@1claw/sdk 0.53.2 → 0.54.0

package/dist/generated/api-types.d.ts

@@ -4488,6 +4488,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/approvals/{approval_id}/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Poll approval status (agent-only)
+         * @description Lightweight status poll for agents waiting on human approval.
+         *     Returns `status` and `expires_at` only. Agents may only poll
+         *     approvals they created (`agent_id` must match the caller).
+         */
+        get: operations["getApprovalStatus"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/approvals/{approval_id}/decide": {
         parameters: {
             query?: never;
@@ -7619,6 +7641,20 @@ export interface components {
              * @default true
              */
             card_require_approval: boolean;
+            /** @description Graduated transaction approval policy (HITL thresholds). Separate from hard guardrails. */
+            tx_approval_policy?: {
+                [key: string]: unknown;
+            } | null;
+            /**
+             * @description EIP-712 escalation when typed_data matches no allowlist — deny (403) or route to HITL (approve).
+             * @enum {string}
+             */
+            typed_data_policy?: "deny" | "approve";
+            /**
+             * @description Simulation failure escalation — deny (422) or route to HITL (approve).
+             * @enum {string}
+             */
+            simulation_failure_policy?: "deny" | "approve";
             /**
              * Format: date-time
              * @description Optional expiration time for the agent's API key.
@@ -7700,6 +7736,22 @@ export interface components {
             card_reveal_enabled?: boolean;
             /** @description When true, card orders route through the human approval queue before x402 payment. */
             card_require_approval?: boolean;
+            /** @description Graduated transaction approval policy (HITL thresholds). */
+            tx_approval_policy?: {
+                [key: string]: unknown;
+            } | null;
+            /**
+             * @description EIP-712 escalation policy.
+             * @enum {string|null}
+             */
+            typed_data_policy?: "deny" | "approve" | null;
+            /**
+             * @description Simulation failure escalation policy.
+             * @enum {string|null}
+             */
+            simulation_failure_policy?: "deny" | "approve" | null;
+            /** @description When true, clears circuit-breaker auto-suspension (human owner/admin only). */
+            clear_auto_suspended?: boolean;
             /**
              * @description Enable OIDC federation (RFC 8693 token-exchange) for this agent.
              *     When true, the agent may call POST /v1/auth/federated-token to mint
@@ -7829,6 +7881,16 @@ export interface components {
             card_reveal_enabled?: boolean;
             /** @description When true, card orders route through the human approval queue before x402 payment. */
             card_require_approval?: boolean;
+            /** @description Graduated transaction approval policy (HITL thresholds). */
+            tx_approval_policy?: {
+                [key: string]: unknown;
+            } | null;
+            /** @enum {string|null} */
+            typed_data_policy?: "deny" | "approve" | null;
+            /** @enum {string|null} */
+            simulation_failure_policy?: "deny" | "approve" | null;
+            /** @description True when circuit breaker auto-suspended the agent after repeated guardrail denials. */
+            auto_suspended?: boolean;
             /** @description Today's transaction count (UTC calendar day). Present when intents_api_enabled. */
             tx_count_today?: number;
             /** @description Today's overhead spend by chain in native units. */
@@ -9978,6 +10040,25 @@ export interface components {
             /** Format: date-time */
             created_at: string;
         };
+        ApprovalStatusResponse: {
+            /** @enum {string} */
+            status: "pending" | "approved" | "rejected" | "expired";
+            /** Format: date-time */
+            expires_at?: string | null;
+        };
+        GuardrailViolation: {
+            /** @enum {string} */
+            error: "guardrail_violation";
+            /** @enum {string} */
+            reason_code: "binding_rpm_exceeded" | "agent_rpm_exceeded" | "graphql_mutation_blocked" | "graphql_depth_exceeded" | "graphql_parse_failed" | "graphql_introspection_blocked" | "response_too_large" | "request_too_large" | "method_not_allowed" | "header_not_allowed" | "dns_private_ip_blocked" | "agent_suspended" | "outside_time_window" | "secret_in_request" | "concurrency_exceeded" | "org_frozen";
+            limit?: string | null;
+            current?: string | null;
+            attempted?: string | null;
+            /** @default false */
+            approval_available: boolean;
+            retry_after_seconds?: number | null;
+            detail?: string | null;
+        };
         EmailOtpVerifyResponse: {
             /** @description JWT access token */
             token: string;
@@ -10170,9 +10251,7 @@ export interface components {
             config?: {
                 [key: string]: unknown;
             };
-            guardrails?: {
-                [key: string]: unknown;
-            };
+            guardrails?: components["schemas"]["BindingGuardrails"];
             /** @description Legacy: inline credential value. Use credential_source for new integrations. */
             credential?: {
                 [key: string]: unknown;
@@ -10183,9 +10262,7 @@ export interface components {
             config?: {
                 [key: string]: unknown;
             };
-            guardrails?: {
-                [key: string]: unknown;
-            };
+            guardrails?: components["schemas"]["BindingGuardrails"];
             is_active?: boolean;
             /** @description Legacy: inline credential value. */
             credential?: {
@@ -10193,6 +10270,48 @@ export interface components {
             };
             credential_source?: components["schemas"]["CredentialSource"];
         };
+        /** @description Per-binding execution guardrails enforced at execute time. */
+        BindingGuardrails: {
+            /** @description Host allowlist (trailing * wildcard supported). Empty = unrestricted at binding level. */
+            allowed_hosts?: string[];
+            /** @description Path allowlist for HTTP/GraphQL bindings. */
+            allowed_paths?: string[];
+            /** @description Per-binding RPM; strictest of binding and agent limits wins. Denied executions do not count. */
+            max_requests_per_minute?: number;
+            /** @description Upstream timeout cap for this binding. */
+            max_duration_ms?: number;
+            /**
+             * @description Max serialized execute `params` size in bytes (default 256 KiB).
+             * @default 262144
+             */
+            max_request_bytes: number;
+            /** @description Max upstream response body bytes (default 1 MiB, hard cap 4 MiB). */
+            max_response_bytes?: number;
+            /** @description Agent-supplied headers permitted in execute params. Defaults to content-type, accept, user-agent, idempotency-key. */
+            allowed_request_headers?: string[];
+            /**
+             * @description GraphQL only — when false, mutation operations return 403 guardrail_violation.
+             * @default true
+             */
+            allow_mutations: boolean;
+            /**
+             * @description GraphQL only — when false, __schema/__type introspection is blocked.
+             * @default false
+             */
+            allow_introspection: boolean;
+            /**
+             * @description GraphQL max selection depth.
+             * @default 10
+             */
+            max_query_depth: number;
+            /**
+             * @description GraphQL max alias count.
+             * @default 30
+             */
+            max_aliases: number;
+            /** @description GraphQL operation kinds allowed (query, mutation, subscription). */
+            allowed_operations?: string[];
+        };
         BindingResponse: {
             /** Format: uuid */
             id: string;
@@ -10204,9 +10323,7 @@ export interface components {
             config?: {
                 [key: string]: unknown;
             };
-            guardrails?: {
-                [key: string]: unknown;
-            };
+            guardrails?: components["schemas"]["BindingGuardrails"];
             is_active: boolean;
             /** @description Whether a credential is stored for this binding. The value itself is never returned. */
             credential_set?: boolean;
@@ -10247,6 +10364,36 @@ export interface components {
             params: {
                 [key: string]: unknown;
             };
+            /**
+             * @description When true, validate guardrails and approval policy without executing or persisting side effects.
+             * @default false
+             */
+            dry_run: boolean;
+            /**
+             * Format: uuid
+             * @description Internal — resume execution after human approval (server-injected).
+             */
+            resume_after_approval_id?: string;
+        };
+        ExecutionApprovalRequired: {
+            /** @enum {string} */
+            error: "approval_required";
+            /** Format: uuid */
+            approval_id: string;
+            /** @enum {string} */
+            status: "pending";
+            /** Format: date-time */
+            expires_at?: string | null;
+        };
+        TxAwaitingApproval: {
+            /** @enum {string} */
+            status: "awaiting_approval";
+            /** Format: uuid */
+            approval_id: string;
+            /** Format: uuid */
+            tx_id?: string | null;
+            /** Format: date-time */
+            expires_at?: string | null;
         };
         ExecuteResponse: {
             /** Format: uuid */
@@ -14233,6 +14380,15 @@ export interface operations {
                     "application/json": components["schemas"]["TransactionResponse"];
                 };
             };
+            /** @description Transaction held for human approval (graduated tx_approval_policy) */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TxAwaitingApproval"];
+                };
+            };
             402: components["responses"]["PaymentRequired"];
             403: components["responses"]["Forbidden"];
             /** @description Idempotency-Key in use by another in-flight request; retry later. */
@@ -15031,8 +15187,43 @@ export interface operations {
                     "application/json": components["schemas"]["ExecuteResponse"];
                 };
             };
+            /** @description Execution requires human approval before running */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionApprovalRequired"];
+                };
+            };
             400: components["responses"]["BadRequest"];
-            403: components["responses"]["Forbidden"];
+            /** @description Guardrail violation or permission denied */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GuardrailViolation"] | components["schemas"]["ProblemDetails"];
+                };
+            };
+            /** @description Request params exceed binding max_request_bytes */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GuardrailViolation"];
+                };
+            };
+            /** @description Binding or agent execution rate limit exceeded */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GuardrailViolation"];
+                };
+            };
         };
     };
     listExecutions: {
@@ -17601,6 +17792,30 @@ export interface operations {
             404: components["responses"]["NotFound"];
         };
     };
+    getApprovalStatus: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                approval_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Approval status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApprovalStatusResponse"];
+                };
+            };
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+        };
+    };
     decideApproval: {
         parameters: {
             query?: never;