@1claw/sdk 0.32.0 → 0.32.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1465,8 +1465,14 @@ export interface paths {
1465
1465
  /**
1466
1466
  * Lease a short-lived Bankr wallet API key
1467
1467
  * @description Provision a scoped, time-limited Bankr wallet API key for an agent.
1468
- * Requires `BANKR_PARTNER_KEY` configured on the Vault service.
1469
- * Default TTL 1 hour, max 24 hours. Max 5 concurrent leases per agent.
1468
+ * **Privileged, deny-by-default:** agent callers need an explicit access policy
1469
+ * on `agents/{agent_id}/bankr/*` in the `__agent-keys` vault (JWT scope
1470
+ * `agents/{agent_id}/bankr/lease`). Agents may only lease for their own ID.
1471
+ * The `bk_usr_` key is **omitted** from the JSON response for agent JWTs —
1472
+ * stored server-side for Shroud resolution. Human callers receive `api_key` once.
1473
+ * Requires `BANKR_PARTNER_KEY` on Vault. Agent default TTL 15 min when omitted;
1474
+ * human/org default 1 hour (`BANKR_DEFAULT_LEASE_TTL_SECS`). Recommend 5–15 min
1475
+ * for autonomous agents. Max TTL 24 hours. Max 5 concurrent leases per agent.
1470
1476
  */
1471
1477
  post: operations["leaseBankrKey"];
1472
1478
  delete?: never;
@@ -4912,7 +4918,7 @@ export interface components {
4912
4918
  LeaseBankrKeyResponse: {
4913
4919
  /** Format: uuid */
4914
4920
  lease_id?: string;
4915
- /** @description Ephemeral bk_usr_ key (one-time display). */
4921
+ /** @description Ephemeral bk_usr_ key. Present for human callers only; omitted for agent JWTs. */
4916
4922
  api_key?: string;
4917
4923
  wallet_id?: string;
4918
4924
  /** Format: date-time */