@1claw/sdk 0.61.13 → 0.61.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -5
- package/dist/generated/api-types.d.ts +7301 -5758
- package/dist/generated/api-types.d.ts.map +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/resources/agents.d.ts +18 -1
- package/dist/resources/agents.d.ts.map +1 -1
- package/dist/resources/agents.js +33 -0
- package/dist/resources/agents.js.map +1 -1
- package/dist/types.d.ts +7 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -419,7 +419,7 @@ Key properties:
|
|
|
419
419
|
|
|
420
420
|
### TEE Enforcement (Pro+)
|
|
421
421
|
|
|
422
|
-
Lock down agents so signing and execution
|
|
422
|
+
Lock down agents so signing and execution **must** happen in the hardware enclave (Shroud TEE). The vault enforces it by forwarding to Shroud, not by rejecting you.
|
|
423
423
|
|
|
424
424
|
```typescript
|
|
425
425
|
await client.agents.update(agentId, {
|
|
@@ -429,13 +429,12 @@ await client.agents.update(agentId, {
|
|
|
429
429
|
```
|
|
430
430
|
|
|
431
431
|
When `intents_require_tee` is true:
|
|
432
|
-
- Transaction submit/sign requests
|
|
433
|
-
-
|
|
432
|
+
- Transaction submit/sign requests are signed inside Shroud's TEE whichever host you call — the vault forwards a request that arrives at `api.1claw.co` to Shroud on the agent's behalf (vault ≥ 0.61.19), so the SDK needs no special `baseUrl`
|
|
433
|
+
- Direct calls to `shroud.1claw.co` still work and are required for DPoP-bound tokens
|
|
434
434
|
|
|
435
435
|
When `execution_require_tee` is true:
|
|
436
|
-
- Execute requests
|
|
436
|
+
- Execute requests run on Shroud's TEE execution surface — forced by the vault, no client routing needed
|
|
437
437
|
- All direct secret reads by the agent are blocked — forces use of Execution Intent bindings
|
|
438
|
-
- Agents must route through `shroud.1claw.co`
|
|
439
438
|
|
|
440
439
|
Both require `intents_api_enabled` / `execution_intents_enabled` to be on first.
|
|
441
440
|
|