@1claw/sdk 0.61.17 → 0.61.19

package/README.md

@@ -438,6 +438,34 @@ When `execution_require_tee` is true:
 
 Both require `intents_api_enabled` / `execution_intents_enabled` to be on first.
 
+### Agent pairing with a fingerprint
+
+An agent can enrol itself with its own Ed25519 public key. The vault returns an SSH-style `SHA256:` fingerprint the human compares on the approval page, and the agent collects its API key itself once approved — nothing travels by email.
+
+```typescript
+import { AgentsResource } from "@1claw/sdk";
+
+const result = await AgentsResource.pair(
+    "https://api.1claw.co",
+    { name: "my-agent", public_key: "ssh-ed25519 AAAA…" },
+    (fingerprint, approvalUrl) => console.log(`Show the human: ${fingerprint}\n${approvalUrl}`),
+);
+// result.status === "approved" → result.api_key (shown once)
+```
+
+### Passkey-owned Safes: spend under a grant
+
+When a human owns an EVM Safe with a passkey (`custody: passkey_owner`) and has granted this agent an on-chain allowance (Safe Allowance Module), the agent spends within it without a touch; the module enforces the cap.
+
+```typescript
+const spend = await client.agents.spendFromPasskeySafe(agentId, safeId, {
+    to: "0xRecipient…",
+    amount: "10000000000000000", // base units (0.01 ETH)
+    // token: "0xUSDC…"          // omit for the native token
+});
+console.log(spend.data.tx_hash, spend.data.remaining_after);
+```
+
 ### Agent-to-Agent Delegation
 
 Human-controlled authorization for inter-agent task delegation. Agents cannot delegate to other agents without an explicit delegation record created by a human.

package/dist/generated/api-types.d.ts

@@ -6542,9 +6542,11 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List pending approvals
-         * @description Returns approvals for the authenticated user's organization.
-         *     Human-only. Supports filtering by status and pagination.
+         * List approvals
+         * @description Humans get their own approval queue. An agent caller gets only the
+         *     approvals it created (`agent_id` = caller) — enough to recover one whose
+         *     id was lost across a restart, never the organization's queue. Supports
+         *     filtering by status and pagination.
          */
         get: operations["listApprovals"];
         put?: never;
@@ -6575,6 +6577,32 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/approvals/{approval_id}/cancel": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Cancel a pending approval (requester)
+         * @description Withdraws a pending approval. Callable by the agent that requested it or
+         *     the human it was addressed to. First answer wins: if the approval was
+         *     already decided or expired, the existing record is returned unchanged
+         *     (200) rather than an error — the caller's next question is what the
+         *     answer was. A cancellation is delivered to webhook subscribers as
+         *     `approval.decided` with `decision: "cancelled"`, and audited as
+         *     `approval.cancelled`.
+         */
+        post: operations["cancelApproval"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/approvals/{approval_id}/status": {
         parameters: {
             query?: never;
@@ -15702,7 +15730,7 @@ export interface components {
             /** @description What the action will do, as submitted. */
             payload?: Record<string, never>;
             /** @enum {string} */
-            status: "pending" | "approved" | "rejected" | "expired";
+            status: "pending" | "approved" | "rejected" | "expired" | "cancelled";
             /** @description Structured summary of the action requiring approval */
             summary: Record<string, never>;
             reason?: string | null;
@@ -15722,7 +15750,7 @@ export interface components {
         };
         ApprovalStatusResponse: {
             /** @enum {string} */
-            status: "pending" | "approved" | "rejected" | "expired";
+            status: "pending" | "approved" | "rejected" | "expired" | "cancelled";
             /** Format: date-time */
             expires_at?: string | null;
         };
@@ -16785,6 +16813,15 @@ export interface components {
             shell_auth_policy?: string;
             shell_max_session_minutes?: number;
             monthly_hours_used?: number | null;
+            /** @description Whether this runtime has a paid Stripe add-on (unlimited hours). */
+            has_paid_addon?: boolean;
+            /**
+             * @description `pool` — counts against the plan's monthly runtime hours. `included` — the plan's
+             *     free runtime (every plan from Pro up includes one small or medium runtime, no hour
+             *     cap, no charge). `addon` — paid Stripe subscription item (no hour cap).
+             * @enum {string}
+             */
+            billing_kind?: "pool" | "included" | "addon";
             /** Format: date-time */
             created_at: string;
             /** Format: date-time */
@@ -16792,6 +16829,15 @@ export interface components {
         };
         RuntimeListResponse: {
             runtimes: components["schemas"]["RuntimeResponse"][];
+            /** @description The plan's included-runtime allowance (human callers only). */
+            included_runtime?: {
+                /** @description Runtimes the plan includes at no charge. */
+                allowance?: number;
+                /** @description Included slots currently in use. */
+                used?: number;
+                /** @description Presets an included runtime may use (up to 1 vCPU / 2 GB). */
+                presets?: string[];
+            };
         };
         SlugCheckResponse: {
             available: boolean;
@@ -27142,7 +27188,7 @@ export interface operations {
         parameters: {
             query?: {
                 /** @description Filter by approval status */
-                status?: "pending" | "approved" | "rejected" | "expired";
+                status?: "pending" | "approved" | "rejected" | "expired" | "cancelled";
                 limit?: number;
                 offset?: number;
             };
@@ -27188,6 +27234,36 @@ export interface operations {
             404: components["responses"]["NotFound"];
         };
     };
+    cancelApproval: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                approval_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": {
+                    reason?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description The approval — `cancelled`, or the decision that landed first */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApprovalResponse"];
+                };
+            };
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+        };
+    };
     getApprovalStatus: {
         parameters: {
             query?: never;