@cubist-labs/cubesigner-sdk 0.4.244 → 0.4.247

package/dist/src/schema.d.ts

@@ -1660,6 +1660,19 @@ export interface paths {
          */
         get: operations["userOrgs"];
     };
+    "/v1/org/{org_id}/binance/sign/{material_id}": {
+        /**
+         * Sign Binance RPC Request
+         * @description Sign Binance RPC Request
+         *
+         * Signs a typed [`BinanceRpc`] request with the [`KeyType::Ed25519BinanceApi`]
+         * key identified by `material_id`. The signer URL-encodes the inner request,
+         * appends Binance's `recvWindow` and `timestamp` parameters, signs the
+         * resulting query, and returns the full query string ready to be submitted
+         * to Binance.
+         */
+        post: operations["binanceSign"];
+    };
     "/v1/org/{org_id}/blob/sign/{key_id}": {
         /**
          * Sign Raw Blob
@@ -1790,7 +1803,7 @@ export interface components {
              */
             omitZeroBalances?: boolean | null;
         };
-        /** @description Response for [`BinanceManager::account_info`]. */
+        /** @description Response returned by `cs_binanceAccountInfo`. */
         AccountInfoResponse: {
             /** @description Account type, e.g. `"SPOT"`. Left as `String` for forward compatibility. */
             accountType: string;
@@ -2788,17 +2801,18 @@ export interface components {
          * @description Billing event types.
          * @enum {string}
          */
-        BillingEvent: "Mmi" | "MmiMessageGet" | "MmiMessageList" | "MmiMessageSign" | "MmiMessageReject" | "MmiMessageDelete" | "AboutMe" | "UserResetEmailInit" | "UserResetEmailComplete" | "UserDeleteTotp" | "UserResetTotpInit" | "UserResetTotpComplete" | "UserVerifyTotp" | "UserRegisterFidoInit" | "UserRegisterFidoComplete" | "UserDeleteFido" | "CreateProofOidc" | "CreateProofCubeSigner" | "VerifyProof" | "AddOidcIdentity" | "RemoveOidcIdentity" | "ListOidcIdentities" | "GetOrg" | "UpdateOrg" | "GetOrgExport" | "CreateOrg" | "ListKeys" | "AttestKey" | "GetKey" | "GetKeyByMaterialId" | "ListKeyRoles" | "UpdateKey" | "ListHistoricalKeyTx" | "Invite" | "CancelInvitation" | "ListInvitations" | "ListUsers" | "GetUser" | "GetUserByEmail" | "GetUserByOidc" | "UpdateMembership" | "ResetMemberMfa" | "CompleteResetMemberMfa" | "CreateRole" | "AttestRole" | "GetRole" | "ListTokenKeys" | "ListRoles" | "GetRoleKey" | "ListRoleKeys" | "ListRoleUsers" | "UpdateRole" | "DeleteRole" | "ConfigureEmail" | "GetEmailConfig" | "DeleteEmailConfig" | "ListHistoricalRoleTx" | "CreatePolicy" | "GetPolicy" | "ListPolicies" | "DeletePolicy" | "UpdatePolicy" | "InvokePolicy" | "GetPolicyLogs" | "UploadWasmPolicy" | "GetPolicySecrets" | "UpdatePolicySecrets" | "SetPolicySecret" | "DeletePolicySecret" | "CreatePolicyImportKey" | "GetPolicyBucket" | "ListPolicyBuckets" | "UpdatePolicyBucket" | "UserExportDelete" | "UserExportList" | "UserExportInit" | "UserExportComplete" | "AddUserToRole" | "RemoveUserFromRole" | "MfaApproveCs" | "MfaRejectCs" | "MfaGet" | "MfaList" | "AddKeysToRole" | "RemoveKeyFromRole" | "CreateToken" | "CreateSession" | "RevokeSession" | "RevokeCurrentSession" | "RevokeSessions" | "ListSessions" | "GetSession" | "SignerSessionRefresh" | "MfaApproveTotp" | "MfaRejectTotp" | "MfaFidoInit" | "MfaApproveFidoComplete" | "MfaRejectFidoComplete" | "MfaEmailInit" | "MfaEmailComplete" | "Cube3signerHeartbeat" | "CreateContact" | "GetContact" | "ListContacts" | "DeleteContact" | "UpdateContact" | "LookupContactsByAddress" | "QueryMetrics" | "QueryAuditLog" | "Counts" | "CreateKey" | "ImportKey" | "CreateKeyImportKey" | "DeriveKey" | "DeleteKey" | "AvaSign" | "AvaSerializedTxSign" | "BabylonRegistration" | "BabylonStaking" | "BabylonCovSign" | "BlobSign" | "BtcMessageSign" | "BtcSign" | "DiffieHellmanExchange" | "PsbtSign" | "PsbtLegacyInputSign" | "PsbtSegwitInputSign" | "PsbtTaprootInputSign" | "TaprootSign" | "Eip712Sign" | "Eip191Sign" | "Eth1Sign" | "Eth2Sign" | "SolanaSign" | "SuiSign" | "TendermintSign" | "Stake" | "Unstake" | "PasskeyAuthInit" | "PasskeyAuthComplete" | "OidcAuth" | "Oauth2Twitter" | "OAuth2TokenRefresh" | "EmailOtpAuth" | "SiweInit" | "SiweComplete" | "TelegramAuth" | "CreateOidcUser" | "DeleteOidcUser" | "DeleteUser" | "CreateEotsNonces" | "EotsSign" | "AuthMigrationIdentityAdd" | "AuthMigrationIdentityRemove" | "AuthMigrationUserUpdate" | "KeyCreated" | "KeyImported" | "InvitationAccept" | "IdpAuthenticate" | "IdpPasswordResetRequest" | "IdpPasswordResetConfirm" | "RpcApi" | "RpcCreateTransaction" | "RpcGetTransaction" | "RpcListTransactions" | "RpcBinanceSubToMaster" | "RpcBinanceSubToSub" | "RpcBinanceUniversalTransfer" | "RpcBinanceSubAccountAssets" | "RpcBinanceAccountInfo" | "RpcBinanceSubAccountTransferHistory" | "RpcBinanceUniversalTransferHistory" | "RpcBinanceWithdraw" | "RpcBinanceWithdrawHistory" | "CustomChainRpcCall" | "EsploraApiCall" | "SentryApiCall" | "SentryApiCallPublic" | "MmiJwkSet" | "AttestationJwkSet" | "UserOrgs" | "PublicOrgInfo" | "EmailMyOrgs";
+        BillingEvent: "Mmi" | "MmiMessageGet" | "MmiMessageList" | "MmiMessageSign" | "MmiMessageReject" | "MmiMessageDelete" | "AboutMe" | "UserResetEmailInit" | "UserResetEmailComplete" | "UserDeleteTotp" | "UserResetTotpInit" | "UserResetTotpComplete" | "UserVerifyTotp" | "UserRegisterFidoInit" | "UserRegisterFidoComplete" | "UserDeleteFido" | "CreateProofOidc" | "CreateProofCubeSigner" | "VerifyProof" | "AddOidcIdentity" | "RemoveOidcIdentity" | "ListOidcIdentities" | "GetOrg" | "UpdateOrg" | "GetOrgExport" | "CreateOrg" | "ListKeys" | "AttestKey" | "GetKey" | "GetKeyByMaterialId" | "ListKeyRoles" | "UpdateKey" | "ListHistoricalKeyTx" | "Invite" | "CancelInvitation" | "ListInvitations" | "ListUsers" | "GetUser" | "GetUserByEmail" | "GetUserByOidc" | "UpdateMembership" | "ResetMemberMfa" | "CompleteResetMemberMfa" | "CreateRole" | "AttestRole" | "GetRole" | "ListTokenKeys" | "ListRoles" | "GetRoleKey" | "ListRoleKeys" | "ListRoleUsers" | "UpdateRole" | "DeleteRole" | "ConfigureEmail" | "GetEmailConfig" | "DeleteEmailConfig" | "ListHistoricalRoleTx" | "CreatePolicy" | "GetPolicy" | "ListPolicies" | "DeletePolicy" | "UpdatePolicy" | "InvokePolicy" | "GetPolicyLogs" | "UploadWasmPolicy" | "GetPolicySecrets" | "UpdatePolicySecrets" | "SetPolicySecret" | "DeletePolicySecret" | "CreatePolicyImportKey" | "GetPolicyBucket" | "ListPolicyBuckets" | "UpdatePolicyBucket" | "UserExportDelete" | "UserExportList" | "UserExportInit" | "UserExportComplete" | "AddUserToRole" | "RemoveUserFromRole" | "MfaApproveCs" | "MfaRejectCs" | "MfaGet" | "MfaList" | "AddKeysToRole" | "RemoveKeyFromRole" | "CreateToken" | "CreateSession" | "RevokeSession" | "RevokeCurrentSession" | "RevokeSessions" | "ListSessions" | "GetSession" | "SignerSessionRefresh" | "MfaApproveTotp" | "MfaRejectTotp" | "MfaFidoInit" | "MfaApproveFidoComplete" | "MfaRejectFidoComplete" | "MfaEmailInit" | "MfaEmailComplete" | "Cube3signerHeartbeat" | "CreateContact" | "GetContact" | "ListContacts" | "DeleteContact" | "UpdateContact" | "LookupContactsByAddress" | "QueryMetrics" | "QueryAuditLog" | "Counts" | "CreateKey" | "ImportKey" | "CreateKeyImportKey" | "DeriveKey" | "DeleteKey" | "AvaSign" | "AvaSerializedTxSign" | "BabylonRegistration" | "BabylonStaking" | "BabylonCovSign" | "BinanceSign" | "BlobSign" | "BtcMessageSign" | "BtcSign" | "DiffieHellmanExchange" | "PsbtSign" | "PsbtLegacyInputSign" | "PsbtSegwitInputSign" | "PsbtTaprootInputSign" | "TaprootSign" | "Eip712Sign" | "Eip191Sign" | "Eth1Sign" | "Eth2Sign" | "SolanaSign" | "SuiSign" | "TendermintSign" | "Stake" | "Unstake" | "PasskeyAuthInit" | "PasskeyAuthComplete" | "OidcAuth" | "Oauth2Twitter" | "OAuth2TokenRefresh" | "EmailOtpAuth" | "SiweInit" | "SiweComplete" | "TelegramAuth" | "CreateOidcUser" | "DeleteOidcUser" | "DeleteUser" | "CreateEotsNonces" | "EotsSign" | "AuthMigrationIdentityAdd" | "AuthMigrationIdentityRemove" | "AuthMigrationUserUpdate" | "KeyCreated" | "KeyImported" | "InvitationAccept" | "IdpAuthenticate" | "IdpPasswordResetRequest" | "IdpPasswordResetConfirm" | "RpcApi" | "RpcCreateTransaction" | "RpcGetTransaction" | "RpcListTransactions" | "RpcRetryTransaction" | "RpcBinance" | "CustomChainRpcCall" | "EsploraApiCall" | "SentryApiCall" | "SentryApiCallPublic" | "MmiJwkSet" | "AttestationJwkSet" | "UserOrgs" | "PublicOrgInfo" | "EmailMyOrgs";
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceAccountInfoParams: components["schemas"]["AccountInfoRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         BinanceApiPropertiesPatch: {
             /** @description The Binance-issued API key string. Encrypted server-side before storage. */
@@ -2810,6 +2824,18 @@ export interface components {
             /** @description Arbitrary label. Useful for storing the corresponding API key label on the Binance side. */
             label?: string | null;
         };
+        /** @description Parameters envelope for all Binance RPC methods. */
+        BinanceDepositParams: components["schemas"]["DepositRequest"] & {
+            dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
+            keyId: components["schemas"]["Id"];
+            /**
+             * Format: float
+             * @description Optional "receive window", i.e., for how long the request stays valid.
+             * May only be specified in milliseconds, with up to three decimal places of precision.
+             * If omitted, defaults to 10000. Must not be greater than 60000.
+             */
+            recvWindow?: number | null;
+        };
         BinanceDryRunArgs: {
             /** @description The Binance API method that would have been used */
             method: string;
@@ -2817,7 +2843,7 @@ export interface components {
             url: string;
         };
         /**
-         * @description Different "dry run" modes for executing Binance requests
+         * @description Different "dry run" modes for executing Binance requests.
          * @enum {string}
          */
         BinanceDryRunMode: "NO_SIGN" | "NO_SUBMIT";
@@ -2861,94 +2887,117 @@ export interface components {
             /** @enum {string} */
             method: "cs_binanceWithdrawHistory";
             params: components["schemas"]["BinanceWithdrawHistoryParams"];
+        } | {
+            /** @enum {string} */
+            method: "cs_binanceDeposit";
+            params: components["schemas"]["BinanceDepositParams"];
+        };
+        /** @description Response returned by the typed `binance_sign` endpoint. */
+        BinanceSignResponse: {
+            /** @description Optional policy evaluation tree. */
+            policy_eval_tree?: unknown;
+        } & {
+            /**
+             * @description The full signed query string, ready to be submitted to Binance.
+             * Encoded as `<urlencoded params>&recvWindow=<ms>&timestamp=<ms>&signature=<urlencoded base64 sig>`.
+             */
+            signed_query: string;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceSubAccountAssetsParams: components["schemas"]["SubAccountAssetsRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceSubAccountTransferHistoryParams: components["schemas"]["SubAccountTransferHistoryRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceSubToMasterParams: components["schemas"]["SubToMasterRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceSubToSubParams: components["schemas"]["SubToSubRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceUniversalTransferHistoryParams: components["schemas"]["UniversalTransferHistoryRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceUniversalTransferParams: components["schemas"]["UniversalTransferRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceWithdrawHistoryParams: components["schemas"]["WithdrawHistoryRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceWithdrawParams: components["schemas"]["WithdrawRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
             /**
+             * Format: float
              * @description Optional "receive window", i.e., for how long the request stays valid.
              * May only be specified in milliseconds, with up to three decimal places of precision.
-             * If omitted, defaults to "10000". Must not be greater than "60000".
+             * If omitted, defaults to 10000. Must not be greater than 60000.
              */
-            recvWindow?: string | null;
+            recvWindow?: number | null;
         };
         /** @description A bitcoin address and its network. */
         BitcoinAddressInfo: {
@@ -3697,6 +3746,11 @@ export interface components {
                 method: "cs_createTransaction";
                 params: components["schemas"]["CreateTransactionRequest"];
             },
+            {
+                /** @enum {string} */
+                method: "cs_retryTransaction";
+                params: components["schemas"]["RetryTransactionRequest"];
+            },
             {
                 /** @enum {string} */
                 method: "cs_getTransaction";
@@ -3740,6 +3794,40 @@ export interface components {
             /** @description Custom EVM chains. */
             evm: components["schemas"]["EvmCustomChain"][];
         };
+        /**
+         * @description Parameters for `GET /sapi/v1/capital/deposit/address`.
+         *
+         * Fetches the deposit address for `coin` on the account that the signing key
+         * authenticates as. Optionally narrows the address to a specific `network`.
+         */
+        DepositRequest: {
+            /**
+             * @description Required only when `network` is `"LIGHTNING"`: the deposit amount that
+             * the returned invoice should encode, as a decimal string.
+             */
+            amount?: string | null;
+            /** @description The asset symbol whose deposit address to fetch (e.g. `"USDT"`, `"BTC"`). */
+            coin: string;
+            /**
+             * @description Network identifier (e.g. `"BSC"`, `"ETH"`). If omitted, Binance returns
+             * the address on the asset's default network.
+             */
+            network?: string | null;
+        };
+        /** @description Response returned by `cs_binanceDeposit`. */
+        DepositResponse: {
+            /** @description Deposit address. */
+            address: string;
+            /** @description Asset symbol (echoes [`DepositRequest::coin`]). */
+            coin: string;
+            /**
+             * @description Secondary address identifier required by some assets (e.g. memo for
+             * XRP, tag for XLM). Empty string when the asset does not use one.
+             */
+            tag: string;
+            /** @description Blockchain explorer URL for `address`. */
+            url: string;
+        };
         /**
          * @description Information produced by a successful deposit
          * @example {
@@ -4467,6 +4555,11 @@ export interface components {
         };
         /** @description EVM-specific transaction details. */
         EvmTransactionDetails: {
+            /**
+             * Format: int64
+             * @description The EVM chain id for the chain the transaction is submitted to.
+             */
+            chain_id: number;
             /**
              * @description The transaction hash, as submitted to the chain.
              *
@@ -4530,8 +4623,7 @@ export interface components {
             /**
              * @description Optional nonce.
              *
-             * If not specified, the sender's transaction count from the latest block is
-             * used.
+             * If not specified, the next available nonce is used.
              */
             nonce?: string | null;
         };
@@ -4547,7 +4639,7 @@ export interface components {
          * @description Explicitly named scopes for accessing CubeSigner APIs
          * @enum {string}
          */
-        ExplicitScope: "sign:*" | "sign:ava" | "sign:blob" | "sign:diffieHellman" | "sign:btc:*" | "sign:btc:segwit" | "sign:btc:taproot" | "sign:btc:psbt:*" | "sign:btc:psbt:doge" | "sign:btc:psbt:legacy" | "sign:btc:psbt:segwit" | "sign:btc:psbt:taproot" | "sign:btc:psbt:ltcSegwit" | "sign:btc:message:*" | "sign:btc:message:segwit" | "sign:btc:message:legacy" | "sign:babylon:*" | "sign:babylon:eots:*" | "sign:babylon:eots:nonces" | "sign:babylon:eots:sign" | "sign:babylon:staking:*" | "sign:babylon:staking:deposit" | "sign:babylon:staking:unbond" | "sign:babylon:staking:withdraw" | "sign:babylon:staking:slash" | "sign:babylon:registration" | "sign:babylon:covenant" | "sign:evm:*" | "sign:evm:tx" | "sign:evm:eip191" | "sign:evm:eip712" | "sign:eth2:*" | "sign:eth2:validate" | "sign:eth2:stake" | "sign:eth2:unstake" | "sign:solana" | "sign:sui" | "sign:tendermint" | "sign:mmi" | "manage:*" | "manage:readonly" | "manage:email:*" | "manage:email:get" | "manage:email:update" | "manage:email:delete" | "manage:mfa:*" | "manage:mfa:readonly" | "manage:mfa:list" | "manage:mfa:vote:*" | "manage:mfa:vote:cs" | "manage:mfa:vote:email" | "manage:mfa:vote:fido" | "manage:mfa:vote:totp" | "manage:mfa:register:*" | "manage:mfa:register:fido" | "manage:mfa:register:totp" | "manage:mfa:register:email" | "manage:mfa:unregister:*" | "manage:mfa:unregister:fido" | "manage:mfa:unregister:totp" | "manage:mfa:verify:*" | "manage:mfa:verify:totp" | "manage:key:*" | "manage:key:readonly" | "manage:key:get" | "manage:key:attest" | "manage:key:listRoles" | "manage:key:list" | "manage:key:history:tx:list" | "manage:key:create" | "manage:key:import" | "manage:key:update:*" | "manage:key:update:owner" | "manage:key:update:policy" | "manage:key:update:enabled" | "manage:key:update:region" | "manage:key:update:metadata" | "manage:key:update:properties" | "manage:key:update:editPolicy" | "manage:key:delete" | "manage:policy:*" | "manage:policy:readonly" | "manage:policy:create" | "manage:policy:get" | "manage:policy:list" | "manage:policy:delete" | "manage:policy:update:*" | "manage:policy:update:owner" | "manage:policy:update:name" | "manage:policy:update:acl" | "manage:policy:update:editPolicy" | "manage:policy:update:metadata" | "manage:policy:update:rule" | "manage:policy:invoke" | "manage:policy:wasm:*" | "manage:policy:wasm:upload" | "manage:policy:secrets:*" | "manage:policy:secrets:get" | "manage:policy:secrets:update:*" | "manage:policy:secrets:update:values" | "manage:policy:secrets:update:acl" | "manage:policy:secrets:update:editPolicy" | "manage:policy:buckets:*" | "manage:policy:buckets:get" | "manage:policy:buckets:list" | "manage:policy:buckets:update:*" | "manage:policy:buckets:update:owner" | "manage:policy:buckets:update:acl" | "manage:policy:buckets:update:metadata" | "manage:contact:*" | "manage:contact:readonly" | "manage:contact:create" | "manage:contact:get" | "manage:contact:list" | "manage:contact:delete" | "manage:contact:update:*" | "manage:contact:update:name" | "manage:contact:update:addresses" | "manage:contact:update:owner" | "manage:contact:update:labels" | "manage:contact:update:metadata" | "manage:contact:update:editPolicy" | "manage:contact:lookup:*" | "manage:contact:lookup:address" | "manage:policy:createImportKey" | "manage:role:*" | "manage:role:readonly" | "manage:role:create" | "manage:role:delete" | "manage:role:get:*" | "manage:role:attest" | "manage:role:get:keys" | "manage:role:get:keys:list" | "manage:role:get:keys:get" | "manage:role:get:users" | "manage:role:list" | "manage:role:update:*" | "manage:role:update:enabled" | "manage:role:update:policy" | "manage:role:update:editPolicy" | "manage:role:update:actions" | "manage:role:update:key:*" | "manage:role:update:key:add" | "manage:role:update:key:remove" | "manage:role:update:user:*" | "manage:role:update:user:add" | "manage:role:update:user:remove" | "manage:role:history:tx:list" | "manage:identity:*" | "manage:identity:readonly" | "manage:identity:verify" | "manage:identity:add" | "manage:identity:remove" | "manage:identity:list" | "manage:org:*" | "manage:org:create" | "manage:org:metrics:query" | "manage:org:audit:query" | "manage:org:readonly" | "manage:org:addUser" | "manage:org:inviteUser" | "manage:org:inviteAlien" | "manage:org:invitation:list" | "manage:org:invitation:cancel" | "manage:org:updateMembership:*" | "manage:org:updateMembership:owner" | "manage:org:updateMembership:member" | "manage:org:updateMembership:alien" | "manage:org:listUsers" | "manage:org:user:get" | "manage:org:deleteUser:*" | "manage:org:deleteUser:owner" | "manage:org:deleteUser:member" | "manage:org:deleteUser:alien" | "manage:org:get" | "manage:org:update:*" | "manage:org:update:enabled" | "manage:org:update:policy" | "manage:org:update:signPolicy" | "manage:org:update:export" | "manage:org:update:totpFailureLimit" | "manage:org:update:notificationEndpoints" | "manage:org:update:defaultInviteKind" | "manage:org:update:idpConfiguration" | "manage:org:update:passkeyConfiguration" | "manage:org:update:emailPreferences" | "manage:org:update:historicalData" | "manage:org:update:requireScopeCeiling" | "manage:org:update:alienLoginRequirement" | "manage:org:update:memberLoginRequirement" | "manage:org:update:keyExportRequirement" | "manage:org:update:allowedMfaTypes" | "manage:org:update:policyEngineConf" | "manage:org:update:customChains" | "manage:org:update:extProps" | "manage:org:update:editPolicy" | "manage:org:user:resetMfa" | "manage:session:*" | "manage:session:readonly" | "manage:session:get" | "manage:session:list" | "manage:session:create" | "manage:session:extend" | "manage:session:revoke" | "manage:export:*" | "manage:export:readonly" | "manage:export:org:*" | "manage:export:org:get" | "manage:export:user:*" | "manage:export:user:delete" | "manage:export:user:list" | "manage:authMigration:*" | "manage:authMigration:identity:add" | "manage:authMigration:identity:remove" | "manage:authMigration:user:update" | "manage:mmi:*" | "manage:mmi:readonly" | "manage:mmi:get" | "manage:mmi:list" | "manage:mmi:reject" | "manage:mmi:delete" | "export:*" | "export:user:*" | "export:user:init" | "export:user:complete" | "mmi:*" | "orgAccess:*" | "orgAccess:child:*" | "rpc:*" | "rpc:createTransaction:*" | "rpc:createTransaction:evm" | "rpc:getTransaction" | "rpc:listTransactions" | "rpc:binance:*" | "rpc:binance:subToMaster" | "rpc:binance:subToSub" | "rpc:binance:universalTransfer" | "rpc:binance:subAccountAssets" | "rpc:binance:accountInfo" | "rpc:binance:subAccountTransferHistory" | "rpc:binance:universalTransferHistory" | "rpc:binance:withdraw" | "rpc:binance:withdrawHistory";
+        ExplicitScope: "sign:*" | "sign:ava" | "sign:binance:*" | "sign:binance:subToMaster" | "sign:binance:subToSub" | "sign:binance:universalTransfer" | "sign:binance:subAccountAssets" | "sign:binance:accountInfo" | "sign:binance:subAccountTransferHistory" | "sign:binance:universalTransferHistory" | "sign:binance:withdraw" | "sign:binance:withdrawHistory" | "sign:binance:deposit" | "sign:blob" | "sign:diffieHellman" | "sign:btc:*" | "sign:btc:segwit" | "sign:btc:taproot" | "sign:btc:psbt:*" | "sign:btc:psbt:doge" | "sign:btc:psbt:legacy" | "sign:btc:psbt:segwit" | "sign:btc:psbt:taproot" | "sign:btc:psbt:ltcSegwit" | "sign:btc:message:*" | "sign:btc:message:segwit" | "sign:btc:message:legacy" | "sign:babylon:*" | "sign:babylon:eots:*" | "sign:babylon:eots:nonces" | "sign:babylon:eots:sign" | "sign:babylon:staking:*" | "sign:babylon:staking:deposit" | "sign:babylon:staking:unbond" | "sign:babylon:staking:withdraw" | "sign:babylon:staking:slash" | "sign:babylon:registration" | "sign:babylon:covenant" | "sign:evm:*" | "sign:evm:tx" | "sign:evm:eip191" | "sign:evm:eip712" | "sign:eth2:*" | "sign:eth2:validate" | "sign:eth2:stake" | "sign:eth2:unstake" | "sign:solana" | "sign:sui" | "sign:tendermint" | "sign:mmi" | "manage:*" | "manage:readonly" | "manage:email:*" | "manage:email:get" | "manage:email:update" | "manage:email:delete" | "manage:mfa:*" | "manage:mfa:readonly" | "manage:mfa:list" | "manage:mfa:vote:*" | "manage:mfa:vote:cs" | "manage:mfa:vote:email" | "manage:mfa:vote:fido" | "manage:mfa:vote:totp" | "manage:mfa:register:*" | "manage:mfa:register:fido" | "manage:mfa:register:totp" | "manage:mfa:register:email" | "manage:mfa:unregister:*" | "manage:mfa:unregister:fido" | "manage:mfa:unregister:totp" | "manage:mfa:verify:*" | "manage:mfa:verify:totp" | "manage:key:*" | "manage:key:readonly" | "manage:key:get" | "manage:key:attest" | "manage:key:listRoles" | "manage:key:list" | "manage:key:history:tx:list" | "manage:key:create" | "manage:key:import" | "manage:key:update:*" | "manage:key:update:owner" | "manage:key:update:policy" | "manage:key:update:enabled" | "manage:key:update:region" | "manage:key:update:metadata" | "manage:key:update:properties" | "manage:key:update:editPolicy" | "manage:key:delete" | "manage:policy:*" | "manage:policy:readonly" | "manage:policy:create" | "manage:policy:get" | "manage:policy:list" | "manage:policy:delete" | "manage:policy:update:*" | "manage:policy:update:owner" | "manage:policy:update:name" | "manage:policy:update:acl" | "manage:policy:update:editPolicy" | "manage:policy:update:metadata" | "manage:policy:update:rule" | "manage:policy:invoke" | "manage:policy:wasm:*" | "manage:policy:wasm:upload" | "manage:policy:secrets:*" | "manage:policy:secrets:get" | "manage:policy:secrets:update:*" | "manage:policy:secrets:update:values" | "manage:policy:secrets:update:acl" | "manage:policy:secrets:update:editPolicy" | "manage:policy:buckets:*" | "manage:policy:buckets:get" | "manage:policy:buckets:list" | "manage:policy:buckets:update:*" | "manage:policy:buckets:update:owner" | "manage:policy:buckets:update:acl" | "manage:policy:buckets:update:metadata" | "manage:contact:*" | "manage:contact:readonly" | "manage:contact:create" | "manage:contact:get" | "manage:contact:list" | "manage:contact:delete" | "manage:contact:update:*" | "manage:contact:update:name" | "manage:contact:update:addresses" | "manage:contact:update:owner" | "manage:contact:update:labels" | "manage:contact:update:metadata" | "manage:contact:update:editPolicy" | "manage:contact:lookup:*" | "manage:contact:lookup:address" | "manage:policy:createImportKey" | "manage:role:*" | "manage:role:readonly" | "manage:role:create" | "manage:role:delete" | "manage:role:get:*" | "manage:role:attest" | "manage:role:get:keys" | "manage:role:get:keys:list" | "manage:role:get:keys:get" | "manage:role:get:users" | "manage:role:list" | "manage:role:update:*" | "manage:role:update:enabled" | "manage:role:update:policy" | "manage:role:update:editPolicy" | "manage:role:update:actions" | "manage:role:update:key:*" | "manage:role:update:key:add" | "manage:role:update:key:remove" | "manage:role:update:user:*" | "manage:role:update:user:add" | "manage:role:update:user:remove" | "manage:role:history:tx:list" | "manage:identity:*" | "manage:identity:readonly" | "manage:identity:verify" | "manage:identity:add" | "manage:identity:remove" | "manage:identity:list" | "manage:org:*" | "manage:org:create" | "manage:org:metrics:query" | "manage:org:audit:query" | "manage:org:readonly" | "manage:org:addUser" | "manage:org:inviteUser" | "manage:org:inviteAlien" | "manage:org:invitation:list" | "manage:org:invitation:cancel" | "manage:org:updateMembership:*" | "manage:org:updateMembership:owner" | "manage:org:updateMembership:member" | "manage:org:updateMembership:alien" | "manage:org:listUsers" | "manage:org:user:get" | "manage:org:deleteUser:*" | "manage:org:deleteUser:owner" | "manage:org:deleteUser:member" | "manage:org:deleteUser:alien" | "manage:org:get" | "manage:org:update:*" | "manage:org:update:enabled" | "manage:org:update:policy" | "manage:org:update:signPolicy" | "manage:org:update:export" | "manage:org:update:totpFailureLimit" | "manage:org:update:notificationEndpoints" | "manage:org:update:defaultInviteKind" | "manage:org:update:idpConfiguration" | "manage:org:update:passkeyConfiguration" | "manage:org:update:emailPreferences" | "manage:org:update:historicalData" | "manage:org:update:requireScopeCeiling" | "manage:org:update:alienLoginRequirement" | "manage:org:update:memberLoginRequirement" | "manage:org:update:keyExportRequirement" | "manage:org:update:allowedMfaTypes" | "manage:org:update:policyEngineConf" | "manage:org:update:customChains" | "manage:org:update:extProps" | "manage:org:update:editPolicy" | "manage:org:user:resetMfa" | "manage:session:*" | "manage:session:readonly" | "manage:session:get" | "manage:session:list" | "manage:session:create" | "manage:session:extend" | "manage:session:revoke" | "manage:export:*" | "manage:export:readonly" | "manage:export:org:*" | "manage:export:org:get" | "manage:export:user:*" | "manage:export:user:delete" | "manage:export:user:list" | "manage:authMigration:*" | "manage:authMigration:identity:add" | "manage:authMigration:identity:remove" | "manage:authMigration:user:update" | "manage:mmi:*" | "manage:mmi:readonly" | "manage:mmi:get" | "manage:mmi:list" | "manage:mmi:reject" | "manage:mmi:delete" | "export:*" | "export:user:*" | "export:user:init" | "export:user:complete" | "mmi:*" | "orgAccess:*" | "orgAccess:child:*" | "rpc:*" | "rpc:createTransaction:*" | "rpc:createTransaction:evm" | "rpc:retryTransaction" | "rpc:getTransaction" | "rpc:listTransactions" | "rpc:binance";
         /**
          * @description This type specifies the interpretation of the `fee` field in Babylon
          * staking requests. If `sats`, the field is intpreted as a fixed value
@@ -5021,7 +5113,7 @@ export interface components {
             result?: Record<string, unknown> | null;
         };
         /** @description Valid `result` from the JSON-RPC API. */
-        JsonRpcResult: components["schemas"]["TransactionInfo"] | components["schemas"]["ListTransactionsPaginatedResponse"] | components["schemas"]["SubAccountTransferResponse"] | components["schemas"]["UniversalTransferResponse"] | components["schemas"]["SubAccountAssetsResponse"] | components["schemas"]["AccountInfoResponse"] | components["schemas"]["SubAccountTransferHistoryResponse"] | components["schemas"]["UniversalTransferHistoryResponse"] | components["schemas"]["WithdrawResponse"] | components["schemas"]["WithdrawHistoryResponse"];
+        JsonRpcResult: components["schemas"]["TransactionInfo"] | components["schemas"]["ListTransactionsPaginatedResponse"] | components["schemas"]["SubAccountTransferResponse"] | components["schemas"]["UniversalTransferResponse"] | components["schemas"]["SubAccountAssetsResponse"] | components["schemas"]["AccountInfoResponse"] | components["schemas"]["SubAccountTransferHistoryResponse"] | components["schemas"]["UniversalTransferHistoryResponse"] | components["schemas"]["WithdrawResponse"] | components["schemas"]["WithdrawHistoryResponse"] | components["schemas"]["DepositResponse"];
         JwkSetResponse: {
             /** @description The keys included in this set */
             keys: Record<string, never>[];
@@ -5558,7 +5650,7 @@ export interface components {
          * @description All different kinds of sensitive operations
          * @enum {string}
          */
-        OperationKind: "AvaSign" | "AvaChainTxSign" | "BabylonCovSign" | "BabylonRegistration" | "BabylonStaking" | "BlobSign" | "BtcMessageSign" | "BtcSign" | "DiffieHellman" | "PsbtSign" | "TaprootSign" | "Eip191Sign" | "Eip712Sign" | "EotsNonces" | "EotsSign" | "Eth1Sign" | "Eth2Sign" | "Eth2Stake" | "Eth2Unstake" | "SolanaSign" | "SuiSign" | "TendermintSign" | "RoleUpdate";
+        OperationKind: "AvaSign" | "AvaChainTxSign" | "BabylonCovSign" | "BabylonRegistration" | "BabylonStaking" | "BinanceSign" | "BlobSign" | "BtcMessageSign" | "BtcSign" | "DiffieHellman" | "PsbtSign" | "TaprootSign" | "Eip191Sign" | "Eip712Sign" | "EotsNonces" | "EotsSign" | "Eth1Sign" | "Eth2Sign" | "Eth2Stake" | "Eth2Unstake" | "SolanaSign" | "SuiSign" | "TendermintSign" | "RoleUpdate";
         OrgAlertsPrefs: {
             /** @description Recipient users for org-level alerts */
             alert_recipients?: components["schemas"]["Id"][] | null;
@@ -7077,6 +7169,11 @@ export interface components {
         RestrictedActionsMap: {
             [key: string]: components["schemas"]["MemberRole"][];
         };
+        /** @description Parameters for the [`cs_retryTransaction`](RpcMethod::RetryTransaction) method. */
+        RetryTransactionRequest: components["schemas"]["EvmTxCustomization"] & {
+            /** @description The transaction id. */
+            id: string;
+        };
         /**
          * @description List of role actions that can be restricted to a set of member roles
          * @enum {string}
@@ -7537,7 +7634,7 @@ export interface components {
             /** @description Email address of the sub-account whose balances to fetch. */
             email: string;
         };
-        /** @description Response for [`BinanceManager::sub_account_assets`]. */
+        /** @description Response returned by `cs_binanceSubAccountAssets`. */
         SubAccountAssetsResponse: {
             /**
              * @description One entry per asset held in the sub-account's spot wallet. Binance
@@ -7625,13 +7722,13 @@ export interface components {
             type?: number | null;
         };
         /**
-         * @description Response for [`BinanceManager::sub_account_transfer_history`].
+         * @description Response returned by `cs_binanceSubAccountTransferHistory`.
          *
          * Binance returns a top-level JSON array; this newtype preserves that wire
          * format while giving the response a named type in the OpenAPI schema.
          */
         SubAccountTransferHistoryResponse: components["schemas"]["SubAccountTransferHistoryEntry"][];
-        /** @description Response for [`BinanceManager::sub_to_master`] and [`BinanceManager::sub_to_sub`]. */
+        /** @description Response returned by `cs_binanceSubToMaster` and `cs_binanceSubToSub`. */
         SubAccountTransferResponse: {
             /** Format: int64 */
             txnId: number;
@@ -8123,7 +8220,7 @@ export interface components {
             /** @description Filter to transfers destined for this sub-account email. */
             toEmail?: string | null;
         };
-        /** @description Response for [`BinanceManager::universal_transfer_history`]. */
+        /** @description Response returned by `cs_binanceUniversalTransferHistory`. */
         UniversalTransferHistoryResponse: {
             /** @description Transfers in the current page. */
             result: components["schemas"]["UniversalTransferHistoryEntry"][];
@@ -8160,7 +8257,7 @@ export interface components {
             /** @description Destination sub-account email. If `None`, the destination is the master account. */
             toEmail?: string | null;
         };
-        /** @description Response for [`BinanceManager::universal_transfer`]. */
+        /** @description Response returned by `cs_binanceUniversalTransfer`. */
         UniversalTransferResponse: {
             clientTranId?: string | null;
             /** Format: int64 */
@@ -9050,7 +9147,7 @@ export interface components {
             withdrawOrderId?: string | null;
         };
         /**
-         * @description Response for [`BinanceManager::withdraw_history`].
+         * @description Response returned by `cs_binanceWithdrawHistory`.
          *
          * Binance returns a top-level JSON array; this newtype preserves that wire
          * format while giving the response a named type in the OpenAPI schema.
@@ -9101,7 +9198,7 @@ export interface components {
              */
             withdrawOrderId?: string | null;
         };
-        /** @description Response for [`BinanceManager::withdraw`]. */
+        /** @description Response returned by `cs_binanceWithdraw`. */
         WithdrawResponse: {
             /**
              * @description Binance-assigned withdrawal id. Used to look the request up later via
@@ -9234,6 +9331,21 @@ export interface components {
                 };
             };
         };
+        /** @description Response returned by the typed `binance_sign` endpoint. */
+        BinanceSignResponse: {
+            content: {
+                "application/json": {
+                    /** @description Optional policy evaluation tree. */
+                    policy_eval_tree?: unknown;
+                } & {
+                    /**
+                     * @description The full signed query string, ready to be submitted to Binance.
+                     * Encoded as `<urlencoded params>&recvWindow=<ms>&timestamp=<ms>&signature=<urlencoded base64 sig>`.
+                     */
+                    signed_query: string;
+                };
+            };
+        };
         /** @description BTC message signing response */
         BtcMessageSignResponse: {
             content: {
@@ -16548,6 +16660,47 @@ export interface operations {
             };
         };
     };
+    /**
+     * Sign Binance RPC Request
+     * @description Sign Binance RPC Request
+     *
+     * Signs a typed [`BinanceRpc`] request with the [`KeyType::Ed25519BinanceApi`]
+     * key identified by `material_id`. The signer URL-encodes the inner request,
+     * appends Binance's `recvWindow` and `timestamp` parameters, signs the
+     * resulting query, and returns the full query string ready to be submitted
+     * to Binance.
+     */
+    binanceSign: {
+        parameters: {
+            path: {
+                /**
+                 * @description Name or ID of the desired Org
+                 * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+                 */
+                org_id: string;
+                /** @description Material id of the Ed25519BinanceApi key */
+                material_id: string;
+            };
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["BinanceRpc"];
+            };
+        };
+        responses: {
+            200: components["responses"]["BinanceSignResponse"];
+            202: {
+                content: {
+                    "application/json": components["schemas"]["AcceptedResponse"];
+                };
+            };
+            default: {
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     /**
      * Sign Raw Blob
      * @description Sign Raw Blob