@1claw/sdk 0.53.3 → 0.55.0

package/dist/generated/api-types.d.ts

@@ -2077,6 +2077,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/org/freeze": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Emergency org-wide freeze
+         * @description Sets organizations.frozen_at — blocks agent tx/execution until unfreeze. Owner/admin only.
+         */
+        post: operations["freezeOrg"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/org/unfreeze": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Clear org-wide freeze
+         * @description Clears organizations.frozen_at. Owner/admin only.
+         */
+        post: operations["unfreezeOrg"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/org/bankr-config": {
         parameters: {
             query?: never;
@@ -4488,6 +4528,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/approvals/{approval_id}/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Poll approval status (agent-only)
+         * @description Lightweight status poll for agents waiting on human approval.
+         *     Returns `status` and `expires_at` only. Agents may only poll
+         *     approvals they created (`agent_id` must match the caller).
+         */
+        get: operations["getApprovalStatus"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/approvals/{approval_id}/decide": {
         parameters: {
             query?: never;
@@ -7619,6 +7681,55 @@ export interface components {
              * @default true
              */
             card_require_approval: boolean;
+            /** @description Graduated transaction approval policy (HITL thresholds). Separate from hard guardrails. */
+            tx_approval_policy?: {
+                [key: string]: unknown;
+            } | null;
+            /**
+             * @description EIP-712 escalation when typed_data matches no allowlist — deny (403) or route to HITL (approve).
+             * @enum {string}
+             */
+            typed_data_policy?: "deny" | "approve";
+            /**
+             * @description Simulation failure escalation — deny (422) or route to HITL (approve).
+             * @enum {string}
+             */
+            simulation_failure_policy?: "deny" | "approve";
+            /**
+             * @description Block unlimited ERC-20 approvals (max uint256 / setApprovalForAll).
+             * @default false
+             */
+            tx_block_unlimited_approvals: boolean;
+            /** @description Max transactions to the same recipient address per UTC day. */
+            tx_per_recipient_max_per_day?: number | null;
+            /** @description Max native-unit spend to the same recipient per UTC day. */
+            tx_per_recipient_daily_limit?: string | null;
+            /** @description Cap on first-time recipient spend in native units. */
+            new_recipient_cap_native?: string | null;
+            /** @description Per-transaction USD cap (requires price oracle). */
+            tx_max_value_usd?: string | null;
+            /** @description Rolling 24h USD spend cap (requires price oracle). */
+            tx_daily_limit_usd?: string | null;
+            /**
+             * @description Raw digest signing policy — allow, deny, or route to HITL (approve).
+             * @default allow
+             * @enum {string}
+             */
+            raw_signing_policy: "allow" | "deny" | "approve";
+            /** @description personal_sign guardrails (message allowlist, max bytes, etc.). */
+            personal_sign_policy?: {
+                [key: string]: unknown;
+            };
+            /**
+             * @description Allow ERC-4337 gasless UserOperations.
+             * @default false
+             */
+            allow_erc4337: boolean;
+            /**
+             * @description Allow EIP-7702 (tx type 4) set-code transactions.
+             * @default false
+             */
+            allow_eip7702: boolean;
             /**
              * Format: date-time
              * @description Optional expiration time for the agent's API key.
@@ -7700,6 +7811,47 @@ export interface components {
             card_reveal_enabled?: boolean;
             /** @description When true, card orders route through the human approval queue before x402 payment. */
             card_require_approval?: boolean;
+            /** @description Graduated transaction approval policy (HITL thresholds). */
+            tx_approval_policy?: {
+                [key: string]: unknown;
+            } | null;
+            /**
+             * @description EIP-712 escalation policy.
+             * @enum {string|null}
+             */
+            typed_data_policy?: "deny" | "approve" | null;
+            /**
+             * @description Simulation failure escalation policy.
+             * @enum {string|null}
+             */
+            simulation_failure_policy?: "deny" | "approve" | null;
+            /** @description Block unlimited ERC-20 approvals (max uint256 / setApprovalForAll). */
+            tx_block_unlimited_approvals?: boolean;
+            /** @description Max transactions to the same recipient per UTC day. Null clears. */
+            tx_per_recipient_max_per_day?: number | null;
+            /** @description Max native spend to same recipient per UTC day. Null clears. */
+            tx_per_recipient_daily_limit?: string | null;
+            /** @description First-time recipient native cap. Null clears. */
+            new_recipient_cap_native?: string | null;
+            /** @description Per-tx USD cap. Null clears. */
+            tx_max_value_usd?: string | null;
+            /** @description Rolling 24h USD spend cap. Null clears. */
+            tx_daily_limit_usd?: string | null;
+            /**
+             * @description Raw digest signing policy.
+             * @enum {string}
+             */
+            raw_signing_policy?: "allow" | "deny" | "approve";
+            /** @description personal_sign guardrails JSON. */
+            personal_sign_policy?: {
+                [key: string]: unknown;
+            };
+            /** @description Allow ERC-4337 gasless UserOperations. */
+            allow_erc4337?: boolean;
+            /** @description Allow EIP-7702 (tx type 4). */
+            allow_eip7702?: boolean;
+            /** @description When true, clears circuit-breaker auto-suspension (human owner/admin only). */
+            clear_auto_suspended?: boolean;
             /**
              * @description Enable OIDC federation (RFC 8693 token-exchange) for this agent.
              *     When true, the agent may call POST /v1/auth/federated-token to mint
@@ -7829,6 +7981,30 @@ export interface components {
             card_reveal_enabled?: boolean;
             /** @description When true, card orders route through the human approval queue before x402 payment. */
             card_require_approval?: boolean;
+            /** @description Graduated transaction approval policy (HITL thresholds). */
+            tx_approval_policy?: {
+                [key: string]: unknown;
+            } | null;
+            /** @enum {string|null} */
+            typed_data_policy?: "deny" | "approve" | null;
+            /** @enum {string|null} */
+            simulation_failure_policy?: "deny" | "approve" | null;
+            /** @description Block unlimited ERC-20 approvals. */
+            tx_block_unlimited_approvals?: boolean;
+            tx_per_recipient_max_per_day?: number | null;
+            tx_per_recipient_daily_limit?: string | null;
+            new_recipient_cap_native?: string | null;
+            tx_max_value_usd?: string | null;
+            tx_daily_limit_usd?: string | null;
+            /** @enum {string} */
+            raw_signing_policy?: "allow" | "deny" | "approve";
+            personal_sign_policy?: {
+                [key: string]: unknown;
+            } | null;
+            allow_erc4337?: boolean;
+            allow_eip7702?: boolean;
+            /** @description True when circuit breaker auto-suspended the agent after repeated guardrail denials. */
+            auto_suspended?: boolean;
             /** @description Today's transaction count (UTC calendar day). Present when intents_api_enabled. */
             tx_count_today?: number;
             /** @description Today's overhead spend by chain in native units. */
@@ -9978,6 +10154,25 @@ export interface components {
             /** Format: date-time */
             created_at: string;
         };
+        ApprovalStatusResponse: {
+            /** @enum {string} */
+            status: "pending" | "approved" | "rejected" | "expired";
+            /** Format: date-time */
+            expires_at?: string | null;
+        };
+        GuardrailViolation: {
+            /** @enum {string} */
+            error: "guardrail_violation";
+            /** @enum {string} */
+            reason_code: "binding_rpm_exceeded" | "agent_rpm_exceeded" | "graphql_mutation_blocked" | "graphql_depth_exceeded" | "graphql_parse_failed" | "graphql_introspection_blocked" | "response_too_large" | "request_too_large" | "method_not_allowed" | "header_not_allowed" | "dns_private_ip_blocked" | "agent_suspended" | "outside_time_window" | "secret_in_request" | "concurrency_exceeded" | "org_frozen";
+            limit?: string | null;
+            current?: string | null;
+            attempted?: string | null;
+            /** @default false */
+            approval_available: boolean;
+            retry_after_seconds?: number | null;
+            detail?: string | null;
+        };
         EmailOtpVerifyResponse: {
             /** @description JWT access token */
             token: string;
@@ -10170,9 +10365,7 @@ export interface components {
             config?: {
                 [key: string]: unknown;
             };
-            guardrails?: {
-                [key: string]: unknown;
-            };
+            guardrails?: components["schemas"]["BindingGuardrails"];
             /** @description Legacy: inline credential value. Use credential_source for new integrations. */
             credential?: {
                 [key: string]: unknown;
@@ -10183,9 +10376,7 @@ export interface components {
             config?: {
                 [key: string]: unknown;
             };
-            guardrails?: {
-                [key: string]: unknown;
-            };
+            guardrails?: components["schemas"]["BindingGuardrails"];
             is_active?: boolean;
             /** @description Legacy: inline credential value. */
             credential?: {
@@ -10193,6 +10384,48 @@ export interface components {
             };
             credential_source?: components["schemas"]["CredentialSource"];
         };
+        /** @description Per-binding execution guardrails enforced at execute time. */
+        BindingGuardrails: {
+            /** @description Host allowlist (trailing * wildcard supported). Empty = unrestricted at binding level. */
+            allowed_hosts?: string[];
+            /** @description Path allowlist for HTTP/GraphQL bindings. */
+            allowed_paths?: string[];
+            /** @description Per-binding RPM; strictest of binding and agent limits wins. Denied executions do not count. */
+            max_requests_per_minute?: number;
+            /** @description Upstream timeout cap for this binding. */
+            max_duration_ms?: number;
+            /**
+             * @description Max serialized execute `params` size in bytes (default 256 KiB).
+             * @default 262144
+             */
+            max_request_bytes: number;
+            /** @description Max upstream response body bytes (default 1 MiB, hard cap 4 MiB). */
+            max_response_bytes?: number;
+            /** @description Agent-supplied headers permitted in execute params. Defaults to content-type, accept, user-agent, idempotency-key. */
+            allowed_request_headers?: string[];
+            /**
+             * @description GraphQL only — when false, mutation operations return 403 guardrail_violation.
+             * @default true
+             */
+            allow_mutations: boolean;
+            /**
+             * @description GraphQL only — when false, __schema/__type introspection is blocked.
+             * @default false
+             */
+            allow_introspection: boolean;
+            /**
+             * @description GraphQL max selection depth.
+             * @default 10
+             */
+            max_query_depth: number;
+            /**
+             * @description GraphQL max alias count.
+             * @default 30
+             */
+            max_aliases: number;
+            /** @description GraphQL operation kinds allowed (query, mutation, subscription). */
+            allowed_operations?: string[];
+        };
         BindingResponse: {
             /** Format: uuid */
             id: string;
@@ -10204,9 +10437,7 @@ export interface components {
             config?: {
                 [key: string]: unknown;
             };
-            guardrails?: {
-                [key: string]: unknown;
-            };
+            guardrails?: components["schemas"]["BindingGuardrails"];
             is_active: boolean;
             /** @description Whether a credential is stored for this binding. The value itself is never returned. */
             credential_set?: boolean;
@@ -10247,6 +10478,36 @@ export interface components {
             params: {
                 [key: string]: unknown;
             };
+            /**
+             * @description When true, validate guardrails and approval policy without executing or persisting side effects.
+             * @default false
+             */
+            dry_run: boolean;
+            /**
+             * Format: uuid
+             * @description Internal — resume execution after human approval (server-injected).
+             */
+            resume_after_approval_id?: string;
+        };
+        ExecutionApprovalRequired: {
+            /** @enum {string} */
+            error: "approval_required";
+            /** Format: uuid */
+            approval_id: string;
+            /** @enum {string} */
+            status: "pending";
+            /** Format: date-time */
+            expires_at?: string | null;
+        };
+        TxAwaitingApproval: {
+            /** @enum {string} */
+            status: "awaiting_approval";
+            /** Format: uuid */
+            approval_id: string;
+            /** Format: uuid */
+            tx_id?: string | null;
+            /** Format: date-time */
+            expires_at?: string | null;
         };
         ExecuteResponse: {
             /** Format: uuid */
@@ -14233,6 +14494,15 @@ export interface operations {
                     "application/json": components["schemas"]["TransactionResponse"];
                 };
             };
+            /** @description Transaction held for human approval (graduated tx_approval_policy) */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TxAwaitingApproval"];
+                };
+            };
             402: components["responses"]["PaymentRequired"];
             403: components["responses"]["Forbidden"];
             /** @description Idempotency-Key in use by another in-flight request; retry later. */
@@ -15031,8 +15301,43 @@ export interface operations {
                     "application/json": components["schemas"]["ExecuteResponse"];
                 };
             };
+            /** @description Execution requires human approval before running */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ExecutionApprovalRequired"];
+                };
+            };
             400: components["responses"]["BadRequest"];
-            403: components["responses"]["Forbidden"];
+            /** @description Guardrail violation or permission denied */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GuardrailViolation"] | components["schemas"]["ProblemDetails"];
+                };
+            };
+            /** @description Request params exceed binding max_request_bytes */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GuardrailViolation"];
+                };
+            };
+            /** @description Binding or agent execution rate limit exceeded */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["GuardrailViolation"];
+                };
+            };
         };
     };
     listExecutions: {
@@ -15396,6 +15701,70 @@ export interface operations {
             };
         };
     };
+    freezeOrg: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Organization frozen */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @enum {string} */
+                        status?: "frozen";
+                        /** Format: uuid */
+                        org_id?: string;
+                    };
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    unfreezeOrg: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Organization unfrozen */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @enum {string} */
+                        status?: "unfrozen";
+                        /** Format: uuid */
+                        org_id?: string;
+                    };
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     getOrgBankrConfig: {
         parameters: {
             query?: never;
@@ -17601,6 +17970,30 @@ export interface operations {
             404: components["responses"]["NotFound"];
         };
     };
+    getApprovalStatus: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                approval_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Approval status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApprovalStatusResponse"];
+                };
+            };
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+        };
+    };
     decideApproval: {
         parameters: {
             query?: never;