@cubist-labs/cubesigner-sdk 0.4.274 → 0.4.276

package/src/schema.ts

@@ -613,7 +613,8 @@ export interface paths {
      * List pending invitations
      * @description List pending invitations
      *
-     * Returns all pending (not yet accepted) invitations for the organization.
+     * Returns all pending invitations for the organization, i.e., those that have neither
+     * been accepted nor canceled, and have not expired.
      */
     get: operations["listInvitations"];
     /**
@@ -3084,6 +3085,7 @@ export interface components {
       | "PolicyVersionInvalid"
       | "PolicySecretLimitReached"
       | "PolicySecretTooLarge"
+      | "InvalidRandomSecretLength"
       | "InvalidImportKey"
       | "AlienOwnerInvalid"
       | "EmptyUpdateRequest"
@@ -3102,7 +3104,8 @@ export interface components {
       | "InputTooShort"
       | "InvalidTweakLength"
       | "InvalidCustomChains"
-      | "InvalidRpcRequest";
+      | "InvalidRpcRequest"
+      | "InvalidAclEntry";
     BillingArgs: {
       billing_org: components["schemas"]["Id"];
       event_type: components["schemas"]["BillingEvent"];
@@ -3120,192 +3123,192 @@ export interface components {
      * @enum {string}
      */
     BillingEvent:
-      | "Mmi"
-      | "MmiMessageGet"
-      | "MmiMessageList"
-      | "MmiMessageSign"
-      | "MmiMessageReject"
-      | "MmiMessageDelete"
-      | "AboutMe"
-      | "UserResetEmailInit"
-      | "UserResetEmailComplete"
-      | "UserDeleteTotp"
-      | "UserResetTotpInit"
-      | "UserResetTotpComplete"
-      | "UserVerifyTotp"
-      | "UserRegisterFidoInit"
-      | "UserRegisterFidoComplete"
-      | "UserDeleteFido"
-      | "CreateProofOidc"
-      | "CreateProofCubeSigner"
-      | "VerifyProof"
-      | "AddOidcIdentity"
-      | "RemoveOidcIdentity"
-      | "ListOidcIdentities"
-      | "GetOrg"
-      | "UpdateOrg"
-      | "GetOrgExport"
-      | "CreateOrg"
-      | "ListKeys"
-      | "AttestKey"
-      | "GetKey"
-      | "GetKeyByMaterialId"
-      | "ListKeyRoles"
-      | "UpdateKey"
-      | "ListHistoricalKeyTx"
-      | "Invite"
-      | "CancelInvitation"
-      | "ListInvitations"
-      | "ListUsers"
-      | "GetUser"
-      | "GetUserByEmail"
-      | "GetUserByOidc"
-      | "UpdateMembership"
-      | "ResetMemberMfa"
-      | "CompleteResetMemberMfa"
-      | "CreateRole"
-      | "AttestRole"
-      | "GetRole"
-      | "ListTokenKeys"
-      | "ListRoles"
-      | "GetRoleKey"
-      | "ListRoleKeys"
-      | "ListRoleUsers"
-      | "UpdateRole"
-      | "DeleteRole"
-      | "ConfigureEmail"
-      | "GetEmailConfig"
-      | "DeleteEmailConfig"
-      | "ListHistoricalRoleTx"
-      | "CreatePolicy"
-      | "GetPolicy"
-      | "ListPolicies"
-      | "DeletePolicy"
-      | "UpdatePolicy"
-      | "InvokePolicy"
-      | "GetPolicyLogs"
-      | "UploadWasmPolicy"
-      | "GetPolicySecrets"
-      | "UpdatePolicySecrets"
-      | "SetPolicySecret"
-      | "DeletePolicySecret"
-      | "CreatePolicyImportKey"
-      | "GetPolicyBucket"
-      | "ListPolicyBuckets"
-      | "UpdatePolicyBucket"
-      | "UserExportDelete"
-      | "UserExportList"
-      | "UserExportInit"
-      | "UserExportComplete"
-      | "AddUserToRole"
-      | "RemoveUserFromRole"
-      | "MfaApproveCs"
-      | "MfaRejectCs"
-      | "MfaGet"
-      | "MfaList"
-      | "AddKeysToRole"
-      | "RemoveKeyFromRole"
-      | "CreateToken"
-      | "CreateSession"
-      | "RevokeSession"
-      | "RevokeCurrentSession"
-      | "RevokeSessions"
-      | "ListSessions"
-      | "GetSession"
-      | "SignerSessionRefresh"
-      | "MfaApproveTotp"
-      | "MfaRejectTotp"
-      | "MfaFidoInit"
-      | "MfaApproveFidoComplete"
-      | "MfaRejectFidoComplete"
-      | "MfaEmailInit"
-      | "MfaEmailComplete"
-      | "Cube3signerHeartbeat"
-      | "CreateContact"
-      | "GetContact"
-      | "ListContacts"
-      | "DeleteContact"
-      | "UpdateContact"
-      | "LookupContactsByAddress"
-      | "QueryMetrics"
-      | "QueryAuditLog"
-      | "Counts"
-      | "CreateKey"
-      | "ImportKey"
-      | "CreateKeyImportKey"
-      | "DeriveKey"
-      | "DeleteKey"
-      | "AvaSign"
-      | "AvaSerializedTxSign"
-      | "BabylonRegistration"
-      | "BabylonStaking"
-      | "BabylonCovSign"
-      | "BinanceSign"
-      | "BybitSign"
-      | "CoinbaseSign"
-      | "BlobSign"
-      | "BtcMessageSign"
-      | "BtcSign"
-      | "DiffieHellmanExchange"
-      | "PsbtSign"
-      | "PsbtLegacyInputSign"
-      | "PsbtSegwitInputSign"
-      | "PsbtTaprootInputSign"
-      | "TaprootSign"
-      | "Eip712Sign"
-      | "Eip191Sign"
-      | "Eip7702Sign"
-      | "Eth1Sign"
-      | "Eth2Sign"
-      | "SolanaSign"
-      | "SuiSign"
-      | "TendermintSign"
-      | "Stake"
-      | "Unstake"
-      | "PasskeyAuthInit"
-      | "PasskeyAuthComplete"
-      | "OidcAuth"
-      | "Oauth2Twitter"
-      | "OAuth2TokenRefresh"
-      | "EmailOtpAuth"
-      | "SiweInit"
-      | "SiweComplete"
-      | "SiwsInit"
-      | "SiwsComplete"
-      | "TelegramAuth"
-      | "CreateOidcUser"
-      | "DeleteOidcUser"
-      | "DeleteUser"
-      | "CreateEotsNonces"
-      | "EotsSign"
-      | "AuthMigrationIdentityAdd"
-      | "AuthMigrationIdentityRemove"
-      | "AuthMigrationUserUpdate"
-      | "KeyCreated"
-      | "KeyImported"
-      | "InvitationAccept"
-      | "IdpAuthenticate"
-      | "IdpPasswordResetRequest"
-      | "IdpPasswordResetConfirm"
-      | "RpcApi"
-      | "RpcCreateTransaction"
-      | "RpcGetTransaction"
-      | "RpcListTransactions"
-      | "RpcBtcListUtxos"
-      | "RpcRetryTransaction"
-      | "RpcCancelTransaction"
-      | "RpcBinance"
-      | "RpcBybit"
-      | "RpcCoinbase"
-      | "CustomChainRpcCall"
-      | "EsploraApiCall"
-      | "SentryApiCall"
-      | "SentryApiCallPublic"
-      | "MmiJwkSet"
-      | "AttestationJwkSet"
-      | "UserOrgs"
-      | "PublicOrgInfo"
-      | "EmailMyOrgs";
+      | "mmi"
+      | "mmiMessageGet"
+      | "mmiMessageList"
+      | "mmiMessageSign"
+      | "mmiMessageReject"
+      | "mmiMessageDelete"
+      | "aboutMe"
+      | "userResetEmailInit"
+      | "userResetEmailComplete"
+      | "userDeleteTotp"
+      | "userResetTotpInit"
+      | "userResetTotpComplete"
+      | "userVerifyTotp"
+      | "userRegisterFidoInit"
+      | "userRegisterFidoComplete"
+      | "userDeleteFido"
+      | "createProofOidc"
+      | "createProofCubeSigner"
+      | "verifyProof"
+      | "addOidcIdentity"
+      | "removeOidcIdentity"
+      | "listOidcIdentities"
+      | "getOrg"
+      | "updateOrg"
+      | "getOrgExport"
+      | "createOrg"
+      | "listKeysInOrg"
+      | "attestKey"
+      | "getKeyInOrg"
+      | "getKeyByMaterialId"
+      | "listKeyRoles"
+      | "updateKey"
+      | "listHistoricalKeyTx"
+      | "invite"
+      | "cancelInvitation"
+      | "listInvitations"
+      | "listUsersInOrg"
+      | "getUserInOrg"
+      | "getUserInOrgByEmail"
+      | "getUserInOrgByOidc"
+      | "updateUserMembership"
+      | "resetMemberMfa"
+      | "completeResetMemberMfa"
+      | "createRole"
+      | "attestRole"
+      | "getRole"
+      | "listTokenKeys"
+      | "listRoles"
+      | "getRoleKey"
+      | "listRoleKeys"
+      | "listRoleUsers"
+      | "updateRole"
+      | "deleteRole"
+      | "configureEmail"
+      | "getEmailConfig"
+      | "deleteEmailConfig"
+      | "listHistoricalRoleTx"
+      | "createPolicy"
+      | "getPolicy"
+      | "listPolicies"
+      | "deletePolicy"
+      | "updatePolicy"
+      | "invokePolicy"
+      | "getPolicyLogs"
+      | "uploadWasmPolicy"
+      | "getPolicySecrets"
+      | "updatePolicySecrets"
+      | "setPolicySecret"
+      | "deletePolicySecret"
+      | "createPolicyImportKey"
+      | "getPolicyBucket"
+      | "listPolicyBuckets"
+      | "updatePolicyBucket"
+      | "userExportDelete"
+      | "userExportList"
+      | "userExportInit"
+      | "userExportComplete"
+      | "addUserToRole"
+      | "removeUserFromRole"
+      | "mfaApproveCs"
+      | "mfaRejectCs"
+      | "mfaGet"
+      | "mfaList"
+      | "addKeysToRole"
+      | "removeKeyFromRole"
+      | "createRoleToken"
+      | "createSession"
+      | "revokeSession"
+      | "revokeCurrentSession"
+      | "revokeSessions"
+      | "listSessions"
+      | "getSession"
+      | "signerSessionRefresh"
+      | "mfaApproveTotp"
+      | "mfaRejectTotp"
+      | "mfaFidoInit"
+      | "mfaApproveFidoComplete"
+      | "mfaRejectFidoComplete"
+      | "mfaEmailInit"
+      | "mfaEmailComplete"
+      | "cube3signerHeartbeat"
+      | "createContact"
+      | "getContact"
+      | "listContacts"
+      | "deleteContact"
+      | "updateContact"
+      | "lookupContactsByAddress"
+      | "queryMetrics"
+      | "queryAuditLog"
+      | "counts"
+      | "createKey"
+      | "importKey"
+      | "createKeyImportKey"
+      | "deriveKey"
+      | "deleteKey"
+      | "avaSign"
+      | "avaSerializedTxSign"
+      | "babylonRegistration"
+      | "babylonStaking"
+      | "babylonCovSign"
+      | "binanceSign"
+      | "bybitSign"
+      | "coinbaseSign"
+      | "blobSign"
+      | "btcMessageSign"
+      | "btcSign"
+      | "diffieHellmanExchange"
+      | "psbtSign"
+      | "psbtLegacyInputSign"
+      | "psbtSegwitInputSign"
+      | "psbtTaprootInputSign"
+      | "btcTaprootSign"
+      | "eip712Sign"
+      | "eip191Sign"
+      | "eip7702Sign"
+      | "eth1Sign"
+      | "eth2Sign"
+      | "solanaSign"
+      | "suiSign"
+      | "tendermintSign"
+      | "stake"
+      | "unstake"
+      | "passkeyAuthInit"
+      | "passkeyAuthComplete"
+      | "oidcAuth"
+      | "oauth2Twitter"
+      | "oauth2TokenRefresh"
+      | "emailOtpAuth"
+      | "siweInit"
+      | "siweComplete"
+      | "siwsInit"
+      | "siwsComplete"
+      | "telegramAuth"
+      | "createOidcUser"
+      | "deleteOidcUser"
+      | "deleteUser"
+      | "createEotsNonces"
+      | "eotsSign"
+      | "authMigrationIdentityAdd"
+      | "authMigrationIdentityRemove"
+      | "authMigrationUserUpdate"
+      | "keyCreated"
+      | "keyImported"
+      | "invitationAccept"
+      | "idpAuthenticate"
+      | "idpPasswordResetRequest"
+      | "idpPasswordResetConfirm"
+      | "rpcApi"
+      | "rpcCreateTransaction"
+      | "rpcGetTransaction"
+      | "rpcListTransactions"
+      | "rpcBtcListUtxos"
+      | "rpcRetryTransaction"
+      | "rpcCancelTransaction"
+      | "rpcBinance"
+      | "rpcBybit"
+      | "rpcCoinbase"
+      | "customChainRpcCall"
+      | "esploraApiCall"
+      | "sentryApiCall"
+      | "sentryApiCallPublic"
+      | "mmiJwkSet"
+      | "attestationJwkSet"
+      | "userOrgs"
+      | "public_org_info"
+      | "email_my_orgs";
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceAccountInfoParams: components["schemas"]["AccountInfoRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
@@ -3470,6 +3473,11 @@ export interface components {
           /** @enum {string} */
           method: "cs_binanceCoinInfo";
           params: components["schemas"]["BinanceCoinInfoParams"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_binanceSubAccountDepositAddress";
+          params: components["schemas"]["BinanceSubAccountDepositAddressParams"];
         };
     /** @description Response returned by the typed `binance_sign` endpoint. */
     BinanceSignResponse: {
@@ -3495,6 +3503,18 @@ export interface components {
       recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
+    BinanceSubAccountDepositAddressParams: components["schemas"]["SubAccountDepositAddressRequest"] & {
+      dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: float
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * May only be specified in milliseconds, with up to three decimal places of precision.
+       * If omitted, defaults to 10000. Must not be greater than 60000.
+       */
+      recvWindow?: number | null;
+    };
+    /** @description Parameters envelope for all Binance RPC methods. */
     BinanceSubAccountTransferHistoryParams: components["schemas"]["SubAccountTransferHistoryRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
@@ -4198,6 +4218,47 @@ export interface components {
       /** @description Coin symbol the deposit addresses are for (e.g. `USDT`). */
       coin: string;
     };
+    /**
+     * @description Parameters envelope for all Bybit RPC variants whose payload schema is
+     * derived from a `*Request` struct. (`BybitQueryUserParams` and
+     * `BybitQuerySubMembersParams` have no per-variant payload and are defined
+     * directly below.)
+     */
+    BybitQuerySubDepositAddressParams: components["schemas"]["BybitQuerySubDepositAddressRequest"] & {
+      dryRun?: components["schemas"]["BybitDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: int32
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * Specified in milliseconds. If omitted, defaults to 10000.
+       */
+      recvWindow?: number | null;
+    };
+    /** @description Parameters for `GET /v5/asset/deposit/query-sub-member-address`. */
+    BybitQuerySubDepositAddressRequest: {
+      /**
+       * @description Short chain code, as returned in the `chain` field of
+       * [`BybitRpc::QueryCoinInfo`] (e.g. `"ETH"`, `"TRX"`).
+       */
+      chainType: string;
+      /** @description Coin symbol, uppercase only (e.g. `"USDT"`). */
+      coin: string;
+      /** @description UID of the sub-account whose deposit address to fetch. */
+      subMemberId: string;
+    };
+    /**
+     * @description Response of `GET /v5/asset/deposit/query-sub-member-address`.
+     *
+     * NOTE: unlike the master-account `query-address` endpoint (modelled by
+     * [`BybitQueryDepositAddressResponse`]), Bybit returns `chains` here as a
+     * single object rather than an array — the request pins one `chainType`, so
+     * there is only ever one chain to report.
+     */
+    BybitQuerySubDepositAddressResponse: {
+      chains: components["schemas"]["BybitDepositChain"];
+      /** @description Coin symbol the deposit address is for (e.g. `USDT`). */
+      coin: string;
+    };
     /**
      * @description Parameters for [`BybitRpc::QuerySubMembers`].
      *
@@ -4256,6 +4317,56 @@ export interface components {
       vipLevel?: string | null;
       [key: string]: unknown;
     };
+    /**
+     * @description Parameters envelope for all Bybit RPC variants whose payload schema is
+     * derived from a `*Request` struct. (`BybitQueryUserParams` and
+     * `BybitQuerySubMembersParams` have no per-variant payload and are defined
+     * directly below.)
+     */
+    BybitQueryWithdrawAddressParams: components["schemas"]["BybitQueryWithdrawAddressRequest"] & {
+      dryRun?: components["schemas"]["BybitDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: int32
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * Specified in milliseconds. If omitted, defaults to 10000.
+       */
+      recvWindow?: number | null;
+    };
+    /** @description Parameters for `GET /v5/asset/withdraw/query-address`. */
+    BybitQueryWithdrawAddressRequest: {
+      /**
+       * Format: int32
+       * @description Filter by address category: `0` on-chain, `1` internal transfer, `2`
+       * both. Bybit returns every category when omitted.
+       */
+      addressType?: number | null;
+      /** @description Filter by short chain code (e.g. `"ETH"`, `"TRX"`). */
+      chain?: string | null;
+      /**
+       * @description Filter by coin symbol (uppercase). Bybit also accepts the coin's
+       * `baseCoin` here, which matches addresses whitelisted for every chain of
+       * that coin.
+       */
+      coin?: string | null;
+      /** @description Pagination cursor (the `nextPageCursor` from a prior response). */
+      cursor?: string | null;
+      /**
+       * Format: int32
+       * @description Page size, `[1, 50]`. Defaults to 50.
+       */
+      limit?: number | null;
+    };
+    /** @description Response of `GET /v5/asset/withdraw/query-address`. */
+    BybitQueryWithdrawAddressResponse: {
+      /**
+       * @description Opaque cursor to pass back as `cursor` on the next request; absent on
+       * the last page.
+       */
+      nextPageCursor?: string | null;
+      /** @description Whitelisted withdrawal addresses matching the query. */
+      rows: components["schemas"]["BybitWithdrawAddressEntry"][];
+    };
     /**
      * @description Bybit-family RPC methods. Each variant authenticates as the
      * [`KeyType::HmacSha256Bybit`] key in its `params.key_id` (which must carry
@@ -4311,6 +4422,16 @@ export interface components {
           /** @enum {string} */
           method: "cs_bybitUniversalTransferHistory";
           params: components["schemas"]["BybitUniversalTransferHistoryParams"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_bybitQueryWithdrawAddress";
+          params: components["schemas"]["BybitQueryWithdrawAddressParams"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_bybitQuerySubDepositAddress";
+          params: components["schemas"]["BybitQuerySubDepositAddressParams"];
         };
     /** @description Response returned by the typed `bybit_sign` endpoint. */
     BybitSignResponse: {
@@ -4514,6 +4635,41 @@ export interface components {
        */
       transferId: string;
     };
+    /** @description One entry in [`BybitQueryWithdrawAddressResponse::rows`]. */
+    BybitWithdrawAddressEntry: {
+      /** @description The whitelisted destination address. */
+      address: string;
+      /**
+       * Format: int32
+       * @description Address category: `0` on-chain, `1` internal transfer, `2` both.
+       */
+      addressType?: number | null;
+      /** @description Short chain code (e.g. `ETH`, `TRX`). */
+      chain: string;
+      /** @description Coin symbol, uppercase (e.g. `USDT`). */
+      coin: string;
+      /** @description Creation timestamp, in milliseconds since epoch (as a string). */
+      createdAt?: string | null;
+      /** @description User-supplied label for this address-book entry. */
+      remark?: string | null;
+      /**
+       * Format: int32
+       * @description Entry state: `0` normal, `1` newly added (Bybit blocks withdrawals to
+       * it for 24 hours).
+       */
+      status?: number | null;
+      /**
+       * @description Memo / tag for chains that use one (e.g. XRP, EOS). Empty for chains
+       * that don't.
+       */
+      tag?: string | null;
+      /**
+       * Format: int32
+       * @description Whether the address has been verified: `0` unverified, `1` verified.
+       */
+      verified?: number | null;
+      [key: string]: unknown;
+    };
     /** @description One entry in [`BybitWithdrawalsResponse::rows`]. */
     BybitWithdrawEntry: {
       /** @description Withdrawal amount as a decimal string. */
@@ -5237,8 +5393,6 @@ export interface components {
       keys: components["schemas"]["KeyInfo"][];
     };
     CreateOrgRequest: {
-      /** @description Whether to enable metrics for the new organization */
-      metrics_enabled?: boolean;
       /**
        * @description The human readable name of the new organization
        * @example My Cool Org
@@ -6491,6 +6645,7 @@ export interface components {
       | "sign:binance:depositHistory"
       | "sign:binance:listSubAccounts"
       | "sign:binance:coinInfo"
+      | "sign:binance:subAccountDepositAddress"
       | "sign:bybit:*"
       | "sign:bybit:queryUser"
       | "sign:bybit:querySubMembers"
@@ -6502,6 +6657,8 @@ export interface components {
       | "sign:bybit:queryCoinInfo"
       | "sign:bybit:depositHistory"
       | "sign:bybit:universalTransferHistory"
+      | "sign:bybit:queryWithdrawAddress"
+      | "sign:bybit:querySubDepositAddress"
       | "sign:coinbase:*"
       | "sign:coinbase:accounts:list"
       | "sign:coinbase:portfolios:list"
@@ -7448,6 +7605,7 @@ export interface components {
       | components["schemas"]["DepositHistoryResponse"]
       | components["schemas"]["ListSubAccountsResponse"]
       | components["schemas"]["CoinInfoResponse"]
+      | components["schemas"]["SubAccountDepositAddressResponse"]
       | components["schemas"]["BybitQueryUserResponse"]
       | components["schemas"]["BybitQuerySubMembersResponse"]
       | components["schemas"]["BybitQueryCoinsBalanceResponse"]
@@ -7458,6 +7616,8 @@ export interface components {
       | components["schemas"]["BybitCoinInfoResponse"]
       | components["schemas"]["BybitDepositHistoryResponse"]
       | components["schemas"]["BybitUniversalTransferHistoryResponse"]
+      | components["schemas"]["BybitQueryWithdrawAddressResponse"]
+      | components["schemas"]["BybitQuerySubDepositAddressResponse"]
       | components["schemas"]["CoinbaseListAccountsResponse"]
       | components["schemas"]["CoinbaseListPortfoliosResponse"]
       | components["schemas"]["CoinbaseMoveFundsResponse"]
@@ -8179,6 +8339,7 @@ export interface components {
       | "BinanceDepositHistory"
       | "BinanceListSubAccounts"
       | "BinanceCoinInfo"
+      | "BinanceSubAccountDepositAddress"
       | "BlobSign"
       | "BtcMessageSign"
       | "BtcSign"
@@ -8192,6 +8353,8 @@ export interface components {
       | "BybitQueryCoinInfo"
       | "BybitDepositHistory"
       | "BybitUniversalTransferHistory"
+      | "BybitQueryWithdrawAddress"
+      | "BybitQuerySubDepositAddress"
       | "CoinbaseListAccounts"
       | "CoinbaseListPortfolios"
       | "CoinbaseMoveFunds"
@@ -8567,8 +8730,6 @@ export interface components {
          * @description How many 'unstake' calls happened on the day when `last_unstake` was performed.
          */
         last_unstake_day_count: number;
-        /** @description Whether metrics are collected for this org */
-        metrics_enabled?: boolean;
         /**
          * @description The human-readable name for the org
          * @example my_org_name
@@ -10079,7 +10240,13 @@ export interface components {
       acl?: unknown[] | null;
       /** @description The name of the secret. */
       name: string;
+      provenance: components["schemas"]["SecretProvenance"];
     };
+    /**
+     * @description Where a policy secret's value came from.
+     * @enum {string}
+     */
+    SecretProvenance: "Imported" | "Generated";
     /** @description The value of a policy secret. */
     SecretValue: OneOf<
       [
@@ -10101,6 +10268,17 @@ export interface components {
            */
           salt: string;
         },
+        {
+          /**
+           * @description The number of random bytes to generate.
+           * The secret value is the base64 encoding of those bytes, so it is
+           * `4 * ceil(generate_random_bytes / 3)` characters long.
+           *
+           * Must be between 1 and
+           * [MAX_RANDOM_SECRET_BYTES](secrets::MAX_RANDOM_SECRET_BYTES).
+           */
+          generate_random_bytes: number;
+        },
       ]
     >;
     SessionInfo: components["schemas"]["SessionMetadata"] & {
@@ -10557,6 +10735,51 @@ export interface components {
        */
       balances: components["schemas"]["SubAccountAsset"][];
     };
+    /**
+     * @description Parameters for `GET /sapi/v1/capital/deposit/subAddress`.
+     *
+     * Fetches the deposit address for `coin` on the sub-account identified by
+     * `email`. Master-account keys only; use [`DepositRequest`] for the calling
+     * account's own address.
+     */
+    SubAccountDepositAddressRequest: {
+      /**
+       * @description Required only when `network` is `"LIGHTNING"`: the deposit amount that
+       * the returned invoice should encode, as a decimal string.
+       */
+      amount?: string | null;
+      /** @description The asset symbol whose deposit address to fetch (e.g. `"USDT"`, `"BTC"`). */
+      coin: string;
+      /** @description Email of the sub-account whose deposit address to fetch. */
+      email: string;
+      /**
+       * @description Network identifier (e.g. `"BSC"`, `"ETH"`). If omitted, Binance returns
+       * the address on the asset's default network. Valid values are the
+       * networks listed by [`BinanceRpc::CoinInfo`].
+       */
+      network?: string | null;
+    };
+    /**
+     * @description Response returned by `cs_binanceSubAccountDepositAddress`.
+     *
+     * Same shape as [`DepositResponse`], but kept as a distinct type: `tag`/`url`
+     * are modelled as optional here, and [`crate::response::JsonRpcResult`] is
+     * `untagged` + `derive_more::From`, so two variants cannot share a payload
+     * type.
+     */
+    SubAccountDepositAddressResponse: {
+      /** @description The sub-account's deposit address. */
+      address: string;
+      /** @description Asset symbol (echoes the request's `coin` field). */
+      coin: string;
+      /**
+       * @description Secondary address identifier required by some assets (e.g. memo for
+       * XRP, tag for XLM). Empty string when the asset does not use one.
+       */
+      tag?: string | null;
+      /** @description Blockchain explorer URL for `address`. */
+      url?: string | null;
+    };
     /** @description One sub-account entry in [`ListSubAccountsResponse`]. */
     SubAccountInfo: {
       /**
@@ -12978,8 +13201,6 @@ export interface components {
              * @description How many 'unstake' calls happened on the day when `last_unstake` was performed.
              */
             last_unstake_day_count: number;
-            /** @description Whether metrics are collected for this org */
-            metrics_enabled?: boolean;
             /**
              * @description The human-readable name for the org
              * @example my_org_name
@@ -15989,7 +16210,8 @@ export interface operations {
    * List pending invitations
    * @description List pending invitations
    *
-   * Returns all pending (not yet accepted) invitations for the organization.
+   * Returns all pending invitations for the organization, i.e., those that have neither
+   * been accepted nor canceled, and have not expired.
    */
   listInvitations: {
     parameters: {