId: string;
|
|
2669
|
+
};
|
|
2122
2670
|
cookie?: never;
|
|
2123
2671
|
};
|
|
2124
2672
|
requestBody?: never;
|
|
2125
2673
|
responses: {
|
|
2126
|
-
/** @description
|
|
2674
|
+
/** @description Audit events */
|
|
2127
2675
|
200: {
|
|
2128
2676
|
headers: {
|
|
2129
2677
|
[name: string]: unknown;
|
|
2130
2678
|
};
|
|
2131
2679
|
content: {
|
|
2132
2680
|
"application/json": {
|
|
2133
|
-
events?:
|
|
2134
|
-
total?: number;
|
|
2681
|
+
events?: Record<string, never>[];
|
|
2135
2682
|
};
|
|
2136
2683
|
};
|
|
2137
2684
|
};
|
|
2138
|
-
/** @description Unauthorized */
|
|
2139
|
-
401: {
|
|
2140
|
-
headers: {
|
|
2141
|
-
[name: string]: unknown;
|
|
2142
|
-
};
|
|
2143
|
-
content?: never;
|
|
2144
|
-
};
|
|
2145
2685
|
};
|
|
2146
2686
|
};
|
|
2147
2687
|
put?: never;
|
|
2688
|
+
post?: never;
|
|
2689
|
+
delete?: never;
|
|
2690
|
+
options?: never;
|
|
2691
|
+
head?: never;
|
|
2692
|
+
patch?: never;
|
|
2693
|
+
trace?: never;
|
|
2694
|
+
};
|
|
2695
|
+
"/v1/platform/connected-apps": {
|
|
2696
|
+
parameters: {
|
|
2697
|
+
query?: never;
|
|
2698
|
+
header?: never;
|
|
2699
|
+
path?: never;
|
|
2700
|
+
cookie?: never;
|
|
2701
|
+
};
|
|
2148
2702
|
/**
|
|
2149
|
-
*
|
|
2150
|
-
* @description
|
|
2703
|
+
* List connected apps (user side)
|
|
2704
|
+
* @description Returns platform apps connected to the calling user's account.
|
|
2151
2705
|
*/
|
|
2152
|
-
|
|
2706
|
+
get: {
|
|
2153
2707
|
parameters: {
|
|
2154
2708
|
query?: never;
|
|
2155
2709
|
header?: never;
|
|
2156
2710
|
path?: never;
|
|
2157
2711
|
cookie?: never;
|
|
2158
2712
|
};
|
|
2159
|
-
requestBody
|
|
2160
|
-
content: {
|
|
2161
|
-
"application/json": components["schemas"]["IngestShroudActivityRequest"];
|
|
2162
|
-
};
|
|
2163
|
-
};
|
|
2713
|
+
requestBody?: never;
|
|
2164
2714
|
responses: {
|
|
2165
|
-
/** @description
|
|
2166
|
-
|
|
2715
|
+
/** @description Connected apps */
|
|
2716
|
+
200: {
|
|
2167
2717
|
headers: {
|
|
2168
2718
|
[name: string]: unknown;
|
|
2169
2719
|
};
|
|
2170
|
-
content
|
|
2171
|
-
|
|
2172
|
-
|
|
2173
|
-
|
|
2174
|
-
headers: {
|
|
2175
|
-
[name: string]: unknown;
|
|
2720
|
+
content: {
|
|
2721
|
+
"application/json": {
|
|
2722
|
+
connected_apps?: components["schemas"]["ConnectedAppResponse"][];
|
|
2723
|
+
};
|
|
2176
2724
|
};
|
|
2177
|
-
content?: never;
|
|
2178
2725
|
};
|
|
2179
2726
|
};
|
|
2180
2727
|
};
|
|
2728
|
+
put?: never;
|
|
2729
|
+
post?: never;
|
|
2181
2730
|
delete?: never;
|
|
2182
2731
|
options?: never;
|
|
2183
2732
|
head?: never;
|
|
2184
2733
|
patch?: never;
|
|
2185
2734
|
trace?: never;
|
|
2186
2735
|
};
|
|
2187
|
-
"/v1/
|
|
2736
|
+
"/v1/platform/connected-apps/{connectionId}": {
|
|
2188
2737
|
parameters: {
|
|
2189
2738
|
query?: never;
|
|
2190
2739
|
header?: never;
|
|
2191
2740
|
path?: never;
|
|
2192
2741
|
cookie?: never;
|
|
2193
2742
|
};
|
|
2743
|
+
get?: never;
|
|
2744
|
+
put?: never;
|
|
2745
|
+
post?: never;
|
|
2194
2746
|
/**
|
|
2195
|
-
*
|
|
2196
|
-
* @description
|
|
2747
|
+
* Disconnect a platform app
|
|
2748
|
+
* @description Disconnect the calling user from a platform app.
|
|
2197
2749
|
*/
|
|
2198
|
-
|
|
2750
|
+
delete: {
|
|
2199
2751
|
parameters: {
|
|
2200
|
-
query?:
|
|
2201
|
-
/** @description Rolling window ending now */
|
|
2202
|
-
period?: "1h" | "24h" | "7d" | "30d";
|
|
2203
|
-
};
|
|
2752
|
+
query?: never;
|
|
2204
2753
|
header?: never;
|
|
2205
|
-
path
|
|
2754
|
+
path: {
|
|
2755
|
+
connectionId: string;
|
|
2756
|
+
};
|
|
2206
2757
|
cookie?: never;
|
|
2207
2758
|
};
|
|
2208
2759
|
requestBody?: never;
|
|
2209
2760
|
responses: {
|
|
2210
|
-
/** @description
|
|
2211
|
-
|
|
2212
|
-
headers: {
|
|
2213
|
-
[name: string]: unknown;
|
|
2214
|
-
};
|
|
2215
|
-
content: {
|
|
2216
|
-
"application/json": components["schemas"]["ShroudThreatSummary"];
|
|
2217
|
-
};
|
|
2218
|
-
};
|
|
2219
|
-
/** @description Invalid period */
|
|
2220
|
-
400: {
|
|
2761
|
+
/** @description Disconnected */
|
|
2762
|
+
204: {
|
|
2221
2763
|
headers: {
|
|
2222
2764
|
[name: string]: unknown;
|
|
2223
2765
|
};
|
|
2224
2766
|
content?: never;
|
|
2225
2767
|
};
|
|
2226
|
-
/** @description
|
|
2227
|
-
|
|
2768
|
+
/** @description Connection not found */
|
|
2769
|
+
404: {
|
|
2228
2770
|
headers: {
|
|
2229
2771
|
[name: string]: unknown;
|
|
2230
2772
|
};
|
|
@@ -2232,9 +2774,6 @@ export interface paths {
|
|
|
2232
2774
|
};
|
|
2233
2775
|
};
|
|
2234
2776
|
};
|
|
2235
|
-
put?: never;
|
|
2236
|
-
post?: never;
|
|
2237
|
-
delete?: never;
|
|
2238
2777
|
options?: never;
|
|
2239
2778
|
head?: never;
|
|
2240
2779
|
patch?: never;
|
|
@@ -3967,6 +4506,176 @@ export interface components {
|
|
|
3967
4506
|
status?: "healthy" | "degraded";
|
|
3968
4507
|
version?: string;
|
|
3969
4508
|
};
|
|
4509
|
+
CreatePlatformAppRequest: {
|
|
4510
|
+
name: string;
|
|
4511
|
+
slug: string;
|
|
4512
|
+
description?: string;
|
|
4513
|
+
/** Format: uri */
|
|
4514
|
+
oidc_jwks_url?: string;
|
|
4515
|
+
/** Format: uri */
|
|
4516
|
+
oidc_issuer?: string;
|
|
4517
|
+
/** @description Expected audience claim for OIDC token validation */
|
|
4518
|
+
oidc_audience?: string;
|
|
4519
|
+
redirect_uris?: string[];
|
|
4520
|
+
/**
|
|
4521
|
+
* @default platform_pays
|
|
4522
|
+
* @enum {string}
|
|
4523
|
+
*/
|
|
4524
|
+
billing_model: "platform_pays" | "user_pays" | "hybrid";
|
|
4525
|
+
/**
|
|
4526
|
+
* @default silent
|
|
4527
|
+
* @enum {string}
|
|
4528
|
+
*/
|
|
4529
|
+
auth_mode: "silent" | "user_signin" | "configurable";
|
|
4530
|
+
max_connected_users?: number | null;
|
|
4531
|
+
};
|
|
4532
|
+
UpdatePlatformAppRequest: {
|
|
4533
|
+
name?: string;
|
|
4534
|
+
description?: string;
|
|
4535
|
+
logo_url?: string;
|
|
4536
|
+
oidc_jwks_url?: string;
|
|
4537
|
+
oidc_issuer?: string;
|
|
4538
|
+
/** @description Expected audience claim for OIDC token validation */
|
|
4539
|
+
oidc_audience?: string;
|
|
4540
|
+
redirect_uris?: string[];
|
|
4541
|
+
webhook_url?: string;
|
|
4542
|
+
/** @enum {string} */
|
|
4543
|
+
billing_model?: "platform_pays" | "user_pays" | "hybrid";
|
|
4544
|
+
/** @enum {string} */
|
|
4545
|
+
auth_mode?: "silent" | "user_signin" | "configurable";
|
|
4546
|
+
max_connected_users?: number | null;
|
|
4547
|
+
is_active?: boolean;
|
|
4548
|
+
};
|
|
4549
|
+
PlatformAppResponse: {
|
|
4550
|
+
/** Format: uuid */
|
|
4551
|
+
id?: string;
|
|
4552
|
+
name?: string;
|
|
4553
|
+
slug?: string;
|
|
4554
|
+
description?: string;
|
|
4555
|
+
logo_url?: string | null;
|
|
4556
|
+
api_key_prefix?: string;
|
|
4557
|
+
oidc_jwks_url?: string | null;
|
|
4558
|
+
oidc_issuer?: string | null;
|
|
4559
|
+
/** @description Expected audience claim for OIDC token validation */
|
|
4560
|
+
oidc_audience?: string | null;
|
|
4561
|
+
redirect_uris?: string[];
|
|
4562
|
+
webhook_url?: string | null;
|
|
4563
|
+
is_active?: boolean;
|
|
4564
|
+
billing_model?: string;
|
|
4565
|
+
auth_mode?: string;
|
|
4566
|
+
max_connected_users?: number | null;
|
|
4567
|
+
connected_users?: number;
|
|
4568
|
+
/** Format: date-time */
|
|
4569
|
+
created_at?: string;
|
|
4570
|
+
/** Format: date-time */
|
|
4571
|
+
updated_at?: string;
|
|
4572
|
+
};
|
|
4573
|
+
PlatformAppCreatedResponse: components["schemas"]["PlatformAppResponse"] & {
|
|
4574
|
+
/** @description The platform API key. Save immediately - it cannot be retrieved again. */
|
|
4575
|
+
api_key: string;
|
|
4576
|
+
};
|
|
4577
|
+
CreateTemplateRequest: {
|
|
4578
|
+
name: string;
|
|
4579
|
+
description?: string;
|
|
4580
|
+
/**
|
|
4581
|
+
* @description Template specification defining vault, agents, policies, and signing keys to bootstrap.
|
|
4582
|
+
* Top-level fields: `vault` (object with name, description), `agents` (array of agent specs
|
|
4583
|
+
* with name, description, shroud_enabled, intents, shroud_config), `policies` (array with
|
|
4584
|
+
* vault_ref, principal_ref, paths, permissions, conditions), and `signing_keys` (array of
|
|
4585
|
+
* `{ chain }` objects — supported chains: ethereum, bitcoin, solana, xrp, cardano, tron).
|
|
4586
|
+
* When `signing_keys` is present, HSM-backed signing keys are auto-provisioned for the
|
|
4587
|
+
* bootstrapped agent.
|
|
4588
|
+
*/
|
|
4589
|
+
spec: Record<string, never>;
|
|
4590
|
+
};
|
|
4591
|
+
PlatformTemplateResponse: {
|
|
4592
|
+
/** Format: uuid */
|
|
4593
|
+
id?: string;
|
|
4594
|
+
/** Format: uuid */
|
|
4595
|
+
platform_app_id?: string;
|
|
4596
|
+
name?: string;
|
|
4597
|
+
description?: string;
|
|
4598
|
+
version?: number;
|
|
4599
|
+
spec?: Record<string, never>;
|
|
4600
|
+
is_active?: boolean;
|
|
4601
|
+
/** Format: date-time */
|
|
4602
|
+
created_at?: string;
|
|
4603
|
+
/** Format: date-time */
|
|
4604
|
+
updated_at?: string;
|
|
4605
|
+
};
|
|
4606
|
+
UpsertPlatformUserRequest: {
|
|
4607
|
+
/** @description OIDC JWT from the platform's IdP (verified against JWKS) */
|
|
4608
|
+
subject_token?: string;
|
|
4609
|
+
/** @default urn:ietf:params:oauth:token-type:jwt */
|
|
4610
|
+
subject_token_type: string;
|
|
4611
|
+
/**
|
|
4612
|
+
* Format: email
|
|
4613
|
+
* @description Fallback when subject_token is not provided
|
|
4614
|
+
*/
|
|
4615
|
+
email?: string;
|
|
4616
|
+
display_name?: string;
|
|
4617
|
+
};
|
|
4618
|
+
PlatformUserResponse: {
|
|
4619
|
+
/** Format: uuid */
|
|
4620
|
+
user_handle?: string;
|
|
4621
|
+
is_new?: boolean;
|
|
4622
|
+
/** Format: uuid */
|
|
4623
|
+
connection_id?: string;
|
|
4624
|
+
email?: string;
|
|
4625
|
+
};
|
|
4626
|
+
PlatformConnectedUserResponse: {
|
|
4627
|
+
/** Format: uuid */
|
|
4628
|
+
connection_id?: string;
|
|
4629
|
+
/** Format: uuid */
|
|
4630
|
+
user_id?: string;
|
|
4631
|
+
external_subject?: string;
|
|
4632
|
+
status?: string;
|
|
4633
|
+
vault_ids?: string[];
|
|
4634
|
+
agent_ids?: string[];
|
|
4635
|
+
/** Format: date-time */
|
|
4636
|
+
created_at?: string;
|
|
4637
|
+
/** Format: date-time */
|
|
4638
|
+
claimed_at?: string | null;
|
|
4639
|
+
};
|
|
4640
|
+
BootstrapRequest: {
|
|
4641
|
+
/**
|
|
4642
|
+
* Format: uuid
|
|
4643
|
+
* @description Template to use. Falls back to the app's default template.
|
|
4644
|
+
*/
|
|
4645
|
+
template_id?: string;
|
|
4646
|
+
/**
|
|
4647
|
+
* Format: uri
|
|
4648
|
+
* @description URL to redirect the user to after claiming resources.
|
|
4649
|
+
*/
|
|
4650
|
+
return_to?: string;
|
|
4651
|
+
};
|
|
4652
|
+
BootstrapResponse: {
|
|
4653
|
+
/** Format: uri */
|
|
4654
|
+
claim_url?: string;
|
|
4655
|
+
claim_token?: string;
|
|
4656
|
+
/** @description Seconds until the claim token expires */
|
|
4657
|
+
expires_in?: number;
|
|
4658
|
+
/** Format: uuid */
|
|
4659
|
+
connection_id?: string;
|
|
4660
|
+
summary?: {
|
|
4661
|
+
/** Format: uuid */
|
|
4662
|
+
vault_id?: string | null;
|
|
4663
|
+
/** Format: uuid */
|
|
4664
|
+
agent_id?: string | null;
|
|
4665
|
+
policy_ids?: string[];
|
|
4666
|
+
};
|
|
4667
|
+
};
|
|
4668
|
+
ConnectedAppResponse: {
|
|
4669
|
+
/** Format: uuid */
|
|
4670
|
+
connection_id?: string;
|
|
4671
|
+
app_name?: string;
|
|
4672
|
+
app_slug?: string;
|
|
4673
|
+
status?: string;
|
|
4674
|
+
vault_ids?: string[];
|
|
4675
|
+
agent_ids?: string[];
|
|
4676
|
+
/** Format: date-time */
|
|
4677
|
+
created_at?: string;
|
|
4678
|
+
};
|
|
3970
4679
|
};
|
|
3971
4680
|
responses: {
|
|
3972
4681
|
/** @description Invalid request */
|
|
@@ -5926,6 +6635,43 @@ export interface operations {
|
|
|
5926
6635
|
404: components["responses"]["NotFound"];
|
|
5927
6636
|
};
|
|
5928
6637
|
};
|
|
6638
|
+
exportSigningKey: {
|
|
6639
|
+
parameters: {
|
|
6640
|
+
query?: never;
|
|
6641
|
+
header: {
|
|
6642
|
+
/** @description Account password for re-authentication */
|
|
6643
|
+
"X-Auth-Confirm": string;
|
|
6644
|
+
};
|
|
6645
|
+
path: {
|
|
6646
|
+
agent_id: components["parameters"]["AgentId"];
|
|
6647
|
+
chain: string;
|
|
6648
|
+
};
|
|
6649
|
+
cookie?: never;
|
|
6650
|
+
};
|
|
6651
|
+
requestBody?: never;
|
|
6652
|
+
responses: {
|
|
6653
|
+
/** @description Signing key exported successfully */
|
|
6654
|
+
200: {
|
|
6655
|
+
headers: {
|
|
6656
|
+
[name: string]: unknown;
|
|
6657
|
+
};
|
|
6658
|
+
content: {
|
|
6659
|
+
"application/json": {
|
|
6660
|
+
chain: string;
|
|
6661
|
+
curve: string;
|
|
6662
|
+
public_key: string;
|
|
6663
|
+
address?: string;
|
|
6664
|
+
private_key: string;
|
|
6665
|
+
key_version: number;
|
|
6666
|
+
/** Format: uuid */
|
|
6667
|
+
agent_id: string;
|
|
6668
|
+
};
|
|
6669
|
+
};
|
|
6670
|
+
};
|
|
6671
|
+
403: components["responses"]["Forbidden"];
|
|
6672
|
+
404: components["responses"]["NotFound"];
|
|
6673
|
+
};
|
|
6674
|
+
};
|
|
5929
6675
|
signIntent: {
|
|
5930
6676
|
parameters: {
|
|
5931
6677
|
query?: never;
|
|
@@ -7084,7 +7830,10 @@ export interface operations {
|
|
|
7084
7830
|
exportTreasuryWallet: {
|
|
7085
7831
|
parameters: {
|
|
7086
7832
|
query?: never;
|
|
7087
|
-
header
|
|
7833
|
+
header: {
|
|
7834
|
+
/** @description Account password for re-authentication */
|
|
7835
|
+
"X-Auth-Confirm": string;
|
|
7836
|
+
};
|
|
7088
7837
|
path: {
|
|
7089
7838
|
chain: string;
|
|
7090
7839
|
};
|