@1claw/sdk 0.41.1 → 0.41.2

package/README.md

@@ -322,6 +322,32 @@ When `execution_require_tee` is true:
 
 Both require `intents_api_enabled` / `execution_intents_enabled` to be on first.
 
+### Overhead Budget and Transaction Count Limits
+
+Protect against non-value drain attacks (ATA rent drain, XRP reserve exhaustion, Tron energy drain):
+
+```typescript
+await client.agents.update(agentId, {
+    tx_max_per_day: 100,                     // Cap transactions per UTC day
+    tx_overhead_budget: {                    // Per-chain non-value cost budgets (native units)
+        solana: "0.5",
+        xrp: "100",
+        ethereum: "0.01",
+    },
+    solana_ata_allowlist: [                  // Only these addresses may have ATAs created
+        "7nYzKqAqfaGEhN6oeKCQVFjduQ9qH1dWs2gVFkNKBpQF",
+    ],
+    per_chain_guardrails: {                  // Per-chain overrides
+        solana: { max_per_day: 20, overhead_budget: "0.2", max_ata_creates_per_day: 5 },
+    },
+});
+
+// Check current spend:
+const agent = await client.agents.get(agentId);
+console.log(agent.data?.tx_count_today);           // e.g. 42
+console.log(agent.data?.tx_overhead_today_by_chain); // e.g. { "solana": "0.12" }
+```
+
 ## OIDC Federation (Anthropic WIF, GCP STS, AWS STS)
 
 `https://api.1claw.xyz` is a fully OpenID Connect–compliant issuer. External relying parties — Anthropic Workload Identity Federation, GCP STS, AWS STS, Stytch, etc. — can validate 1claw-issued JWTs by fetching:

package/dist/generated/api-types.d.ts

@@ -5033,12 +5033,20 @@ export interface components {
             xrpl_allowed_tx_types?: string[];
             /**
              * @description Per-chain guardrail overrides. Keys are signing chains (ethereum, bitcoin, solana, xrp, cardano, tron).
-             *     Each value may include max_value, daily_limit, to_allowlist, token_allowlist (legacy *_eth keys accepted).
+             *     Each value may include max_value, daily_limit, to_allowlist, token_allowlist, max_per_day, overhead_budget, max_ata_creates_per_day.
              *     Strictest of global and per-chain limits wins. Daily limits apply per chain family spend, not cross-chain totals.
              */
             per_chain_guardrails?: {
                 [key: string]: unknown;
             };
+            /** @description Max transactions per UTC calendar day. Null = unlimited. */
+            tx_max_per_day?: number | null;
+            /** @description Per-chain daily overhead budget in native units (e.g. {"solana":"0.5","xrp":"100"}). */
+            tx_overhead_budget?: {
+                [key: string]: string;
+            } | null;
+            /** @description Solana wallet addresses whose ATAs may be created. Empty = unrestricted. */
+            solana_ata_allowlist?: string[];
             /**
              * Format: date-time
              * @description Optional expiration time for the agent's API key.
@@ -5083,6 +5091,14 @@ export interface components {
             intents_require_tee?: boolean;
             /** @description When true, execute requests must arrive via TEE and all direct secret reads are blocked (Pro+ only) */
             execution_require_tee?: boolean;
+            /** @description Max transactions per UTC calendar day. Null = unlimited. */
+            tx_max_per_day?: number | null;
+            /** @description Per-chain daily overhead budget in native units. */
+            tx_overhead_budget?: {
+                [key: string]: string;
+            } | null;
+            /** @description Solana wallet addresses whose ATAs may be created. */
+            solana_ata_allowlist?: string[];
             /**
              * @description Enable OIDC federation (RFC 8693 token-exchange) for this agent.
              *     When true, the agent may call POST /v1/auth/federated-token to mint
@@ -5182,6 +5198,20 @@ export interface components {
             intents_require_tee?: boolean;
             /** @description When true, execute requests must arrive via TEE and all direct secret reads are blocked (Pro+ only) */
             execution_require_tee?: boolean;
+            /** @description Max transactions per UTC calendar day. Null = unlimited. */
+            tx_max_per_day?: number | null;
+            /** @description Per-chain daily overhead budget in native units. */
+            tx_overhead_budget?: {
+                [key: string]: string;
+            } | null;
+            /** @description Solana wallet addresses whose ATAs may be created. */
+            solana_ata_allowlist?: string[];
+            /** @description Today's transaction count (UTC calendar day). Present when intents_api_enabled. */
+            tx_count_today?: number;
+            /** @description Today's overhead spend by chain in native units. */
+            tx_overhead_today_by_chain?: {
+                [key: string]: string;
+            };
             /**
              * @description Whether this agent may mint OIDC federation tokens via
              *     POST /v1/auth/federated-token. False by default.