@cubist-labs/cubesigner-sdk 0.4.231 → 0.4.237

package/dist/src/schema.d.ts

@@ -399,7 +399,23 @@ export interface paths {
         post: operations["diffieHellmanExchange"];
     };
     "/v0/org/{org_id}/emails/{purpose}": {
+        /**
+         * Get Email Template
+         * @description Get Email Template
+         *
+         * Returns the email template for a given purpose.
+         */
+        get: operations["getEmailConfig"];
+        /**
+         * Configure Email Template
+         * @description Configure Email Template
+         */
         put: operations["configureEmail"];
+        /**
+         * Delete Email Template
+         * @description Delete Email Template
+         */
+        delete: operations["deleteEmailConfig"];
     };
     "/v0/org/{org_id}/evm/eip191/sign/{pubkey}": {
         /**
@@ -577,6 +593,23 @@ export interface paths {
          */
         post: operations["invitationAccept"];
     };
+    "/v0/org/{org_id}/invitations": {
+        /**
+         * List pending invitations
+         * @description List pending invitations
+         *
+         * Returns all pending (not yet accepted) invitations for the organization.
+         */
+        get: operations["listInvitations"];
+        /**
+         * Cancel a pending invitation
+         * @description Cancel a pending invitation
+         *
+         * Removes a pending invitation from the organization. If no pending invitation
+         * exists for the given email address, a not-found error is returned.
+         */
+        delete: operations["cancelInvitation"];
+    };
     "/v0/org/{org_id}/invite": {
         /**
          * Invite User
@@ -998,6 +1031,31 @@ export interface paths {
          */
         post: operations["invokePolicy"];
     };
+    "/v0/org/{org_id}/policy/buckets": {
+        /**
+         * List Buckets
+         * @description List Buckets
+         *
+         * List available meta information about all policy KV store buckets in the org.
+         */
+        get: operations["listPolicyBuckets"];
+    };
+    "/v0/org/{org_id}/policy/buckets/{bucket_name}": {
+        /**
+         * Get Bucket
+         * @description Get Bucket
+         *
+         * Returns the meta information of a policy KV store bucket.
+         */
+        get: operations["getPolicyBucket"];
+        /**
+         * Update Bucket
+         * @description Update Bucket
+         *
+         * Updates meta information for an existing policy KV store bucket.
+         */
+        patch: operations["updatePolicyBucket"];
+    };
     "/v0/org/{org_id}/policy/import_key": {
         /**
          * Create Policy Import Key
@@ -1013,7 +1071,7 @@ export interface paths {
          * Get the org-wide policy secrets.
          * @description Get the org-wide policy secrets.
          *
-         * Note that this only returns the keys for the secrets, omiting the values.
+         * Note that this only returns the keys for the secrets, omitting the values.
          * The values are secret and are not accessible outside Wasm policy execution.
          */
         get: operations["getPolicySecrets"];
@@ -1023,18 +1081,22 @@ export interface paths {
          *
          * The provided secrets will replace any existing org-level secrets.
          * It fails if the secrets weren't previously created.
+         *
+         * Must be permitted by the policy secret's edit policy if set, and the org's edit policy otherwise.
          */
         patch: operations["updatePolicySecrets"];
     };
     "/v0/org/{org_id}/policy/secrets/{secret_name}": {
         /**
-         * Create or overwrite an org-level policy secret
-         * @description Create or overwrite an org-level policy secret
+         * Create or overwrite an org-level policy secret.
+         * @description Create or overwrite an org-level policy secret.
+         * Must be permitted by the policy secret's edit policy if set, and the org's edit policy otherwise.
          */
         put: operations["setPolicySecret"];
         /**
-         * Delete an org-level policy secret
-         * @description Delete an org-level policy secret
+         * Delete an org-level policy secret.
+         * @description Delete an org-level policy secret.
+         * Must be permitted by the policy secret's edit policy if set, and the org's edit policy otherwise.
          */
         delete: operations["deletePolicySecret"];
     };
@@ -1205,6 +1267,13 @@ export interface paths {
          */
         delete: operations["removeUserFromRole"];
     };
+    "/v0/org/{org_id}/rpc": {
+        /**
+         * High-level RPC endpoint.
+         * @description High-level RPC endpoint.
+         */
+        post: operations["rpcApi"];
+    };
     "/v0/org/{org_id}/session": {
         /**
          * List sessions
@@ -1520,14 +1589,6 @@ export interface paths {
          */
         patch: operations["passkeyAuthComplete"];
     };
-    "/v0/private/policy-execute/{policy_name}": {
-        /**
-         * The policy_execute API endpoint is intended to demonstrate that the signer
-         * @description The policy_execute API endpoint is intended to demonstrate that the signer
-         * can use the policy engine, by way of the PolicyEngineClient.
-         */
-        post: operations["policy-execute"];
-    };
     "/v0/user/me/fido": {
         /**
          * Initiate registration of a FIDO key
@@ -1817,8 +1878,7 @@ export interface components {
          */
         Aud: string | string[];
         AuditLogEntry: {
-            /** @description The name of the event */
-            event: string;
+            event: components["schemas"]["OrgEventDiscriminants"];
             /** @description UUID of the event. Unique across all events. */
             event_id: string;
             org_id: components["schemas"]["Id"];
@@ -2640,7 +2700,7 @@ export interface components {
         /** @enum {string} */
         BadGatewayErrorCode: "Generic" | "CustomChainRpcError" | "EsploraApiError" | "SentryApiError" | "CallWebhookError" | "OAuthProviderError" | "OidcDisoveryFailed" | "OidcIssuerJwkEndpointUnavailable" | "SmtpServerUnavailable";
         /** @enum {string} */
-        BadRequestErrorCode: "GenericBadRequest" | "DisallowedAllowRuleReference" | "InvalidPaginationToken" | "InvalidEmail" | "InvalidEmailTemplate" | "QueryMetricsError" | "InvalidTelegramData" | "ValidationError" | "WebhookPolicyTimeoutOutOfBounds" | "WebhookPolicyDisallowedUrlScheme" | "WebhookPolicyDisallowedUrlHost" | "WebhookPolicyDisallowedHeaders" | "ReservedName" | "UserEmailNotConfigured" | "EmailPasswordNotFound" | "PasswordAuthNotAllowedByInvitation" | "OneTimeCodeExpired" | "InvalidBody" | "InvalidJwt" | "InvitationNoLongerValid" | "TokenRequestError" | "InvalidMfaReceipt" | "InvalidMfaPolicyCount" | "InvalidMfaPolicyNumAuthFactors" | "InvalidMfaPolicyNumAllowedApprovers" | "InvalidMfaPolicyGracePeriodTooLong" | "InvalidBabylonStakingPolicyParams" | "InvalidSuiTxReceiversEmptyAllowlist" | "InvalidBtcTxReceiversEmptyAllowlist" | "InvalidRequireRoleSessionAllowlist" | "InvalidCreateKeyCount" | "InvalidDiffieHellmanCount" | "OrgInviteExistingUser" | "OrgUserAlreadyExists" | "OrgNameTaken" | "KwkNotFoundInRegion" | "OrgIsNotOrgExport" | "RoleNameTaken" | "PolicyNameTaken" | "NameTaken" | "ContactNameInvalid" | "ContactAddressesInvalid" | "ContactLabelInvalid" | "ContactModified" | "PolicyNotFound" | "PolicyVersionNotFound" | "PolicyRuleDisallowedByType" | "PolicyTypeDisallowed" | "PolicyDuplicateError" | "PolicyStillAttached" | "PolicyModified" | "PolicyNotAttached" | "AddKeyToRoleCountTooHigh" | "InvalidKeyId" | "InvalidTimeLockAlreadyInThePast" | "InvalidRestrictedScopes" | "InvalidUpdate" | "InvalidMetadataLength" | "InvalidLength" | "InvalidKeyMaterialId" | "KeyNotFound" | "SiweChallengeNotFound" | "SiweInvalidRequest" | "UserExportDerivedKey" | "UserExportPublicKeyInvalid" | "NistP256PublicKeyInvalid" | "UnableToAccessSmtpRelay" | "UserExportInProgress" | "RoleNotFound" | "InvalidRoleNameOrId" | "InvalidMfaReceiptOrgIdMissing" | "InvalidMfaReceiptInvalidOrgId" | "MfaRequestNotFound" | "InvalidKeyType" | "InvalidKeyMaterial" | "InvalidHexValue" | "InvalidBase32Value" | "InvalidBase58Value" | "InvalidSs58Value" | "InvalidForkVersionLength" | "InvalidEthAddress" | "InvalidStellarAddress" | "InvalidOrgNameOrId" | "InvalidUpdateOrgRequestDisallowedMfaType" | "InvalidUpdateOrgRequestEmptyAllowedMfaTypes" | "EmailOtpDelayTooShortForRegisterMfa" | "InvalidStakeDeposit" | "InvalidBlobSignRequest" | "InvalidDiffieHellmanRequest" | "InvalidSolanaSignRequest" | "InvalidEip712SignRequest" | "OnlySpecifyOne" | "NoOidcDataInProof" | "InvalidEvmSignRequest" | "InvalidEth2SignRequest" | "InvalidDeriveKeyRequest" | "InvalidStakingAmount" | "CustomStakingAmountNotAllowedForWrapperContract" | "InvalidUnstakeRequest" | "InvalidCreateUserRequest" | "UserAlreadyExists" | "IdpUserAlreadyExists" | "CognitoUserAlreadyOrgMember" | "UserNotFound" | "UserWithEmailNotFound" | "PolicyKeyMismatch" | "EmptyScopes" | "InvalidScopesForRoleSession" | "InvalidLifetime" | "NoSingleKeyForUser" | "InvalidOrgPolicyRule" | "SourceIpAllowlistEmpty" | "LimitWindowTooLong" | "Erc20ContractDisallowed" | "EmptyRuleError" | "OptionalListEmpty" | "MultipleExclusiveFieldsProvided" | "DuplicateFieldEntry" | "InvalidRange" | "InvalidOrgPolicyRepeatedRule" | "InvalidSuiTransaction" | "SuiSenderMismatch" | "AvaSignHashError" | "AvaSignError" | "BtcSegwitHashError" | "BtcTaprootHashError" | "BtcSignError" | "TaprootSignError" | "Eip712SignError" | "InvalidMemberRoleInUserAdd" | "InvalidMemberRoleInRecipientAdd" | "ThirdPartyUserAlreadyExists" | "OidcIdentityAlreadyExists" | "UserAlreadyHasIdentity" | "ThirdPartyUserNotFound" | "DeleteOidcUserError" | "DeleteUserError" | "SessionRoleMismatch" | "InvalidOidcToken" | "InvalidOidcIdentity" | "OidcIssuerUnsupported" | "OidcIssuerNotAllowed" | "OidcIssuerNoApplicableJwk" | "FidoKeyAlreadyRegistered" | "FidoKeySignCountTooLow" | "FidoVerificationFailed" | "FidoChallengeMfaMismatch" | "UnsupportedLegacyCognitoSession" | "InvalidIdentityProof" | "PaginationDataExpired" | "ExistingKeysViolateExclusiveKeyAccess" | "ExportDelayTooShort" | "ExportWindowTooLong" | "InvalidTotpFailureLimit" | "InvalidEip191SignRequest" | "CannotResendUserInvitation" | "InvalidNotificationEndpointCount" | "CannotDeletePendingSubscription" | "InvalidNotificationUrlProtocol" | "EmptyOneOfOrgEventFilter" | "EmptyAllExceptOrgEventFilter" | "InvalidTapNodeHash" | "InvalidOneTimeCode" | "MessageNotFound" | "MessageAlreadySigned" | "MessageRejected" | "MessageReplaced" | "InvalidMessageType" | "EmptyAddress" | "InvalidEth2SigningPolicySlotRange" | "InvalidEth2SigningPolicyEpochRange" | "InvalidEth2SigningPolicyTimestampRange" | "InvalidEth2SigningPolicyOverlappingRule" | "RpcUrlMissing" | "MmiChainIdMissing" | "EthersInvalidRpcUrl" | "EthersGetTransactionCountError" | "InvalidPassword" | "BabylonStakingFeePlusDustOverflow" | "BabylonStaking" | "BabylonStakingIncorrectKey" | "BabylonStakingSegwitNonDeposit" | "BabylonStakingRegistrationRequiresTaproot" | "PsbtSigning" | "TooManyResets" | "TooManyRequests" | "TooManyFailedLogins" | "BadBtcMessageSignP2shFlag" | "InvalidTendermintRequest" | "PolicyVersionMaxReached" | "PolicyVersionInvalid" | "PolicySecretLimitReached" | "PolicySecretTooLarge" | "InvalidImportKey" | "AlienOwnerInvalid" | "EmptyUpdateRequest" | "InvalidPolicyReference" | "PolicyEngineDisabled" | "InvalidWasmPolicy" | "InvalidPolicy" | "RedundantDerivationPath" | "ImportKeyMissing" | "InvalidAbiMethods" | "BabylonCovSign" | "InvalidPolicyLogsRequest" | "UserProfileMigrationMultipleEntries" | "UserProfileMigrationTooManyItems" | "InputTooShort" | "InvalidTweakLength" | "InvalidCustomChains";
+        BadRequestErrorCode: "GenericBadRequest" | "DisallowedAllowRuleReference" | "InvalidPaginationToken" | "InvalidEmail" | "InvalidEmailTemplate" | "QueryMetricsError" | "InvalidTelegramData" | "ValidationError" | "WebhookPolicyTimeoutOutOfBounds" | "WebhookPolicyDisallowedUrlScheme" | "WebhookPolicyDisallowedUrlHost" | "WebhookPolicyDisallowedHeaders" | "ReservedName" | "UserEmailNotConfigured" | "EmailPasswordNotFound" | "PasswordAuthNotAllowedByInvitation" | "OneTimeCodeExpired" | "InvalidBody" | "InvalidJwt" | "InvitationNoLongerValid" | "TokenRequestError" | "InvalidMfaReceipt" | "InvalidMfaPolicyCount" | "InvalidMfaPolicyNumAuthFactors" | "InvalidMfaPolicyNumAllowedApprovers" | "InvalidMfaPolicyGracePeriodTooLong" | "InvalidBabylonStakingPolicyParams" | "InvalidSuiTxReceiversEmptyAllowlist" | "InvalidBtcTxReceiversEmptyAllowlist" | "InvalidRequireRoleSessionAllowlist" | "InvalidCreateKeyCount" | "InvalidDiffieHellmanCount" | "OrgInviteExistingUser" | "OrgUserAlreadyExists" | "OrgNameTaken" | "KwkNotFoundInRegion" | "OrgIsNotOrgExport" | "RoleNameTaken" | "PolicyNameTaken" | "NameTaken" | "ContactNameInvalid" | "ContactAddressesInvalid" | "ContactLabelInvalid" | "ContactModified" | "PolicyNotFound" | "PolicyVersionNotFound" | "PolicyRuleDisallowedByType" | "PolicyTypeDisallowed" | "PolicyDuplicateError" | "PolicyStillAttached" | "PolicyModified" | "PolicyNotAttached" | "AddKeyToRoleCountTooHigh" | "InvalidKeyId" | "InvalidTimeLockAlreadyInThePast" | "InvalidRestrictedScopes" | "InvalidUpdate" | "InvalidMetadataLength" | "InvalidLength" | "InvalidKeyMaterialId" | "KeyNotFound" | "SiweChallengeNotFound" | "SiweInvalidRequest" | "UserExportDerivedKey" | "UserExportPublicKeyInvalid" | "NistP256PublicKeyInvalid" | "UnableToAccessSmtpRelay" | "UserExportInProgress" | "RoleNotFound" | "InvalidRoleNameOrId" | "InvalidMfaReceiptOrgIdMissing" | "InvalidMfaReceiptInvalidOrgId" | "MfaRequestNotFound" | "InvalidKeyType" | "InvalidKeyMaterial" | "InvalidHexValue" | "InvalidBase32Value" | "InvalidBase58Value" | "InvalidSs58Value" | "InvalidForkVersionLength" | "InvalidEthAddress" | "InvalidStellarAddress" | "InvalidOrgNameOrId" | "InvalidUpdateOrgRequestDisallowedMfaType" | "InvalidUpdateOrgRequestEmptyAllowedMfaTypes" | "EmailOtpDelayTooShortForRegisterMfa" | "InvalidStakeDeposit" | "InvalidBlobSignRequest" | "InvalidDiffieHellmanRequest" | "InvalidSolanaSignRequest" | "InvalidEip712SignRequest" | "OnlySpecifyOne" | "NoOidcDataInProof" | "InvalidEvmSignRequest" | "InvalidEth2SignRequest" | "InvalidDeriveKeyRequest" | "InvalidStakingAmount" | "CustomStakingAmountNotAllowedForWrapperContract" | "InvalidUnstakeRequest" | "InvalidCreateUserRequest" | "UserAlreadyExists" | "IdpUserAlreadyExists" | "CognitoUserAlreadyOrgMember" | "UserNotFound" | "UserWithEmailNotFound" | "PolicyKeyMismatch" | "EmptyScopes" | "InvalidScopesForRoleSession" | "InvalidLifetime" | "NoSingleKeyForUser" | "InvalidOrgPolicyRule" | "SourceIpAllowlistEmpty" | "LimitWindowTooLong" | "Erc20ContractDisallowed" | "EmptyRuleError" | "OptionalListEmpty" | "MultipleExclusiveFieldsProvided" | "DuplicateFieldEntry" | "InvalidRange" | "InvalidOrgPolicyRepeatedRule" | "InvalidSuiTransaction" | "SuiSenderMismatch" | "AvaSignHashError" | "AvaSignError" | "BtcSegwitHashError" | "BtcTaprootHashError" | "BtcSignError" | "TaprootSignError" | "Eip712SignError" | "InvalidMemberRoleInUserAdd" | "InvalidMemberRoleInRecipientAdd" | "ThirdPartyUserAlreadyExists" | "OidcIdentityAlreadyExists" | "UserAlreadyHasIdentity" | "ThirdPartyUserNotFound" | "DeleteOidcUserError" | "DeleteUserError" | "SessionRoleMismatch" | "InvalidOidcToken" | "InvalidOidcIdentity" | "OidcIssuerUnsupported" | "OidcIssuerNotAllowed" | "OidcIssuerNoApplicableJwk" | "FidoKeyAlreadyRegistered" | "FidoKeySignCountTooLow" | "FidoVerificationFailed" | "FidoChallengeMfaMismatch" | "UnsupportedLegacyCognitoSession" | "InvalidIdentityProof" | "PaginationDataExpired" | "ExistingKeysViolateExclusiveKeyAccess" | "ExportDelayTooShort" | "ExportWindowTooLong" | "InvalidTotpFailureLimit" | "InvalidEip191SignRequest" | "CannotResendUserInvitation" | "InvalidNotificationEndpointCount" | "CannotDeletePendingSubscription" | "InvalidNotificationUrlProtocol" | "EmptyOneOfOrgEventFilter" | "EmptyAllExceptOrgEventFilter" | "InvalidTapNodeHash" | "InvalidOneTimeCode" | "MessageNotFound" | "MessageAlreadySigned" | "MessageRejected" | "MessageReplaced" | "InvalidMessageType" | "EmptyAddress" | "InvalidEth2SigningPolicySlotRange" | "InvalidEth2SigningPolicyEpochRange" | "InvalidEth2SigningPolicyTimestampRange" | "InvalidEth2SigningPolicyOverlappingRule" | "RpcUrlMissing" | "MmiChainIdMissing" | "EthersInvalidRpcUrl" | "EthersGetTransactionCountError" | "InvalidPassword" | "BabylonStakingFeePlusDustOverflow" | "BabylonStaking" | "BabylonStakingIncorrectKey" | "BabylonStakingSegwitNonDeposit" | "BabylonStakingRegistrationRequiresTaproot" | "PsbtSigning" | "TooManyResets" | "TooManyRequests" | "TooManyFailedLogins" | "BadBtcMessageSignP2shFlag" | "InvalidTendermintRequest" | "PolicyVersionMaxReached" | "PolicyVersionInvalid" | "PolicySecretLimitReached" | "PolicySecretTooLarge" | "InvalidImportKey" | "AlienOwnerInvalid" | "EmptyUpdateRequest" | "InvalidPolicyReference" | "PolicyEngineDisabled" | "InvalidWasmPolicy" | "InvalidPolicy" | "RedundantDerivationPath" | "ImportKeyMissing" | "InvalidAbiMethods" | "BabylonCovSign" | "InvalidPolicyLogsRequest" | "UserProfileMigrationMultipleEntries" | "UserProfileMigrationTooManyItems" | "InputTooShort" | "InvalidTweakLength" | "InvalidCustomChains" | "InvalidRpcRequest";
         BillingArgs: {
             billing_org: components["schemas"]["Id"];
             event_type: components["schemas"]["BillingEvent"];
@@ -2657,7 +2717,7 @@ export interface components {
          * @description Billing event types.
          * @enum {string}
          */
-        BillingEvent: "Mmi" | "MmiMessageGet" | "MmiMessageList" | "MmiMessageSign" | "MmiMessageReject" | "MmiMessageDelete" | "AboutMe" | "UserResetEmailInit" | "UserResetEmailComplete" | "UserDeleteTotp" | "UserResetTotpInit" | "UserResetTotpComplete" | "UserVerifyTotp" | "UserRegisterFidoInit" | "UserRegisterFidoComplete" | "UserDeleteFido" | "CreateProofOidc" | "CreateProofCubeSigner" | "VerifyProof" | "AddOidcIdentity" | "RemoveOidcIdentity" | "ListOidcIdentities" | "GetOrg" | "UpdateOrg" | "GetOrgExport" | "CreateOrg" | "ListKeys" | "AttestKey" | "GetKey" | "GetKeyByMaterialId" | "ListKeyRoles" | "UpdateKey" | "ListHistoricalKeyTx" | "Invite" | "ListUsers" | "GetUser" | "GetUserByEmail" | "GetUserByOidc" | "UpdateMembership" | "ResetMemberMfa" | "CompleteResetMemberMfa" | "CreateRole" | "AttestRole" | "GetRole" | "ListTokenKeys" | "ListRoles" | "GetRoleKey" | "ListRoleKeys" | "ListRoleUsers" | "UpdateRole" | "DeleteRole" | "ConfigureEmail" | "ListHistoricalRoleTx" | "CreatePolicy" | "GetPolicy" | "ListPolicies" | "DeletePolicy" | "UpdatePolicy" | "InvokePolicy" | "GetPolicyLogs" | "UploadWasmPolicy" | "GetPolicySecrets" | "UpdatePolicySecrets" | "SetPolicySecret" | "DeletePolicySecret" | "CreatePolicyImportKey" | "UserExportDelete" | "UserExportList" | "UserExportInit" | "UserExportComplete" | "AddUserToRole" | "RemoveUserFromRole" | "MfaApproveCs" | "MfaRejectCs" | "MfaGet" | "MfaList" | "AddKeysToRole" | "RemoveKeyFromRole" | "CreateToken" | "CreateSession" | "RevokeSession" | "RevokeCurrentSession" | "RevokeSessions" | "ListSessions" | "GetSession" | "SignerSessionRefresh" | "MfaApproveTotp" | "MfaRejectTotp" | "MfaFidoInit" | "MfaApproveFidoComplete" | "MfaRejectFidoComplete" | "MfaEmailInit" | "MfaEmailComplete" | "Cube3signerHeartbeat" | "CreateContact" | "GetContact" | "ListContacts" | "DeleteContact" | "UpdateContact" | "LookupContactsByAddress" | "QueryMetrics" | "QueryAuditLog" | "Counts" | "CreateKey" | "ImportKey" | "CreateKeyImportKey" | "DeriveKey" | "DeleteKey" | "AvaSign" | "AvaSerializedTxSign" | "BabylonRegistration" | "BabylonStaking" | "BabylonCovSign" | "BlobSign" | "BtcMessageSign" | "BtcSign" | "DiffieHellmanExchange" | "PsbtSign" | "PsbtLegacyInputSign" | "PsbtSegwitInputSign" | "PsbtTaprootInputSign" | "TaprootSign" | "Eip712Sign" | "Eip191Sign" | "Eth1Sign" | "Eth2Sign" | "SolanaSign" | "SuiSign" | "TendermintSign" | "Stake" | "Unstake" | "PasskeyAuthInit" | "PasskeyAuthComplete" | "OidcAuth" | "Oauth2Twitter" | "OAuth2TokenRefresh" | "EmailOtpAuth" | "SiweInit" | "SiweComplete" | "TelegramAuth" | "CreateOidcUser" | "DeleteOidcUser" | "DeleteUser" | "CreateEotsNonces" | "EotsSign" | "AuthMigrationIdentityAdd" | "AuthMigrationIdentityRemove" | "AuthMigrationUserUpdate" | "KeyCreated" | "KeyImported" | "InvitationAccept" | "IdpAuthenticate" | "IdpPasswordResetRequest" | "IdpPasswordResetConfirm" | "CustomChainRpcCall" | "EsploraApiCall" | "ExecutePolicy" | "SentryApiCall" | "SentryApiCallPublic" | "MmiJwkSet" | "AttestationJwkSet" | "UserOrgs" | "PublicOrgInfo" | "EmailMyOrgs";
+        BillingEvent: "Mmi" | "MmiMessageGet" | "MmiMessageList" | "MmiMessageSign" | "MmiMessageReject" | "MmiMessageDelete" | "AboutMe" | "UserResetEmailInit" | "UserResetEmailComplete" | "UserDeleteTotp" | "UserResetTotpInit" | "UserResetTotpComplete" | "UserVerifyTotp" | "UserRegisterFidoInit" | "UserRegisterFidoComplete" | "UserDeleteFido" | "CreateProofOidc" | "CreateProofCubeSigner" | "VerifyProof" | "AddOidcIdentity" | "RemoveOidcIdentity" | "ListOidcIdentities" | "GetOrg" | "UpdateOrg" | "GetOrgExport" | "CreateOrg" | "ListKeys" | "AttestKey" | "GetKey" | "GetKeyByMaterialId" | "ListKeyRoles" | "UpdateKey" | "ListHistoricalKeyTx" | "Invite" | "CancelInvitation" | "ListInvitations" | "ListUsers" | "GetUser" | "GetUserByEmail" | "GetUserByOidc" | "UpdateMembership" | "ResetMemberMfa" | "CompleteResetMemberMfa" | "CreateRole" | "AttestRole" | "GetRole" | "ListTokenKeys" | "ListRoles" | "GetRoleKey" | "ListRoleKeys" | "ListRoleUsers" | "UpdateRole" | "DeleteRole" | "ConfigureEmail" | "GetEmailConfig" | "DeleteEmailConfig" | "ListHistoricalRoleTx" | "CreatePolicy" | "GetPolicy" | "ListPolicies" | "DeletePolicy" | "UpdatePolicy" | "InvokePolicy" | "GetPolicyLogs" | "UploadWasmPolicy" | "GetPolicySecrets" | "UpdatePolicySecrets" | "SetPolicySecret" | "DeletePolicySecret" | "CreatePolicyImportKey" | "GetPolicyBucket" | "ListPolicyBuckets" | "UpdatePolicyBucket" | "UserExportDelete" | "UserExportList" | "UserExportInit" | "UserExportComplete" | "AddUserToRole" | "RemoveUserFromRole" | "MfaApproveCs" | "MfaRejectCs" | "MfaGet" | "MfaList" | "AddKeysToRole" | "RemoveKeyFromRole" | "CreateToken" | "CreateSession" | "RevokeSession" | "RevokeCurrentSession" | "RevokeSessions" | "ListSessions" | "GetSession" | "SignerSessionRefresh" | "MfaApproveTotp" | "MfaRejectTotp" | "MfaFidoInit" | "MfaApproveFidoComplete" | "MfaRejectFidoComplete" | "MfaEmailInit" | "MfaEmailComplete" | "Cube3signerHeartbeat" | "CreateContact" | "GetContact" | "ListContacts" | "DeleteContact" | "UpdateContact" | "LookupContactsByAddress" | "QueryMetrics" | "QueryAuditLog" | "Counts" | "CreateKey" | "ImportKey" | "CreateKeyImportKey" | "DeriveKey" | "DeleteKey" | "AvaSign" | "AvaSerializedTxSign" | "BabylonRegistration" | "BabylonStaking" | "BabylonCovSign" | "BlobSign" | "BtcMessageSign" | "BtcSign" | "DiffieHellmanExchange" | "PsbtSign" | "PsbtLegacyInputSign" | "PsbtSegwitInputSign" | "PsbtTaprootInputSign" | "TaprootSign" | "Eip712Sign" | "Eip191Sign" | "Eth1Sign" | "Eth2Sign" | "SolanaSign" | "SuiSign" | "TendermintSign" | "Stake" | "Unstake" | "PasskeyAuthInit" | "PasskeyAuthComplete" | "OidcAuth" | "Oauth2Twitter" | "OAuth2TokenRefresh" | "EmailOtpAuth" | "SiweInit" | "SiweComplete" | "TelegramAuth" | "CreateOidcUser" | "DeleteOidcUser" | "DeleteUser" | "CreateEotsNonces" | "EotsSign" | "AuthMigrationIdentityAdd" | "AuthMigrationIdentityRemove" | "AuthMigrationUserUpdate" | "KeyCreated" | "KeyImported" | "InvitationAccept" | "IdpAuthenticate" | "IdpPasswordResetRequest" | "IdpPasswordResetConfirm" | "RpcApi" | "RpcCreateTransaction" | "RpcGetTransaction" | "RpcListTransactions" | "CustomChainRpcCall" | "EsploraApiCall" | "SentryApiCall" | "SentryApiCallPublic" | "MmiJwkSet" | "AttestationJwkSet" | "UserOrgs" | "PublicOrgInfo" | "EmailMyOrgs";
         /** @description A bitcoin address and its network. */
         BitcoinAddressInfo: {
             /**
@@ -2882,6 +2942,52 @@ export interface components {
              */
             value: number;
         };
+        /**
+         * @description The access-controlled actions that can be performed on a bucket
+         * @enum {string}
+         */
+        BucketAction: "read:key:value" | "read:key:exists" | "update:key:value" | "delete:key:value" | "scan:keys" | "update:bucket:owner" | "update:bucket:acl" | "update:bucket:metadata";
+        /** @description Information about a policy KV store bucket. */
+        BucketInfo: ({
+            created?: components["schemas"]["EpochDateTime"] | null;
+            last_modified?: components["schemas"]["EpochDateTime"] | null;
+            /**
+             * Format: int64
+             * @description Version of this object
+             */
+            version?: number;
+        } & {
+            /** @description The access-control entries for the bucket. */
+            acl?: unknown[] | null;
+            /** @description Arbitrary user-defined metadata. */
+            metadata?: unknown;
+            owner: components["schemas"]["Id"];
+        }) & {
+            /** @description The name of the bucket. */
+            name: string;
+        };
+        /**
+         * @description Sub-entity of org where per-bucket metadata (like ACL) is stored.
+         * The [Id] of a [BucketMeta] must be the bucket name.
+         */
+        BucketMeta: {
+            created?: components["schemas"]["EpochDateTime"] | null;
+            last_modified?: components["schemas"]["EpochDateTime"] | null;
+            /**
+             * Format: int64
+             * @description Version of this object
+             */
+            version?: number;
+        } & {
+            /** @description The access-control entries for the bucket. */
+            acl?: unknown[] | null;
+            /** @description Arbitrary user-defined metadata. */
+            metadata?: unknown;
+            owner: components["schemas"]["Id"];
+        };
+        CancelInvitationRequest: {
+            email: components["schemas"]["Email"];
+        };
         /**
          * @description Supported Canton environments.
          * @enum {string}
@@ -3135,6 +3241,36 @@ export interface components {
              */
             name: string;
         };
+        /** @description Parameters for creating an EVM transaction. */
+        CreateEvmTransactionRequest: components["schemas"]["CreateEvmTransferRequest"] & {
+            /** @enum {string} */
+            type: "Transfer";
+        };
+        /** @description Parameters for creating an EVM transfer. */
+        CreateEvmTransferRequest: {
+            token: "CreateEvmTransferRequest";
+        } & Omit<components["schemas"]["EvmToken"], "token"> & components["schemas"]["EvmTxCustomization"] & {
+            /**
+             * Format: int64
+             * @description The EVM chain id this transaction is for.
+             */
+            chain_id: number;
+            /**
+             * @description The address that the amount will be transferred from.
+             *
+             * Must match the material id of a key the session can access.
+             */
+            from: string;
+            /** @description The address that the amount will be transferred to. */
+            to: string;
+            /**
+             * @description The amount being transferred, as a hex value.
+             *
+             * This value should be in WEI for native transfers, and in the token's denomination
+             * for ERC-20 transfers.
+             */
+            value: string;
+        };
         CreateKeyImportKeyResponse: components["schemas"]["KeyImportKey"] & {
             /**
              * @description An attestation document from a secure enclave, including an
@@ -3293,6 +3429,13 @@ export interface components {
              */
             scopes?: components["schemas"]["Scope"][] | null;
         };
+        /** @description Parameters for the [`cs_createTransaction`](RpcMethod::CreateTransaction) method. */
+        CreateTransactionRequest: {
+            type: "CreateTransactionRequest";
+        } & Omit<components["schemas"]["CreateEvmTransactionRequest"], "type"> & {
+            /** @enum {string} */
+            chain: "Evm";
+        };
         /**
          * @description An extended form of `PublicKeyCredentialCreationOptions` that allows clients to derive the WebAuthn challenge
          * from a structured preimage.
@@ -4035,6 +4178,33 @@ export interface components {
              */
             rpc_url: string;
         };
+        /** @description An EVM token. */
+        EvmToken: {
+            /** @enum {string} */
+            token: "Native";
+        } | {
+            /** @enum {string} */
+            token: "Erc20";
+            /** @description The ERC-20 token address. */
+            token_address: string;
+        };
+        /** @description EVM-specific transaction details. */
+        EvmTransactionDetails: {
+            /**
+             * @description The transaction hash, as submitted to the chain.
+             *
+             * Can be undefined if the transaction hasn't been signed or submitted yet.
+             */
+            hash?: string;
+            /**
+             * @description The signature for the transaction.
+             *
+             * Can be undefined if the transaction hasn't been signed yet, or failed to be signed.
+             */
+            signature?: string;
+            /** @description The transaction itself. */
+            tx: unknown;
+        };
         EvmTxCmp: {
             /**
              * Format: int64
@@ -4060,6 +4230,34 @@ export interface components {
             /** @description Whether the 'nonce' property of the EVM transaction is allowed to be different. */
             ignore_nonce?: boolean;
         };
+        /** @description Optional fields used to customize EVM transactions. */
+        EvmTxCustomization: {
+            /**
+             * @description Optional gas limit.
+             *
+             * If not specified, estimated gas is used.
+             */
+            gas_limit?: string | null;
+            /**
+             * @description Optional max fee for the transaction.
+             *
+             * If not specified, estimated fees are used.
+             */
+            max_fee_per_gas?: string | null;
+            /**
+             * @description Optional max priority fee for the transaction.
+             *
+             * If not specified, estimated fees are used.
+             */
+            max_priority_fee_per_gas?: string | null;
+            /**
+             * @description Optional nonce.
+             *
+             * If not specified, the sender's transaction count from the latest block is
+             * used.
+             */
+            nonce?: string | null;
+        };
         /** @enum {string} */
         EvmTxDepositErrorCode: "EvmTxDepositReceiverMismatch" | "EvmTxDepositEmptyData" | "EvmTxDepositEmptyChainId" | "EvmTxDepositEmptyReceiver" | "EvmTxDepositUnexpectedValue" | "EvmTxDepositUnexpectedDataLength" | "EvmTxDepositNoAbi" | "EvmTxDepositNoDepositFunction" | "EvmTxDepositUnexpectedFunctionName" | "EvmTxDepositUnexpectedValidatorKey" | "EvmTxDepositInvalidValidatorKey" | "EvmTxDepositMissingDepositArg" | "EvmTxDepositWrongDepositArgType" | "EvmTxDepositValidatorKeyNotInRole" | "EvmTxDepositUnexpectedWithdrawalCredentials" | "EvmTxDepositUnresolvedRole" | "EvmTxDepositInvalidDepositEncoding";
         /**
@@ -4072,7 +4270,7 @@ export interface components {
          * @description Explicitly named scopes for accessing CubeSigner APIs
          * @enum {string}
          */
-        ExplicitScope: "sign:*" | "sign:ava" | "sign:blob" | "sign:diffieHellman" | "sign:btc:*" | "sign:btc:segwit" | "sign:btc:taproot" | "sign:btc:psbt:*" | "sign:btc:psbt:doge" | "sign:btc:psbt:legacy" | "sign:btc:psbt:segwit" | "sign:btc:psbt:taproot" | "sign:btc:psbt:ltcSegwit" | "sign:btc:message:*" | "sign:btc:message:segwit" | "sign:btc:message:legacy" | "sign:babylon:*" | "sign:babylon:eots:*" | "sign:babylon:eots:nonces" | "sign:babylon:eots:sign" | "sign:babylon:staking:*" | "sign:babylon:staking:deposit" | "sign:babylon:staking:unbond" | "sign:babylon:staking:withdraw" | "sign:babylon:staking:slash" | "sign:babylon:registration" | "sign:babylon:covenant" | "sign:evm:*" | "sign:evm:tx" | "sign:evm:eip191" | "sign:evm:eip712" | "sign:eth2:*" | "sign:eth2:validate" | "sign:eth2:stake" | "sign:eth2:unstake" | "sign:solana" | "sign:sui" | "sign:tendermint" | "sign:mmi" | "manage:*" | "manage:readonly" | "manage:email" | "manage:mfa:*" | "manage:mfa:readonly" | "manage:mfa:list" | "manage:mfa:vote:*" | "manage:mfa:vote:cs" | "manage:mfa:vote:email" | "manage:mfa:vote:fido" | "manage:mfa:vote:totp" | "manage:mfa:register:*" | "manage:mfa:register:fido" | "manage:mfa:register:totp" | "manage:mfa:register:email" | "manage:mfa:unregister:*" | "manage:mfa:unregister:fido" | "manage:mfa:unregister:totp" | "manage:mfa:verify:*" | "manage:mfa:verify:totp" | "manage:key:*" | "manage:key:readonly" | "manage:key:get" | "manage:key:attest" | "manage:key:listRoles" | "manage:key:list" | "manage:key:history:tx:list" | "manage:key:create" | "manage:key:import" | "manage:key:update:*" | "manage:key:update:owner" | "manage:key:update:policy" | "manage:key:update:enabled" | "manage:key:update:metadata" | "manage:key:update:editPolicy" | "manage:key:delete" | "manage:policy:*" | "manage:policy:readonly" | "manage:policy:create" | "manage:policy:get" | "manage:policy:list" | "manage:policy:delete" | "manage:policy:update:*" | "manage:policy:update:owner" | "manage:policy:update:name" | "manage:policy:update:acl" | "manage:policy:update:editPolicy" | "manage:policy:update:metadata" | "manage:policy:update:rule" | "manage:policy:invoke" | "manage:policy:wasm:*" | "manage:policy:wasm:upload" | "manage:policy:secrets:*" | "manage:policy:secrets:get" | "manage:policy:secrets:update:*" | "manage:policy:secrets:update:values" | "manage:policy:secrets:update:acl" | "manage:policy:secrets:update:editPolicy" | "manage:contact:*" | "manage:contact:readonly" | "manage:contact:create" | "manage:contact:get" | "manage:contact:list" | "manage:contact:delete" | "manage:contact:update:*" | "manage:contact:update:name" | "manage:contact:update:addresses" | "manage:contact:update:owner" | "manage:contact:update:labels" | "manage:contact:update:metadata" | "manage:contact:update:editPolicy" | "manage:contact:lookup:*" | "manage:contact:lookup:address" | "manage:policy:createImportKey" | "manage:role:*" | "manage:role:readonly" | "manage:role:create" | "manage:role:delete" | "manage:role:get:*" | "manage:role:attest" | "manage:role:get:keys" | "manage:role:get:keys:list" | "manage:role:get:keys:get" | "manage:role:get:users" | "manage:role:list" | "manage:role:update:*" | "manage:role:update:enabled" | "manage:role:update:policy" | "manage:role:update:editPolicy" | "manage:role:update:key:*" | "manage:role:update:key:add" | "manage:role:update:key:remove" | "manage:role:update:user:*" | "manage:role:update:user:add" | "manage:role:update:user:remove" | "manage:role:history:tx:list" | "manage:identity:*" | "manage:identity:readonly" | "manage:identity:verify" | "manage:identity:add" | "manage:identity:remove" | "manage:identity:list" | "manage:org:*" | "manage:org:create" | "manage:org:metrics:query" | "manage:org:audit:query" | "manage:org:readonly" | "manage:org:addUser" | "manage:org:inviteUser" | "manage:org:inviteAlien" | "manage:org:updateMembership" | "manage:org:listUsers" | "manage:org:user:get" | "manage:org:deleteUser" | "manage:org:get" | "manage:org:user:resetMfa" | "manage:session:*" | "manage:session:readonly" | "manage:session:get" | "manage:session:list" | "manage:session:create" | "manage:session:extend" | "manage:session:revoke" | "manage:export:*" | "manage:export:readonly" | "manage:export:org:*" | "manage:export:org:get" | "manage:export:user:*" | "manage:export:user:delete" | "manage:export:user:list" | "manage:authMigration:*" | "manage:authMigration:identity:add" | "manage:authMigration:identity:remove" | "manage:authMigration:user:update" | "manage:mmi:*" | "manage:mmi:readonly" | "manage:mmi:get" | "manage:mmi:list" | "manage:mmi:reject" | "manage:mmi:delete" | "export:*" | "export:user:*" | "export:user:init" | "export:user:complete" | "mmi:*" | "orgAccess:*" | "orgAccess:child:*";
+        ExplicitScope: "sign:*" | "sign:ava" | "sign:blob" | "sign:diffieHellman" | "sign:btc:*" | "sign:btc:segwit" | "sign:btc:taproot" | "sign:btc:psbt:*" | "sign:btc:psbt:doge" | "sign:btc:psbt:legacy" | "sign:btc:psbt:segwit" | "sign:btc:psbt:taproot" | "sign:btc:psbt:ltcSegwit" | "sign:btc:message:*" | "sign:btc:message:segwit" | "sign:btc:message:legacy" | "sign:babylon:*" | "sign:babylon:eots:*" | "sign:babylon:eots:nonces" | "sign:babylon:eots:sign" | "sign:babylon:staking:*" | "sign:babylon:staking:deposit" | "sign:babylon:staking:unbond" | "sign:babylon:staking:withdraw" | "sign:babylon:staking:slash" | "sign:babylon:registration" | "sign:babylon:covenant" | "sign:evm:*" | "sign:evm:tx" | "sign:evm:eip191" | "sign:evm:eip712" | "sign:eth2:*" | "sign:eth2:validate" | "sign:eth2:stake" | "sign:eth2:unstake" | "sign:solana" | "sign:sui" | "sign:tendermint" | "sign:mmi" | "manage:*" | "manage:readonly" | "manage:email:*" | "manage:email:get" | "manage:email:update" | "manage:email:delete" | "manage:mfa:*" | "manage:mfa:readonly" | "manage:mfa:list" | "manage:mfa:vote:*" | "manage:mfa:vote:cs" | "manage:mfa:vote:email" | "manage:mfa:vote:fido" | "manage:mfa:vote:totp" | "manage:mfa:register:*" | "manage:mfa:register:fido" | "manage:mfa:register:totp" | "manage:mfa:register:email" | "manage:mfa:unregister:*" | "manage:mfa:unregister:fido" | "manage:mfa:unregister:totp" | "manage:mfa:verify:*" | "manage:mfa:verify:totp" | "manage:key:*" | "manage:key:readonly" | "manage:key:get" | "manage:key:attest" | "manage:key:listRoles" | "manage:key:list" | "manage:key:history:tx:list" | "manage:key:create" | "manage:key:import" | "manage:key:update:*" | "manage:key:update:owner" | "manage:key:update:policy" | "manage:key:update:enabled" | "manage:key:update:region" | "manage:key:update:metadata" | "manage:key:update:editPolicy" | "manage:key:delete" | "manage:policy:*" | "manage:policy:readonly" | "manage:policy:create" | "manage:policy:get" | "manage:policy:list" | "manage:policy:delete" | "manage:policy:update:*" | "manage:policy:update:owner" | "manage:policy:update:name" | "manage:policy:update:acl" | "manage:policy:update:editPolicy" | "manage:policy:update:metadata" | "manage:policy:update:rule" | "manage:policy:invoke" | "manage:policy:wasm:*" | "manage:policy:wasm:upload" | "manage:policy:secrets:*" | "manage:policy:secrets:get" | "manage:policy:secrets:update:*" | "manage:policy:secrets:update:values" | "manage:policy:secrets:update:acl" | "manage:policy:secrets:update:editPolicy" | "manage:policy:buckets:*" | "manage:policy:buckets:get" | "manage:policy:buckets:list" | "manage:policy:buckets:update:*" | "manage:policy:buckets:update:owner" | "manage:policy:buckets:update:acl" | "manage:policy:buckets:update:metadata" | "manage:contact:*" | "manage:contact:readonly" | "manage:contact:create" | "manage:contact:get" | "manage:contact:list" | "manage:contact:delete" | "manage:contact:update:*" | "manage:contact:update:name" | "manage:contact:update:addresses" | "manage:contact:update:owner" | "manage:contact:update:labels" | "manage:contact:update:metadata" | "manage:contact:update:editPolicy" | "manage:contact:lookup:*" | "manage:contact:lookup:address" | "manage:policy:createImportKey" | "manage:role:*" | "manage:role:readonly" | "manage:role:create" | "manage:role:delete" | "manage:role:get:*" | "manage:role:attest" | "manage:role:get:keys" | "manage:role:get:keys:list" | "manage:role:get:keys:get" | "manage:role:get:users" | "manage:role:list" | "manage:role:update:*" | "manage:role:update:enabled" | "manage:role:update:policy" | "manage:role:update:editPolicy" | "manage:role:update:actions" | "manage:role:update:key:*" | "manage:role:update:key:add" | "manage:role:update:key:remove" | "manage:role:update:user:*" | "manage:role:update:user:add" | "manage:role:update:user:remove" | "manage:role:history:tx:list" | "manage:identity:*" | "manage:identity:readonly" | "manage:identity:verify" | "manage:identity:add" | "manage:identity:remove" | "manage:identity:list" | "manage:org:*" | "manage:org:create" | "manage:org:metrics:query" | "manage:org:audit:query" | "manage:org:readonly" | "manage:org:addUser" | "manage:org:inviteUser" | "manage:org:inviteAlien" | "manage:org:invitation:list" | "manage:org:invitation:cancel" | "manage:org:updateMembership" | "manage:org:listUsers" | "manage:org:user:get" | "manage:org:deleteUser" | "manage:org:get" | "manage:org:update:*" | "manage:org:update:enabled" | "manage:org:update:policy" | "manage:org:update:signPolicy" | "manage:org:update:export" | "manage:org:update:totpFailureLimit" | "manage:org:update:notificationEndpoints" | "manage:org:update:defaultInviteKind" | "manage:org:update:idpConfiguration" | "manage:org:update:passkeyConfiguration" | "manage:org:update:emailPreferences" | "manage:org:update:historicalData" | "manage:org:update:requireScopeCeiling" | "manage:org:update:alienLoginRequirement" | "manage:org:update:memberLoginRequirement" | "manage:org:update:keyExportRequirement" | "manage:org:update:allowedMfaTypes" | "manage:org:update:policyEngineConf" | "manage:org:update:customChains" | "manage:org:update:extProps" | "manage:org:update:editPolicy" | "manage:org:user:resetMfa" | "manage:session:*" | "manage:session:readonly" | "manage:session:get" | "manage:session:list" | "manage:session:create" | "manage:session:extend" | "manage:session:revoke" | "manage:export:*" | "manage:export:readonly" | "manage:export:org:*" | "manage:export:org:get" | "manage:export:user:*" | "manage:export:user:delete" | "manage:export:user:list" | "manage:authMigration:*" | "manage:authMigration:identity:add" | "manage:authMigration:identity:remove" | "manage:authMigration:user:update" | "manage:mmi:*" | "manage:mmi:readonly" | "manage:mmi:get" | "manage:mmi:list" | "manage:mmi:reject" | "manage:mmi:delete" | "export:*" | "export:user:*" | "export:user:init" | "export:user:complete" | "mmi:*" | "orgAccess:*" | "orgAccess:child:*" | "rpc:*" | "rpc:createTransaction:*" | "rpc:createTransaction:evm" | "rpc:getTransaction" | "rpc:listTransactions";
         /**
          * @description This type specifies the interpretation of the `fee` field in Babylon
          * staking requests. If `sats`, the field is intpreted as a fixed value
@@ -4128,7 +4326,7 @@ export interface components {
             request_device_identifier?: boolean;
         };
         /** @enum {string} */
-        ForbiddenErrorCode: "AlienKeyCreate" | "CannotAssumeIdentity" | "SentryDisallowed" | "PasskeyLoginDisabled" | "PasskeyNotRegistered" | "CannotCreateOrg" | "WrongMfaEmailOtpJwt" | "OrgFlagNotSet" | "FidoRequiredToRemoveTotp" | "OidcIdentityLimitReached" | "OidcScopeCeilingMissing" | "OidcIssuerNotAllowedForMemberRole" | "OidcNoMemberRolesAllowed" | "EmailOtpNotConfigured" | "MfaChallengeExpired" | "ChainIdNotAllowed" | "InvalidOrg" | "OrgIdMismatch" | "SessionForWrongOrg" | "SelfDelete" | "SelfDisable" | "InvalidOrgMembershipRoleChange" | "UserDisabled" | "OrgDisabled" | "OrgNotFound" | "OrgWithoutOwner" | "OrphanedUser" | "OidcUserNotFound" | "UserNotInOrg" | "UserNotOrgOwner" | "UserNotKeyOwner" | "InvalidRole" | "DisabledRole" | "KeyDisabled" | "KeyNotInRole" | "ContactNotInOrg" | "UserExportRequestNotInOrg" | "UserExportRequestInvalid" | "UserExportDisabled" | "UserNotOriginalKeyOwner" | "UserNotInRole" | "MustBeFullMember" | "SessionExpired" | "SessionChanged" | "SessionRevoked" | "ExpectedUserSession" | "SessionRoleChanged" | "ScopedNameNotFound" | "SessionInvalidEpochToken" | "SessionInvalidRefreshToken" | "SessionRefreshTokenExpired" | "InvalidAuthHeader" | "SessionNotFound" | "InvalidArn" | "SessionInvalidAuthToken" | "SessionAuthTokenExpired" | "SessionPossiblyStolenToken" | "MfaDisallowedIdentity" | "MfaDisallowedApprover" | "MfaTypeNotAllowed" | "MfaNotApprovedYet" | "MfaConfirmationCodeMismatch" | "MfaHttpRequestMismatch" | "MfaRemoveBelowMin" | "MfaOrgRequirementNotMet" | "MfaRegistrationDisallowed" | "TotpAlreadyConfigured" | "TotpConfigurationChanged" | "MfaTotpBadConfiguration" | "MfaTotpBadCode" | "MfaTotpRateLimit" | "ImproperSessionScope" | "FullSessionRequired" | "SessionWithoutAnyScopeUnder" | "UserRoleUnprivileged" | "MemberRoleForbidden" | "MfaNotConfigured" | "RemoveLastOidcIdentity" | "OperationNotAllowed" | "OrgExportRetrievalDisabled" | "ChangingKeyExportRequirementIsDisabled" | "AutoAddBlsKeyToProtectedRole" | "UserNotPolicyOwner" | "UserNotContactOwner" | "LegacySessionCannotHaveScopeCeiling" | "RoleInParentOrgNotAllowed" | "RemoveKeyFromRoleUserNotAllowed" | "SiweChallengeExpired" | "SiweMessageNotValid" | "SiweMessageInvalidSignature" | "Acl";
+        ForbiddenErrorCode: "AlienKeyCreate" | "CannotAssumeIdentity" | "SentryDisallowed" | "PasskeyLoginDisabled" | "PasskeyNotRegistered" | "CannotCreateOrg" | "WrongMfaEmailOtpJwt" | "OrgFlagNotSet" | "FidoRequiredToRemoveTotp" | "OidcIdentityLimitReached" | "OidcScopeCeilingMissing" | "OidcIssuerNotAllowedForMemberRole" | "OidcNoMemberRolesAllowed" | "EmailOtpNotConfigured" | "MfaChallengeExpired" | "ChainIdNotAllowed" | "InvalidOrg" | "OrgIdMismatch" | "SessionForWrongOrg" | "SelfDelete" | "SelfDisable" | "InvalidOrgMembershipRoleChange" | "UserDisabled" | "OrgDisabled" | "OrgNotFound" | "OrgWithoutOwner" | "OrphanedUser" | "OidcUserNotFound" | "UserNotInOrg" | "UserNotOrgOwner" | "UserNotKeyOwner" | "InvalidRole" | "DisabledRole" | "KeyDisabled" | "KeyNotInRole" | "ContactNotInOrg" | "UserExportRequestNotInOrg" | "UserExportRequestInvalid" | "UserExportDisabled" | "UserNotOriginalKeyOwner" | "UserNotInRole" | "MustBeFullMember" | "SessionExpired" | "SessionChanged" | "SessionRevoked" | "ExpectedUserSession" | "SessionRoleChanged" | "ScopedNameNotFound" | "SessionInvalidEpochToken" | "SessionInvalidRefreshToken" | "SessionRefreshTokenExpired" | "InvalidAuthHeader" | "SessionNotFound" | "InvalidArn" | "SessionInvalidAuthToken" | "SessionAuthTokenExpired" | "SessionPossiblyStolenToken" | "MfaDisallowedIdentity" | "MfaDisallowedApprover" | "MfaTypeNotAllowed" | "MfaNotApprovedYet" | "MfaConfirmationCodeMismatch" | "MfaHttpRequestMismatch" | "MfaRemoveBelowMin" | "MfaOrgRequirementNotMet" | "MfaRegistrationDisallowed" | "TotpAlreadyConfigured" | "TotpConfigurationChanged" | "MfaTotpBadConfiguration" | "MfaTotpBadCode" | "MfaTotpRateLimit" | "ImproperSessionScope" | "FullSessionRequired" | "SessionWithoutAnyScopeUnder" | "UserRoleUnprivileged" | "MemberRoleForbidden" | "MfaNotConfigured" | "RemoveLastOidcIdentity" | "OperationNotAllowed" | "OrgExportRetrievalDisabled" | "ChangingKeyExportRequirementIsDisabled" | "AutoAddBlsKeyToProtectedRole" | "UserNotPolicyOwner" | "UserNotContactOwner" | "UserNotBucketOwner" | "LegacySessionCannotHaveScopeCeiling" | "RoleInParentOrgNotAllowed" | "RemoveKeyFromRoleUserNotAllowed" | "SiweChallengeExpired" | "SiweMessageNotValid" | "SiweMessageInvalidSignature" | "Acl";
         /**
          * @description Specifies a fork of the `BeaconChain`, to prevent replay attacks.
          * The schema of `Fork` is defined in the [Beacon chain
@@ -4175,9 +4373,24 @@ export interface components {
              */
             genesis_validators_root: string;
         };
+        /** @description The email sender configuration (without sensitive auth details) */
+        GetEmailConfigResponse: {
+            /** @description The email address that emails are sent from */
+            sender: string;
+            template?: {
+                /** @description An HTML template to use for the body. */
+                body_template: string;
+                /** @description The subject line template */
+                subject_template: string;
+            } | null;
+        };
         GetKeysInOrgRequest: {
             key_type?: components["schemas"]["KeyType"] | null;
         };
+        /** @description Parameters for the [`cs_getTransaction`](RpcMethod::GetTransaction) method. */
+        GetTransactionRequest: {
+            id: components["schemas"]["Id"];
+        };
         GetUserByEmailResponse: {
             /**
              * @description Typically, this array is either empty (if no user with a given email was found)
@@ -4352,12 +4565,23 @@ export interface components {
             salt: string;
         };
         /** @enum {string} */
-        InternalErrorCode: "NoMaterialId" | "InvalidAuditLogEntry" | "UnexpectedCheckerRule" | "UnresolvedPolicyReference" | "UnexpectedAclAction" | "FidoKeyAssociatedWithMultipleUsers" | "ClaimsParseError" | "InvalidThrottleId" | "InvalidEmailAddress" | "EmailTemplateRender" | "OidcIdentityHeaderMissing" | "OidcIdentityParseError" | "SystemTimeError" | "PasswordHashParseError" | "SendMailError" | "ReqwestError" | "EmailConstructionError" | "TsWriteError" | "TsQueryError" | "DbQueryError" | "DbGetError" | "DbDeleteError" | "DbPutError" | "DbUpdateError" | "SerdeError" | "TestAndSetError" | "DbGetItemsError" | "DbWriteError" | "CubistSignerError" | "CwListMetricsError" | "CwPutMetricDataError" | "GetAwsSecretError" | "SecretNotFound" | "KmsGenerateRandomError" | "MalformedTotpBytes" | "KmsGenerateRandomNoResponseError" | "CreateKeyError" | "ParseDerivationPathError" | "SplitSignerError" | "CreateImportKeyError" | "CreateEotsNoncesError" | "EotsSignError" | "BabylonCovSignError" | "CognitoDeleteUserError" | "CognitoListUsersError" | "CognitoGetUserError" | "MissingUserEmail" | "CognitoResendUserInvitation" | "CognitoSetUserPasswordError" | "GenericInternalError" | "AssumeRoleWithoutEvidence" | "OidcAuthWithoutOrg" | "MissingKeyMetadata" | "KmsEnableKeyError" | "KmsDisableKeyError" | "LambdaInvokeError" | "LambdaNoResponseError" | "LambdaFailure" | "LambdaUnparsableResponse" | "SerializeEncryptedExportKeyError" | "DeserializeEncryptedExportKeyError" | "ReEncryptUserExport" | "S3UploadError" | "S3DownloadError" | "S3CopyError" | "S3ListObjectsError" | "S3DeleteObjectsError" | "S3BuildError" | "S3PresignedUrlError" | "ManagedStateMissing" | "InternalHeaderMissing" | "InvalidInternalHeaderValue" | "RequestLocalStateAlreadySet" | "OidcOrgMismatch" | "OidcIssuerInvalidJwk" | "InvalidPkForMaterialId" | "SegwitTweakFailed" | "UncheckedOrg" | "SessionOrgIdMissing" | "AvaSignCredsMissing" | "AvaSignSignatureMissing" | "ExpectedRoleSession" | "InvalidThirdPartyIdentity" | "CognitoGetUser" | "SnsSubscribeError" | "SnsUnsubscribeError" | "SnsGetSubscriptionAttributesError" | "SnsSubscriptionAttributesMissing" | "SnsSetSubscriptionAttributesError" | "SnsPublishBatchError" | "InconsistentMultiValueTestAndSet" | "MaterialIdError" | "InvalidBtcAddress" | "HistoricalTxBodyMissing" | "InvalidOperation" | "ParentOrgNotFound" | "OrgParentLoop" | "ResolvedParentOrgWithNoScopeCeiling" | "InvalidUploadObjectId" | "PolicyEngineNotFound" | "PolicyEngineError" | "PolicySecretsEncryptionError" | "CreatePolicyImportKeyError" | "InvalidAlias" | "EmptyUpdateModifiedObject" | "EmptyUpdateModifiedActions" | "DbContactAddressesInvalid";
+        InternalErrorCode: "NoMaterialId" | "InvalidAuditLogEntry" | "UnexpectedCheckerRule" | "UnresolvedPolicyReference" | "UnexpectedAclAction" | "FidoKeyAssociatedWithMultipleUsers" | "ClaimsParseError" | "InvalidThrottleId" | "InvalidEmailAddress" | "EmailTemplateRender" | "OidcIdentityHeaderMissing" | "OidcIdentityParseError" | "SystemTimeError" | "PasswordHashParseError" | "SendMailError" | "ReqwestError" | "EmailConstructionError" | "TsWriteError" | "TsQueryError" | "DbQueryError" | "DbGetError" | "DbDeleteError" | "DbPutError" | "DbUpdateError" | "SerdeError" | "TestAndSetError" | "DbGetItemsError" | "DbWriteError" | "CubistSignerError" | "CwListMetricsError" | "CwPutMetricDataError" | "GetAwsSecretError" | "SecretNotFound" | "KmsGenerateRandomError" | "MalformedTotpBytes" | "KmsGenerateRandomNoResponseError" | "CreateKeyError" | "ParseDerivationPathError" | "SplitSignerError" | "CreateImportKeyError" | "CreateEotsNoncesError" | "EotsSignError" | "BabylonCovSignError" | "CognitoDeleteUserError" | "CognitoListUsersError" | "CognitoGetUserError" | "MissingUserEmail" | "CognitoResendUserInvitation" | "CognitoSetUserPasswordError" | "GenericInternalError" | "AssumeRoleWithoutEvidence" | "OidcAuthWithoutOrg" | "MissingKeyMetadata" | "KmsEnableKeyError" | "KmsDisableKeyError" | "LambdaInvokeError" | "LambdaNoResponseError" | "LambdaFailure" | "LambdaUnparsableResponse" | "SerializeEncryptedExportKeyError" | "DeserializeEncryptedExportKeyError" | "ReEncryptUserExport" | "S3UploadError" | "S3DownloadError" | "S3CopyError" | "S3ListObjectsError" | "S3DeleteObjectsError" | "S3BuildError" | "S3PresignedUrlError" | "ManagedStateMissing" | "InternalHeaderMissing" | "InvalidInternalHeaderValue" | "RequestLocalStateAlreadySet" | "OidcOrgMismatch" | "OidcIssuerInvalidJwk" | "InvalidPkForMaterialId" | "SegwitTweakFailed" | "UncheckedOrg" | "SessionOrgIdMissing" | "AvaSignCredsMissing" | "AvaSignSignatureMissing" | "ExpectedRoleSession" | "InvalidThirdPartyIdentity" | "CognitoGetUser" | "SnsSubscribeError" | "SnsUnsubscribeError" | "SnsGetSubscriptionAttributesError" | "SnsSubscriptionAttributesMissing" | "SnsSetSubscriptionAttributesError" | "SnsPublishBatchError" | "InconsistentMultiValueTestAndSet" | "MaterialIdError" | "InvalidBtcAddress" | "HistoricalTxBodyMissing" | "InvalidOperation" | "ParentOrgNotFound" | "OrgParentLoop" | "ResolvedParentOrgWithNoScopeCeiling" | "InvalidUploadObjectId" | "PolicyEngineNotFound" | "PolicyEngineError" | "PolicySecretsEncryptionError" | "CreatePolicyImportKeyError" | "InvalidAlias" | "EmptyUpdateModifiedObject" | "EmptyUpdateModifiedActions" | "DbContactAddressesInvalid" | "InvalidEvmSigedRlp" | "InvalidErc20Data" | "InvalidRpcUrl";
         InvitationAcceptRequest: {
             auth: components["schemas"]["AuthSource"];
             /** @description Invitation token */
             token: string;
         };
+        /** @description Information about a pending invitation */
+        InvitationInfo: {
+            created: components["schemas"]["EpochDateTime"];
+            /** @description The email address the invitation was sent to */
+            email: string;
+            expiration: components["schemas"]["EpochDateTime"];
+            inviter?: components["schemas"]["Id"] | null;
+            /** @description The invited user's name */
+            name: string;
+            role: components["schemas"]["MemberRole"];
+        };
         /**
          * @description Indicates the auth sources allowed to an invited user
          * @enum {string}
@@ -4502,6 +4726,27 @@ export interface components {
             /** @description The type of key this package represents */
             key_type: string;
         };
+        /** @description The top-level JSON-RPC request type. */
+        JsonRpcRequest: {
+            method: "JsonRpcRequest";
+        } & Omit<components["schemas"]["RpcMethod"], "method"> & {
+            /** @description Request ID */
+            id?: string;
+            /** @description JSON-RPC version. */
+            jsonrpc: string;
+        };
+        /** @description The RPC API's response. */
+        JsonRpcResponse: {
+            error?: components["schemas"]["ErrorObj"] | null;
+            /** @description ID from the corresponding request. */
+            id?: unknown;
+            /** @description Constant "2.0". */
+            jsonrpc: string;
+            /** @description Result, if success. */
+            result?: Record<string, unknown> | null;
+        };
+        /** @description Valid `result` from the JSON-RPC API. */
+        JsonRpcResult: components["schemas"]["TransactionInfo"] | components["schemas"]["ListTransactionsPaginatedResponse"];
         JwkSetResponse: {
             /** @description The keys included in this set */
             keys: Record<string, never>[];
@@ -4664,6 +4909,11 @@ export interface components {
         ListIdentitiesResponse: {
             identities: components["schemas"]["IdentityInfo"][];
         };
+        /** @description List of pending invitations */
+        ListInvitationsResponse: {
+            /** @description Pending invitations */
+            invitations: components["schemas"]["InvitationInfo"][];
+        };
         ListMfaResponse: {
             /** @description All pending MFA requests */
             mfa_requests: components["schemas"]["MfaRequestInfo"][];
@@ -4673,6 +4923,35 @@ export interface components {
             /** @description All pending messages for a user. */
             pending_messages: components["schemas"]["PendingMessageInfo"][];
         };
+        /**
+         * @description Response type that wraps another type and adds base64url-encoded encrypted `last_evaluated_key`
+         * value (which can the user pass back to use as a url query parameter to continue pagination).
+         */
+        ListTransactionsPaginatedResponse: {
+            /** @description A list of transaction infos. */
+            transactions: components["schemas"]["TransactionInfo"][];
+        } & {
+            /**
+             * @description If set, the content of `response` does not contain the entire result set.
+             * To fetch the next page of the result set, call the same endpoint
+             * but specify this value as the 'page.start' query parameter.
+             */
+            last_evaluated_key?: string | null;
+        };
+        /** @description Parameters for the [`cs_listTransactions`](RpcMethod::ListTransactions) method. */
+        ListTransactionsRequest: components["schemas"]["Page"] & {
+            /**
+             * @description Optional user or role id.
+             *
+             * If defined, the response is filtered to transactions created by the given id.
+             */
+            owner?: string | null;
+        };
+        /** @description The response to [`cs_listTransactions`](super::request::RpcMethod::ListTransactions) */
+        ListTransactionsResponse: {
+            /** @description A list of transaction infos. */
+            transactions: components["schemas"]["TransactionInfo"][];
+        };
         LoginRequest: components["schemas"]["OidcLoginRequest"];
         /**
          * @description Describes whether a user in an org is an Owner or just a regular member
@@ -4737,7 +5016,7 @@ export interface components {
              * @description MFA policy provenance
              * @enum {string}
              */
-            provenance: "Key" | "KeyInRole" | "Role" | "User" | "EditPolicy";
+            provenance: "Org" | "Key" | "KeyInRole" | "Role" | "User" | "EditPolicy";
             receipt?: components["schemas"]["Receipt"] | null;
             /** @description The region this MFA request was created in.  It can only be redeemed from the same region. */
             region?: string;
@@ -4908,7 +5187,7 @@ export interface components {
         /** Format: binary */
         NonceValue: string;
         /** @enum {string} */
-        NotFoundErrorCode: "UriSegmentMissing" | "UriSegmentInvalid" | "TotpNotConfigured" | "FidoKeyNotFound" | "FidoChallengeNotFound" | "TotpChallengeNotFound" | "UserExportRequestNotFound" | "UserExportCiphertextNotFound" | "OrgExportCiphertextNotFound" | "UploadObjectNotFound" | "PolicySecretNotFound" | "TimestreamDisabled" | "CustomChainNotFound";
+        NotFoundErrorCode: "UriSegmentMissing" | "UriSegmentInvalid" | "TotpNotConfigured" | "FidoKeyNotFound" | "FidoChallengeNotFound" | "TotpChallengeNotFound" | "UserExportRequestNotFound" | "UserExportCiphertextNotFound" | "OrgExportCiphertextNotFound" | "UploadObjectNotFound" | "PolicySecretNotFound" | "BucketMetaNotFound" | "TimestreamDisabled" | "CustomChainNotFound" | "InvitationNotFound" | "TransactionNotFound" | "EmailConfigNotFound";
         /** @description The configuration and status of a notification endpoint */
         NotificationEndpoint: components["schemas"]["NotificationEndpointSubscription"] & {
             status: components["schemas"]["SubscriptionStatus"];
@@ -5202,6 +5481,17 @@ export interface components {
             last_state: unknown;
             /** @enum {string} */
             org_event: "TendermintConcurrentSigning";
+        } | {
+            /** @description The email address of the invited user */
+            email: string;
+            /** @enum {string} */
+            org_event: "InvitationCreated";
+            role: components["schemas"]["MemberRole"];
+        } | {
+            /** @description The email address whose invitation was canceled */
+            email: string;
+            /** @enum {string} */
+            org_event: "InvitationCanceled";
         } | {
             key_id: components["schemas"]["Id"];
             /** @enum {string} */
@@ -5242,7 +5532,7 @@ export interface components {
          * @description Auto-generated discriminant enum variants
          * @enum {string}
          */
-        OrgEventDiscriminants: "Billing" | "Response" | "OidcAuth" | "Signed" | "BabylonEotsConcurrentSigning" | "Eth2ConcurrentAttestationSigning" | "Eth2ConcurrentBlockSigning" | "Eth2InvalidBlockProposerSlotTooLow" | "Eth2InvalidAttestationSourceEpochTooLow" | "Eth2InvalidAttestationTargetEpochTooLow" | "Eth2Unstake" | "Eth2ExceededMaxUnstake" | "KeyCreated" | "MfaApproved" | "MfaRejected" | "PolicyChanged" | "TendermintConcurrentSigning" | "UserExportInit" | "UserExportComplete" | "WasmPolicyExecuted";
+        OrgEventDiscriminants: "Billing" | "Response" | "OidcAuth" | "Signed" | "BabylonEotsConcurrentSigning" | "Eth2ConcurrentAttestationSigning" | "Eth2ConcurrentBlockSigning" | "Eth2InvalidBlockProposerSlotTooLow" | "Eth2InvalidAttestationSourceEpochTooLow" | "Eth2InvalidAttestationTargetEpochTooLow" | "Eth2Unstake" | "Eth2ExceededMaxUnstake" | "KeyCreated" | "MfaApproved" | "MfaRejected" | "PolicyChanged" | "TendermintConcurrentSigning" | "InvitationCreated" | "InvitationCanceled" | "UserExportInit" | "UserExportComplete" | "WasmPolicyExecuted";
         /** @description Filter for org events */
         OrgEventFilter: OneOf<[
             "All",
@@ -5260,7 +5550,7 @@ export interface components {
             /** @description A base64-encoded export ciphertext. */
             ciphertext: string;
         };
-        OrgInfo: components["schemas"]["MfaRequirements"] & {
+        OrgInfo: components["schemas"]["MfaRequirements"] & components["schemas"]["CommonFields"] & {
             access_model: components["schemas"]["AccessModel"];
             custom_chains?: components["schemas"]["CustomChainsData"] | null;
             default_invite_kind?: components["schemas"]["InviteKind"];
@@ -5356,6 +5646,15 @@ export interface components {
              */
             policy?: Record<string, never>[];
             policy_engine_configuration?: components["schemas"]["PolicyEngineConfiguration"];
+            /**
+             * @description Global sign policy that applies to every sign operation (every key, every role) in the org
+             * @example [
+             *   {
+             *     "TxReceiver": "0x0000000000000000000000000000000000000000"
+             *   }
+             * ]
+             */
+            sign_policy?: Record<string, never>[];
             /**
              * Format: int32
              * @description The organization's currently configured TOTP failure limit, i.e., the number
@@ -5484,6 +5783,21 @@ export interface components {
              */
             last_evaluated_key?: string | null;
         };
+        /**
+         * @description Response type that wraps another type and adds base64url-encoded encrypted `last_evaluated_key`
+         * value (which can the user pass back to use as a url query parameter to continue pagination).
+         */
+        PaginatedListBucketsResponse: {
+            /** @description The buckets in the organization. */
+            buckets: components["schemas"]["BucketInfo"][];
+        } & {
+            /**
+             * @description If set, the content of `response` does not contain the entire result set.
+             * To fetch the next page of the result set, call the same endpoint
+             * but specify this value as the 'page.start' query parameter.
+             */
+            last_evaluated_key?: string | null;
+        };
         /**
          * @description Response type that wraps another type and adds base64url-encoded encrypted `last_evaluated_key`
          * value (which can the user pass back to use as a url query parameter to continue pagination).
@@ -5514,6 +5828,21 @@ export interface components {
              */
             last_evaluated_key?: string | null;
         };
+        /**
+         * @description Response type that wraps another type and adds base64url-encoded encrypted `last_evaluated_key`
+         * value (which can the user pass back to use as a url query parameter to continue pagination).
+         */
+        PaginatedListInvitationsResponse: {
+            /** @description Pending invitations */
+            invitations: components["schemas"]["InvitationInfo"][];
+        } & {
+            /**
+             * @description If set, the content of `response` does not contain the entire result set.
+             * To fetch the next page of the result set, call the same endpoint
+             * but specify this value as the 'page.start' query parameter.
+             */
+            last_evaluated_key?: string | null;
+        };
         /**
          * @description Response type that wraps another type and adds base64url-encoded encrypted `last_evaluated_key`
          * value (which can the user pass back to use as a url query parameter to continue pagination).
@@ -5788,12 +6117,10 @@ export interface components {
             message_tx?: components["schemas"]["TypedTransaction"] | null;
         }) & Record<string, never>;
         /**
-         * PolicyAction
          * @description The access-controlled actions that can be performed on a named policy.
-         * @example read:policy
          * @enum {string}
          */
-        PolicyAction: "read:*" | "read:policy" | "read:logs" | "update:*" | "update:name" | "update:rules" | "update:metadata" | "update:editPolicy" | "update:owner" | "update:acl" | "delete" | "attach" | "sign" | "invoke";
+        PolicyAction: "read:*" | "read" | "read:policy" | "read:logs" | "update:*" | "update" | "update:name" | "update:rules" | "update:metadata" | "update:editPolicy" | "update:owner" | "update:acl" | "delete" | "attach" | "sign" | "invoke";
         /** @description The id for attaching a named policy to a key, role, or key in role. */
         PolicyAttachedToId: OneOf<[
             {
@@ -5821,6 +6148,13 @@ export interface components {
                  * @example Role#bfe3eccb-731e-430d-b1e5-ac1363e6b06b
                  */
                 role_id: string;
+            },
+            {
+                /**
+                 * @description The id of the org the policy should be attached to.
+                 * @example Org#b0156abd-53bd-4043-8e55-57f7af9512d5
+                 */
+                org_id: string;
             }
         ]>;
         /** @description A struct containing Org-level configurations for the workings of the Policy Engine. */
@@ -6547,6 +6881,20 @@ export interface components {
             /** @description A JSON Web Token whose claims contain the `RoleInfo` structure. */
             jwt: string;
         };
+        /** @description The RPC API method and matching parameters. */
+        RpcMethod: {
+            /** @enum {string} */
+            method: "cs_createTransaction";
+            params: components["schemas"]["CreateTransactionRequest"];
+        } | {
+            /** @enum {string} */
+            method: "cs_getTransaction";
+            params: components["schemas"]["GetTransactionRequest"];
+        } | {
+            /** @enum {string} */
+            method: "cs_listTransactions";
+            params: components["schemas"]["ListTransactionsRequest"];
+        };
         /** @description All scopes for accessing CubeSigner APIs */
         Scope: components["schemas"]["ExplicitScope"] | string;
         /** @description A set of scopes. */
@@ -7101,6 +7449,16 @@ export interface components {
             signedRawTransaction?: string | null;
             status: components["schemas"]["MmiStatus"];
         };
+        /** @description Chain-specific transaction details. */
+        TransactionDetails: components["schemas"]["EvmTransactionDetails"] & {
+            /** @enum {string} */
+            chain: "Evm";
+        };
+        /** @description Information about an existing transaction created by the RPC API. */
+        TransactionInfo: components["schemas"]["Transaction"] & {
+            /** @description The transaction id. */
+            id: string;
+        };
         /**
          * @description Supported queries
          * @enum {string}
@@ -7316,6 +7674,23 @@ export interface components {
             /** @description Optional policy evaluation tree. */
             policy_eval_tree?: unknown;
         } & Record<string, never>;
+        /** @description The information needed to update a bucket. */
+        UpdateBucketRequest: {
+            /** @description Access-control entries defining how the bucket can be accessed. */
+            acl?: unknown;
+            /**
+             * Format: int64
+             * @description If set, updating only succeeds if the current version matches this value.
+             */
+            expected_version?: number | null;
+            /** @description Optional metadata. */
+            metadata?: unknown;
+            /**
+             * @description Update the owner of the bucket
+             * @example User#00000000-0000-0000-0000-000000000000
+             */
+            owner?: string | null;
+        };
         /** @description The information needed to update a Contact. */
         UpdateContactRequest: {
             addresses?: components["schemas"]["AddressMap"] | null;
@@ -7388,6 +7763,7 @@ export interface components {
             } | null;
             custom_chains?: components["schemas"]["CustomChainsData"] | null;
             default_invite_kind?: components["schemas"]["InviteKind"] | null;
+            edit_policy?: components["schemas"]["EditPolicy"] | null;
             email_preferences?: components["schemas"]["EmailPreferences"] | null;
             /** @description If set, update this org's `enabled` field to this value. */
             enabled?: boolean | null;
@@ -7480,6 +7856,18 @@ export interface components {
              * Owners of the org are exempt from this requirement.
              */
             require_scope_ceiling?: boolean | null;
+            /**
+             * @description If set, update this org's sign rule (old sign rules will be overwritten!).
+             * Only "deny"-style rules may be set.
+             * @example [
+             *   {
+             *     "TxReceiver": [
+             *       "0x0000000000000000000000000000000000000000"
+             *     ]
+             *   }
+             * ]
+             */
+            sign_policy?: unknown[] | null;
             /**
              * Format: int32
              * @description If set, update this org's TOTP failure limit. After this many failures,
@@ -7517,6 +7905,7 @@ export interface components {
             } | null;
             custom_chains?: components["schemas"]["CustomChainsData"] | null;
             default_invite_kind?: components["schemas"]["InviteKind"] | null;
+            edit_policy?: components["schemas"]["EditPolicy"] | null;
             email_preferences?: components["schemas"]["EmailPreferences"] | null;
             /** @description The new value of the 'enabled' property */
             enabled?: boolean | null;
@@ -7579,6 +7968,15 @@ export interface components {
             policy_engine_configuration?: components["schemas"]["PolicyEngineConfiguration"] | null;
             /** @description The new value of require_scope_ceiling */
             require_scope_ceiling?: boolean | null;
+            /**
+             * @description The new value of the org-wide sign rules
+             * @example [
+             *   {
+             *     "TxReceiver": "0x0000000000000000000000000000000000000000"
+             *   }
+             * ]
+             */
+            sign_policy?: Record<string, never>[] | null;
             /**
              * Format: int32
              * @description The new value of the TOTP failure limit
@@ -7596,6 +7994,11 @@ export interface components {
              * @description The new value of user-export window
              */
             user_export_window?: number | null;
+            /**
+             * Format: int64
+             * @description New org version
+             */
+            version: number;
         };
         /** @description Request body for updating a named policy. */
         UpdatePolicyRequest: {
@@ -8111,6 +8514,29 @@ export interface components {
                 };
             };
         };
+        /** @description Information about a policy KV store bucket. */
+        BucketInfo: {
+            content: {
+                "application/json": ({
+                    created?: components["schemas"]["EpochDateTime"] | null;
+                    last_modified?: components["schemas"]["EpochDateTime"] | null;
+                    /**
+                     * Format: int64
+                     * @description Version of this object
+                     */
+                    version?: number;
+                } & {
+                    /** @description The access-control entries for the bucket. */
+                    acl?: unknown[] | null;
+                    /** @description Arbitrary user-defined metadata. */
+                    metadata?: unknown;
+                    owner: components["schemas"]["Id"];
+                }) & {
+                    /** @description The name of the bucket. */
+                    name: string;
+                };
+            };
+        };
         /** @description The number of users and keys in an org, organized by user role and key type */
         ComputeCountsResponse: {
             content: {
@@ -8328,6 +8754,21 @@ export interface components {
                 };
             };
         };
+        /** @description The email sender configuration (without sensitive auth details) */
+        GetEmailConfigResponse: {
+            content: {
+                "application/json": {
+                    /** @description The email address that emails are sent from */
+                    sender: string;
+                    template?: {
+                        /** @description An HTML template to use for the body. */
+                        body_template: string;
+                        /** @description The subject line template */
+                        subject_template: string;
+                    } | null;
+                };
+            };
+        };
         GetUserByEmailResponse: {
             content: {
                 "application/json": {
@@ -8396,6 +8837,20 @@ export interface components {
                 "application/json": components["schemas"]["Response"] & Record<string, never>;
             };
         };
+        /** @description The RPC API's response. */
+        JsonRpcResponse: {
+            content: {
+                "application/json": {
+                    error?: components["schemas"]["ErrorObj"] | null;
+                    /** @description ID from the corresponding request. */
+                    id?: unknown;
+                    /** @description Constant "2.0". */
+                    jsonrpc: string;
+                    /** @description Result, if success. */
+                    result?: Record<string, unknown> | null;
+                };
+            };
+        };
         /** @description A JSON Web Key set describing the key used to sign JSON Web Tokens */
         JwkSetResponse: {
             content: {
@@ -8580,7 +9035,7 @@ export interface components {
                      * @description MFA policy provenance
                      * @enum {string}
                      */
-                    provenance: "Key" | "KeyInRole" | "Role" | "User" | "EditPolicy";
+                    provenance: "Org" | "Key" | "KeyInRole" | "Role" | "User" | "EditPolicy";
                     receipt?: components["schemas"]["Receipt"] | null;
                     /** @description The region this MFA request was created in.  It can only be redeemed from the same region. */
                     region?: string;
@@ -8632,7 +9087,7 @@ export interface components {
         };
         OrgInfo: {
             content: {
-                "application/json": components["schemas"]["MfaRequirements"] & {
+                "application/json": components["schemas"]["MfaRequirements"] & components["schemas"]["CommonFields"] & {
                     access_model: components["schemas"]["AccessModel"];
                     custom_chains?: components["schemas"]["CustomChainsData"] | null;
                     default_invite_kind?: components["schemas"]["InviteKind"];
@@ -8729,10 +9184,19 @@ export interface components {
                     policy?: Record<string, never>[];
                     policy_engine_configuration?: components["schemas"]["PolicyEngineConfiguration"];
                     /**
-                     * Format: int32
-                     * @description The organization's currently configured TOTP failure limit, i.e., the number
-                     * of times a user can provide an incorrect TOTP code before being rate limited.
-                     * This value can be between 1 and 5 (inclusive).
+                     * @description Global sign policy that applies to every sign operation (every key, every role) in the org
+                     * @example [
+                     *   {
+                     *     "TxReceiver": "0x0000000000000000000000000000000000000000"
+                     *   }
+                     * ]
+                     */
+                    sign_policy?: Record<string, never>[];
+                    /**
+                     * Format: int32
+                     * @description The organization's currently configured TOTP failure limit, i.e., the number
+                     * of times a user can provide an incorrect TOTP code before being rate limited.
+                     * This value can be between 1 and 5 (inclusive).
                      */
                     totp_failure_limit: number;
                     /**
@@ -8788,6 +9252,21 @@ export interface components {
                 };
             };
         };
+        PaginatedListBucketsResponse: {
+            content: {
+                "application/json": {
+                    /** @description The buckets in the organization. */
+                    buckets: components["schemas"]["BucketInfo"][];
+                } & {
+                    /**
+                     * @description If set, the content of `response` does not contain the entire result set.
+                     * To fetch the next page of the result set, call the same endpoint
+                     * but specify this value as the 'page.start' query parameter.
+                     */
+                    last_evaluated_key?: string | null;
+                };
+            };
+        };
         PaginatedListContactsResponse: {
             content: {
                 "application/json": {
@@ -8818,6 +9297,21 @@ export interface components {
                 };
             };
         };
+        PaginatedListInvitationsResponse: {
+            content: {
+                "application/json": {
+                    /** @description Pending invitations */
+                    invitations: components["schemas"]["InvitationInfo"][];
+                } & {
+                    /**
+                     * @description If set, the content of `response` does not contain the entire result set.
+                     * To fetch the next page of the result set, call the same endpoint
+                     * but specify this value as the 'page.start' query parameter.
+                     */
+                    last_evaluated_key?: string | null;
+                };
+            };
+        };
         PaginatedListKeyRolesResponse: {
             content: {
                 "application/json": {
@@ -9439,6 +9933,7 @@ export interface components {
                     } | null;
                     custom_chains?: components["schemas"]["CustomChainsData"] | null;
                     default_invite_kind?: components["schemas"]["InviteKind"] | null;
+                    edit_policy?: components["schemas"]["EditPolicy"] | null;
                     email_preferences?: components["schemas"]["EmailPreferences"] | null;
                     /** @description The new value of the 'enabled' property */
                     enabled?: boolean | null;
@@ -9501,6 +9996,15 @@ export interface components {
                     policy_engine_configuration?: components["schemas"]["PolicyEngineConfiguration"] | null;
                     /** @description The new value of require_scope_ceiling */
                     require_scope_ceiling?: boolean | null;
+                    /**
+                     * @description The new value of the org-wide sign rules
+                     * @example [
+                     *   {
+                     *     "TxReceiver": "0x0000000000000000000000000000000000000000"
+                     *   }
+                     * ]
+                     */
+                    sign_policy?: Record<string, never>[] | null;
                     /**
                      * Format: int32
                      * @description The new value of the TOTP failure limit
@@ -9518,6 +10022,11 @@ export interface components {
                      * @description The new value of user-export window
                      */
                     user_export_window?: number | null;
+                    /**
+                     * Format: int64
+                     * @description New org version
+                     */
+                    version: number;
                 };
             };
         };
@@ -10822,6 +11331,37 @@ export interface operations {
             };
         };
     };
+    /**
+     * Get Email Template
+     * @description Get Email Template
+     *
+     * Returns the email template for a given purpose.
+     */
+    getEmailConfig: {
+        parameters: {
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+                /** @description Which email configuration to get */
+                purpose: "otp" | "mfa_reset" | "otp_mfa" | "alien_password_reset" | "member_password_reset" | "alien_invite" | "member_invite" | "welcome";
+            };
+        };
+        responses: {
+            200: components["responses"]["GetEmailConfigResponse"];
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    /**
+     * Configure Email Template
+     * @description Configure Email Template
+     */
     configureEmail: {
         parameters: {
             path: {
@@ -10848,6 +11388,36 @@ export interface operations {
             };
         };
     };
+    /**
+     * Delete Email Template
+     * @description Delete Email Template
+     */
+    deleteEmailConfig: {
+        parameters: {
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+                /** @description Which email configuration to delete */
+                purpose: "otp" | "mfa_reset" | "otp_mfa" | "alien_password_reset" | "member_password_reset" | "alien_invite" | "member_invite" | "welcome";
+            };
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["Empty"];
+            };
+        };
+        responses: {
+            200: components["responses"]["EmptyImpl"];
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     /**
      * Sign EIP-191 Data
      * @description Sign EIP-191 Data
@@ -11417,6 +11987,77 @@ export interface operations {
         };
         responses: {};
     };
+    /**
+     * List pending invitations
+     * @description List pending invitations
+     *
+     * Returns all pending (not yet accepted) invitations for the organization.
+     */
+    listInvitations: {
+        parameters: {
+            query?: {
+                /**
+                 * @description Max number of items to return per page.
+                 *
+                 * If the actual number of returned items may be less that this, even if there exist more
+                 * data in the result set. To reliably determine if more data is left in the result set,
+                 * inspect the [UnencryptedLastEvalKey] value in the response object.
+                 */
+                "page.size"?: number;
+                /**
+                 * @description The start of the page.  Omit to start from the beginning; otherwise, only specify a
+                 * the exact value previously returned as 'last_evaluated_key' from the same endpoint.
+                 */
+                "page.start"?: string | null;
+            };
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+            };
+        };
+        responses: {
+            200: components["responses"]["PaginatedListInvitationsResponse"];
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    /**
+     * Cancel a pending invitation
+     * @description Cancel a pending invitation
+     *
+     * Removes a pending invitation from the organization. If no pending invitation
+     * exists for the given email address, a not-found error is returned.
+     */
+    cancelInvitation: {
+        parameters: {
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+            };
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CancelInvitationRequest"];
+            };
+        };
+        responses: {
+            200: components["responses"]["EmptyImpl"];
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     /**
      * Invite User
      * @description Invite User
@@ -12852,6 +13493,108 @@ export interface operations {
             };
         };
     };
+    /**
+     * List Buckets
+     * @description List Buckets
+     *
+     * List available meta information about all policy KV store buckets in the org.
+     */
+    listPolicyBuckets: {
+        parameters: {
+            query?: {
+                /**
+                 * @description Max number of items to return per page.
+                 *
+                 * If the actual number of returned items may be less that this, even if there exist more
+                 * data in the result set. To reliably determine if more data is left in the result set,
+                 * inspect the [UnencryptedLastEvalKey] value in the response object.
+                 */
+                "page.size"?: number;
+                /**
+                 * @description The start of the page.  Omit to start from the beginning; otherwise, only specify a
+                 * the exact value previously returned as 'last_evaluated_key' from the same endpoint.
+                 */
+                "page.start"?: string | null;
+            };
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+            };
+        };
+        responses: {
+            200: components["responses"]["PaginatedListBucketsResponse"];
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    /**
+     * Get Bucket
+     * @description Get Bucket
+     *
+     * Returns the meta information of a policy KV store bucket.
+     */
+    getPolicyBucket: {
+        parameters: {
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+                bucket_name: string;
+            };
+        };
+        responses: {
+            200: components["responses"]["BucketInfo"];
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    /**
+     * Update Bucket
+     * @description Update Bucket
+     *
+     * Updates meta information for an existing policy KV store bucket.
+     */
+    updatePolicyBucket: {
+        parameters: {
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+                bucket_name: string;
+            };
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateBucketRequest"];
+            };
+        };
+        responses: {
+            200: components["responses"]["BucketInfo"];
+            202: {
+                content: {
+                    "application/json": components["schemas"]["AcceptedResponse"];
+                };
+            };
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     /**
      * Create Policy Import Key
      * @description Create Policy Import Key
@@ -12882,7 +13625,7 @@ export interface operations {
      * Get the org-wide policy secrets.
      * @description Get the org-wide policy secrets.
      *
-     * Note that this only returns the keys for the secrets, omiting the values.
+     * Note that this only returns the keys for the secrets, omitting the values.
      * The values are secret and are not accessible outside Wasm policy execution.
      */
     getPolicySecrets: {
@@ -12910,6 +13653,8 @@ export interface operations {
      *
      * The provided secrets will replace any existing org-level secrets.
      * It fails if the secrets weren't previously created.
+     *
+     * Must be permitted by the policy secret's edit policy if set, and the org's edit policy otherwise.
      */
     updatePolicySecrets: {
         parameters: {
@@ -12941,8 +13686,9 @@ export interface operations {
         };
     };
     /**
-     * Create or overwrite an org-level policy secret
-     * @description Create or overwrite an org-level policy secret
+     * Create or overwrite an org-level policy secret.
+     * @description Create or overwrite an org-level policy secret.
+     * Must be permitted by the policy secret's edit policy if set, and the org's edit policy otherwise.
      */
     setPolicySecret: {
         parameters: {
@@ -12975,8 +13721,9 @@ export interface operations {
         };
     };
     /**
-     * Delete an org-level policy secret
-     * @description Delete an org-level policy secret
+     * Delete an org-level policy secret.
+     * @description Delete an org-level policy secret.
+     * Must be permitted by the policy secret's edit policy if set, and the org's edit policy otherwise.
      */
     deletePolicySecret: {
         parameters: {
@@ -13684,6 +14431,34 @@ export interface operations {
             };
         };
     };
+    /**
+     * High-level RPC endpoint.
+     * @description High-level RPC endpoint.
+     */
+    rpcApi: {
+        parameters: {
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+            };
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["JsonRpcRequest"];
+            };
+        };
+        responses: {
+            200: components["responses"]["JsonRpcResponse"];
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     /**
      * List sessions
      * @description List sessions
@@ -14883,35 +15658,6 @@ export interface operations {
             };
         };
     };
-    /**
-     * The policy_execute API endpoint is intended to demonstrate that the signer
-     * @description The policy_execute API endpoint is intended to demonstrate that the signer
-     * can use the policy engine, by way of the PolicyEngineClient.
-     */
-    "policy-execute": {
-        parameters: {
-            path: {
-                /**
-                 * @description Base64Url-nopad of the sha256 digest of the policy binary
-                 * @example 123456
-                 */
-                policy_name: string;
-            };
-        };
-        requestBody: {
-            content: {
-                "application/json": Record<string, never>;
-            };
-        };
-        responses: {
-            200: components["responses"]["PolicyResultResponse"];
-            default: {
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-        };
-    };
     /**
      * Initiate registration of a FIDO key
      * @deprecated