@terminal3/t3n-sdk 4.13.0 → 4.14.0

package/dist/index.d.ts

@@ -1993,6 +1993,32 @@ declare class T3nClient {
      *   empty / too long)
      */
     createOrganisation(name: string): Promise<Did>;
+    /**
+     * Provision a fresh org-owned agent.
+     *
+     * Dispatches `create-agent` on `tee:organisation/contracts` over the
+     * standard authenticated `action.execute` path. The node injects the
+     * caller's DID into the contract call context, and the contract refuses
+     * unless the caller is listed as an admin of `organisationDid`. A brand
+     * new secp256k1 wallet is minted in-TEE for the agent; its eth-derived
+     * DID and its raw private key are both returned. The private key is the
+     * "authentication token" the MCP sidecar uses to authenticate as this
+     * agent (the existing `PRIVATE_KEY` eth auth mode) — it is generated and
+     * returned exactly once here and is never persisted or recoverable
+     * afterwards, so the caller must capture it immediately.
+     *
+     * @param organisationDid - the owning organisation's DID
+     *   (`did:t3n:<40-hex>`); the caller must be one of its admins
+     * @param name - human-readable agent name (1..=128 bytes)
+     * @returns the new agent's DID and its one-time private key
+     * @throws if the session is not authenticated, or if the contract
+     *   refuses (e.g. the caller is not an admin of `organisationDid`, or the
+     *   name is empty / too long)
+     */
+    createAgent(organisationDid: string, name: string): Promise<{
+        agentDid: Did;
+        privateKey: string;
+    }>;
     /**
      * Read the authenticated user's own agent-auth policy — the standing
      * grants delegated to agents. Dispatches `agent-auth-get` on