@1claw/sdk 0.33.0 → 0.34.1

package/dist/generated/api-types.d.ts

@@ -1742,6 +1742,34 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/org/bankr-config": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get org Bankr partner configuration
+         * @description Returns whether the org has configured Bankr BYOK (partner key prefix and default wallet only — never the secret). Users only.
+         */
+        get: operations["getOrgBankrConfig"];
+        /**
+         * Set org Bankr partner configuration
+         * @description Store or replace the org's Bankr partner key (`bk_ptr_...`) and optional default wallet (`wlt_...`). Owner/admin only. Partner key encrypted at rest.
+         */
+        put: operations["upsertOrgBankrConfig"];
+        post?: never;
+        /**
+         * Remove org Bankr partner configuration
+         * @description Delete BYOK credentials for the org. Owner/admin only.
+         */
+        delete: operations["deleteOrgBankrConfig"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/org/invite": {
         parameters: {
             query?: never;
@@ -4024,6 +4052,112 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/risk/events": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List risk events
+         * @description Returns risk events detected by the risk engine, ordered by most recent first.
+         *     Filter by severity or principal type.
+         */
+        get: operations["listRiskEvents"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/risk/verdicts": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List risk verdicts
+         * @description Returns all active risk verdicts for the caller's organization.
+         */
+        get: operations["listRiskVerdicts"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/risk/verdicts/{principal_type}/{principal_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get risk verdict for a principal
+         * @description Returns the current risk verdict for a specific user or agent.
+         */
+        get: operations["getRiskVerdict"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/risk/honeytokens": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List honeytokens
+         * @description Returns all honeytokens (canary secrets) configured for the caller's organization.
+         */
+        get: operations["listHoneytokens"];
+        put?: never;
+        /**
+         * Create a honeytoken
+         * @description Register a secret path as a honeytoken (canary). Any access to this secret
+         *     triggers a risk event and increments the trigger counter.
+         */
+        post: operations["createHoneytoken"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/risk/honeytokens/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete a honeytoken
+         * @description Remove a honeytoken registration. The underlying secret is not affected.
+         */
+        delete: operations["deleteHoneytoken"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
 }
 export type webhooks = Record<string, never>;
 export interface components {
@@ -5354,6 +5488,20 @@ export interface components {
             /** Format: uuid */
             vault_id?: string;
         };
+        OrgBankrConfigResponse: {
+            configured?: boolean;
+            partner_key_prefix?: string;
+            default_wallet_id?: string;
+            /** Format: date-time */
+            updated_at?: string;
+            using_platform_fallback?: boolean;
+        };
+        UpsertOrgBankrConfigRequest: {
+            /** @description Bankr partner API key (bk_ptr_...) */
+            partner_key: string;
+            /** @description Default provisioned wallet (wlt_...) */
+            default_wallet_id?: string;
+        };
         UsageSummaryResponse: {
             billing_tier?: string;
             free_tier_limit?: number;
@@ -6385,6 +6533,94 @@ export interface components {
             /** Format: date-time */
             created_at: string;
         };
+        RiskEvent: {
+            /** Format: uuid */
+            id: string;
+            /** Format: date-time */
+            occurred_at: string;
+            /** @enum {string} */
+            principal_type: "user" | "agent";
+            /** Format: uuid */
+            principal_id: string;
+            /** Format: uuid */
+            org_id: string;
+            /** @description Risk event type (e.g. first_seen, geo_velocity, honeytoken_access) */
+            event_type: string;
+            ip?: string | null;
+            asn?: number | null;
+            asn_org?: string | null;
+            country_code?: string | null;
+            region?: string | null;
+            city?: string | null;
+            latitude?: number | null;
+            longitude?: number | null;
+            user_agent?: string | null;
+            /** @description Computed severity at event time (low, medium, high, critical) */
+            severity?: string | null;
+            payload: {
+                [key: string]: unknown;
+            };
+            /** Format: date-time */
+            created_at: string;
+        };
+        RiskEventListResponse: {
+            events: components["schemas"]["RiskEvent"][];
+        };
+        RiskVerdictReason: {
+            detector: string;
+            severity: string;
+            description: string;
+            metadata?: {
+                [key: string]: unknown;
+            };
+        };
+        RiskVerdict: {
+            principal_type: string;
+            /** Format: uuid */
+            principal_id: string;
+            /** Format: uuid */
+            org_id: string;
+            /** @description Composite risk score (0.0 – 100.0) */
+            score: number;
+            /** @enum {string} */
+            severity: "low" | "medium" | "high" | "critical";
+            reasons: components["schemas"]["RiskVerdictReason"][];
+            /** Format: date-time */
+            computed_at: string;
+            /** Format: date-time */
+            expires_at: string;
+        };
+        RiskVerdictListResponse: {
+            verdicts: components["schemas"]["RiskVerdict"][];
+        };
+        Honeytoken: {
+            /** Format: uuid */
+            id: string;
+            /** Format: uuid */
+            vault_id: string;
+            /** Format: uuid */
+            org_id: string;
+            secret_path: string;
+            /** Format: uuid */
+            created_by: string;
+            /** Format: date-time */
+            created_at: string;
+            notes?: string | null;
+            triggered_count: number;
+            /** Format: date-time */
+            last_triggered_at?: string | null;
+        };
+        CreateHoneytokenRequest: {
+            /** Format: uuid */
+            vault_id: string;
+            /** @description Vault secret path to monitor as a canary */
+            secret_path: string;
+            /** @description Optional human-readable notes about this honeytoken */
+            notes?: string;
+        };
+        HoneytokenListResponse: {
+            honeytokens: components["schemas"]["Honeytoken"][];
+        };
     };
     responses: {
         /** @description Invalid request */
@@ -9300,6 +9536,75 @@ export interface operations {
             };
         };
     };
+    getOrgBankrConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Bankr configuration status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OrgBankrConfigResponse"];
+                };
+            };
+        };
+    };
+    upsertOrgBankrConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpsertOrgBankrConfigRequest"];
+            };
+        };
+        responses: {
+            /** @description Configuration saved */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OrgBankrConfigResponse"];
+                };
+            };
+        };
+    };
+    deleteOrgBankrConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Configuration removed */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Configuration not found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     inviteMember: {
         parameters: {
             query?: never;
@@ -11638,5 +11943,156 @@ export interface operations {
             401: components["responses"]["Unauthorized"];
         };
     };
+    listRiskEvents: {
+        parameters: {
+            query?: {
+                /** @description Filter events by severity level */
+                severity?: "low" | "medium" | "high" | "critical";
+                /** @description Filter events by principal type */
+                principal_type?: "user" | "agent";
+                limit?: number;
+                offset?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Risk event list */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["RiskEventListResponse"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+        };
+    };
+    listRiskVerdicts: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Verdict list */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["RiskVerdictListResponse"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+        };
+    };
+    getRiskVerdict: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                principal_type: "user" | "agent";
+                principal_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Risk verdict (null if no verdict exists) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        verdict?: components["schemas"]["RiskVerdict"];
+                    };
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+        };
+    };
+    listHoneytokens: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Honeytoken list */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HoneytokenListResponse"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+        };
+    };
+    createHoneytoken: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateHoneytokenRequest"];
+            };
+        };
+        responses: {
+            /** @description Honeytoken created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        honeytoken?: components["schemas"]["Honeytoken"];
+                    };
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            401: components["responses"]["Unauthorized"];
+        };
+    };
+    deleteHoneytoken: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Honeytoken deleted */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        deleted?: boolean;
+                    };
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+        };
+    };
 }
 //# sourceMappingURL=api-types.d.ts.map