@1claw/sdk 0.58.2 → 0.59.2

package/README.md

@@ -1,4 +1,4 @@
-# @1claw/sdk (v0.58.2)
+# @1claw/sdk (v0.59.2)
 
 TypeScript/JavaScript client for the 1Claw Vault API.
 
@@ -96,7 +96,7 @@ await client.auth.verifyEmailChange({ code: "123456" });
 | `client.approvals` | `request`, `list`, `approve`, `deny`, `check`, `subscribe`                                                          |
 | `client.billing`   | `usage`, `history`, `llmTokenBilling`, `subscribeLlmTokenBilling`, `disableLlmTokenBilling` (LLM token billing / Stripe AI Gateway) |
 | `client.audit`     | `query`                                                                                                             |
-| `client.org`       | `listMembers`, `getAgentKeysVault`, `updateMemberRole`, `removeMember`                                              |
+| `client.org`       | `listMembers`, `getAgentKeysVault`, `getOnboardingStatus`, `provisionOnboarding`, `updateMemberRole`, `removeMember` |
 | `client.auth`      | `login`, `signup`, `agentToken`, `apiKeyToken`, `google`, `socialLogin`, `sendEmailOtp`, `verifyEmailOtp`, `exchangeOAuthCode`, `revokeToken`, `revokeConsent`, `getUserInfo`, `changePassword`, `setPassword`, `changeEmail`, `verifyEmailChange`, `forgotPassword`, `resetPassword`, `exportData`, `exchangeFederatedToken`, `logout`, `getMe`, `updateMe`, `deleteMe` |
 | `client.apiKeys`   | `create`, `list`, `revoke`                                                                                          |
 | `client.treasury`  | `create`, `list`, `get`, `update`, `delete`, `addSigner`, `removeSigner`, `requestAccess`, `listAccessRequests`, `approveAccess`, `denyAccess`, `propose`, `listProposals`, `getProposal`, `signProposal`, `executeProposal` |
@@ -1063,6 +1063,26 @@ await client.platform.deactivateConnectionSigningKey(connectionId, "ethereum", a
 // setUserSpendPolicy(connectionId, data, { idempotencyKey: "..." }) — 24h replay protection
 ```
 
+## v0.59 — Fathom platform integration
+
+Connection-scoped runtime, passkey enroll, and agent `system_prompt`:
+
+```typescript
+await client.platform.getConnectionRuntime(connectionId, runtimeId);
+await client.platform.connectionPasskeyEnrollBegin(connectionId);
+await client.platform.connectionPasskeyEnrollComplete(connectionId, {
+    credential_id: "...",
+    attestation_object: "...",
+    client_data_json: "...",
+});
+await client.platform.connectionAgentChat(connectionId, agentId, {
+    message: "Hello",
+    system_prompt: "You are helpful.",
+});
+await client.agents.create({ name: "bot", system_prompt: "Default persona" });
+// getConnection() includes provisioned_tier when billing_model is platform_pays
+```
+
 ## OpenAPI Types
 
 The SDK's request types are generated from the **OpenAPI 3.1** spec, published as [@1claw/openapi-spec](https://www.npmjs.com/package/@1claw/openapi-spec). Advanced users can access the raw generated types:

package/dist/generated/api-types.d.ts

@@ -2360,6 +2360,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/org/onboarding/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Onboarding funnel status
+         * @description Returns welcome-bundle and MCP connection progress for the connect wizard.
+         */
+        get: operations["getOnboardingStatus"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/onboarding/provision": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Provision MCP onboarding bundle
+         * @description Creates welcome vault + sample secret, MCP agent, and default ** policy. Returns one-time API key and stdio MCP config.
+         */
+        post: operations["provisionOnboarding"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/org/status": {
         parameters: {
             query?: never;
@@ -4353,7 +4393,9 @@ export interface paths {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PlatformConnectedUserResponse"][];
+                        "application/json": {
+                            users: components["schemas"]["PlatformConnectedUserResponse"][];
+                        };
                     };
                 };
             };
@@ -5259,6 +5301,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/platform/connections/{connectionId}/signing-keys": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List signing keys for a connection agent
+         * @description Returns public signing-key metadata (chain, address, public_key, curve) for
+         *     agent(s) provisioned on the connection. Never includes private keys.
+         *     When multiple agents exist, pass `agent_id` query param. plt_ auth only.
+         */
+        get: operations["listConnectionSigningKeys"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/platform/connections/{connectionId}/signing-keys/{chain}": {
         parameters: {
             query?: never;
@@ -5266,7 +5330,12 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        get?: never;
+        /**
+         * Get a signing key for a connection agent by chain
+         * @description Returns public signing-key metadata for one chain on a connection agent.
+         *     Never includes private keys. plt_ auth only.
+         */
+        get: operations["getConnectionSigningKey"];
         put?: never;
         post?: never;
         /**
@@ -5302,6 +5371,65 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/platform/connections/{connectionId}/runtimes/{runtimeId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get a connection runtime (plt_ scoped)
+         * @description Returns a runtime provisioned on this connection. Use instead of
+         *     `GET /v1/runtimes/{id}` with a plt_ key (which resolves to the platform org).
+         */
+        get: operations["getConnectionRuntime"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/platform/connections/{connectionId}/passkeys/enroll/begin": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Begin passkey enrollment for a connected user
+         * @description Starts WebAuthn registration for the end-user on this connection.
+         *     Platform apps use this instead of `POST /v1/auth/passkeys/register/begin` (user JWT only).
+         */
+        post: operations["connectionPasskeyEnrollBegin"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/platform/connections/{connectionId}/passkeys/enroll/complete": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Complete passkey enrollment for a connected user */
+        post: operations["connectionPasskeyEnrollComplete"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/platform/connections/{connectionId}/agents/{agentId}/chat": {
         parameters: {
             query?: never;
@@ -8535,6 +8663,8 @@ export interface components {
              */
             shroud_enabled: boolean;
             shroud_config?: components["schemas"]["ShroudConfig"];
+            /** @description Default system prompt for agent chat when requests do not override it. */
+            system_prompt?: string;
             /**
              * @description Enable Execution Intents (bindings and execute endpoint) for this agent
              * @default false
@@ -8696,6 +8826,8 @@ export interface components {
             /** @description Enable/disable Shroud LLM Proxy */
             shroud_enabled?: boolean;
             shroud_config?: components["schemas"]["ShroudConfig"];
+            /** @description Default system prompt for agent chat (null clears). */
+            system_prompt?: string | null;
             /** @description Enable/disable Execution Intents for this agent */
             execution_intents_enabled?: boolean;
             /** @description Guardrails applied to all execution intents for this agent */
@@ -8876,6 +9008,8 @@ export interface components {
             /** @description Whether this agent routes LLM traffic through the Shroud TEE proxy */
             shroud_enabled: boolean;
             shroud_config?: components["schemas"]["ShroudConfig"];
+            /** @description Default system prompt for agent chat when requests do not override it. */
+            system_prompt?: string;
             /** @description Whether Execution Intents (bindings and execute endpoint) are enabled for this agent */
             execution_intents_enabled?: boolean;
             /** @description Guardrails applied to all execution intents for this agent */
@@ -9557,6 +9691,25 @@ export interface components {
         SigningKeyListResponse: {
             keys?: components["schemas"]["SigningKeyResponse"][];
         };
+        ConnectionSigningKeyPublic: {
+            chain?: string;
+            address?: string;
+            public_key?: string;
+            curve?: string;
+        };
+        ConnectionSigningKeyListResponse: {
+            /** Format: uuid */
+            agent_id?: string;
+            keys?: components["schemas"]["ConnectionSigningKeyPublic"][];
+        };
+        ConnectionSigningKeyDetailResponse: {
+            /** Format: uuid */
+            agent_id?: string;
+            chain?: string;
+            address?: string;
+            public_key?: string;
+            curve?: string;
+        };
         LeaseBankrKeyRequest: {
             /** @description Bankr wallet ID (wlt_...). Uses org default if omitted. */
             wallet_id?: string;
@@ -9917,6 +10070,29 @@ export interface components {
             message?: string;
             email?: string;
         };
+        OnboardingStatus: {
+            has_vault: boolean;
+            has_agent: boolean;
+            has_policy: boolean;
+            has_sample_secret: boolean;
+            first_secret_read: boolean;
+            welcome_bundle_complete: boolean;
+            /** Format: uuid */
+            default_vault_id?: string | null;
+        };
+        OnboardingProvisionRequest: {
+            agent_name?: string;
+            client?: string;
+        };
+        OnboardingProvisionResponse: {
+            /** Format: uuid */
+            agent_id: string;
+            api_key: string;
+            /** Format: uuid */
+            vault_id: string;
+            mcp_stdio_config: Record<string, never>;
+            verify_prompt: string;
+        };
         AgentKeysVaultResponse: {
             /** Format: uuid */
             vault_id?: string;
@@ -10713,6 +10889,8 @@ export interface components {
              * @description Optional expiration time for the platform API key. Set to null to clear.
              */
             api_key_expires_at?: string | null;
+            /** @description Hostname allowed in SIWE messages for wallet sign-in (EIP-4361). */
+            siwe_domain?: string | null;
         };
         PlatformAppDeleteResponse: {
             deleted: boolean;
@@ -10765,6 +10943,8 @@ export interface components {
              * @description When the platform API key was last rotated.
              */
             api_key_rotated_at?: string | null;
+            /** @description Hostname allowed in SIWE messages for wallet sign-in (EIP-4361). */
+            siwe_domain?: string | null;
             /** Format: date-time */
             created_at?: string;
             /** Format: date-time */
@@ -10779,12 +10959,21 @@ export interface components {
             description?: string;
             /**
              * @description Template specification defining vault, agents, policies, and signing keys to bootstrap.
-             *     Top-level fields: `vault` (object with name, description), `agents` (array of agent specs
-             *     with name, description, shroud_enabled, intents, shroud_config), `policies` (array with
-             *     vault_ref, principal_ref, paths, permissions, conditions), and `signing_keys` (array of
-             *     `{ chain }` objects — supported chains: ethereum, bitcoin, solana, xrp, cardano, tron).
-             *     When `signing_keys` is present, HSM-backed signing keys are auto-provisioned for the
-             *     bootstrapped agent.
+             *     Top-level fields: `vault` (object with name, description), `agents` (array of agent specs),
+             *     `policies` (array with vault_ref, principal_ref, paths, permissions, conditions), and
+             *     `signing_keys` (array of `{ chain }` objects — supported chains: ethereum, bitcoin, solana,
+             *     xrp, cardano, tron). When `signing_keys` is present, HSM-backed signing keys are
+             *     auto-provisioned for the bootstrapped agent.
+             *
+             *     Each agent entry accepts Intents API and Execution Intents flags under any of these aliases
+             *     (direct API field name, boolean shorthand, or `{ enabled: true }` object):
+             *     - Intents API → `intents_api_enabled`, `intents: true`, or `intents: { enabled: true }`
+             *       (maps to `agents.intents_api_enabled`)
+             *     - Execution Intents → `execution_intents_enabled`, `execution: true`, or
+             *       `execution: { enabled: true }` (maps to `agents.execution_intents_enabled`)
+             *
+             *     Other agent fields: `name`, `description`, `shroud_enabled`, `shroud_config`, `system_prompt`,
+             *     `environment`, `signing_keys`, `provision_eoa`, `memory`, `runtime`, `default_llm_provider`.
              */
             spec: Record<string, never>;
         };
@@ -11271,6 +11460,11 @@ export interface components {
             user_id: string;
             status: string;
             entitlement_status: string;
+            /**
+             * @description Billing tier granted to the end-user org when billing_model is platform_pays
+             *     (from template plan at bootstrap). Null when not provisioned.
+             */
+            provisioned_tier?: string | null;
             wallet_address?: string | null;
             vault_ids: string[];
             agent_ids: string[];
@@ -11390,6 +11584,30 @@ export interface components {
             /** @description Number of WebAuthn passkeys registered for the calling user. */
             registered_passkeys: number;
         };
+        PasskeyRegisterBeginResponse: {
+            challenge?: string;
+            rp_id?: string;
+            rp_name?: string;
+            user_id?: string;
+            user_name?: string;
+            user_display_name?: string;
+            attestation?: string;
+            authenticator_selection?: Record<string, never>;
+            pub_key_cred_params?: Record<string, never>[];
+        };
+        PasskeyRegisterCompleteRequest: {
+            credential_id: string;
+            attestation_object: string;
+            client_data_json: string;
+            transports?: string[];
+            name?: string;
+        };
+        PasskeyRegisterCompleteResponse: {
+            /** Format: uuid */
+            passkey_id?: string;
+            credential_id?: string;
+            name?: string;
+        };
         PasskeyTxAssertBeginRequest: {
             /** @description 64-char hex SHA-256 of canonical send or swap params */
             tx_digest: string;
@@ -12149,13 +12367,26 @@ export interface components {
             public_tags?: string[];
         };
         SendChatMessageRequest: {
-            message: string;
+            /** @description User message text. Optional when `messages` includes a user turn. */
+            message?: string;
             /** Format: uuid */
             conversation_id?: string;
             mode?: string;
             model?: string;
             provider?: string;
+            /** @description Stored on new conversations when `conversation_id` is omitted. */
             system_prompt?: string;
+            /** @description Per-request system prompt alias (same precedence as `system_prompt_override`). */
+            system?: string;
+            /** @description Per-request override; highest precedence except inline `messages` system role. */
+            system_prompt_override?: string;
+            /** @description Optional OpenAI-shaped history. When set, used for LLM context instead of DB history. */
+            messages?: {
+                role: string;
+                content: string;
+            }[];
+            llm_api_key_vault_id?: string;
+            llm_api_key_path?: string;
         };
         ChatMessageResponse: {
             /** Format: uuid */
@@ -17514,6 +17745,50 @@ export interface operations {
             };
         };
     };
+    getOnboardingStatus: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Onboarding status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OnboardingStatus"];
+                };
+            };
+        };
+    };
+    provisionOnboarding: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["OnboardingProvisionRequest"];
+            };
+        };
+        responses: {
+            /** @description Provisioned resources */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OnboardingProvisionResponse"];
+                };
+            };
+        };
+    };
     getOrgStatus: {
         parameters: {
             query?: never;
@@ -20113,6 +20388,71 @@ export interface operations {
             };
         };
     };
+    listConnectionSigningKeys: {
+        parameters: {
+            query?: {
+                agent_id?: string;
+            };
+            header?: never;
+            path: {
+                connectionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Signing keys for the connection agent */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ConnectionSigningKeyListResponse"];
+                };
+            };
+            /** @description Multiple agents — agent_id required */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            404: components["responses"]["NotFound"];
+        };
+    };
+    getConnectionSigningKey: {
+        parameters: {
+            query?: {
+                agent_id?: string;
+            };
+            header?: never;
+            path: {
+                connectionId: string;
+                chain: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Signing key metadata */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ConnectionSigningKeyDetailResponse"];
+                };
+            };
+            /** @description Multiple agents — agent_id required */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            404: components["responses"]["NotFound"];
+        };
+    };
     deactivateConnectionSigningKey: {
         parameters: {
             query?: {
@@ -20172,6 +20512,81 @@ export interface operations {
             404: components["responses"]["NotFound"];
         };
     };
+    getConnectionRuntime: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                connectionId: string;
+                runtimeId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Runtime details */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["RuntimeResponse"];
+                };
+            };
+            404: components["responses"]["NotFound"];
+        };
+    };
+    connectionPasskeyEnrollBegin: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                connectionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description WebAuthn registration ceremony options */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PasskeyRegisterBeginResponse"];
+                };
+            };
+            404: components["responses"]["NotFound"];
+        };
+    };
+    connectionPasskeyEnrollComplete: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                connectionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["PasskeyRegisterCompleteRequest"];
+            };
+        };
+        responses: {
+            /** @description Passkey registered */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PasskeyRegisterCompleteResponse"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            404: components["responses"]["NotFound"];
+        };
+    };
     connectionAgentChat: {
         parameters: {
             query?: never;
@@ -20195,6 +20610,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Payment required (LLM billing / inference allowance) */
+            402: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             403: components["responses"]["Forbidden"];
             404: components["responses"]["NotFound"];
         };