@1claw/sdk 0.40.1 → 0.41.1

package/README.md

@@ -300,6 +300,28 @@ Key properties:
 - **Every transaction is audit-logged** with full calldata
 - **Revocable instantly** — set `intents_api_enabled: false` to cut off access
 
+### TEE Enforcement (Pro+)
+
+Lock down agents so signing and execution requests **must** route through the hardware enclave (Shroud TEE). Direct Vault API calls are rejected with 403.
+
+```typescript
+await client.agents.update(agentId, {
+    intents_require_tee: true,    // Only signs within the hardware enclave
+    execution_require_tee: true,  // Only runs within the hardware enclave
+});
+```
+
+When `intents_require_tee` is true:
+- Transaction submit/sign requests to `api.1claw.xyz` are rejected (403)
+- Agents must route through `shroud.1claw.xyz` where signing happens inside TEE memory
+
+When `execution_require_tee` is true:
+- Execute requests to `api.1claw.xyz` are rejected (403)
+- All direct secret reads by the agent are blocked — forces use of Execution Intent bindings
+- Agents must route through `shroud.1claw.xyz`
+
+Both require `intents_api_enabled` / `execution_intents_enabled` to be on first.
+
 ## OIDC Federation (Anthropic WIF, GCP STS, AWS STS)
 
 `https://api.1claw.xyz` is a fully OpenID Connect–compliant issuer. External relying parties — Anthropic Workload Identity Federation, GCP STS, AWS STS, Stytch, etc. — can validate 1claw-issued JWTs by fetching:

package/dist/generated/api-types.d.ts

@@ -5012,6 +5012,16 @@ export interface components {
             execution_guardrails?: {
                 [key: string]: unknown;
             };
+            /**
+             * @description When true, transaction/sign requests must arrive via a TEE host (Pro+ only)
+             * @default false
+             */
+            intents_require_tee: boolean;
+            /**
+             * @description When true, execute requests must arrive via TEE and all direct secret reads are blocked (Pro+ only)
+             * @default false
+             */
+            execution_require_tee: boolean;
             /** @description Token contract/mint addresses this agent may interact with. Empty = unrestricted. */
             tx_token_allowlist?: string[];
             /**
@@ -5069,6 +5079,10 @@ export interface components {
             execution_guardrails?: {
                 [key: string]: unknown;
             };
+            /** @description When true, transaction/sign requests must arrive via a TEE host (Pro+ only) */
+            intents_require_tee?: boolean;
+            /** @description When true, execute requests must arrive via TEE and all direct secret reads are blocked (Pro+ only) */
+            execution_require_tee?: boolean;
             /**
              * @description Enable OIDC federation (RFC 8693 token-exchange) for this agent.
              *     When true, the agent may call POST /v1/auth/federated-token to mint
@@ -5164,6 +5178,10 @@ export interface components {
             execution_guardrails?: {
                 [key: string]: unknown;
             };
+            /** @description When true, transaction/sign requests must arrive via a TEE host (Pro+ only) */
+            intents_require_tee?: boolean;
+            /** @description When true, execute requests must arrive via TEE and all direct secret reads are blocked (Pro+ only) */
+            execution_require_tee?: boolean;
             /**
              * @description Whether this agent may mint OIDC federation tokens via
              *     POST /v1/auth/federated-token. False by default.
@@ -7243,6 +7261,22 @@ export interface components {
         HoneytokenListResponse: {
             honeytokens: components["schemas"]["Honeytoken"][];
         };
+        /** @description Credential source — inline value (stored in __agent-keys) or live pointer to a vault secret (resolved at execution time). */
+        CredentialSource: {
+            /** @enum {string} */
+            type: "inline" | "vault_ref";
+            /** @description For inline — the credential value object. */
+            value?: {
+                [key: string]: unknown;
+            };
+            /**
+             * Format: uuid
+             * @description For vault_ref — the vault containing the referenced secret.
+             */
+            vault_id?: string;
+            /** @description For vault_ref — the secret path in the vault. */
+            path?: string;
+        };
         CreateBindingRequest: {
             name: string;
             /** @enum {string} */
@@ -7253,9 +7287,11 @@ export interface components {
             guardrails?: {
                 [key: string]: unknown;
             };
+            /** @description Legacy: inline credential value. Use credential_source for new integrations. */
             credential?: {
                 [key: string]: unknown;
             };
+            credential_source?: components["schemas"]["CredentialSource"];
         };
         UpdateBindingRequest: {
             config?: {
@@ -7265,9 +7301,11 @@ export interface components {
                 [key: string]: unknown;
             };
             is_active?: boolean;
+            /** @description Legacy: inline credential value. */
             credential?: {
                 [key: string]: unknown;
             };
+            credential_source?: components["schemas"]["CredentialSource"];
         };
         BindingResponse: {
             /** Format: uuid */
@@ -7286,6 +7324,18 @@ export interface components {
             is_active: boolean;
             /** @description Whether a credential is stored for this binding. The value itself is never returned. */
             credential_set?: boolean;
+            /**
+             * @description How the credential is sourced — inline (HSM-encrypted copy) or vault_ref (live pointer).
+             * @enum {string|null}
+             */
+            credential_source_type?: "inline" | "vault_ref" | null;
+            /**
+             * Format: uuid
+             * @description For vault_ref credentials — the vault containing the referenced secret.
+             */
+            credential_vault_id?: string | null;
+            /** @description For vault_ref credentials — the secret path in the referenced vault. */
+            credential_path?: string | null;
             /** Format: date-time */
             created_at: string;
             /** Format: date-time */