@cubist-labs/cubesigner-sdk 0.4.270 → 0.4.273

package/src/schema.ts

@@ -439,6 +439,17 @@ export interface paths {
      */
     post: operations["eip712Sign"];
   };
+  "/v0/org/{org_id}/evm/eip7702/sign/{pubkey}": {
+    /**
+     * Sign an EIP-7702 Authorization
+     * @description Sign an EIP-7702 Authorization
+     *
+     * Signs an EIP-7702 authorization tuple `(chain_id, address, nonce)` with a given
+     * Secp256k1 key. The resulting 65-byte signature (`r || s || y_parity`) can be used to
+     * assemble a `SignedAuthorization` for an EIP-7702 set-code transaction.
+     */
+    post: operations["eip7702Sign"];
+  };
   "/v0/org/{org_id}/export/{key_id}": {
     /**
      * Get an Org-Export Ciphertext
@@ -740,6 +751,9 @@ export interface paths {
      * Retrieves and returns all pending MFA requests that are accessible to the current session,
      * i.e., those created by the current session identity plus those in which the current user
      * is listed as an approver
+     *
+     * NOTE that if pagination is used and a page limit is set, the returned result
+     * set may contain either FEWER or MORE elements than the requested page limit.
      */
     get: operations["mfaList"];
   };
@@ -2965,6 +2979,7 @@ export interface components {
       | "InvalidDiffieHellmanRequest"
       | "InvalidSolanaSignRequest"
       | "InvalidEip712SignRequest"
+      | "InvalidEip7702SignRequest"
       | "OnlySpecifyOne"
       | "IncompatibleParams"
       | "NoOidcDataInProof"
@@ -3239,6 +3254,7 @@ export interface components {
       | "TaprootSign"
       | "Eip712Sign"
       | "Eip191Sign"
+      | "Eip7702Sign"
       | "Eth1Sign"
       | "Eth2Sign"
       | "SolanaSign"
@@ -3921,6 +3937,41 @@ export interface components {
       /** @description Total wallet balance for `coin`, as a decimal string. */
       walletBalance: string;
     };
+    /** @description One entry in [`BybitCoinInfoEntry::chains`]. */
+    BybitCoinInfoChain: {
+      /** @description Short chain code (e.g. `ETH`, `TRX`). */
+      chain: string;
+      /** @description Whether deposits are enabled on this chain: `"0"` off, `"1"` on. */
+      chainDeposit?: string | null;
+      /** @description Human-readable chain name (e.g. `ERC20`). */
+      chainType?: string | null;
+      /** @description Whether withdrawals are enabled on this chain: `"0"` off, `"1"` on. */
+      chainWithdraw?: string | null;
+      /** @description Number of confirmations required for a deposit to be credited. */
+      confirmation?: string | null;
+      /** @description Minimum deposit amount, as a decimal string. */
+      depositMin?: string | null;
+      /** @description Withdrawal fee on this chain, as a decimal string. If empty string, this coin does not support withdrawal. */
+      withdrawFee?: string | null;
+      /** @description Minimum withdrawal amount, as a decimal string. */
+      withdrawMin?: string | null;
+      [key: string]: unknown;
+    };
+    /** @description One entry in [`BybitCoinInfoResponse::rows`]. */
+    BybitCoinInfoEntry: {
+      /** @description Per-chain configuration for this coin. */
+      chains?: components["schemas"]["BybitCoinInfoChain"][];
+      /** @description Coin symbol, uppercase (e.g. `USDT`). */
+      coin: string;
+      /** @description Full coin name (e.g. `Tether`). */
+      name?: string | null;
+      [key: string]: unknown;
+    };
+    /** @description Response of `GET /v5/asset/coin/query-info`. */
+    BybitCoinInfoResponse: {
+      /** @description Per-coin info entries. */
+      rows: components["schemas"]["BybitCoinInfoEntry"][];
+    };
     /** @description One entry in [`BybitQueryDepositAddressResponse::chains`]. */
     BybitDepositChain: {
       /** @description Deposit address on this chain. */
@@ -3942,6 +3993,93 @@ export interface components {
        */
       tagDeposit?: string | null;
     };
+    /** @description One entry in [`BybitDepositHistoryResponse::rows`]. */
+    BybitDepositEntry: {
+      /** @description Deposit amount as a decimal string. */
+      amount: string;
+      /** @description Short chain code (e.g. `ETH`, `TRX`). */
+      chain: string;
+      /** @description Coin symbol, uppercase (e.g. `USDT`). */
+      coin: string;
+      /** @description Number of confirmations received so far. */
+      confirmations?: string | null;
+      /** @description Deposit fee charged, as a decimal string. */
+      depositFee?: string | null;
+      /**
+       * Format: int32
+       * @description Deposit state (e.g. `3` = deposit success). See the Bybit docs.
+       */
+      status?: number | null;
+      /** @description Timestamp the deposit succeeded, in milliseconds since epoch (as a string). */
+      successAt?: string | null;
+      /** @description Memo / tag for chains that use one (e.g. XRP, EOS). */
+      tag?: string | null;
+      /** @description Destination deposit address. */
+      toAddress?: string | null;
+      /** @description On-chain transaction hash. */
+      txID?: string | null;
+      [key: string]: unknown;
+    };
+    /**
+     * @description Parameters envelope for all Bybit RPC variants whose payload schema is
+     * derived from a `*Request` struct. (`BybitQueryUserParams` and
+     * `BybitQuerySubMembersParams` have no per-variant payload and are defined
+     * directly below.)
+     */
+    BybitDepositHistoryParams: components["schemas"]["BybitDepositHistoryRequest"] & {
+      dryRun?: components["schemas"]["BybitDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: int32
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * Specified in milliseconds. If omitted, defaults to 10000.
+       */
+      recvWindow?: number | null;
+    };
+    /**
+     * @description Parameters for `GET /v5/asset/deposit/query-record`.
+     *
+     * By default, queries records from the last 30 days; otherwise, `endTime` - `startTime` must be less than 30 days.
+     */
+    BybitDepositHistoryRequest: {
+      /** @description Filter by coin symbol (uppercase). */
+      coin?: string | null;
+      /** @description Pagination cursor (the `nextPageCursor` from a prior response). */
+      cursor?: string | null;
+      /**
+       * Format: int64
+       * @description End timestamp (ms since epoch).
+       */
+      endTime?: number | null;
+      /** @description Filter by Bybit-internal deposit id. */
+      id?: string | null;
+      /**
+       * Format: int32
+       * @description Page size, `[1, 50]`. Defaults to 50.
+       */
+      limit?: number | null;
+      /**
+       * Format: int64
+       * @description Start timestamp (ms since epoch). The span between `start_time` and
+       * `end_time` must not exceed 30 days.
+       */
+      startTime?: number | null;
+      /**
+       * @description Filter by on-chain transaction id. Data before 2024-01-01 is not
+       * queryable via this field.
+       */
+      txID?: string | null;
+    };
+    /** @description Response of `GET /v5/asset/deposit/query-record`. */
+    BybitDepositHistoryResponse: {
+      /**
+       * @description Opaque cursor to pass back as `cursor` on the next request; absent on
+       * the last page.
+       */
+      nextPageCursor?: string | null;
+      /** @description Deposit records matching the query. */
+      rows: components["schemas"]["BybitDepositEntry"][];
+    };
     BybitDryRunArgs: {
       /** @description The Bybit API method that would have been used */
       method: string;
@@ -3955,6 +4093,30 @@ export interface components {
      * @enum {string}
      */
     BybitDryRunMode: "NO_SIGN" | "NO_SUBMIT";
+    /**
+     * @description Parameters envelope for all Bybit RPC variants whose payload schema is
+     * derived from a `*Request` struct. (`BybitQueryUserParams` and
+     * `BybitQuerySubMembersParams` have no per-variant payload and are defined
+     * directly below.)
+     */
+    BybitQueryCoinInfoParams: components["schemas"]["BybitQueryCoinInfoRequest"] & {
+      dryRun?: components["schemas"]["BybitDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: int32
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * Specified in milliseconds. If omitted, defaults to 10000.
+       */
+      recvWindow?: number | null;
+    };
+    /** @description Parameters for `GET /v5/asset/coin/query-info`. */
+    BybitQueryCoinInfoRequest: {
+      /**
+       * @description Filter by coin symbol (uppercase, e.g. `"BTC"`). Bybit returns info for
+       * all coins when omitted.
+       */
+      coin?: string | null;
+    };
     /**
      * @description Parameters envelope for all Bybit RPC variants whose payload schema is
      * derived from a `*Request` struct. (`BybitQueryUserParams` and
@@ -4134,6 +4296,21 @@ export interface components {
           /** @enum {string} */
           method: "cs_bybitWithdrawals";
           params: components["schemas"]["BybitWithdrawalsParams"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_bybitQueryCoinInfo";
+          params: components["schemas"]["BybitQueryCoinInfoParams"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_bybitDepositHistory";
+          params: components["schemas"]["BybitDepositHistoryParams"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_bybitUniversalTransferHistory";
+          params: components["schemas"]["BybitUniversalTransferHistoryParams"];
         };
     /** @description Response returned by the typed `bybit_sign` endpoint. */
     BybitSignResponse: {
@@ -4189,6 +4366,94 @@ export interface components {
       username?: string | null;
       [key: string]: unknown;
     };
+    /** @description One entry in [`BybitUniversalTransferHistoryResponse::list`]. */
+    BybitTransferEntry: {
+      /** @description Transfer amount as a decimal string. */
+      amount: string;
+      /** @description Coin symbol, uppercase (e.g. `USDT`). */
+      coin: string;
+      /** @description Source wallet type (e.g. `FUND`, `UNIFIED`). */
+      fromAccountType?: string | null;
+      /** @description Source account UID. */
+      fromMemberId?: string | null;
+      /** @description Transfer state: `SUCCESS`, `PENDING`, or `FAILED`. */
+      status?: string | null;
+      /** @description Creation timestamp, in milliseconds since epoch (as a string). */
+      timestamp?: string | null;
+      /** @description Destination wallet type. */
+      toAccountType?: string | null;
+      /** @description Destination account UID. */
+      toMemberId?: string | null;
+      /** @description UUID of the transfer (the caller-supplied `transferId`). */
+      transferId: string;
+      [key: string]: unknown;
+    };
+    /**
+     * @description Parameters envelope for all Bybit RPC variants whose payload schema is
+     * derived from a `*Request` struct. (`BybitQueryUserParams` and
+     * `BybitQuerySubMembersParams` have no per-variant payload and are defined
+     * directly below.)
+     */
+    BybitUniversalTransferHistoryParams: components["schemas"]["BybitUniversalTransferHistoryRequest"] & {
+      dryRun?: components["schemas"]["BybitDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: int32
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * Specified in milliseconds. If omitted, defaults to 10000.
+       */
+      recvWindow?: number | null;
+    };
+    /**
+     * @description Parameters for `GET /v5/asset/transfer/query-universal-transfer-list`.
+     *
+     * If `startTime` and `endTime` are not provided, the API returns data from the past 7 days by default.
+     * If only `startTime` is provided, the API returns records from `startTime` to `startTime` + 7 days.
+     * If only `endTime` is provided, the API returns records from `endTime` - 7 days to `endTime`.
+     * If both are provided, the maximum allowed range is 7 days (`endTime` - `startTime` ≤ 7 days).
+     */
+    BybitUniversalTransferHistoryRequest: {
+      /** @description Filter by coin symbol (uppercase). */
+      coin?: string | null;
+      /** @description Pagination cursor (the `nextPageCursor` from a prior response). */
+      cursor?: string | null;
+      /**
+       * Format: int64
+       * @description End timestamp (ms since epoch).
+       */
+      endTime?: number | null;
+      /**
+       * Format: int32
+       * @description Page size, `[1, 50]`. Defaults to 20.
+       */
+      limit?: number | null;
+      /**
+       * Format: int64
+       * @description Start timestamp (ms since epoch). The span between `start_time` and
+       * `end_time` must not exceed 7 days.
+       */
+      startTime?: number | null;
+      /** @description Filter by transfer status: `"SUCCESS"`, `"FAILED"`, or `"PENDING"`. */
+      status?: string | null;
+      /**
+       * @description Filter by the transfer's UUID (as supplied to
+       * [`BybitRpc::UniversalTransfer`]).
+       */
+      transferId?: string | null;
+    };
+    /** @description Response of `GET /v5/asset/transfer/query-universal-transfer-list`. */
+    BybitUniversalTransferHistoryResponse: {
+      /**
+       * @description Universal-transfer records matching the query. (Bybit names this field
+       * `list`, unlike the `rows` used by other history endpoints.)
+       */
+      list: components["schemas"]["BybitTransferEntry"][];
+      /**
+       * @description Opaque cursor to pass back as `cursor` on the next request; absent on
+       * the last page.
+       */
+      nextPageCursor?: string | null;
+    };
     /**
      * @description Parameters envelope for all Bybit RPC variants whose payload schema is
      * derived from a `*Request` struct. (`BybitQueryUserParams` and
@@ -5657,6 +5922,51 @@ export interface components {
       tweak?: string | null;
       typed_data: components["schemas"]["TypedData"];
     };
+    Eip7702SignRequest: {
+      /** @description Do not produce a valid signature, just evaluate attached policies. */
+      dry_run?: boolean;
+      /**
+       * @description Request additional information to be included in the response, explaining
+       * the outcome (i.e., permitted vs. denied vs. MFA required) of the sign request.
+       * Defaults to false.
+       */
+      explain?: boolean;
+      /**
+       * @description If MFA is required, fail the request instead of returning 202 and creating
+       * pending MFA request. Defaults to false.
+       */
+      fail_on_mfa?: boolean;
+      /**
+       * @description Optional metadata. Passing additional information as metadata can be used to make reviewing
+       * of pending MFA requests and/or historical key transactions more transparent. It can also be used e.g., to carry additional data to WebHook policies.
+       */
+      metadata?: unknown;
+    } & {
+      /**
+       * @description The address to delegate to (the target of the authorization), as
+       * hex-encoded bytes. Must be exactly 20 bytes.
+       * @example 0x1100000000000000000000000000000000000011
+       */
+      address: string;
+      /**
+       * Format: int64
+       * @description The chain id for which this authorization is valid. A value of `0` means
+       * the authorization is valid on any chain that supports EIP-7702.
+       */
+      chain_id: number;
+      /**
+       * Format: int64
+       * @description The nonce of the authorizing account.
+       */
+      nonce: number;
+      /**
+       * @description An optional tweak value that will be applied to the secret key before signing.
+       * This field must contain a base-64 string encoding a vector of exactly 32 bytes.
+       * See the CubeSigner documentation for more information on the tweaking procedure.
+       * @example F41HAy2q5Gn8laF2CuMsZbRAQTmD+4Ob3VUMZ7TBGK4=
+       */
+      tweak?: string | null;
+    };
     Email: string;
     /** @description An answer to the challenge returned by the `mfa_email_init` endpoint. */
     EmailOtpAnswer: {
@@ -6189,6 +6499,9 @@ export interface components {
       | "sign:bybit:universalTransfer"
       | "sign:bybit:withdraw"
       | "sign:bybit:withdrawals"
+      | "sign:bybit:queryCoinInfo"
+      | "sign:bybit:depositHistory"
+      | "sign:bybit:universalTransferHistory"
       | "sign:coinbase:*"
       | "sign:coinbase:accounts:list"
       | "sign:coinbase:portfolios:list"
@@ -6222,6 +6535,7 @@ export interface components {
       | "sign:evm:tx"
       | "sign:evm:eip191"
       | "sign:evm:eip712"
+      | "sign:evm:eip7702"
       | "sign:eth2:*"
       | "sign:eth2:validate"
       | "sign:eth2:stake"
@@ -6507,6 +6821,7 @@ export interface components {
       | "SessionForWrongOrg"
       | "SelfDelete"
       | "SelfDisable"
+      | "SelfMfaReset"
       | "InvalidOrgMembershipRoleChange"
       | "UserDisabled"
       | "OrgDisabled"
@@ -7138,6 +7453,9 @@ export interface components {
       | components["schemas"]["BybitUniversalTransferResponse"]
       | components["schemas"]["BybitWithdrawResponse"]
       | components["schemas"]["BybitWithdrawalsResponse"]
+      | components["schemas"]["BybitCoinInfoResponse"]
+      | components["schemas"]["BybitDepositHistoryResponse"]
+      | components["schemas"]["BybitUniversalTransferHistoryResponse"]
       | components["schemas"]["CoinbaseListAccountsResponse"]
       | components["schemas"]["CoinbaseListPortfoliosResponse"]
       | components["schemas"]["CoinbaseMoveFundsResponse"]
@@ -7399,10 +7717,6 @@ export interface components {
       /** @description Pending invitations */
       invitations: components["schemas"]["InvitationInfo"][];
     };
-    ListMfaResponse: {
-      /** @description All pending MFA requests */
-      mfa_requests: components["schemas"]["MfaRequestInfo"][];
-    };
     /** @description All pending MMI requests created by the current user. */
     ListPendingMessagesResponse: {
       /** @description All pending messages for a user. */
@@ -7873,6 +8187,9 @@ export interface components {
       | "BybitUniversalTransfer"
       | "BybitWithdraw"
       | "BybitWithdrawals"
+      | "BybitQueryCoinInfo"
+      | "BybitDepositHistory"
+      | "BybitUniversalTransferHistory"
       | "CoinbaseListAccounts"
       | "CoinbaseListPortfolios"
       | "CoinbaseMoveFunds"
@@ -7881,6 +8198,7 @@ export interface components {
       | "TaprootSign"
       | "Eip191Sign"
       | "Eip712Sign"
+      | "Eip7702Sign"
       | "EotsNonces"
       | "EotsSign"
       | "Eth1Sign"
@@ -8332,8 +8650,7 @@ export interface components {
          * is meaningless for organizations that use org-wide export.)
          */
         user_export_window: number;
-        /** @description If set, the official webapp origin is automatically allowed */
-        webapp_enabled?: boolean;
+        webapp_enabled?: components["schemas"]["WebappEnabled"];
       };
     /** @description Supported org metrics. */
     OrgMetric: OneOf<
@@ -8531,6 +8848,21 @@ export interface components {
        */
       last_evaluated_key?: string | null;
     };
+    /**
+     * @description Response type that wraps another type and adds base64url-encoded encrypted `last_evaluated_key`
+     * value (which can the user pass back to use as a url query parameter to continue pagination).
+     */
+    PaginatedListMfaResponse: {
+      /** @description All pending MFA requests */
+      mfa_requests: components["schemas"]["MfaRequestInfo"][];
+    } & {
+      /**
+       * @description If set, the content of `response` does not contain the entire result set.
+       * To fetch the next page of the result set, call the same endpoint
+       * but specify this value as the 'page.start' query parameter.
+       */
+      last_evaluated_key?: string | null;
+    };
     /**
      * @description Response type that wraps another type and adds base64url-encoded encrypted `last_evaluated_key`
      * value (which can the user pass back to use as a url query parameter to continue pagination).
@@ -8860,6 +9192,7 @@ export interface components {
       | "BtcSignatureExceededValue"
       | "BtcValueOverflow"
       | "BtcSighashTypeDisallowed"
+      | "Eip7702AddressMismatch"
       | "EvmTxReceiverMismatch"
       | "EvmTxChainIdMismatch"
       | "EvmTxSenderMismatch"
@@ -8900,6 +9233,7 @@ export interface components {
       | "RequireRoleSessionKeyAccessError"
       | "BtcMessageSigningNotAllowed"
       | "Eip191SigningNotAllowed"
+      | "Eip7702SigningNotAllowed"
       | "TaprootSigningDisallowed"
       | "SegwitSigningDisallowed"
       | "PsbtSigningDisallowed"
@@ -9836,7 +10170,7 @@ export interface components {
        * Can be `None` if the request is creating a secret without ACL or updating an
        * existing secret's value.
        */
-      acl?: unknown[] | null;
+      acl?: unknown;
       import_key?: components["schemas"]["KeyImportKey"] | null;
       value?: components["schemas"]["SecretValue"] | null;
     };
@@ -11285,26 +11619,8 @@ export interface components {
     };
     /** @description Request body for updating a named policy. */
     UpdatePolicyRequest: {
-      /**
-       * @description New Access-control entries.
-       * @example [
-       *   {
-       *     "action": "attach",
-       *     "resources": [
-       *       {
-       *         "key_id": "*",
-       *         "role_id": "Role#e427c28a-9c5b-49cc-a257-878aea58a22c"
-       *       }
-       *     ],
-       *     "subjects": "*"
-       *   },
-       *   {
-       *     "action": "sign",
-       *     "subjects": "Role#e427c28a-9c5b-49cc-a257-878aea58a22c"
-       *   }
-       * ]
-       */
-      acl?: unknown[] | null;
+      /** @description New Access-control entries. */
+      acl?: unknown;
       edit_policy?: components["schemas"]["EditPolicy"] | null;
       /** @description A new metadata. */
       metadata?: unknown;
@@ -11618,6 +11934,8 @@ export interface components {
       /** @description The Id of the policy this wasm rule belongs to. */
       policy_id: string;
     };
+    /** @description Whether the official webapp origin is automatically allowed. `"limited"` is treated the same as `true` by the back end, but reported as-is to clients */
+    WebappEnabled: boolean | "limited";
     /**
      * @description Allowed webhook methods
      * @enum {string}
@@ -12529,14 +12847,6 @@ export interface components {
         };
       };
     };
-    ListMfaResponse: {
-      content: {
-        "application/json": {
-          /** @description All pending MFA requests */
-          mfa_requests: components["schemas"]["MfaRequestInfo"][];
-        };
-      };
-    };
     /** @description All pending MMI requests created by the current user. */
     ListPendingMessagesResponse: {
       content: {
@@ -12751,8 +13061,7 @@ export interface components {
              * is meaningless for organizations that use org-wide export.)
              */
             user_export_window: number;
-            /** @description If set, the official webapp origin is automatically allowed */
-            webapp_enabled?: boolean;
+            webapp_enabled?: components["schemas"]["WebappEnabled"];
           };
       };
     };
@@ -12875,6 +13184,21 @@ export interface components {
         };
       };
     };
+    PaginatedListMfaResponse: {
+      content: {
+        "application/json": {
+          /** @description All pending MFA requests */
+          mfa_requests: components["schemas"]["MfaRequestInfo"][];
+        } & {
+          /**
+           * @description If set, the content of `response` does not contain the entire result set.
+           * To fetch the next page of the result set, call the same endpoint
+           * but specify this value as the 'page.start' query parameter.
+           */
+          last_evaluated_key?: string | null;
+        };
+      };
+    };
     PaginatedListPoliciesResponse: {
       content: {
         "application/json": {
@@ -15128,6 +15452,48 @@ export interface operations {
       };
     };
   };
+  /**
+   * Sign an EIP-7702 Authorization
+   * @description Sign an EIP-7702 Authorization
+   *
+   * Signs an EIP-7702 authorization tuple `(chain_id, address, nonce)` with a given
+   * Secp256k1 key. The resulting 65-byte signature (`r || s || y_parity`) can be used to
+   * assemble a `SignedAuthorization` for an EIP-7702 set-code transaction.
+   */
+  eip7702Sign: {
+    parameters: {
+      path: {
+        /**
+         * @description Name or ID of the desired Org
+         * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+         */
+        org_id: string;
+        /**
+         * @description Hex-encoded EVM address of the Secp256k1 key
+         * @example 0x49011adbCC3bC9c0307BB07F37Dda1a1a9c69d2E
+         */
+        pubkey: string;
+      };
+    };
+    requestBody: {
+      content: {
+        "application/json": components["schemas"]["Eip7702SignRequest"];
+      };
+    };
+    responses: {
+      200: components["responses"]["SignResponse"];
+      202: {
+        content: {
+          "application/json": components["schemas"]["AcceptedResponse"];
+        };
+      };
+      default: {
+        content: {
+          "application/json": components["schemas"]["ErrorResponse"];
+        };
+      };
+    };
+  };
   /**
    * Get an Org-Export Ciphertext
    * @description Get an Org-Export Ciphertext
@@ -16142,9 +16508,27 @@ export interface operations {
    * Retrieves and returns all pending MFA requests that are accessible to the current session,
    * i.e., those created by the current session identity plus those in which the current user
    * is listed as an approver
+   *
+   * NOTE that if pagination is used and a page limit is set, the returned result
+   * set may contain either FEWER or MORE elements than the requested page limit.
    */
   mfaList: {
     parameters: {
+      query?: {
+        /**
+         * @description Max number of items to return per page.
+         *
+         * If the actual number of returned items may be less that this, even if there exist more
+         * data in the result set. To reliably determine if more data is left in the result set,
+         * inspect the [UnencryptedLastEvalKey] value in the response object.
+         */
+        "page.size"?: number;
+        /**
+         * @description The start of the page.  Omit to start from the beginning; otherwise, only specify a
+         * the exact value previously returned as 'last_evaluated_key' from the same endpoint.
+         */
+        "page.start"?: string | null;
+      };
       path: {
         /**
          * @description Name or ID of the desired Org
@@ -16154,7 +16538,7 @@ export interface operations {
       };
     };
     responses: {
-      200: components["responses"]["ListMfaResponse"];
+      200: components["responses"]["PaginatedListMfaResponse"];
       default: {
         content: {
           "application/json": components["schemas"]["ErrorResponse"];