@1claw/sdk 0.47.0 → 0.47.3

package/README.md

@@ -792,6 +792,40 @@ Shroud enforces the agent's `allowed_models` and `denied_models` restrictions au
 
 See the [Shroud Security Guide](https://docs.1claw.xyz/docs/guides/shroud) for full configuration options.
 
+## v0.47 — Turnkey Parity
+
+New SDK resources for enterprise and treasury features:
+
+```typescript
+// Unified portfolio across treasury wallets, signing keys, and smart accounts
+const portfolio = await client.portfolio.get({ include_tokens: true });
+
+// Cedar declarative policies (Team+ tier)
+await client.cedarPolicies.create({ name: "allow-read", cedar_text: "permit(...);" });
+await client.cedarPolicies.test({ principal_type: "agent", action: "read", ... });
+
+// OPA Rego policies (Business+ tier)
+await client.opaPolicies.create({ name: "deny-export", rego_source: "package oneclaw\n..." });
+
+// Sub-organizations (Enterprise hierarchy)
+await client.subOrgs.create({ name: "Engineering" });
+await client.subOrgs.list();
+
+// Import existing Gnosis Safe smart accounts
+await client.agents.importSmartAccount(agentId, {
+    chain: "ethereum",
+    chain_id: 1,
+    safe_address: "0x...",
+    verify: true,
+});
+
+// BYOK signing key import (human-only, requires password re-auth)
+await client.signingKeys.import(agentId, "ethereum", {
+    private_key: "0x...",
+    format: "hex",
+}, { authConfirm: "your-password" });
+```
+
 ## OpenAPI Types
 
 The SDK's request types are generated from the **OpenAPI 3.1** spec, published as [@1claw/openapi-spec](https://www.npmjs.com/package/@1claw/openapi-spec). Advanced users can access the raw generated types:

package/dist/generated/api-types.d.ts

@@ -2522,8 +2522,8 @@ export interface paths {
          * Generate multi-chain wallets for the authenticated user
          * @description Generates keypairs for the requested chains (or all supported chains if omitted).
          *     Private keys are stored in a per-org `__treasury-keys` vault with tier-appropriate
-         *     MPC custody. Skips chains where the user already has an active wallet. Requires
-         *     Pro or higher billing tier. Human users only — agents get 403.
+         *     MPC custody. Skips chains where the user already has an active wallet. Available
+         *     on all tiers (counts toward wallet quota). Human users only — agents get 403.
          */
         post: operations["generateTreasuryWallets"];
         delete?: never;
@@ -2603,7 +2603,7 @@ export interface paths {
          * Rotate the user's wallet key for a chain
          * @description Generates a new keypair, deactivates the old wallet, and creates a
          *     new active wallet. The old private key version is retained in the
-         *     vault for audit. Requires Pro or higher.
+         *     vault for audit. Counts toward wallet quota (does not require a paid plan).
          */
         post: operations["rotateTreasuryWallet"];
         delete?: never;
@@ -6120,6 +6120,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/org/sub-orgs/{sub_org_id}/permissions/{permission}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Revoke a sub-organization permission
+         * @description Revoke a specific permission scope from the sub-organization.
+         */
+        delete: operations["revokeSubOrgPermission"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/org/sub-orgs/{sub_org_id}/wallets/generate": {
         parameters: {
             query?: never;
@@ -8075,6 +8095,7 @@ export interface components {
                 vaults?: components["schemas"]["UsageMeter"];
                 team_members?: components["schemas"]["UsageMeter"];
                 intent_transactions?: components["schemas"]["UsageMeter"];
+                wallets?: components["schemas"]["UsageMeter"];
                 shares?: components["schemas"]["UsageMeter"];
             };
         };
@@ -10173,6 +10194,18 @@ export interface components {
              */
             verify: boolean;
         };
+        ImportSmartAccountResponse: {
+            /** Format: uuid */
+            id?: string;
+            /** Format: uuid */
+            agent_id?: string;
+            chain?: string;
+            chain_id?: number;
+            safe_address?: string;
+            nonce?: number | null;
+            /** Format: date-time */
+            created_at?: string;
+        };
     };
     responses: {
         /** @description Invalid request */
@@ -18725,6 +18758,30 @@ export interface operations {
             404: components["responses"]["NotFound"];
         };
     };
+    revokeSubOrgPermission: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                sub_org_id: string;
+                /** @description The permission scope to revoke */
+                permission: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Permission revoked */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+        };
+    };
     generateSubOrgWallets: {
         parameters: {
             query?: never;
@@ -18754,7 +18811,12 @@ export interface operations {
     };
     getPortfolio: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Comma-separated list of chain names to filter by (e.g. "ethereum,solana") */
+                chains?: string;
+                /** @description Whether to include token balances alongside native balances */
+                include_tokens?: boolean;
+            };
             header?: never;
             path?: never;
             cookie?: never;
@@ -18793,7 +18855,9 @@ export interface operations {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    "application/json": components["schemas"]["ImportSmartAccountResponse"];
+                };
             };
             400: components["responses"]["BadRequest"];
             401: components["responses"]["Unauthorized"];