AgenTrux Connections API

openapi: 3.2.0
info:
  title: AgenTrux Connections API
  version: 0.1.0
tags:
- name: Connections
paths:
  /console/connections/device-codes:
    get:
      tags:
      - Connections
      summary: List Device Codes
      description: '自分が approve 済 + 未 consumed + 未 expired な device flow session を list。


        返却 field:

        - device_code: 安全のため先頭 12 文字 + "..." のみ (full 値は audit/internal 用)

        - client_id / client_name: 接続元 OAuth client (DCR や MCP server)

        - selected_owner_alias_id: approve 時に user が選んだ owner alias (cross-account 経由時)

        - approved_at / expires_at'
      operationId: list_device_codes_console_connections_device_codes_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response List Device Codes Console Connections Device Codes Get
  /console/connections/device-codes/{device_code_prefix}:
    delete:
      tags:
      - Connections
      summary: Revoke Device Code
      description: '自分が approve した device flow session を opaque prefix で revoke。


        Codex W.7 review #1 反映: URL path に device_code 実値を載せない (browser

        history / proxy log / tracing への露出回避)。 list が返す `device_code_prefix`

        (12 文字) を path で受け、 LIKE 検索で照合 + 自分所有 + active 限定で revoke。


        制約:

        - prefix length は 8-32 文字に validate (悪意の length 0 を 404 ではなく 422)

        - 自分が approve した + active な session のみ revoke (A4 で他人は 404 隠蔽)

        - 同 prefix 複数 match は全 revoke (token_urlsafe(48) で collision は実用上稀)

        - revoke 実装は `revoked_at = now()` (migration 0054、 Codex W.7 review #3)。 token と

        未交換のまま user が取り消した状態を 「consumed (= 交換済)」 と区別する

        - state-conditional UPDATE の rowcount を確認、 race で 0 になったら 404'
      operationId: revoke_device_code_console_connections_device_codes__device_code_prefix__delete
      parameters:
      - name: device_code_prefix
        in: path
        required: true
        schema:
          type: string
          title: Device Code Prefix
      responses:
        '204':
          description: Successful Response
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /console/connections/activation-codes:
    get:
      tags:
      - Connections
      summary: List Activation Codes
      description: '自分が所有 (script owner alias の account ∋ caller) する未 consumed activation_code を list。


        返却 field:

        - activation_code_id (UUID)

        - script_id / script_name

        - expires_at / created_at

        - code_hash は露出しない (privacy)'
      operationId: list_activation_codes_console_connections_activation_codes_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response List Activation Codes Console Connections Activation Codes Get
  /console/connections/activation-codes/{ac_id}:
    delete:
      tags:
      - Connections
      summary: Revoke Activation Code
      description: '自分の script に紐付く activation_code を revoke (soft delete: consumed_at = now())。'
      operationId: revoke_activation_code_console_connections_activation_codes__ac_id__delete
      parameters:
      - name: ac_id
        in: path
        required: true
        schema:
          type: string
          title: Ac Id
      responses:
        '204':
          description: Successful Response
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /console/connections/authorization-requests:
    get:
      tags:
      - Connections
      summary: List Authorization Requests
      description: '自分宛 (user_id = caller) で pending な consent request を list。


        pending = consumed_at NULL かつ denied_at NULL かつ expires_at > now()。'
      operationId: list_authorization_requests_console_connections_authorization_requests_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response List Authorization Requests Console Connections Authorization Requests Get
  /console/connections/authorization-requests/{request_id}:
    delete:
      tags:
      - Connections
      summary: Revoke Authorization Request
      description: 自分宛の pending consent request を revoke (denied_at = now()、 reason=revoked_by_user)。
      operationId: revoke_authorization_request_console_connections_authorization_requests__request_id__delete
      parameters:
      - name: request_id
        in: path
        required: true
        schema:
          type: string
          title: Request Id
      responses:
        '204':
          description: Successful Response
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError