@1claw/sdk 0.53.0 → 0.53.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -6652,6 +6652,266 @@ export interface paths {
6652
6652
  patch?: never;
6653
6653
  trace?: never;
6654
6654
  };
6655
+ "/v1/wallets/access-policies": {
6656
+ parameters: {
6657
+ query?: never;
6658
+ header?: never;
6659
+ path?: never;
6660
+ cookie?: never;
6661
+ };
6662
+ /** List wallet access policies for the org */
6663
+ get: operations["listWalletAccessPolicies"];
6664
+ put?: never;
6665
+ /**
6666
+ * Create a wallet access policy
6667
+ * @description Create a role-based wallet access policy granting an agent or user
6668
+ * specific permissions (send, swap, receive) on a treasury wallet chain.
6669
+ */
6670
+ post: operations["createWalletAccessPolicy"];
6671
+ delete?: never;
6672
+ options?: never;
6673
+ head?: never;
6674
+ patch?: never;
6675
+ trace?: never;
6676
+ };
6677
+ "/v1/wallets/access-policies/{id}": {
6678
+ parameters: {
6679
+ query?: never;
6680
+ header?: never;
6681
+ path?: never;
6682
+ cookie?: never;
6683
+ };
6684
+ get?: never;
6685
+ put?: never;
6686
+ post?: never;
6687
+ /** Delete a wallet access policy */
6688
+ delete: operations["deleteWalletAccessPolicy"];
6689
+ options?: never;
6690
+ head?: never;
6691
+ patch?: never;
6692
+ trace?: never;
6693
+ };
6694
+ "/v1/auth/credential-recovery/request": {
6695
+ parameters: {
6696
+ query?: never;
6697
+ header?: never;
6698
+ path?: never;
6699
+ cookie?: never;
6700
+ };
6701
+ get?: never;
6702
+ put?: never;
6703
+ /**
6704
+ * Initiate credential recovery
6705
+ * @description Start a credential recovery request for MFA reset, passkey reset,
6706
+ * or password reset. Requires admin approval per org policy.
6707
+ */
6708
+ post: operations["requestCredentialRecovery"];
6709
+ delete?: never;
6710
+ options?: never;
6711
+ head?: never;
6712
+ patch?: never;
6713
+ trace?: never;
6714
+ };
6715
+ "/v1/auth/credential-recovery/requests": {
6716
+ parameters: {
6717
+ query?: never;
6718
+ header?: never;
6719
+ path?: never;
6720
+ cookie?: never;
6721
+ };
6722
+ /**
6723
+ * List recovery requests for the org
6724
+ * @description Admin/owner only. Returns pending, approved, and rejected recovery requests.
6725
+ */
6726
+ get: operations["listCredentialRecoveryRequests"];
6727
+ put?: never;
6728
+ post?: never;
6729
+ delete?: never;
6730
+ options?: never;
6731
+ head?: never;
6732
+ patch?: never;
6733
+ trace?: never;
6734
+ };
6735
+ "/v1/auth/credential-recovery/requests/{id}/approve": {
6736
+ parameters: {
6737
+ query?: never;
6738
+ header?: never;
6739
+ path?: never;
6740
+ cookie?: never;
6741
+ };
6742
+ get?: never;
6743
+ put?: never;
6744
+ /**
6745
+ * Approve a recovery request
6746
+ * @description Admin/owner approves a pending recovery request. May return a one-time recovery code.
6747
+ */
6748
+ post: operations["approveCredentialRecovery"];
6749
+ delete?: never;
6750
+ options?: never;
6751
+ head?: never;
6752
+ patch?: never;
6753
+ trace?: never;
6754
+ };
6755
+ "/v1/auth/credential-recovery/requests/{id}/execute": {
6756
+ parameters: {
6757
+ query?: never;
6758
+ header?: never;
6759
+ path?: never;
6760
+ cookie?: never;
6761
+ };
6762
+ get?: never;
6763
+ put?: never;
6764
+ /**
6765
+ * Execute an approved credential recovery request
6766
+ * @description Execute an approved credential recovery request after the delay window has elapsed. Only org owners or admins can execute.
6767
+ */
6768
+ post: operations["executeCredentialRecovery"];
6769
+ delete?: never;
6770
+ options?: never;
6771
+ head?: never;
6772
+ patch?: never;
6773
+ trace?: never;
6774
+ };
6775
+ "/v1/auth/credential-recovery/requests/{id}": {
6776
+ parameters: {
6777
+ query?: never;
6778
+ header?: never;
6779
+ path?: never;
6780
+ cookie?: never;
6781
+ };
6782
+ get?: never;
6783
+ put?: never;
6784
+ post?: never;
6785
+ /** Cancel or reject a recovery request */
6786
+ delete: operations["cancelCredentialRecovery"];
6787
+ options?: never;
6788
+ head?: never;
6789
+ patch?: never;
6790
+ trace?: never;
6791
+ };
6792
+ "/v1/org/credential-recovery-policy": {
6793
+ parameters: {
6794
+ query?: never;
6795
+ header?: never;
6796
+ path?: never;
6797
+ cookie?: never;
6798
+ };
6799
+ /** Get org credential recovery policy */
6800
+ get: operations["getCredentialRecoveryPolicy"];
6801
+ put?: never;
6802
+ post?: never;
6803
+ delete?: never;
6804
+ options?: never;
6805
+ head?: never;
6806
+ /** Update org credential recovery policy */
6807
+ patch: operations["updateCredentialRecoveryPolicy"];
6808
+ trace?: never;
6809
+ };
6810
+ "/v1/org/shamir-kek/setup": {
6811
+ parameters: {
6812
+ query?: never;
6813
+ header?: never;
6814
+ path?: never;
6815
+ cookie?: never;
6816
+ };
6817
+ get?: never;
6818
+ put?: never;
6819
+ /**
6820
+ * Set up Shamir KEK for the org
6821
+ * @description Initialize a Shamir secret-sharing KEK for the org. Splits the master
6822
+ * key into shares distributed to custodians. Shares are returned one-time
6823
+ * only and must be stored securely by each custodian.
6824
+ */
6825
+ post: operations["setupShamirKek"];
6826
+ delete?: never;
6827
+ options?: never;
6828
+ head?: never;
6829
+ patch?: never;
6830
+ trace?: never;
6831
+ };
6832
+ "/v1/org/shamir-kek": {
6833
+ parameters: {
6834
+ query?: never;
6835
+ header?: never;
6836
+ path?: never;
6837
+ cookie?: never;
6838
+ };
6839
+ /**
6840
+ * Get Shamir KEK status
6841
+ * @description Returns the current Shamir KEK configuration status for the org.
6842
+ */
6843
+ get: operations["getShamirKekStatus"];
6844
+ put?: never;
6845
+ post?: never;
6846
+ delete?: never;
6847
+ options?: never;
6848
+ head?: never;
6849
+ patch?: never;
6850
+ trace?: never;
6851
+ };
6852
+ "/v1/org/shamir-kek/reconstruct": {
6853
+ parameters: {
6854
+ query?: never;
6855
+ header?: never;
6856
+ path?: never;
6857
+ cookie?: never;
6858
+ };
6859
+ get?: never;
6860
+ put?: never;
6861
+ /**
6862
+ * Reconstruct KEK from shares
6863
+ * @description Submit Shamir shares to reconstruct the org KEK. Requires at least
6864
+ * `threshold` valid shares. Used during disaster recovery.
6865
+ */
6866
+ post: operations["reconstructShamirKek"];
6867
+ delete?: never;
6868
+ options?: never;
6869
+ head?: never;
6870
+ patch?: never;
6871
+ trace?: never;
6872
+ };
6873
+ "/v1/org/shamir-kek/recovery-codes": {
6874
+ parameters: {
6875
+ query?: never;
6876
+ header?: never;
6877
+ path?: never;
6878
+ cookie?: never;
6879
+ };
6880
+ /**
6881
+ * Get Shamir recovery codes (one-time)
6882
+ * @description Returns the one-time recovery codes for the Shamir KEK. These codes
6883
+ * can be used as an emergency fallback if custodian shares are lost.
6884
+ * Codes are only returned once — subsequent calls return 410.
6885
+ */
6886
+ get: operations["getShamirKekRecoveryCodes"];
6887
+ put?: never;
6888
+ post?: never;
6889
+ delete?: never;
6890
+ options?: never;
6891
+ head?: never;
6892
+ patch?: never;
6893
+ trace?: never;
6894
+ };
6895
+ "/v1/org/shamir-kek/verify-recovery-code": {
6896
+ parameters: {
6897
+ query?: never;
6898
+ header?: never;
6899
+ path?: never;
6900
+ cookie?: never;
6901
+ };
6902
+ get?: never;
6903
+ put?: never;
6904
+ /**
6905
+ * Verify a Shamir recovery code
6906
+ * @description Check whether a recovery code is valid without consuming it.
6907
+ */
6908
+ post: operations["verifyShamirKekRecoveryCode"];
6909
+ delete?: never;
6910
+ options?: never;
6911
+ head?: never;
6912
+ patch?: never;
6913
+ trace?: never;
6914
+ };
6655
6915
  }
6656
6916
  export type webhooks = Record<string, never>;
6657
6917
  export interface components {
@@ -8094,6 +8354,12 @@ export interface components {
8094
8354
  * @description Optional pending approval ID. When consensus policies match, clients resubmit with this field set to bypass the 202 gate after the approval has been executed.
8095
8355
  */
8096
8356
  approval_id?: string;
8357
+ /** @description Pre-built raw transaction as a base64-encoded byte string. When provided, the handler decodes and deep-inspects the transaction for policy evaluation before signing. Supported for non-EVM chains where the client constructs the transaction payload. */
8358
+ raw_transaction?: string;
8359
+ /** @description Pre-built Tron transaction JSON object. When provided, the handler signs the transaction as-is using the Tron protobuf format. Enables full Tron transaction type coverage beyond simple TRX/TRC-20 transfers. */
8360
+ tron_transaction?: {
8361
+ [key: string]: unknown;
8362
+ };
8097
8363
  };
8098
8364
  SignTransactionRequest: {
8099
8365
  /** @description Destination address (0x-prefixed) */
@@ -8350,6 +8616,12 @@ export interface components {
8350
8616
  * @description Optional pending approval ID. When consensus policies match, clients resubmit with this field set to bypass the 202 gate after the approval has been executed.
8351
8617
  */
8352
8618
  approval_id?: string;
8619
+ /** @description Pre-built raw transaction as a base64-encoded byte string. When provided, the handler decodes and deep-inspects the transaction for policy evaluation before signing. Supported for non-EVM chains where the client constructs the transaction payload. */
8620
+ raw_transaction?: string;
8621
+ /** @description Pre-built Tron transaction JSON object. When provided, the handler signs the transaction as-is using the Tron protobuf format. Enables full Tron transaction type coverage beyond simple TRX/TRC-20 transfers. */
8622
+ tron_transaction?: {
8623
+ [key: string]: unknown;
8624
+ };
8353
8625
  };
8354
8626
  SignIntentResponse: {
8355
8627
  intent_type?: string;
@@ -11263,41 +11535,205 @@ export interface components {
11263
11535
  environments?: string[];
11264
11536
  comment?: string;
11265
11537
  };
11266
- };
11267
- responses: {
11268
- /** @description Invalid request */
11269
- BadRequest: {
11270
- headers: {
11271
- [name: string]: unknown;
11272
- };
11273
- content: {
11274
- "application/json": components["schemas"]["ProblemDetails"];
11538
+ CreateWalletAccessPolicyRequest: {
11539
+ /** @description Chain for which the policy applies (e.g. ethereum, solana) */
11540
+ wallet_chain: string;
11541
+ /**
11542
+ * Format: uuid
11543
+ * @description Agent granted access (mutually exclusive with target_user_id)
11544
+ */
11545
+ target_agent_id?: string;
11546
+ /**
11547
+ * Format: uuid
11548
+ * @description User granted access (mutually exclusive with target_agent_id)
11549
+ */
11550
+ target_user_id?: string;
11551
+ permissions: ("send" | "swap" | "receive")[];
11552
+ conditions?: {
11553
+ /** @description Max value per transaction in ETH */
11554
+ max_value_per_tx_eth?: string;
11555
+ /** @description Daily spend limit in ETH */
11556
+ daily_limit_eth?: string;
11557
+ allowed_chains?: string[];
11558
+ allowed_tokens?: string[];
11275
11559
  };
11560
+ /** Format: date-time */
11561
+ expires_at?: string;
11276
11562
  };
11277
- /** @description Authentication required or invalid */
11278
- Unauthorized: {
11279
- headers: {
11280
- [name: string]: unknown;
11281
- };
11282
- content: {
11283
- "application/json": components["schemas"]["ProblemDetails"];
11284
- };
11563
+ WalletAccessPolicyResponse: {
11564
+ /** Format: uuid */
11565
+ id?: string;
11566
+ /** Format: uuid */
11567
+ org_id?: string;
11568
+ wallet_chain?: string;
11569
+ /** Format: uuid */
11570
+ target_agent_id?: string | null;
11571
+ /** Format: uuid */
11572
+ target_user_id?: string | null;
11573
+ permissions?: ("send" | "swap" | "receive")[];
11574
+ conditions?: {
11575
+ max_value_per_tx_eth?: string | null;
11576
+ daily_limit_eth?: string | null;
11577
+ allowed_chains?: string[] | null;
11578
+ allowed_tokens?: string[] | null;
11579
+ } | null;
11580
+ /** Format: date-time */
11581
+ expires_at?: string | null;
11582
+ /** Format: date-time */
11583
+ created_at?: string;
11285
11584
  };
11286
- /** @description Insufficient permissions */
11287
- Forbidden: {
11288
- headers: {
11289
- [name: string]: unknown;
11290
- };
11291
- content: {
11292
- "application/json": components["schemas"]["ProblemDetails"];
11293
- };
11585
+ WalletAccessPolicyListResponse: {
11586
+ policies?: components["schemas"]["WalletAccessPolicyResponse"][];
11294
11587
  };
11295
- /** @description Resource not found */
11296
- NotFound: {
11297
- headers: {
11298
- [name: string]: unknown;
11299
- };
11300
- content: {
11588
+ CredentialRecoveryRequest: {
11589
+ /** @enum {string} */
11590
+ recovery_type: "mfa_reset" | "passkey_reset" | "password_reset";
11591
+ /** @description Optional justification for the recovery request */
11592
+ reason?: string;
11593
+ };
11594
+ CredentialRecoveryResponse: {
11595
+ /** Format: uuid */
11596
+ request_id?: string;
11597
+ /** @enum {string} */
11598
+ status?: "pending_approval" | "approved" | "rejected" | "expired";
11599
+ /** @enum {string} */
11600
+ recovery_type?: "mfa_reset" | "passkey_reset" | "password_reset";
11601
+ /** Format: date-time */
11602
+ created_at?: string;
11603
+ };
11604
+ CredentialRecoveryListResponse: {
11605
+ requests?: components["schemas"]["CredentialRecoveryResponse"][];
11606
+ };
11607
+ CredentialRecoveryApproveResponse: {
11608
+ /** Format: uuid */
11609
+ request_id?: string;
11610
+ /** @enum {string} */
11611
+ status?: "approved";
11612
+ /** @description One-time recovery code (only present for certain recovery types) */
11613
+ recovery_code?: string | null;
11614
+ };
11615
+ CredentialRecoveryExecuteResponse: {
11616
+ /** Format: uuid */
11617
+ request_id?: string;
11618
+ /** @enum {string} */
11619
+ status?: "executed";
11620
+ recovery_type?: string;
11621
+ /** Format: date-time */
11622
+ executed_at?: string;
11623
+ };
11624
+ CredentialRecoveryPolicyResponse: {
11625
+ enabled?: boolean;
11626
+ require_admin_approval?: boolean;
11627
+ /** @description Waiting period before recovery takes effect */
11628
+ delay_hours?: number;
11629
+ allowed_types?: ("mfa_reset" | "passkey_reset" | "password_reset")[];
11630
+ };
11631
+ CredentialRecoveryPolicyRequest: {
11632
+ enabled?: boolean;
11633
+ require_admin_approval?: boolean;
11634
+ delay_hours?: number;
11635
+ allowed_types?: ("mfa_reset" | "passkey_reset" | "password_reset")[];
11636
+ };
11637
+ ShamirKekSetupRequest: {
11638
+ /**
11639
+ * @description Minimum shares required to reconstruct the KEK
11640
+ * @enum {integer}
11641
+ */
11642
+ threshold: 2 | 3;
11643
+ /**
11644
+ * @description Total number of shares to generate
11645
+ * @enum {integer}
11646
+ */
11647
+ total_shares: 3 | 5;
11648
+ /** @description Email addresses of share custodians */
11649
+ custodian_emails: string[];
11650
+ };
11651
+ ShamirKekSetupResponse: {
11652
+ kek_id?: string;
11653
+ threshold?: number;
11654
+ total_shares?: number;
11655
+ /** @description One-time share distribution (never returned again) */
11656
+ shares?: {
11657
+ index?: number;
11658
+ /** Format: email */
11659
+ custodian_email?: string;
11660
+ /** @description Base64-encoded share */
11661
+ share_b64?: string;
11662
+ }[];
11663
+ custody_mode?: string;
11664
+ /** Format: date-time */
11665
+ created_at?: string;
11666
+ };
11667
+ ShamirKekStatusResponse: {
11668
+ configured?: boolean;
11669
+ kek_id?: string | null;
11670
+ threshold?: number | null;
11671
+ total_shares?: number | null;
11672
+ custody_mode?: string | null;
11673
+ custodians?: {
11674
+ /** Format: email */
11675
+ email?: string;
11676
+ share_provided?: boolean;
11677
+ }[] | null;
11678
+ /** Format: date-time */
11679
+ created_at?: string | null;
11680
+ };
11681
+ ShamirKekReconstructRequest: {
11682
+ shares: {
11683
+ index: number;
11684
+ /** @description Base64-encoded share */
11685
+ share_b64: string;
11686
+ }[];
11687
+ };
11688
+ ShamirKekReconstructResponse: {
11689
+ /** @enum {string} */
11690
+ status?: "accepted" | "reconstructed";
11691
+ message?: string;
11692
+ };
11693
+ ShamirKekRecoveryCodesResponse: {
11694
+ codes?: string[];
11695
+ };
11696
+ ShamirKekVerifyCodeRequest: {
11697
+ code: string;
11698
+ };
11699
+ ShamirKekVerifyCodeResponse: {
11700
+ valid?: boolean;
11701
+ };
11702
+ };
11703
+ responses: {
11704
+ /** @description Invalid request */
11705
+ BadRequest: {
11706
+ headers: {
11707
+ [name: string]: unknown;
11708
+ };
11709
+ content: {
11710
+ "application/json": components["schemas"]["ProblemDetails"];
11711
+ };
11712
+ };
11713
+ /** @description Authentication required or invalid */
11714
+ Unauthorized: {
11715
+ headers: {
11716
+ [name: string]: unknown;
11717
+ };
11718
+ content: {
11719
+ "application/json": components["schemas"]["ProblemDetails"];
11720
+ };
11721
+ };
11722
+ /** @description Insufficient permissions */
11723
+ Forbidden: {
11724
+ headers: {
11725
+ [name: string]: unknown;
11726
+ };
11727
+ content: {
11728
+ "application/json": components["schemas"]["ProblemDetails"];
11729
+ };
11730
+ };
11731
+ /** @description Resource not found */
11732
+ NotFound: {
11733
+ headers: {
11734
+ [name: string]: unknown;
11735
+ };
11736
+ content: {
11301
11737
  "application/json": components["schemas"]["ProblemDetails"];
11302
11738
  };
11303
11739
  };
@@ -20737,5 +21173,383 @@ export interface operations {
20737
21173
  403: components["responses"]["Forbidden"];
20738
21174
  };
20739
21175
  };
21176
+ listWalletAccessPolicies: {
21177
+ parameters: {
21178
+ query?: {
21179
+ /** @description Filter by chain (e.g. ethereum, solana) */
21180
+ wallet_chain?: string;
21181
+ /** @description Filter by target agent */
21182
+ target_agent_id?: string;
21183
+ };
21184
+ header?: never;
21185
+ path?: never;
21186
+ cookie?: never;
21187
+ };
21188
+ requestBody?: never;
21189
+ responses: {
21190
+ /** @description Policy list */
21191
+ 200: {
21192
+ headers: {
21193
+ [name: string]: unknown;
21194
+ };
21195
+ content: {
21196
+ "application/json": components["schemas"]["WalletAccessPolicyListResponse"];
21197
+ };
21198
+ };
21199
+ 401: components["responses"]["Unauthorized"];
21200
+ };
21201
+ };
21202
+ createWalletAccessPolicy: {
21203
+ parameters: {
21204
+ query?: never;
21205
+ header?: never;
21206
+ path?: never;
21207
+ cookie?: never;
21208
+ };
21209
+ requestBody: {
21210
+ content: {
21211
+ "application/json": components["schemas"]["CreateWalletAccessPolicyRequest"];
21212
+ };
21213
+ };
21214
+ responses: {
21215
+ /** @description Policy created */
21216
+ 201: {
21217
+ headers: {
21218
+ [name: string]: unknown;
21219
+ };
21220
+ content: {
21221
+ "application/json": components["schemas"]["WalletAccessPolicyResponse"];
21222
+ };
21223
+ };
21224
+ 400: components["responses"]["BadRequest"];
21225
+ 401: components["responses"]["Unauthorized"];
21226
+ 403: components["responses"]["Forbidden"];
21227
+ };
21228
+ };
21229
+ deleteWalletAccessPolicy: {
21230
+ parameters: {
21231
+ query?: never;
21232
+ header?: never;
21233
+ path: {
21234
+ id: string;
21235
+ };
21236
+ cookie?: never;
21237
+ };
21238
+ requestBody?: never;
21239
+ responses: {
21240
+ /** @description Policy deleted */
21241
+ 204: {
21242
+ headers: {
21243
+ [name: string]: unknown;
21244
+ };
21245
+ content?: never;
21246
+ };
21247
+ 401: components["responses"]["Unauthorized"];
21248
+ 403: components["responses"]["Forbidden"];
21249
+ 404: components["responses"]["NotFound"];
21250
+ };
21251
+ };
21252
+ requestCredentialRecovery: {
21253
+ parameters: {
21254
+ query?: never;
21255
+ header?: never;
21256
+ path?: never;
21257
+ cookie?: never;
21258
+ };
21259
+ requestBody: {
21260
+ content: {
21261
+ "application/json": components["schemas"]["CredentialRecoveryRequest"];
21262
+ };
21263
+ };
21264
+ responses: {
21265
+ /** @description Recovery request created */
21266
+ 201: {
21267
+ headers: {
21268
+ [name: string]: unknown;
21269
+ };
21270
+ content: {
21271
+ "application/json": components["schemas"]["CredentialRecoveryResponse"];
21272
+ };
21273
+ };
21274
+ 400: components["responses"]["BadRequest"];
21275
+ 401: components["responses"]["Unauthorized"];
21276
+ };
21277
+ };
21278
+ listCredentialRecoveryRequests: {
21279
+ parameters: {
21280
+ query?: {
21281
+ /** @description Filter by status */
21282
+ status?: "pending_approval" | "approved" | "rejected" | "expired";
21283
+ };
21284
+ header?: never;
21285
+ path?: never;
21286
+ cookie?: never;
21287
+ };
21288
+ requestBody?: never;
21289
+ responses: {
21290
+ /** @description Recovery request list */
21291
+ 200: {
21292
+ headers: {
21293
+ [name: string]: unknown;
21294
+ };
21295
+ content: {
21296
+ "application/json": components["schemas"]["CredentialRecoveryListResponse"];
21297
+ };
21298
+ };
21299
+ 401: components["responses"]["Unauthorized"];
21300
+ 403: components["responses"]["Forbidden"];
21301
+ };
21302
+ };
21303
+ approveCredentialRecovery: {
21304
+ parameters: {
21305
+ query?: never;
21306
+ header?: never;
21307
+ path: {
21308
+ id: string;
21309
+ };
21310
+ cookie?: never;
21311
+ };
21312
+ requestBody?: never;
21313
+ responses: {
21314
+ /** @description Request approved */
21315
+ 200: {
21316
+ headers: {
21317
+ [name: string]: unknown;
21318
+ };
21319
+ content: {
21320
+ "application/json": components["schemas"]["CredentialRecoveryApproveResponse"];
21321
+ };
21322
+ };
21323
+ 401: components["responses"]["Unauthorized"];
21324
+ 403: components["responses"]["Forbidden"];
21325
+ 404: components["responses"]["NotFound"];
21326
+ };
21327
+ };
21328
+ executeCredentialRecovery: {
21329
+ parameters: {
21330
+ query?: never;
21331
+ header?: never;
21332
+ path: {
21333
+ id: string;
21334
+ };
21335
+ cookie?: never;
21336
+ };
21337
+ requestBody?: never;
21338
+ responses: {
21339
+ /** @description Recovery executed */
21340
+ 200: {
21341
+ headers: {
21342
+ [name: string]: unknown;
21343
+ };
21344
+ content: {
21345
+ "application/json": components["schemas"]["CredentialRecoveryExecuteResponse"];
21346
+ };
21347
+ };
21348
+ 401: components["responses"]["Unauthorized"];
21349
+ 403: components["responses"]["Forbidden"];
21350
+ 404: components["responses"]["NotFound"];
21351
+ };
21352
+ };
21353
+ cancelCredentialRecovery: {
21354
+ parameters: {
21355
+ query?: never;
21356
+ header?: never;
21357
+ path: {
21358
+ id: string;
21359
+ };
21360
+ cookie?: never;
21361
+ };
21362
+ requestBody?: never;
21363
+ responses: {
21364
+ /** @description Request cancelled */
21365
+ 204: {
21366
+ headers: {
21367
+ [name: string]: unknown;
21368
+ };
21369
+ content?: never;
21370
+ };
21371
+ 401: components["responses"]["Unauthorized"];
21372
+ 403: components["responses"]["Forbidden"];
21373
+ 404: components["responses"]["NotFound"];
21374
+ };
21375
+ };
21376
+ getCredentialRecoveryPolicy: {
21377
+ parameters: {
21378
+ query?: never;
21379
+ header?: never;
21380
+ path?: never;
21381
+ cookie?: never;
21382
+ };
21383
+ requestBody?: never;
21384
+ responses: {
21385
+ /** @description Recovery policy */
21386
+ 200: {
21387
+ headers: {
21388
+ [name: string]: unknown;
21389
+ };
21390
+ content: {
21391
+ "application/json": components["schemas"]["CredentialRecoveryPolicyResponse"];
21392
+ };
21393
+ };
21394
+ 401: components["responses"]["Unauthorized"];
21395
+ };
21396
+ };
21397
+ updateCredentialRecoveryPolicy: {
21398
+ parameters: {
21399
+ query?: never;
21400
+ header?: never;
21401
+ path?: never;
21402
+ cookie?: never;
21403
+ };
21404
+ requestBody: {
21405
+ content: {
21406
+ "application/json": components["schemas"]["CredentialRecoveryPolicyRequest"];
21407
+ };
21408
+ };
21409
+ responses: {
21410
+ /** @description Policy updated */
21411
+ 200: {
21412
+ headers: {
21413
+ [name: string]: unknown;
21414
+ };
21415
+ content: {
21416
+ "application/json": components["schemas"]["CredentialRecoveryPolicyResponse"];
21417
+ };
21418
+ };
21419
+ 400: components["responses"]["BadRequest"];
21420
+ 401: components["responses"]["Unauthorized"];
21421
+ 403: components["responses"]["Forbidden"];
21422
+ };
21423
+ };
21424
+ setupShamirKek: {
21425
+ parameters: {
21426
+ query?: never;
21427
+ header?: never;
21428
+ path?: never;
21429
+ cookie?: never;
21430
+ };
21431
+ requestBody: {
21432
+ content: {
21433
+ "application/json": components["schemas"]["ShamirKekSetupRequest"];
21434
+ };
21435
+ };
21436
+ responses: {
21437
+ /** @description Shamir KEK configured (shares returned one-time) */
21438
+ 201: {
21439
+ headers: {
21440
+ [name: string]: unknown;
21441
+ };
21442
+ content: {
21443
+ "application/json": components["schemas"]["ShamirKekSetupResponse"];
21444
+ };
21445
+ };
21446
+ 400: components["responses"]["BadRequest"];
21447
+ 401: components["responses"]["Unauthorized"];
21448
+ 403: components["responses"]["Forbidden"];
21449
+ };
21450
+ };
21451
+ getShamirKekStatus: {
21452
+ parameters: {
21453
+ query?: never;
21454
+ header?: never;
21455
+ path?: never;
21456
+ cookie?: never;
21457
+ };
21458
+ requestBody?: never;
21459
+ responses: {
21460
+ /** @description Shamir KEK status */
21461
+ 200: {
21462
+ headers: {
21463
+ [name: string]: unknown;
21464
+ };
21465
+ content: {
21466
+ "application/json": components["schemas"]["ShamirKekStatusResponse"];
21467
+ };
21468
+ };
21469
+ 401: components["responses"]["Unauthorized"];
21470
+ };
21471
+ };
21472
+ reconstructShamirKek: {
21473
+ parameters: {
21474
+ query?: never;
21475
+ header?: never;
21476
+ path?: never;
21477
+ cookie?: never;
21478
+ };
21479
+ requestBody: {
21480
+ content: {
21481
+ "application/json": components["schemas"]["ShamirKekReconstructRequest"];
21482
+ };
21483
+ };
21484
+ responses: {
21485
+ /** @description Reconstruction result */
21486
+ 200: {
21487
+ headers: {
21488
+ [name: string]: unknown;
21489
+ };
21490
+ content: {
21491
+ "application/json": components["schemas"]["ShamirKekReconstructResponse"];
21492
+ };
21493
+ };
21494
+ 400: components["responses"]["BadRequest"];
21495
+ 401: components["responses"]["Unauthorized"];
21496
+ 403: components["responses"]["Forbidden"];
21497
+ };
21498
+ };
21499
+ getShamirKekRecoveryCodes: {
21500
+ parameters: {
21501
+ query?: never;
21502
+ header?: never;
21503
+ path?: never;
21504
+ cookie?: never;
21505
+ };
21506
+ requestBody?: never;
21507
+ responses: {
21508
+ /** @description Recovery codes (one-time) */
21509
+ 200: {
21510
+ headers: {
21511
+ [name: string]: unknown;
21512
+ };
21513
+ content: {
21514
+ "application/json": components["schemas"]["ShamirKekRecoveryCodesResponse"];
21515
+ };
21516
+ };
21517
+ 401: components["responses"]["Unauthorized"];
21518
+ 403: components["responses"]["Forbidden"];
21519
+ /** @description Codes already retrieved */
21520
+ 410: {
21521
+ headers: {
21522
+ [name: string]: unknown;
21523
+ };
21524
+ content?: never;
21525
+ };
21526
+ };
21527
+ };
21528
+ verifyShamirKekRecoveryCode: {
21529
+ parameters: {
21530
+ query?: never;
21531
+ header?: never;
21532
+ path?: never;
21533
+ cookie?: never;
21534
+ };
21535
+ requestBody: {
21536
+ content: {
21537
+ "application/json": components["schemas"]["ShamirKekVerifyCodeRequest"];
21538
+ };
21539
+ };
21540
+ responses: {
21541
+ /** @description Verification result */
21542
+ 200: {
21543
+ headers: {
21544
+ [name: string]: unknown;
21545
+ };
21546
+ content: {
21547
+ "application/json": components["schemas"]["ShamirKekVerifyCodeResponse"];
21548
+ };
21549
+ };
21550
+ 400: components["responses"]["BadRequest"];
21551
+ 401: components["responses"]["Unauthorized"];
21552
+ };
21553
+ };
20740
21554
  }
20741
21555
  //# sourceMappingURL=api-types.d.ts.map