@1claw/sdk 0.4.0 → 0.7.0

package/dist/generated/api-types.d.ts

@@ -140,6 +140,25 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/auth/me": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get current user profile */
+        get: operations["getMe"];
+        put?: never;
+        post?: never;
+        /** Delete current user account */
+        delete: operations["deleteMe"];
+        options?: never;
+        head?: never;
+        /** Update user profile */
+        patch: operations["updateMe"];
+        trace?: never;
+    };
     "/v1/auth/mfa/status": {
         parameters: {
             query?: never;
@@ -518,6 +537,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/agents/enroll": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Self-enroll an agent
+         * @description Public endpoint (no auth required). Creates an agent under the human's org
+         *     and emails the credentials to the specified human email. The API key is NOT
+         *     returned in the response. Anti-spam: IP rate limiting + per-email cooldown.
+         */
+        post: operations["enrollAgent"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/agents": {
         parameters: {
             query?: never;
@@ -599,7 +640,12 @@ export interface paths {
         /** List agent transactions */
         get: operations["listTransactions"];
         put?: never;
-        /** Submit a transaction for signing */
+        /**
+         * Submit a transaction for signing
+         * @description Replay protection: send an optional **Idempotency-Key** header (e.g. UUID or opaque string).
+         *     Duplicate requests with the same key within 24 hours return the cached transaction response
+         *     (no second sign/broadcast). Omit the header for non-idempotent submissions.
+         */
         post: operations["submitTransaction"];
         delete?: never;
         options?: never;
@@ -1210,6 +1256,29 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/admin/orgs/{org_id}/billing-tier": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Set org billing tier (without Stripe)
+         * @description Manually set an organization's billing tier to free, pro, or business.
+         *     For testing and manual upgrades — does not create a Stripe subscription.
+         *     Setting to "pro" or "business" sets period_end to +1 year.
+         *     Setting to "free" clears subscription data.
+         */
+        put: operations["adminSetBillingTier"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/health": {
         parameters: {
             query?: never;
@@ -1351,6 +1420,23 @@ export interface components {
         DeviceApproveRequest: {
             user_code: string;
         };
+        UserProfileResponse: {
+            /** Format: uuid */
+            id?: string;
+            email?: string;
+            display_name?: string;
+            auth_method?: string;
+            role?: string;
+            email_verified?: boolean;
+            marketing_emails?: boolean;
+            totp_enabled?: boolean;
+            /** Format: date-time */
+            created_at?: string;
+        };
+        UpdateProfileRequest: {
+            display_name?: string;
+            marketing_emails?: boolean;
+        };
         CreateApiKeyRequest: {
             name: string;
             scopes?: string[];
@@ -1521,15 +1607,40 @@ export interface components {
         PolicyListResponse: {
             policies?: components["schemas"]["PolicyResponse"][];
         };
+        EnrollAgentRequest: {
+            /** @description Display name for the new agent */
+            name: string;
+            /**
+             * Format: email
+             * @description Email of the human who will receive the agent credentials
+             */
+            human_email: string;
+            /** @description Optional agent description */
+            description?: string;
+        };
+        EnrollAgentResponse: {
+            /**
+             * Format: uuid
+             * @description UUID of the created agent (nil UUID when email not found — uniform response)
+             */
+            agent_id?: string;
+            /** @description Status message (always generic to prevent email enumeration) */
+            message?: string;
+        };
         CreateAgentRequest: {
             name: string;
             description?: string;
-            auth_method?: string;
+            /**
+             * @description Authentication method. api_key generates a one-time key; mtls requires client_cert_fingerprint; oidc_client_credentials requires oidc_issuer and oidc_client_id.
+             * @default api_key
+             * @enum {string}
+             */
+            auth_method: "api_key" | "mtls" | "oidc_client_credentials";
             scopes?: string[];
             /** Format: date-time */
             expires_at?: string;
             /** @default false */
-            crypto_proxy_enabled: boolean;
+            intents_api_enabled: boolean;
             tx_to_allowlist?: string[];
             tx_max_value_eth?: string;
             tx_daily_limit_eth?: string;
@@ -1538,6 +1649,12 @@ export interface components {
             token_ttl_seconds?: number | null;
             /** @description Restrict agent to specific vault UUIDs (empty = all vaults in org) */
             vault_ids?: string[];
+            /** @description SHA-256 fingerprint of the client certificate (required for mTLS auth) */
+            client_cert_fingerprint?: string;
+            /** @description OIDC issuer URL (required for oidc_client_credentials auth) */
+            oidc_issuer?: string;
+            /** @description OIDC client ID (required for oidc_client_credentials auth) */
+            oidc_client_id?: string;
         };
         UpdateAgentRequest: {
             name?: string;
@@ -1545,7 +1662,7 @@ export interface components {
             is_active?: boolean;
             /** Format: date-time */
             expires_at?: string;
-            crypto_proxy_enabled?: boolean;
+            intents_api_enabled?: boolean;
             tx_to_allowlist?: string[];
             tx_max_value_eth?: string;
             tx_daily_limit_eth?: string;
@@ -1558,16 +1675,27 @@ export interface components {
             id: string;
             name: string;
             description?: string;
-            auth_method: string;
+            /** @enum {string} */
+            auth_method: "api_key" | "mtls" | "oidc_client_credentials";
             scopes?: string[];
             is_active: boolean;
-            crypto_proxy_enabled: boolean;
+            intents_api_enabled: boolean;
             tx_to_allowlist?: string[];
             tx_max_value_eth?: string;
             tx_daily_limit_eth?: string;
             tx_allowed_chains?: string[];
             token_ttl_seconds?: number | null;
             vault_ids?: string[];
+            /** @description SHA-256 fingerprint of the client certificate (mTLS agents) */
+            client_cert_fingerprint?: string;
+            /** @description OIDC issuer URL (oidc_client_credentials agents) */
+            oidc_issuer?: string;
+            /** @description OIDC client ID (oidc_client_credentials agents) */
+            oidc_client_id?: string;
+            /** @description Ed25519 SSH public key (base64-encoded, auto-generated at creation) */
+            ssh_public_key?: string;
+            /** @description P-256 ECDH public key (base64 SEC1 uncompressed point, auto-generated at creation) */
+            ecdh_public_key?: string;
             /** Format: date-time */
             created_at: string;
             /** Format: date-time */
@@ -1584,7 +1712,7 @@ export interface components {
             org_id?: string;
             scopes?: string[];
             is_active?: boolean;
-            crypto_proxy_enabled?: boolean;
+            intents_api_enabled?: boolean;
             /** Format: uuid */
             created_by?: string;
             /** Format: date-time */
@@ -1593,11 +1721,15 @@ export interface components {
             expires_at?: string;
             /** Format: date-time */
             last_active_at?: string;
+            /** @description Ed25519 SSH public key (base64-encoded) */
+            ssh_public_key?: string;
+            /** @description P-256 ECDH public key (base64 SEC1 uncompressed point) */
+            ecdh_public_key?: string;
         };
         AgentCreatedResponse: {
             agent: components["schemas"]["AgentResponse"];
-            /** @description One-time API key (store securely) */
-            api_key: string;
+            /** @description One-time API key (only present for api_key auth method) */
+            api_key?: string;
         };
         AgentListResponse: {
             agents?: components["schemas"]["AgentResponse"][];
@@ -1645,7 +1777,8 @@ export interface components {
             value_wei?: string;
             /** @enum {string} */
             status?: "pending" | "signed" | "broadcast" | "failed" | "simulation_failed";
-            signed_tx?: string;
+            /** @description Raw signed transaction hex. Omitted (null) by default to reduce exfiltration risk. Pass `include_signed_tx=true` query param on GET endpoints to include it. Always returned on the initial POST submission response. */
+            signed_tx?: string | null;
             tx_hash?: string;
             error_message?: string;
             /** Format: date-time */
@@ -1873,7 +2006,7 @@ export interface components {
                 agents?: components["schemas"]["UsageMeter"];
                 vaults?: components["schemas"]["UsageMeter"];
                 team_members?: components["schemas"]["UsageMeter"];
-                proxy_transactions?: components["schemas"]["UsageMeter"];
+                intent_transactions?: components["schemas"]["UsageMeter"];
                 shares?: components["schemas"]["UsageMeter"];
             };
         };
@@ -1982,6 +2115,7 @@ export interface components {
                 /** Format: uuid */
                 org_id?: string;
                 org_name?: string;
+                billing_tier?: string;
                 /** Format: date-time */
                 created_at?: string;
                 free_tier_override?: number;
@@ -2000,6 +2134,10 @@ export interface components {
             free_tier_override?: number;
             is_sponsored?: boolean;
         };
+        SetBillingTierRequest: {
+            /** @enum {string} */
+            tier: "free" | "pro" | "business";
+        };
         PaymentRequirement: {
             x402Version?: number;
             accepts?: {
@@ -2070,6 +2208,8 @@ export interface components {
         SecretPath: string;
         AgentId: string;
         PolicyId: string;
+        /** @description Set to `true` to include the raw signed transaction hex in the response. Omitted by default to reduce key exfiltration risk. */
+        IncludeSignedTx: boolean;
     };
     requestBodies: never;
     headers: never;
@@ -2298,6 +2438,77 @@ export interface operations {
             400: components["responses"]["BadRequest"];
         };
     };
+    getMe: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description User profile */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UserProfileResponse"];
+                };
+            };
+        };
+    };
+    deleteMe: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description Must be "DELETE MY ACCOUNT" */
+                    confirmation: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Account deleted */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            400: components["responses"]["BadRequest"];
+        };
+    };
+    updateMe: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateProfileRequest"];
+            };
+        };
+        responses: {
+            /** @description Profile updated */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UserProfileResponse"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+        };
+    };
     mfaStatus: {
         parameters: {
             query?: never;
@@ -2989,6 +3200,37 @@ export interface operations {
             404: components["responses"]["NotFound"];
         };
     };
+    enrollAgent: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["EnrollAgentRequest"];
+            };
+        };
+        responses: {
+            /** @description Enrollment processed (uniform response to prevent email enumeration) */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["EnrollAgentResponse"];
+                };
+            };
+            /** @description Rate limit exceeded */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     listAgents: {
         parameters: {
             query?: never;
@@ -3151,7 +3393,10 @@ export interface operations {
     };
     listTransactions: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Set to `true` to include the raw signed transaction hex in the response. Omitted by default to reduce key exfiltration risk. */
+                include_signed_tx?: components["parameters"]["IncludeSignedTx"];
+            };
             header?: never;
             path: {
                 agent_id: components["parameters"]["AgentId"];
@@ -3174,7 +3419,10 @@ export interface operations {
     submitTransaction: {
         parameters: {
             query?: never;
-            header?: never;
+            header?: {
+                /** @description Optional key for replay protection; duplicate requests return cached response. */
+                "Idempotency-Key"?: string;
+            };
             path: {
                 agent_id: components["parameters"]["AgentId"];
             };
@@ -3186,6 +3434,15 @@ export interface operations {
             };
         };
         responses: {
+            /** @description Transaction previously created with same Idempotency-Key (replay-safe response) */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TransactionResponse"];
+                };
+            };
             /** @description Transaction signed (and optionally broadcast) */
             201: {
                 headers: {
@@ -3196,6 +3453,15 @@ export interface operations {
                 };
             };
             403: components["responses"]["Forbidden"];
+            /** @description Idempotency-Key in use by another in-flight request; retry later. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ProblemDetails"];
+                };
+            };
             /** @description Simulation reverted (when simulate_first is true) */
             422: {
                 headers: {
@@ -3209,7 +3475,10 @@ export interface operations {
     };
     getTransaction: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Set to `true` to include the raw signed transaction hex in the response. Omitted by default to reduce key exfiltration risk. */
+                include_signed_tx?: components["parameters"]["IncludeSignedTx"];
+            };
             header?: never;
             path: {
                 agent_id: components["parameters"]["AgentId"];
@@ -4166,6 +4435,32 @@ export interface operations {
             };
         };
     };
+    adminSetBillingTier: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                org_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SetBillingTierRequest"];
+            };
+        };
+        responses: {
+            /** @description Billing tier updated */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            400: components["responses"]["BadRequest"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
     healthCheck: {
         parameters: {
             query?: never;