@cubist-labs/cubesigner-sdk 0.4.280 → 0.4.284

package/dist/src/schema.d.ts

@@ -2354,7 +2354,7 @@ export interface components {
         };
         BabylonCovSignResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * @description The slash-unbonding transaction signatures as an array of hex strings with no 0x prefix
@@ -2503,7 +2503,7 @@ export interface components {
         };
         BabylonRegistrationResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * @description The Babylon address that will receive the staking rewards for this deposit.
@@ -2773,7 +2773,7 @@ export interface components {
         });
         BabylonStakingResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * Format: int64
@@ -2851,7 +2851,7 @@ export interface components {
         /** @enum {string} */
         BadGatewayErrorCode: "Generic" | "CustomChainRpcError" | "EsploraApiError" | "SentryApiError" | "CallWebhookError" | "OAuthProviderError" | "OidcDisoveryFailed" | "OidcIssuerJwkEndpointUnavailable" | "SmtpServerUnavailable";
         /** @enum {string} */
-        BadRequestErrorCode: "GenericBadRequest" | "CannotVoteOnRedeemedRequest" | "PendingOpAlreadyVetoed" | "MultiplePendingOpsReferenced" | "DisallowedAllowRuleReference" | "InvalidPaginationToken" | "InvalidEmail" | "InvalidEmailTemplate" | "QueryMetricsError" | "InvalidTelegramData" | "ValidationError" | "WebhookPolicyTimeoutOutOfBounds" | "WebhookPolicyDisallowedUrlScheme" | "WebhookPolicyDisallowedUrlHost" | "WebhookPolicyDisallowedHeaders" | "ReservedName" | "UserEmailNotConfigured" | "EmailPasswordNotFound" | "PasswordAuthNotAllowedByInvitation" | "OneTimeCodeExpired" | "InvalidBody" | "InvalidJwt" | "InvitationNoLongerValid" | "TokenRequestError" | "InvalidMfaReceipt" | "InvalidMfaPolicyCount" | "InvalidMfaPolicyNumAuthFactors" | "InvalidMfaPolicyNumAllowedApprovers" | "InvalidMfaPolicyGracePeriodTooLong" | "InvalidBabylonStakingPolicyParams" | "InvalidSuiTxReceiversEmptyAllowlist" | "InvalidBtcTxReceiversEmptyAllowlist" | "InvalidRequireRoleSessionAllowlist" | "InvalidCreateKeyCount" | "InvalidDiffieHellmanCount" | "OrgInviteExistingUser" | "OrgUserAlreadyExists" | "OrgNameTaken" | "KwkNotFoundInRegion" | "OrgIsNotOrgExport" | "RoleNameTaken" | "PolicyNameTaken" | "NameTaken" | "ContactNameInvalid" | "ContactAddressesInvalid" | "ContactLabelInvalid" | "ContactModified" | "PolicyNotFound" | "PolicyVersionNotFound" | "PolicyRuleDisallowedByType" | "PolicyTypeDisallowed" | "PolicyDuplicateError" | "PolicyStillAttached" | "PolicyModified" | "PolicyNotAttached" | "AddKeyToRoleCountTooHigh" | "InvalidKeyId" | "InvalidTimeLockAlreadyInThePast" | "InvalidRestrictedScopes" | "InvalidUpdate" | "InvalidMetadataLength" | "InvalidLength" | "InvalidKeyMaterialId" | "KeyNotFound" | "SiweChallengeNotFound" | "SiweInvalidRequest" | "SiwsChallengeNotFound" | "SiwsInvalidRequest" | "UserExportDerivedKey" | "UserExportPublicKeyInvalid" | "NistP256PublicKeyInvalid" | "UnableToAccessSmtpRelay" | "UserExportInProgress" | "RoleNotFound" | "InvalidRoleNameOrId" | "InvalidMfaReceiptOrgIdMissing" | "InvalidMfaReceiptInvalidOrgId" | "MfaRequestNotFound" | "InvalidKeyType" | "InvalidPropertiesForKeyType" | "MismatchedKeyPropertiesPatch" | "MissingBinanceApiKey" | "MissingBybitApiKey" | "MissingCoinbaseApiKey" | "BinanceKeyMasterMismatch" | "BybitAccountMismatch" | "InvalidKeyMaterial" | "InvalidHexValue" | "InvalidBase32Value" | "InvalidBase58Value" | "InvalidBase64Value" | "InvalidSs58Value" | "InvalidForkVersionLength" | "InvalidEthAddress" | "InvalidStellarAddress" | "InvalidOrgNameOrId" | "InvalidUpdateOrgRequestDisallowedMfaType" | "InvalidUpdateOrgRequestEmptyAllowedMfaTypes" | "EmailOtpDelayTooShortForRegisterMfa" | "InvalidStakeDeposit" | "InvalidBlobSignRequest" | "InvalidDiffieHellmanRequest" | "InvalidSolanaSignRequest" | "InvalidEip712SignRequest" | "InvalidEip7702SignRequest" | "OnlySpecifyOne" | "IncompatibleParams" | "NoOidcDataInProof" | "InvalidEvmSignRequest" | "InvalidEth2SignRequest" | "InvalidDeriveKeyRequest" | "InvalidStakingAmount" | "CustomStakingAmountNotAllowedForWrapperContract" | "InvalidUnstakeRequest" | "InvalidCreateUserRequest" | "UserAlreadyExists" | "IdpUserAlreadyExists" | "CognitoUserAlreadyOrgMember" | "UserNotFound" | "UserWithEmailNotFound" | "PolicyKeyMismatch" | "EmptyScopes" | "InvalidScopesForRoleSession" | "InvalidLifetime" | "NoSingleKeyForUser" | "InvalidOrgPolicyRule" | "SourceIpAllowlistEmpty" | "LimitWindowTooLong" | "Erc20ContractDisallowed" | "EmptyRuleError" | "PolicyFieldValidationError" | "OptionalListEmpty" | "MultipleExclusiveFieldsProvided" | "DuplicateFieldEntry" | "InvalidRange" | "InvalidOrgPolicyRepeatedRule" | "InvalidSuiTransaction" | "SuiSenderMismatch" | "AvaSignHashError" | "AvaSignError" | "BtcSegwitHashError" | "BtcTaprootHashError" | "BtcSignError" | "TaprootSignError" | "Eip712SignError" | "InvalidMemberRoleInUserAdd" | "InvalidMemberRoleInRecipientAdd" | "ThirdPartyUserAlreadyExists" | "OidcIdentityAlreadyExists" | "UserAlreadyHasIdentity" | "ThirdPartyUserNotFound" | "DeleteOidcUserError" | "DeleteUserError" | "SessionRoleMismatch" | "InvalidOidcToken" | "InvalidOidcIdentity" | "OidcIssuerUnsupported" | "OidcIssuerNotAllowed" | "OidcIssuerNoApplicableJwk" | "FidoKeyAlreadyRegistered" | "FidoKeySignCountTooLow" | "FidoVerificationFailed" | "FidoChallengeMfaMismatch" | "UnsupportedLegacyCognitoSession" | "InvalidIdentityProof" | "PaginationDataExpired" | "ExistingKeysViolateExclusiveKeyAccess" | "ExportDelayTooShort" | "ExportWindowTooLong" | "InvalidTotpFailureLimit" | "InvalidEip191SignRequest" | "CannotResendUserInvitation" | "InvalidNotificationEndpointCount" | "CannotDeletePendingSubscription" | "InvalidNotificationUrlProtocol" | "EmptyOneOfOrgEventFilter" | "EmptyAllExceptOrgEventFilter" | "InvalidTapNodeHash" | "InvalidOneTimeCode" | "MessageNotFound" | "MessageAlreadySigned" | "MessageRejected" | "MessageReplaced" | "InvalidMessageType" | "EmptyAddress" | "InvalidEth2SigningPolicySlotRange" | "InvalidEth2SigningPolicyEpochRange" | "InvalidEth2SigningPolicyTimestampRange" | "InvalidEth2SigningPolicyOverlappingRule" | "RpcUrlMissing" | "MmiChainIdMissing" | "EthersInvalidRpcUrl" | "EthersGetTransactionCountError" | "InvalidPassword" | "BabylonStakingFeePlusDustOverflow" | "BabylonStaking" | "BabylonStakingIncorrectKey" | "BabylonStakingSegwitNonDeposit" | "BabylonStakingRegistrationRequiresTaproot" | "PsbtSigning" | "TooManyResets" | "TooManyRequests" | "TooManyFailedLogins" | "BadBtcMessageSignP2shFlag" | "InvalidTendermintRequest" | "PolicyVersionMaxReached" | "PolicyVersionInvalid" | "PolicySecretLimitReached" | "PolicySecretTooLarge" | "InvalidRandomSecretLength" | "InvalidImportKey" | "AlienOwnerInvalid" | "EmptyUpdateRequest" | "InvalidPolicyReference" | "PolicyEngineDisabled" | "InvalidWasmPolicy" | "CelProgramTooLarge" | "InvalidPolicy" | "RedundantDerivationPath" | "ImportKeyMissing" | "InvalidAbiMethods" | "BabylonCovSign" | "InvalidPolicyLogsRequest" | "UserProfileMigrationMultipleEntries" | "UserProfileMigrationTooManyItems" | "InputTooShort" | "InvalidTweakLength" | "InvalidCustomChains" | "InvalidRpcRequest" | "InvalidAclEntry";
+        BadRequestErrorCode: "GenericBadRequest" | "CannotVoteOnRedeemedRequest" | "PendingOpAlreadyVetoed" | "MultiplePendingOpsReferenced" | "DisallowedAllowRuleReference" | "InvalidPaginationToken" | "InvalidEmail" | "InvalidEmailTemplate" | "QueryMetricsError" | "InvalidTelegramData" | "ValidationError" | "WebhookPolicyTimeoutOutOfBounds" | "WebhookPolicyDisallowedUrlScheme" | "WebhookPolicyDisallowedUrlHost" | "WebhookPolicyDisallowedHeaders" | "ReservedName" | "UserEmailNotConfigured" | "EmailPasswordNotFound" | "PasswordAuthNotAllowedByInvitation" | "OneTimeCodeExpired" | "InvalidBody" | "InvalidJwt" | "InvitationNoLongerValid" | "TokenRequestError" | "InvalidMfaReceipt" | "InvalidMfaPolicyCount" | "InvalidMfaPolicyNumAuthFactors" | "InvalidMfaPolicyNumAllowedApprovers" | "InvalidMfaPolicyGracePeriodTooLong" | "InvalidBabylonStakingPolicyParams" | "InvalidSuiTxReceiversEmptyAllowlist" | "InvalidBtcTxReceiversEmptyAllowlist" | "InvalidRequireRoleSessionAllowlist" | "InvalidCreateKeyCount" | "InvalidDiffieHellmanCount" | "OrgInviteExistingUser" | "OrgUserAlreadyExists" | "OrgNameTaken" | "KwkNotFoundInRegion" | "OrgIsNotOrgExport" | "RoleNameTaken" | "PolicyNameTaken" | "NameTaken" | "ContactNameInvalid" | "ContactAddressesInvalid" | "ContactLabelInvalid" | "ContactModified" | "PolicyNotFound" | "PolicyVersionNotFound" | "PolicyRuleDisallowedByType" | "PolicyTypeDisallowed" | "PolicyDuplicateError" | "PolicyStillAttached" | "PolicyModified" | "PolicyNotAttached" | "AddKeyToRoleCountTooHigh" | "InvalidKeyId" | "InvalidTimeLockAlreadyInThePast" | "InvalidRestrictedScopes" | "InvalidUpdate" | "InvalidMetadataLength" | "InvalidLength" | "InvalidKeyMaterialId" | "KeyNotFound" | "SiweChallengeNotFound" | "SiweInvalidRequest" | "SiwsChallengeNotFound" | "SiwsInvalidRequest" | "UserExportDerivedKey" | "UserExportPublicKeyInvalid" | "NistP256PublicKeyInvalid" | "UnableToAccessSmtpRelay" | "UserExportInProgress" | "RoleNotFound" | "InvalidRoleNameOrId" | "InvalidMfaReceiptOrgIdMissing" | "InvalidMfaReceiptInvalidOrgId" | "MfaRequestNotFound" | "InvalidKeyType" | "InvalidPropertiesForKeyType" | "MismatchedKeyPropertiesPatch" | "MissingBinanceApiKey" | "MissingBybitApiKey" | "MissingCoinbaseApiKey" | "BinanceKeyMasterMismatch" | "InvalidKeyMaterial" | "InvalidHexValue" | "InvalidBase32Value" | "InvalidBase58Value" | "InvalidBase64Value" | "InvalidSs58Value" | "InvalidForkVersionLength" | "InvalidEthAddress" | "InvalidStellarAddress" | "InvalidOrgNameOrId" | "InvalidUpdateOrgRequestDisallowedMfaType" | "InvalidUpdateOrgRequestEmptyAllowedMfaTypes" | "EmailOtpDelayTooShortForRegisterMfa" | "InvalidStakeDeposit" | "InvalidBlobSignRequest" | "InvalidDiffieHellmanRequest" | "InvalidSolanaSignRequest" | "InvalidEip712SignRequest" | "InvalidEip7702SignRequest" | "OnlySpecifyOne" | "IncompatibleParams" | "NoOidcDataInProof" | "InvalidEvmSignRequest" | "InvalidEth2SignRequest" | "InvalidDeriveKeyRequest" | "InvalidStakingAmount" | "CustomStakingAmountNotAllowedForWrapperContract" | "InvalidUnstakeRequest" | "InvalidCreateUserRequest" | "UserAlreadyExists" | "IdpUserAlreadyExists" | "CognitoUserAlreadyOrgMember" | "UserNotFound" | "UserWithEmailNotFound" | "PolicyKeyMismatch" | "EmptyScopes" | "InvalidScopesForRoleSession" | "InvalidLifetime" | "NoSingleKeyForUser" | "InvalidOrgPolicyRule" | "SourceIpAllowlistEmpty" | "LimitWindowTooLong" | "Erc20ContractDisallowed" | "EmptyRuleError" | "PolicyFieldValidationError" | "OptionalListEmpty" | "MultipleExclusiveFieldsProvided" | "DuplicateFieldEntry" | "InvalidRange" | "InvalidOrgPolicyRepeatedRule" | "InvalidSuiTransaction" | "SuiSenderMismatch" | "AvaSignHashError" | "AvaSignError" | "BtcSegwitHashError" | "BtcTaprootHashError" | "BtcSignError" | "TaprootSignError" | "Eip712SignError" | "InvalidMemberRoleInUserAdd" | "InvalidMemberRoleInRecipientAdd" | "ThirdPartyUserAlreadyExists" | "OidcIdentityAlreadyExists" | "UserAlreadyHasIdentity" | "ThirdPartyUserNotFound" | "DeleteOidcUserError" | "DeleteUserError" | "SessionRoleMismatch" | "InvalidOidcToken" | "InvalidOidcIdentity" | "OidcIssuerUnsupported" | "OidcIssuerNotAllowed" | "OidcIssuerNoApplicableJwk" | "FidoKeyAlreadyRegistered" | "FidoKeySignCountTooLow" | "FidoVerificationFailed" | "FidoChallengeMfaMismatch" | "UnsupportedLegacyCognitoSession" | "InvalidIdentityProof" | "PaginationDataExpired" | "ExistingKeysViolateExclusiveKeyAccess" | "ExportDelayTooShort" | "ExportWindowTooLong" | "InvalidTotpFailureLimit" | "InvalidEip191SignRequest" | "CannotResendUserInvitation" | "InvalidNotificationEndpointCount" | "CannotDeletePendingSubscription" | "InvalidNotificationUrlProtocol" | "EmptyOneOfOrgEventFilter" | "EmptyAllExceptOrgEventFilter" | "InvalidTapNodeHash" | "InvalidOneTimeCode" | "MessageNotFound" | "MessageAlreadySigned" | "MessageRejected" | "MessageReplaced" | "InvalidMessageType" | "EmptyAddress" | "InvalidEth2SigningPolicySlotRange" | "InvalidEth2SigningPolicyEpochRange" | "InvalidEth2SigningPolicyTimestampRange" | "InvalidEth2SigningPolicyOverlappingRule" | "RpcUrlMissing" | "MmiChainIdMissing" | "EthersInvalidRpcUrl" | "EthersGetTransactionCountError" | "InvalidPassword" | "BabylonStakingFeePlusDustOverflow" | "BabylonStaking" | "BabylonStakingIncorrectKey" | "BabylonStakingSegwitNonDeposit" | "BabylonStakingRegistrationRequiresTaproot" | "PsbtSigning" | "TooManyResets" | "TooManyRequests" | "TooManyFailedLogins" | "BadBtcMessageSignP2shFlag" | "InvalidTendermintRequest" | "PolicyVersionMaxReached" | "PolicyVersionInvalid" | "PolicySecretLimitReached" | "PolicySecretTooLarge" | "InvalidRandomSecretLength" | "InvalidImportKey" | "AlienOwnerInvalid" | "EmptyUpdateRequest" | "InvalidPolicyReference" | "PolicyEngineDisabled" | "InvalidWasmPolicy" | "CelProgramTooLarge" | "InvalidPolicy" | "RedundantDerivationPath" | "ImportKeyMissing" | "InvalidAbiMethods" | "BabylonCovSign" | "InvalidPolicyLogsRequest" | "UserProfileMigrationMultipleEntries" | "UserProfileMigrationTooManyItems" | "InputTooShort" | "InvalidTweakLength" | "InvalidCustomChains" | "InvalidRpcRequest" | "InvalidAclEntry";
         BillingArgs: {
             billing_org: components["schemas"]["Id"];
             event_type: components["schemas"]["BillingEvent"];
@@ -2868,7 +2868,7 @@ export interface components {
          * @description Billing event types.
          * @enum {string}
          */
-        BillingEvent: "mmi" | "mmiMessageGet" | "mmiMessageList" | "mmiMessageSign" | "mmiMessageReject" | "mmiMessageDelete" | "aboutMe" | "userResetEmailInit" | "userResetEmailComplete" | "userDeleteTotp" | "userResetTotpInit" | "userResetTotpComplete" | "userVerifyTotp" | "userRegisterFidoInit" | "userRegisterFidoComplete" | "userDeleteFido" | "createProofOidc" | "createProofCubeSigner" | "verifyProof" | "addOidcIdentity" | "removeOidcIdentity" | "listOidcIdentities" | "getOrg" | "updateOrg" | "getOrgExport" | "createOrg" | "listKeysInOrg" | "attestKey" | "getKeyInOrg" | "getKeyByMaterialId" | "listKeyRoles" | "updateKey" | "listHistoricalKeyTx" | "invite" | "cancelInvitation" | "listInvitations" | "listUsersInOrg" | "getUserInOrg" | "getUserInOrgByEmail" | "getUserInOrgByOidc" | "updateUserMembership" | "resetMemberMfa" | "completeResetMemberMfa" | "createRole" | "attestRole" | "getRole" | "listTokenKeys" | "listRoles" | "getRoleKey" | "listRoleKeys" | "listRoleUsers" | "updateRole" | "deleteRole" | "configureEmail" | "getEmailConfig" | "deleteEmailConfig" | "listHistoricalRoleTx" | "createPolicy" | "getPolicy" | "listPolicies" | "deletePolicy" | "updatePolicy" | "invokePolicy" | "getPolicyLogs" | "uploadWasmPolicy" | "getPolicySecrets" | "updatePolicySecrets" | "setPolicySecret" | "deletePolicySecret" | "createPolicyImportKey" | "getPolicyBucket" | "listPolicyBuckets" | "updatePolicyBucket" | "userExportDelete" | "userExportList" | "userExportInit" | "userExportComplete" | "addUserToRole" | "removeUserFromRole" | "mfaApproveCs" | "mfaRejectCs" | "mfaGet" | "mfaList" | "addKeysToRole" | "removeKeyFromRole" | "createRoleToken" | "createSession" | "revokeSession" | "revokeCurrentSession" | "revokeSessions" | "listSessions" | "getSession" | "signerSessionRefresh" | "mfaApproveTotp" | "mfaRejectTotp" | "mfaFidoInit" | "mfaApproveFidoComplete" | "mfaRejectFidoComplete" | "mfaEmailInit" | "mfaEmailComplete" | "cube3signerHeartbeat" | "createContact" | "getContact" | "listContacts" | "deleteContact" | "updateContact" | "lookupContactsByAddress" | "queryMetrics" | "queryAuditLog" | "counts" | "createKey" | "importKey" | "createKeyImportKey" | "deriveKey" | "deleteKey" | "avaSign" | "avaSerializedTxSign" | "babylonRegistration" | "babylonStaking" | "babylonCovSign" | "binanceSign" | "bybitSign" | "coinbaseSign" | "blobSign" | "btcMessageSign" | "btcSign" | "diffieHellmanExchange" | "psbtSign" | "psbtLegacyInputSign" | "psbtSegwitInputSign" | "psbtTaprootInputSign" | "btcTaprootSign" | "eip712Sign" | "eip191Sign" | "eip7702Sign" | "eth1Sign" | "eth2Sign" | "solanaSign" | "suiSign" | "tendermintSign" | "stake" | "unstake" | "passkeyAuthInit" | "passkeyAuthComplete" | "oidcAuth" | "oauth2Twitter" | "oauth2TokenRefresh" | "emailOtpAuth" | "siweInit" | "siweComplete" | "siwsInit" | "siwsComplete" | "telegramAuth" | "createOidcUser" | "deleteOidcUser" | "deleteUser" | "createEotsNonces" | "eotsSign" | "authMigrationIdentityAdd" | "authMigrationIdentityRemove" | "authMigrationUserUpdate" | "keyCreated" | "keyImported" | "invitationAccept" | "idpAuthenticate" | "idpPasswordResetRequest" | "idpPasswordResetConfirm" | "rpcApi" | "rpcCreateTransaction" | "rpcGetTransaction" | "rpcListTransactions" | "rpcBtcListUtxos" | "rpcRetryTransaction" | "rpcCancelTransaction" | "rpcBinance" | "rpcBybit" | "rpcCoinbase" | "customChainRpcCall" | "esploraApiCall" | "sentryApiCall" | "sentryApiCallPublic" | "mmiJwkSet" | "attestationJwkSet" | "userOrgs" | "public_org_info" | "email_my_orgs";
+        BillingEvent: "mmi" | "mmiMessageGet" | "mmiMessageList" | "mmiMessageSign" | "mmiMessageReject" | "mmiMessageDelete" | "aboutMe" | "userResetEmailInit" | "userResetEmailComplete" | "userDeleteTotp" | "userResetTotpInit" | "userResetTotpComplete" | "userVerifyTotp" | "userRegisterFidoInit" | "userRegisterFidoComplete" | "userDeleteFido" | "createProofOidc" | "createProofCubeSigner" | "verifyProof" | "addOidcIdentity" | "removeOidcIdentity" | "listOidcIdentities" | "getOrg" | "updateOrg" | "getOrgExport" | "createOrg" | "listKeysInOrg" | "attestKey" | "getKeyInOrg" | "getKeyByMaterialId" | "listKeyRoles" | "updateKey" | "listHistoricalKeyTx" | "invite" | "cancelInvitation" | "listInvitations" | "listUsersInOrg" | "getUserInOrg" | "getUserInOrgByEmail" | "getUserInOrgByOidc" | "updateUserMembership" | "resetMemberMfa" | "completeResetMemberMfa" | "createRole" | "attestRole" | "getRole" | "listTokenKeys" | "listRoles" | "getRoleKey" | "listRoleKeys" | "listRoleUsers" | "updateRole" | "deleteRole" | "configureEmail" | "getEmailConfig" | "deleteEmailConfig" | "listHistoricalRoleTx" | "createPolicy" | "getPolicy" | "listPolicies" | "deletePolicy" | "updatePolicy" | "invokePolicy" | "getPolicyLogs" | "uploadWasmPolicy" | "getPolicySecrets" | "updatePolicySecrets" | "setPolicySecret" | "deletePolicySecret" | "createPolicyImportKey" | "getPolicyBucket" | "listPolicyBuckets" | "updatePolicyBucket" | "userExportDelete" | "userExportList" | "userExportInit" | "userExportComplete" | "addUserToRole" | "removeUserFromRole" | "mfaApproveCs" | "mfaRejectCs" | "mfaGet" | "mfaList" | "addKeysToRole" | "removeKeyFromRole" | "createRoleToken" | "createSession" | "revokeSession" | "revokeCurrentSession" | "revokeSessions" | "listSessions" | "getSession" | "signerSessionRefresh" | "mfaApproveTotp" | "mfaRejectTotp" | "mfaFidoInit" | "mfaApproveFidoComplete" | "mfaRejectFidoComplete" | "mfaEmailInit" | "mfaEmailComplete" | "cube3signerHeartbeat" | "createContact" | "getContact" | "listContacts" | "deleteContact" | "updateContact" | "lookupContactsByAddress" | "queryMetrics" | "queryAuditLog" | "counts" | "createKey" | "importKey" | "createKeyImportKey" | "deriveKey" | "deleteKey" | "avaSign" | "avaSerializedTxSign" | "babylonRegistration" | "babylonStaking" | "babylonCovSign" | "binanceSign" | "bybitSign" | "coinbaseSign" | "blobSign" | "btcMessageSign" | "btcSign" | "diffieHellmanExchange" | "psbtSign" | "psbtLegacyInputSign" | "psbtSegwitInputSign" | "psbtTaprootInputSign" | "btcTaprootSign" | "eip712Sign" | "eip191Sign" | "eip7702Sign" | "eth1Sign" | "eth2Sign" | "solanaSign" | "suiSign" | "tendermintSign" | "stake" | "unstake" | "passkeyAuthInit" | "passkeyAuthComplete" | "oidcAuth" | "oauth2Twitter" | "oauth2TokenRefresh" | "emailOtpAuth" | "siweInit" | "siweComplete" | "siwsInit" | "siwsComplete" | "telegramAuth" | "createOidcUser" | "deleteOidcUser" | "deleteUser" | "createEotsNonces" | "eotsSign" | "authMigrationIdentityAdd" | "authMigrationIdentityRemove" | "authMigrationUserUpdate" | "keyCreated" | "keyImported" | "invitationAccept" | "idpAuthenticate" | "idpPasswordResetRequest" | "idpPasswordResetConfirm" | "rpcApi" | "rpcCreateTransaction" | "rpcGetTransaction" | "rpcListTransactions" | "rpcBtcListUtxos" | "rpcRetryTransaction" | "rpcCancelTransaction" | "rpcDeleteTransaction" | "rpcBinance" | "rpcBybit" | "rpcCoinbase" | "customChainRpcCall" | "esploraApiCall" | "sentryApiCall" | "sentryApiCallPublic" | "mmiJwkSet" | "attestationJwkSet" | "userOrgs" | "public_org_info" | "email_my_orgs";
         /** @description Parameters envelope for all Binance RPC methods. */
         BinanceAccountInfoParams: components["schemas"]["AccountInfoRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
@@ -3024,11 +3024,15 @@ export interface components {
             /** @enum {string} */
             method: "cs_binanceSubAccountDepositAddress";
             params: components["schemas"]["BinanceSubAccountDepositAddressParams"];
+        } | {
+            /** @enum {string} */
+            method: "cs_binanceSubAccountDepositHistory";
+            params: components["schemas"]["BinanceSubAccountDepositHistoryParams"];
         };
         /** @description Response returned by the typed `binance_sign` endpoint. */
         BinanceSignResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * @description The full signed query string, ready to be submitted to Binance.
@@ -3061,6 +3065,18 @@ export interface components {
             recvWindow?: number | null;
         };
         /** @description Parameters envelope for all Binance RPC methods. */
+        BinanceSubAccountDepositHistoryParams: components["schemas"]["SubAccountDepositHistoryRequest"] & {
+            dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
+            keyId: components["schemas"]["Id"];
+            /**
+             * Format: float
+             * @description Optional "receive window", i.e., for how long the request stays valid.
+             * May only be specified in milliseconds, with up to three decimal places of precision.
+             * If omitted, defaults to 10000. Must not be greater than 60000.
+             */
+            recvWindow?: number | null;
+        };
+        /** @description Parameters envelope for all Binance RPC methods. */
         BinanceSubAccountTransferHistoryParams: components["schemas"]["SubAccountTransferHistoryRequest"] & {
             dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
             keyId: components["schemas"]["Id"];
@@ -3300,7 +3316,7 @@ export interface components {
         /** @description BTC message signing response */
         BtcMessageSignResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /** @description The base64-encoded signature in BIP137 format. */
             sig: string;
@@ -3466,6 +3482,11 @@ export interface components {
             org_id: components["schemas"]["Id"];
             owner: components["schemas"]["Id"];
         };
+        /**
+         * @description Different Bybit account kinds.
+         * @enum {string}
+         */
+        BybitAccountKind: "Main" | "Sub";
         /**
          * @description Wire-format patch payload for [`KeyProperties::BybitApi`].
          *
@@ -3473,6 +3494,7 @@ export interface components {
          * leaves the existing value alone, a JSON `null` clears it, and a value sets it.
          */
         BybitApiPropertiesPatch: {
+            account_kind?: components["schemas"]["BybitAccountKind"] | null;
             /** @description The Bybit-issued API key string. Encrypted server-side before storage. */
             api_key?: string | null;
             /** @description Arbitrary label. Useful for storing the corresponding API key label on the Bybit side. */
@@ -3940,6 +3962,10 @@ export interface components {
             /** @enum {string} */
             method: "cs_bybitDepositHistory";
             params: components["schemas"]["BybitDepositHistoryParams"];
+        } | {
+            /** @enum {string} */
+            method: "cs_bybitSubDepositHistory";
+            params: components["schemas"]["BybitSubDepositHistoryParams"];
         } | {
             /** @enum {string} */
             method: "cs_bybitUniversalTransferHistory";
@@ -3956,7 +3982,7 @@ export interface components {
         /** @description Response returned by the typed `bybit_sign` endpoint. */
         BybitSignResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * @description The Bybit-bound payload (URL-encoded query for GET, JSON body for
@@ -3981,6 +4007,67 @@ export interface components {
              */
             timestamp_ms: number;
         };
+        /**
+         * @description Parameters envelope for all Bybit RPC variants whose payload schema is
+         * derived from a `*Request` struct. (`BybitQueryUserParams` and
+         * `BybitQuerySubMembersParams` have no per-variant payload and are defined
+         * directly below.)
+         */
+        BybitSubDepositHistoryParams: components["schemas"]["BybitSubDepositHistoryRequest"] & {
+            dryRun?: components["schemas"]["BybitDryRunMode"] | null;
+            keyId: components["schemas"]["Id"];
+            /**
+             * Format: int32
+             * @description Optional "receive window", i.e., for how long the request stays valid.
+             * Specified in milliseconds. If omitted, defaults to 10000.
+             */
+            recvWindow?: number | null;
+        };
+        /**
+         * @description Parameters for `GET /v5/asset/deposit/query-sub-member-record`.
+         *
+         * Master-only: returns the deposit records of the sub-account named by
+         * `sub_member_id`. Bybit exposes these to the parent account's credentials
+         * alone; a sub-account key reads its own deposits through
+         * [`BybitDepositHistoryRequest`] instead.
+         *
+         * By default, queries records from the last 30 days; otherwise, `endTime` -
+         * `startTime` must be less than 30 days.
+         */
+        BybitSubDepositHistoryRequest: {
+            /** @description Filter by coin symbol (uppercase). */
+            coin?: string | null;
+            /** @description Pagination cursor (the `nextPageCursor` from a prior response). */
+            cursor?: string | null;
+            /**
+             * Format: int64
+             * @description End timestamp (ms since epoch).
+             */
+            endTime?: number | null;
+            /** @description Filter by Bybit-internal deposit id. */
+            id?: string | null;
+            /**
+             * Format: int32
+             * @description Page size, `[1, 50]`. Defaults to 50.
+             */
+            limit?: number | null;
+            /**
+             * Format: int64
+             * @description Start timestamp (ms since epoch). The span between `start_time` and
+             * `end_time` must not exceed 30 days.
+             */
+            startTime?: number | null;
+            /**
+             * @description UID of the sub-account whose deposit history to fetch. Bybit requires
+             * this, so there is no "calling account" fallback on this endpoint.
+             */
+            subMemberId: string;
+            /**
+             * @description Filter by on-chain transaction id. Data before 2024-01-01 is not
+             * queryable via this field.
+             */
+            txID?: string | null;
+        };
         /** @description One entry in [`BybitQuerySubMembersResponse::sub_members`]. */
         BybitSubMember: {
             /**
@@ -4295,20 +4382,51 @@ export interface components {
              */
             recvWindow?: number | null;
         };
-        /** @description Parameters for `GET /v5/asset/withdraw/query-record`. */
+        /**
+         * @description Parameters for `GET /v5/asset/withdraw/query-record`.
+         *
+         * Master-only: Bybit answers this endpoint for the master UID's API key
+         * alone, and has no sub-account equivalent, because sub-accounts cannot
+         * withdraw to an external address.
+         *
+         * By default, queries records from the last 30 days; otherwise, `endTime` -
+         * `startTime` must be less than 30 days.
+         */
         BybitWithdrawalsRequest: {
             /** @description Filter by coin symbol. */
             coin?: string | null;
+            /** @description Pagination cursor (the `nextPageCursor` from a prior response). */
+            cursor?: string | null;
+            /**
+             * Format: int64
+             * @description End timestamp (ms since epoch).
+             */
+            endTime?: number | null;
             /**
              * Format: int32
-             * @description Page size.
+             * @description Page size, `[1, 50]`. Defaults to 50.
              */
             limit?: number | null;
+            /**
+             * Format: int64
+             * @description Start timestamp (ms since epoch). The span between `start_time` and
+             * `end_time` must not exceed 30 days.
+             */
+            startTime?: number | null;
+            /** @description Filter by on-chain transaction id. */
+            txID?: string | null;
             /**
              * @description Filter by Bybit-assigned withdrawal id (the `id` returned by
              * [`BybitRpc::Withdraw`]).
              */
             withdrawID?: string | null;
+            /**
+             * Format: int32
+             * @description Which kinds of withdrawal to return: `0` on-chain only, `1` off-chain
+             * (internal Bybit-to-Bybit) only, `2` both. Bybit defaults to `0`, so
+             * internal transfers out are invisible unless this is set to `1` or `2`.
+             */
+            withdrawType?: number | null;
         };
         /** @description Response of `GET /v5/asset/withdraw/query-record`. */
         BybitWithdrawalsResponse: {
@@ -4320,10 +4438,20 @@ export interface components {
             /** @description Withdrawal records matching the query. */
             rows: components["schemas"]["BybitWithdrawEntry"][];
         };
+        /** @description Return type of [proxy::call_webhook] */
+        CallWebhookResult: {
+            /** @description The response body */
+            body: string;
+            /**
+             * Format: int32
+             * @description The HTTP status of the response
+             */
+            status: number;
+        };
         CancelInvitationRequest: {
             email: components["schemas"]["Email"];
         };
-        /** @description Parameters for the [`cs_cancelTransaction`](RpcMethod::CancelTransaction) method. */
+        /** @description Parameters for the [`cs_transactionCancel`](RpcMethod::CancelTransaction) method. */
         CancelTransactionRequest: {
             /** @description The transaction id. */
             id: string;
@@ -4643,7 +4771,7 @@ export interface components {
         /** @description Response returned by the typed `coinbase_sign` endpoint. */
         CoinbaseSignResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * @description The signed JWT, ready to be sent in `Authorization: Bearer <jwt>` to
@@ -4709,6 +4837,11 @@ export interface components {
                 [key: string]: number;
             };
         };
+        /** @description Evaluation of a single if-then-else conditional. */
+        Conditional: {
+            if: components["schemas"]["PolicyEvalTree"];
+            then?: components["schemas"]["PolicyEvalTree"] | null;
+        };
         ConfigureEmailRequest: {
             auth: {
                 smtp: string;
@@ -4795,6 +4928,11 @@ export interface components {
          */
         ContactLabel: "cubist:erc20_token" | "cubist:spl_token";
         CreateAndUpdateKeyProperties: {
+            /**
+             * @description Set this key's access-control entries.
+             * For an existing key, this overwrites the current acl, if any.
+             */
+            acl?: unknown;
             edit_policy?: components["schemas"]["EditPolicy"] | null;
             /**
              * @description Set this key's metadata. If this value is `null`, the metadata is erased. If the field is
@@ -5027,7 +5165,7 @@ export interface components {
              */
             scopes?: components["schemas"]["Scope"][] | null;
         };
-        /** @description Parameters for the [`cs_createTransaction`](RpcMethod::CreateTransaction) method. */
+        /** @description Parameters for the [`cs_transactionCreate`](RpcMethod::CreateTransaction) method. */
         CreateTransactionRequest: {
             type: "CreateTransactionRequest";
         } & Omit<components["schemas"]["CreateEvmTransactionRequest"], "type"> & {
@@ -5046,23 +5184,27 @@ export interface components {
         /** @description Core RPC methods (transaction CRUD). */
         CsRpc: {
             /** @enum {string} */
-            method: "cs_createTransaction";
+            method: "cs_transactionCreate";
             params: components["schemas"]["CreateTransactionRequest"];
         } | {
             /** @enum {string} */
-            method: "cs_retryTransaction";
+            method: "cs_transactionRetry";
             params: components["schemas"]["RetryTransactionRequest"];
         } | {
             /** @enum {string} */
-            method: "cs_cancelTransaction";
+            method: "cs_transactionCancel";
             params: components["schemas"]["CancelTransactionRequest"];
         } | {
             /** @enum {string} */
-            method: "cs_getTransaction";
+            method: "cs_transactionDelete";
+            params: components["schemas"]["DeleteTransactionRequest"];
+        } | {
+            /** @enum {string} */
+            method: "cs_transactionGet";
             params: components["schemas"]["GetTransactionRequest"];
         } | {
             /** @enum {string} */
-            method: "cs_listTransactions";
+            method: "cs_transactionList";
             params: components["schemas"]["ListTransactionsRequest"];
         } | {
             /** @enum {string} */
@@ -5101,6 +5243,22 @@ export interface components {
             /** @description Custom EVM chains. */
             evm: components["schemas"]["EvmCustomChain"][];
         };
+        /** @description Parameters for the [`cs_transactionDelete`](RpcMethod::DeleteTransaction) method. */
+        DeleteTransactionRequest: {
+            /**
+             * @description Whether to force the deletion.
+             *
+             * Transactions that are not "submitted" or "canceled" will not be deleted unless
+             * this is true.
+             *
+             * **Note:** force deleting a pending transaction may prevent follow-up transactions
+             * from succeeding, and require manual intervention (e.g. specifying the key nonce).
+             * We strongly advise canceling the transaction first.
+             */
+            force?: boolean | null;
+            /** @description The transaction id. */
+            id: string;
+        };
         /** @description One deposit entry in [`DepositHistoryResponse`]. */
         DepositHistoryEntry: {
             /** @description Destination address the deposit was sent to. */
@@ -5396,7 +5554,7 @@ export interface components {
             response_type: "encrypted";
         }) & {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & Record<string, never>;
         /**
          * @description A policy which governs when and who is allowed to update the entity this policy is
@@ -5723,7 +5881,7 @@ export interface components {
         /** @description Response generated when creating EOTS nonces */
         EotsCreateNonceResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * @description The generated nonces as an array of 0x-prefixed hex strings
@@ -5801,7 +5959,7 @@ export interface components {
             /** @description Error message */
             message: string;
             /** @description Optional policy evaluation tree (included in signer responses, when requested) */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
             /** @description Optional request identifier */
             request_id?: string;
         };
@@ -5869,7 +6027,7 @@ export interface components {
         };
         Eth1SignResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * @description Hex-encoded RLP encoding of the transaction and its signature
@@ -5925,6 +6083,11 @@ export interface components {
             eth2_sign_request: Record<string, never>;
             network: components["schemas"]["Network"];
         };
+        /**
+         * @description Auto-generated discriminant enum variants
+         * @enum {string}
+         */
+        EvalOutcome: "Permitted" | "Inapplicable" | "Denied" | "MfaRequired";
         /**
          * @description Representation of an event. This type is used to serialize events to CloudWatch Logs and to
          * deserialize them when analyzing the logs.
@@ -6106,7 +6269,7 @@ export interface components {
          * @description Explicitly named scopes for accessing CubeSigner APIs
          * @enum {string}
          */
-        ExplicitScope: "sign:*" | "sign:ava" | "sign:binance:*" | "sign:binance:subToMaster" | "sign:binance:subToSub" | "sign:binance:universalTransfer" | "sign:binance:subAccountAssets" | "sign:binance:accountInfo" | "sign:binance:subAccountTransferHistory" | "sign:binance:universalTransferHistory" | "sign:binance:withdraw" | "sign:binance:withdrawHistory" | "sign:binance:deposit" | "sign:binance:depositHistory" | "sign:binance:listSubAccounts" | "sign:binance:coinInfo" | "sign:binance:subAccountDepositAddress" | "sign:bybit:*" | "sign:bybit:queryUser" | "sign:bybit:querySubMembers" | "sign:bybit:queryCoinsBalance" | "sign:bybit:queryDepositAddress" | "sign:bybit:universalTransfer" | "sign:bybit:withdraw" | "sign:bybit:withdrawals" | "sign:bybit:queryCoinInfo" | "sign:bybit:depositHistory" | "sign:bybit:universalTransferHistory" | "sign:bybit:queryWithdrawAddress" | "sign:bybit:querySubDepositAddress" | "sign:coinbase:*" | "sign:coinbase:accounts:list" | "sign:coinbase:portfolios:list" | "sign:coinbase:funds:move" | "sign:blob" | "sign:diffieHellman" | "sign:btc:*" | "sign:btc:segwit" | "sign:btc:taproot" | "sign:btc:psbt:*" | "sign:btc:psbt:doge" | "sign:btc:psbt:legacy" | "sign:btc:psbt:segwit" | "sign:btc:psbt:taproot" | "sign:btc:psbt:ltcSegwit" | "sign:btc:message:*" | "sign:btc:message:segwit" | "sign:btc:message:legacy" | "sign:babylon:*" | "sign:babylon:eots:*" | "sign:babylon:eots:nonces" | "sign:babylon:eots:sign" | "sign:babylon:staking:*" | "sign:babylon:staking:deposit" | "sign:babylon:staking:unbond" | "sign:babylon:staking:withdraw" | "sign:babylon:staking:slash" | "sign:babylon:registration" | "sign:babylon:covenant" | "sign:evm:*" | "sign:evm:tx" | "sign:evm:eip191" | "sign:evm:eip712" | "sign:evm:eip7702" | "sign:eth2:*" | "sign:eth2:validate" | "sign:eth2:stake" | "sign:eth2:unstake" | "sign:solana" | "sign:sui" | "sign:tendermint" | "sign:mmi" | "sign:auto" | "manage:*" | "manage:readonly" | "manage:email:*" | "manage:email:get" | "manage:email:update" | "manage:email:delete" | "manage:mfa:*" | "manage:mfa:readonly" | "manage:mfa:list" | "manage:mfa:vote:*" | "manage:mfa:vote:cs" | "manage:mfa:vote:email" | "manage:mfa:vote:fido" | "manage:mfa:vote:totp" | "manage:mfa:register:*" | "manage:mfa:register:fido" | "manage:mfa:register:totp" | "manage:mfa:register:email" | "manage:mfa:unregister:*" | "manage:mfa:unregister:fido" | "manage:mfa:unregister:totp" | "manage:mfa:verify:*" | "manage:mfa:verify:totp" | "manage:key:*" | "manage:key:readonly" | "manage:key:get" | "manage:key:attest" | "manage:key:listRoles" | "manage:key:list" | "manage:key:history:tx:list" | "manage:key:create" | "manage:key:import" | "manage:key:update:*" | "manage:key:update:owner" | "manage:key:update:policy" | "manage:key:update:enabled" | "manage:key:update:region" | "manage:key:update:metadata" | "manage:key:update:properties" | "manage:key:update:editPolicy" | "manage:key:delete" | "manage:policy:*" | "manage:policy:readonly" | "manage:policy:create" | "manage:policy:get" | "manage:policy:list" | "manage:policy:delete" | "manage:policy:update:*" | "manage:policy:update:owner" | "manage:policy:update:name" | "manage:policy:update:acl" | "manage:policy:update:editPolicy" | "manage:policy:update:metadata" | "manage:policy:update:rule" | "manage:policy:invoke" | "manage:policy:wasm:*" | "manage:policy:wasm:upload" | "manage:policy:secrets:*" | "manage:policy:secrets:get" | "manage:policy:secrets:update:*" | "manage:policy:secrets:update:values" | "manage:policy:secrets:update:acl" | "manage:policy:secrets:update:editPolicy" | "manage:policy:buckets:*" | "manage:policy:buckets:get" | "manage:policy:buckets:list" | "manage:policy:buckets:update:*" | "manage:policy:buckets:update:owner" | "manage:policy:buckets:update:acl" | "manage:policy:buckets:update:metadata" | "manage:contact:*" | "manage:contact:readonly" | "manage:contact:create" | "manage:contact:get" | "manage:contact:list" | "manage:contact:delete" | "manage:contact:update:*" | "manage:contact:update:name" | "manage:contact:update:addresses" | "manage:contact:update:owner" | "manage:contact:update:labels" | "manage:contact:update:metadata" | "manage:contact:update:editPolicy" | "manage:contact:lookup:*" | "manage:contact:lookup:address" | "manage:policy:createImportKey" | "manage:role:*" | "manage:role:readonly" | "manage:role:create" | "manage:role:delete" | "manage:role:get:*" | "manage:role:attest" | "manage:role:get:keys" | "manage:role:get:keys:list" | "manage:role:get:keys:get" | "manage:role:get:users" | "manage:role:list" | "manage:role:update:*" | "manage:role:update:enabled" | "manage:role:update:policy" | "manage:role:update:editPolicy" | "manage:role:update:actions" | "manage:role:update:key:*" | "manage:role:update:key:add" | "manage:role:update:key:remove" | "manage:role:update:user:*" | "manage:role:update:user:add" | "manage:role:update:user:remove" | "manage:role:history:tx:list" | "manage:identity:*" | "manage:identity:readonly" | "manage:identity:verify" | "manage:identity:add" | "manage:identity:remove" | "manage:identity:list" | "manage:org:*" | "manage:org:create" | "manage:org:metrics:query" | "manage:org:audit:query" | "manage:org:readonly" | "manage:org:addUser" | "manage:org:inviteUser" | "manage:org:inviteAlien" | "manage:org:invitation:list" | "manage:org:invitation:cancel" | "manage:org:updateMembership:*" | "manage:org:updateMembership:owner" | "manage:org:updateMembership:member" | "manage:org:updateMembership:alien" | "manage:org:listUsers" | "manage:org:user:get" | "manage:org:deleteUser:*" | "manage:org:deleteUser:owner" | "manage:org:deleteUser:member" | "manage:org:deleteUser:alien" | "manage:org:get" | "manage:org:update:*" | "manage:org:update:enabled" | "manage:org:update:policy" | "manage:org:update:signPolicy" | "manage:org:update:export" | "manage:org:update:totpFailureLimit" | "manage:org:update:notificationEndpoints" | "manage:org:update:defaultInviteKind" | "manage:org:update:idpConfiguration" | "manage:org:update:passkeyConfiguration" | "manage:org:update:emailPreferences" | "manage:org:update:historicalData" | "manage:org:update:requireScopeCeiling" | "manage:org:update:alienLoginRequirement" | "manage:org:update:memberLoginRequirement" | "manage:org:update:keyExportRequirement" | "manage:org:update:allowedMfaTypes" | "manage:org:update:policyEngineConf" | "manage:org:update:customChains" | "manage:org:update:extProps" | "manage:org:update:editPolicy" | "manage:org:user:resetMfa" | "manage:session:*" | "manage:session:readonly" | "manage:session:get" | "manage:session:list" | "manage:session:create" | "manage:session:extend" | "manage:session:revoke" | "manage:export:*" | "manage:export:readonly" | "manage:export:org:*" | "manage:export:org:get" | "manage:export:user:*" | "manage:export:user:delete" | "manage:export:user:list" | "manage:authMigration:*" | "manage:authMigration:identity:add" | "manage:authMigration:identity:remove" | "manage:authMigration:user:update" | "manage:mmi:*" | "manage:mmi:readonly" | "manage:mmi:get" | "manage:mmi:list" | "manage:mmi:reject" | "manage:mmi:delete" | "export:*" | "export:user:*" | "export:user:init" | "export:user:complete" | "mmi:*" | "orgAccess:*" | "orgAccess:child:*" | "rpc:*" | "rpc:createTransaction:*" | "rpc:createTransaction:evm" | "rpc:retryTransaction" | "rpc:cancelTransaction" | "rpc:getTransaction" | "rpc:listTransactions" | "rpc:btcListUtxos" | "rpc:binance" | "rpc:bybit" | "rpc:coinbase";
+        ExplicitScope: "sign:*" | "sign:ava" | "sign:binance:*" | "sign:binance:subToMaster" | "sign:binance:subToSub" | "sign:binance:universalTransfer" | "sign:binance:subAccountAssets" | "sign:binance:accountInfo" | "sign:binance:subAccountTransferHistory" | "sign:binance:universalTransferHistory" | "sign:binance:withdraw" | "sign:binance:withdrawHistory" | "sign:binance:deposit" | "sign:binance:depositHistory" | "sign:binance:listSubAccounts" | "sign:binance:coinInfo" | "sign:binance:subAccountDepositAddress" | "sign:binance:subAccountDepositHistory" | "sign:bybit:*" | "sign:bybit:queryUser" | "sign:bybit:querySubMembers" | "sign:bybit:queryCoinsBalance" | "sign:bybit:queryDepositAddress" | "sign:bybit:universalTransfer" | "sign:bybit:withdraw" | "sign:bybit:withdrawals" | "sign:bybit:queryCoinInfo" | "sign:bybit:depositHistory" | "sign:bybit:subDepositHistory" | "sign:bybit:universalTransferHistory" | "sign:bybit:queryWithdrawAddress" | "sign:bybit:querySubDepositAddress" | "sign:coinbase:*" | "sign:coinbase:accounts:list" | "sign:coinbase:portfolios:list" | "sign:coinbase:funds:move" | "sign:blob" | "sign:diffieHellman" | "sign:btc:*" | "sign:btc:segwit" | "sign:btc:taproot" | "sign:btc:psbt:*" | "sign:btc:psbt:doge" | "sign:btc:psbt:legacy" | "sign:btc:psbt:segwit" | "sign:btc:psbt:taproot" | "sign:btc:psbt:ltcSegwit" | "sign:btc:message:*" | "sign:btc:message:segwit" | "sign:btc:message:legacy" | "sign:babylon:*" | "sign:babylon:eots:*" | "sign:babylon:eots:nonces" | "sign:babylon:eots:sign" | "sign:babylon:staking:*" | "sign:babylon:staking:deposit" | "sign:babylon:staking:unbond" | "sign:babylon:staking:withdraw" | "sign:babylon:staking:slash" | "sign:babylon:registration" | "sign:babylon:covenant" | "sign:evm:*" | "sign:evm:tx" | "sign:evm:eip191" | "sign:evm:eip712" | "sign:evm:eip7702" | "sign:eth2:*" | "sign:eth2:validate" | "sign:eth2:stake" | "sign:eth2:unstake" | "sign:solana" | "sign:sui" | "sign:tendermint" | "sign:mmi" | "sign:auto" | "manage:*" | "manage:readonly" | "manage:email:*" | "manage:email:get" | "manage:email:update" | "manage:email:delete" | "manage:mfa:*" | "manage:mfa:readonly" | "manage:mfa:list" | "manage:mfa:vote:*" | "manage:mfa:vote:cs" | "manage:mfa:vote:email" | "manage:mfa:vote:fido" | "manage:mfa:vote:totp" | "manage:mfa:register:*" | "manage:mfa:register:fido" | "manage:mfa:register:totp" | "manage:mfa:register:email" | "manage:mfa:unregister:*" | "manage:mfa:unregister:fido" | "manage:mfa:unregister:totp" | "manage:mfa:verify:*" | "manage:mfa:verify:totp" | "manage:key:*" | "manage:key:readonly" | "manage:key:get" | "manage:key:attest" | "manage:key:listRoles" | "manage:key:list" | "manage:key:history:tx:list" | "manage:key:create" | "manage:key:import" | "manage:key:update:*" | "manage:key:update:owner" | "manage:key:update:policy" | "manage:key:update:acl" | "manage:key:update:enabled" | "manage:key:update:region" | "manage:key:update:metadata" | "manage:key:update:properties" | "manage:key:update:editPolicy" | "manage:key:delete" | "manage:policy:*" | "manage:policy:readonly" | "manage:policy:create" | "manage:policy:get" | "manage:policy:list" | "manage:policy:delete" | "manage:policy:update:*" | "manage:policy:update:owner" | "manage:policy:update:name" | "manage:policy:update:acl" | "manage:policy:update:editPolicy" | "manage:policy:update:metadata" | "manage:policy:update:rule" | "manage:policy:invoke" | "manage:policy:wasm:*" | "manage:policy:wasm:upload" | "manage:policy:secrets:*" | "manage:policy:secrets:get" | "manage:policy:secrets:update:*" | "manage:policy:secrets:update:values" | "manage:policy:secrets:update:acl" | "manage:policy:secrets:update:editPolicy" | "manage:policy:buckets:*" | "manage:policy:buckets:get" | "manage:policy:buckets:list" | "manage:policy:buckets:update:*" | "manage:policy:buckets:update:owner" | "manage:policy:buckets:update:acl" | "manage:policy:buckets:update:metadata" | "manage:contact:*" | "manage:contact:readonly" | "manage:contact:create" | "manage:contact:get" | "manage:contact:list" | "manage:contact:delete" | "manage:contact:update:*" | "manage:contact:update:name" | "manage:contact:update:addresses" | "manage:contact:update:owner" | "manage:contact:update:labels" | "manage:contact:update:metadata" | "manage:contact:update:editPolicy" | "manage:contact:lookup:*" | "manage:contact:lookup:address" | "manage:policy:createImportKey" | "manage:role:*" | "manage:role:readonly" | "manage:role:create" | "manage:role:delete" | "manage:role:get:*" | "manage:role:attest" | "manage:role:get:keys" | "manage:role:get:keys:list" | "manage:role:get:keys:get" | "manage:role:get:users" | "manage:role:list" | "manage:role:update:*" | "manage:role:update:enabled" | "manage:role:update:policy" | "manage:role:update:editPolicy" | "manage:role:update:actions" | "manage:role:update:key:*" | "manage:role:update:key:add" | "manage:role:update:key:remove" | "manage:role:update:user:*" | "manage:role:update:user:add" | "manage:role:update:user:remove" | "manage:role:history:tx:list" | "manage:identity:*" | "manage:identity:readonly" | "manage:identity:verify" | "manage:identity:add" | "manage:identity:remove" | "manage:identity:list" | "manage:org:*" | "manage:org:create" | "manage:org:metrics:query" | "manage:org:audit:query" | "manage:org:readonly" | "manage:org:addUser" | "manage:org:inviteUser" | "manage:org:inviteAlien" | "manage:org:invitation:list" | "manage:org:invitation:cancel" | "manage:org:updateMembership:*" | "manage:org:updateMembership:owner" | "manage:org:updateMembership:member" | "manage:org:updateMembership:alien" | "manage:org:listUsers" | "manage:org:user:get" | "manage:org:deleteUser:*" | "manage:org:deleteUser:owner" | "manage:org:deleteUser:member" | "manage:org:deleteUser:alien" | "manage:org:get" | "manage:org:update:*" | "manage:org:update:enabled" | "manage:org:update:policy" | "manage:org:update:signPolicy" | "manage:org:update:export" | "manage:org:update:totpFailureLimit" | "manage:org:update:notificationEndpoints" | "manage:org:update:defaultInviteKind" | "manage:org:update:idpConfiguration" | "manage:org:update:passkeyConfiguration" | "manage:org:update:emailPreferences" | "manage:org:update:historicalData" | "manage:org:update:requireScopeCeiling" | "manage:org:update:alienLoginRequirement" | "manage:org:update:memberLoginRequirement" | "manage:org:update:keyExportRequirement" | "manage:org:update:allowedMfaTypes" | "manage:org:update:policyEngineConf" | "manage:org:update:customChains" | "manage:org:update:extProps" | "manage:org:update:editPolicy" | "manage:org:user:resetMfa" | "manage:session:*" | "manage:session:readonly" | "manage:session:get" | "manage:session:list" | "manage:session:create" | "manage:session:extend" | "manage:session:revoke" | "manage:export:*" | "manage:export:readonly" | "manage:export:org:*" | "manage:export:org:get" | "manage:export:user:*" | "manage:export:user:delete" | "manage:export:user:list" | "manage:authMigration:*" | "manage:authMigration:identity:add" | "manage:authMigration:identity:remove" | "manage:authMigration:user:update" | "manage:mmi:*" | "manage:mmi:readonly" | "manage:mmi:get" | "manage:mmi:list" | "manage:mmi:reject" | "manage:mmi:delete" | "export:*" | "export:user:*" | "export:user:init" | "export:user:complete" | "mmi:*" | "orgAccess:*" | "orgAccess:child:*" | "rpc:*" | "rpc:transaction:*" | "rpc:transaction:create:*" | "rpc:transaction:create:evm" | "rpc:transaction:retry" | "rpc:transaction:cancel" | "rpc:transaction:delete" | "rpc:transaction:get" | "rpc:transaction:list" | "rpc:btcListUtxos" | "rpc:binance" | "rpc:bybit" | "rpc:coinbase";
         /**
          * @description This type specifies the interpretation of the `fee` field in Babylon
          * staking requests. If `sats`, the field is intpreted as a fixed value
@@ -6241,7 +6404,7 @@ export interface components {
         GetKeysInOrgRequest: {
             key_type?: components["schemas"]["KeyType"] | null;
         };
-        /** @description Parameters for the [`cs_getTransaction`](RpcMethod::GetTransaction) method. */
+        /** @description Parameters for the [`cs_transactionGet`](RpcMethod::GetTransaction) method. */
         GetTransactionRequest: {
             id: components["schemas"]["Id"];
         };
@@ -6598,7 +6761,7 @@ export interface components {
             result?: Record<string, unknown> | null;
         };
         /** @description Valid `result` from the JSON-RPC API. */
-        JsonRpcResult: components["schemas"]["TransactionInfo"] | components["schemas"]["ListTransactionsPaginatedResponse"] | components["schemas"]["SubAccountTransferResponse"] | components["schemas"]["UniversalTransferResponse"] | components["schemas"]["SubAccountAssetsResponse"] | components["schemas"]["AccountInfoResponse"] | components["schemas"]["SubAccountTransferHistoryResponse"] | components["schemas"]["UniversalTransferHistoryResponse"] | components["schemas"]["WithdrawResponse"] | components["schemas"]["WithdrawHistoryResponse"] | components["schemas"]["DepositResponse"] | components["schemas"]["DepositHistoryResponse"] | components["schemas"]["ListSubAccountsResponse"] | components["schemas"]["CoinInfoResponse"] | components["schemas"]["SubAccountDepositAddressResponse"] | components["schemas"]["BybitQueryUserResponse"] | components["schemas"]["BybitQuerySubMembersResponse"] | components["schemas"]["BybitQueryCoinsBalanceResponse"] | components["schemas"]["BybitQueryDepositAddressResponse"] | components["schemas"]["BybitUniversalTransferResponse"] | components["schemas"]["BybitWithdrawResponse"] | components["schemas"]["BybitWithdrawalsResponse"] | components["schemas"]["BybitCoinInfoResponse"] | components["schemas"]["BybitDepositHistoryResponse"] | components["schemas"]["BybitUniversalTransferHistoryResponse"] | components["schemas"]["BybitQueryWithdrawAddressResponse"] | components["schemas"]["BybitQuerySubDepositAddressResponse"] | components["schemas"]["CoinbaseListAccountsResponse"] | components["schemas"]["CoinbaseListPortfoliosResponse"] | components["schemas"]["CoinbaseMoveFundsResponse"] | components["schemas"]["BtcListUtxosResponse"];
+        JsonRpcResult: components["schemas"]["RpcTransactionInfo"] | components["schemas"]["ListTransactionsPaginatedResponse"] | components["schemas"]["SubAccountTransferResponse"] | components["schemas"]["UniversalTransferResponse"] | components["schemas"]["SubAccountAssetsResponse"] | components["schemas"]["AccountInfoResponse"] | components["schemas"]["SubAccountTransferHistoryResponse"] | components["schemas"]["UniversalTransferHistoryResponse"] | components["schemas"]["WithdrawResponse"] | components["schemas"]["WithdrawHistoryResponse"] | components["schemas"]["DepositResponse"] | components["schemas"]["DepositHistoryResponse"] | components["schemas"]["ListSubAccountsResponse"] | components["schemas"]["CoinInfoResponse"] | components["schemas"]["SubAccountDepositAddressResponse"] | components["schemas"]["BybitQueryUserResponse"] | components["schemas"]["BybitQuerySubMembersResponse"] | components["schemas"]["BybitQueryCoinsBalanceResponse"] | components["schemas"]["BybitQueryDepositAddressResponse"] | components["schemas"]["BybitUniversalTransferResponse"] | components["schemas"]["BybitWithdrawResponse"] | components["schemas"]["BybitWithdrawalsResponse"] | components["schemas"]["BybitCoinInfoResponse"] | components["schemas"]["BybitDepositHistoryResponse"] | components["schemas"]["BybitUniversalTransferHistoryResponse"] | components["schemas"]["BybitQueryWithdrawAddressResponse"] | components["schemas"]["BybitQuerySubDepositAddressResponse"] | components["schemas"]["CoinbaseListAccountsResponse"] | components["schemas"]["CoinbaseListPortfoliosResponse"] | components["schemas"]["CoinbaseMoveFundsResponse"] | components["schemas"]["BtcListUtxosResponse"];
         JwkSetResponse: {
             /** @description The keys included in this set */
             keys: Record<string, never>[];
@@ -6668,6 +6831,20 @@ export interface components {
             role_id: string;
         };
         KeyInfo: components["schemas"]["CommonFields"] & {
+            /**
+             * @description Key access-control entries
+             * @example [
+             *   {
+             *     "actions": [
+             *       "manage:key:properties"
+             *     ],
+             *     "subjects": [
+             *       "User#c3b9379c-4e8c-4216-bd0a-65ace53cf98f"
+             *     ]
+             *   }
+             * ]
+             */
+            acl?: unknown[] | null;
             derivation_info?: components["schemas"]["KeyDerivationInfo"] | null;
             /** @description Whether the key is enabled (only enabled keys may be used for signing) */
             enabled: boolean;
@@ -6781,6 +6958,42 @@ export interface components {
          * so that they can pass this back to us as a url query parameter.
          */
         LastEvalKey: string;
+        /**
+         * @description The base policy evaluation result associated with a [leaf][PolicyEvalTree::Leaf] node.
+         *
+         * This type is very similar to [BasePolicyEvalResult], except that it contains only the
+         * information we want to include in the evaluation tree that we send back to the client.
+         */
+        LeafNodeResult: OneOf<[
+            {
+                evidence: components["schemas"]["PermitEvidence"];
+                /** @enum {string} */
+                outcome: "Permitted";
+            },
+            {
+                op: components["schemas"]["OperationKind"];
+                /** @enum {string} */
+                outcome: "Inapplicable";
+            },
+            {
+                error_code: components["schemas"]["PolicyErrorCode"];
+                message: string;
+                /** @description Additional structured details about the denial */
+                more_info?: unknown;
+                /** @enum {string} */
+                outcome: "Denied";
+            },
+            {
+                /** @enum {string} */
+                outcome: "MfaRequired";
+            }
+        ]>;
+        /** @description Properties of a [PolicyEvalTree::Leaf] node. */
+        LeafProps: components["schemas"]["LeafNodeResult"] & {
+            provenance: components["schemas"]["PolicyAttachedTo"];
+            /** @description The leaf rule that was evaluated */
+            rule: unknown;
+        };
         /**
          * @description Parameters for `cs_coinbaseListAccounts`.
          *
@@ -6869,7 +7082,7 @@ export interface components {
          */
         ListTransactionsPaginatedResponse: {
             /** @description A list of transaction infos. */
-            transactions: components["schemas"]["TransactionInfo"][];
+            transactions: components["schemas"]["RpcTransactionInfo"][];
         } & {
             /**
              * @description If set, the content of `response` does not contain the entire result set.
@@ -6878,7 +7091,7 @@ export interface components {
              */
             last_evaluated_key?: string | null;
         };
-        /** @description Parameters for the [`cs_listTransactions`](RpcMethod::ListTransactions) method. */
+        /** @description Parameters for the [`cs_transactionList`](RpcMethod::ListTransactions) method. */
         ListTransactionsRequest: components["schemas"]["Page"] & {
             /**
              * @description Optional user or role id.
@@ -6887,10 +7100,10 @@ export interface components {
              */
             owner?: string | null;
         };
-        /** @description The response to [`cs_listTransactions`](super::request::CsRpc::ListTransactions) */
+        /** @description The response to [`cs_transactionList`](super::request::CsRpc::ListTransactions) */
         ListTransactionsResponse: {
             /** @description A list of transaction infos. */
-            transactions: components["schemas"]["TransactionInfo"][];
+            transactions: components["schemas"]["RpcTransactionInfo"][];
         };
         LoginRequest: components["schemas"]["OidcLoginRequest"];
         /**
@@ -6984,7 +7197,7 @@ export interface components {
             /** @description Organization id */
             org_id: string;
             /** @description Optional policy evaluation tree (included in signer responses, when requested) */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
             session?: components["schemas"]["NewSessionResponse"] | null;
         };
         /** @description Org-wide MFA requirements. */
@@ -7224,7 +7437,7 @@ export interface components {
          * @description All different kinds of sensitive operations
          * @enum {string}
          */
-        OperationKind: "AvaSign" | "AvaChainTxSign" | "BabylonCovSign" | "BabylonRegistration" | "BabylonStaking" | "BinanceSubToMaster" | "BinanceSubToSub" | "BinanceUniversalTransfer" | "BinanceSubAccountAssets" | "BinanceAccountInfo" | "BinanceSubAccountTransferHistory" | "BinanceUniversalTransferHistory" | "BinanceWithdraw" | "BinanceWithdrawHistory" | "BinanceDeposit" | "BinanceDepositHistory" | "BinanceListSubAccounts" | "BinanceCoinInfo" | "BinanceSubAccountDepositAddress" | "BlobSign" | "BtcMessageSign" | "BtcSign" | "BybitQueryUser" | "BybitQuerySubMembers" | "BybitQueryCoinsBalance" | "BybitQueryDepositAddress" | "BybitUniversalTransfer" | "BybitWithdraw" | "BybitWithdrawals" | "BybitQueryCoinInfo" | "BybitDepositHistory" | "BybitUniversalTransferHistory" | "BybitQueryWithdrawAddress" | "BybitQuerySubDepositAddress" | "CoinbaseListAccounts" | "CoinbaseListPortfolios" | "CoinbaseMoveFunds" | "DiffieHellman" | "PsbtSign" | "TaprootSign" | "Eip191Sign" | "Eip712Sign" | "Eip7702Sign" | "EotsNonces" | "EotsSign" | "Eth1Sign" | "Eth2Sign" | "Eth2Stake" | "Eth2Unstake" | "SolanaSign" | "SuiSign" | "TendermintSign" | "RoleUpdate";
+        OperationKind: "AvaSign" | "AvaChainTxSign" | "BabylonCovSign" | "BabylonRegistration" | "BabylonStaking" | "BinanceSubToMaster" | "BinanceSubToSub" | "BinanceUniversalTransfer" | "BinanceSubAccountAssets" | "BinanceAccountInfo" | "BinanceSubAccountTransferHistory" | "BinanceUniversalTransferHistory" | "BinanceWithdraw" | "BinanceWithdrawHistory" | "BinanceDeposit" | "BinanceDepositHistory" | "BinanceListSubAccounts" | "BinanceCoinInfo" | "BinanceSubAccountDepositAddress" | "BinanceSubAccountDepositHistory" | "BlobSign" | "BtcMessageSign" | "BtcSign" | "BybitQueryUser" | "BybitQuerySubMembers" | "BybitQueryCoinsBalance" | "BybitQueryDepositAddress" | "BybitUniversalTransfer" | "BybitWithdraw" | "BybitWithdrawals" | "BybitQueryCoinInfo" | "BybitDepositHistory" | "BybitSubDepositHistory" | "BybitUniversalTransferHistory" | "BybitQueryWithdrawAddress" | "BybitQuerySubDepositAddress" | "CoinbaseListAccounts" | "CoinbaseListPortfolios" | "CoinbaseMoveFunds" | "DiffieHellman" | "PsbtSign" | "TaprootSign" | "Eip191Sign" | "Eip712Sign" | "Eip7702Sign" | "EotsNonces" | "EotsSign" | "Eth1Sign" | "Eth2Sign" | "Eth2Stake" | "Eth2Unstake" | "SolanaSign" | "SuiSign" | "TendermintSign" | "RoleUpdate";
         OrgAlertsPrefs: {
             /** @description Recipient users for org-level alerts */
             alert_recipients?: components["schemas"]["Id"][] | null;
@@ -8065,11 +8278,175 @@ export interface components {
             } | null;
             message_tx?: components["schemas"]["TypedTransaction"] | null;
         }) & Record<string, never>;
+        /** @description Different kinds of evidence policy checkers can return to support their decision. */
+        PermitEvidence: {
+            /** @enum {string} */
+            kind: "ExplicitlyPermitted";
+            /** @description Optional message */
+            message?: string | null;
+        } | {
+            approvals: {
+                [key: string]: {
+                    [key: string]: components["schemas"]["ApprovalInfo"];
+                };
+            };
+            /** @enum {string} */
+            kind: "MfaApproved";
+            policy: components["schemas"]["MfaPolicy"];
+        } | {
+            /** @enum {string} */
+            kind: "BabylonStaking";
+        } | {
+            /** @enum {string} */
+            kind: "BtcReceivers";
+            /** @description The actual receivers of a Bitcoin transaction */
+            receivers: string[];
+        } | {
+            /** @enum {string} */
+            kind: "BtcValueLimit";
+            /**
+             * Format: int64
+             * @description The new total (in SAT), including the current transaction
+             */
+            new_total: number;
+            /**
+             * Format: int64
+             * @description The limit (in SAT) specified by the policy
+             */
+            policy_limit: number;
+        } | {
+            /**
+             * Format: int64
+             * @description Actual EVM chain
+             */
+            chain_id: number;
+            /** @enum {string} */
+            kind: "EvmChainDoesNotApply";
+        } | {
+            /** @enum {string} */
+            kind: "EvmTransferOnly";
+        } | {
+            /** @enum {string} */
+            kind: "EvmNotErc20";
+        } | {
+            /** @enum {string} */
+            kind: "EvmErc20";
+        } | {
+            /** @description The address of the contract being called */
+            address?: string | null;
+            /** @description The name of the contract method being called */
+            function: string;
+            /** @enum {string} */
+            kind: "EvmContractCall";
+        } | {
+            /** @description The arguments of the contract method being called */
+            args: string[][];
+            /** @description The name of the contract method being called */
+            function: string;
+            /** @enum {string} */
+            kind: "EvmAbiConstrainedFunction";
+        } | {
+            /** @enum {string} */
+            kind: "EvmGasCostLimit";
+            /** @description The policy gas cost limit (in WEI) */
+            policy_gas_cost_limit: string;
+            /** @description The transaction max gas cost (in WEI) */
+            tx_max_gas_cost: string;
+        } | {
+            /** @enum {string} */
+            kind: "EvmValueLimit";
+            /** @description The new total (in WEI), including the current transaction */
+            new_total: string;
+            /** @description The limit (in WEI) specified by the policy */
+            policy_limit: string;
+        } | {
+            /** @enum {string} */
+            kind: "EvmDeposit";
+            /** @description The details of the deposit transaction */
+            spec: Record<string, never>;
+        } | {
+            /** @enum {string} */
+            kind: "EvmReceiver";
+            /** @description The actual receiver of an EVM transaction */
+            receiver?: string | null;
+        } | {
+            /** @description The actual chain id of an EVM transaction or EIP-7702 authorization request */
+            chain_id: string;
+            /** @enum {string} */
+            kind: "EvmChainId";
+        } | {
+            /** @description The contract address EIP-7702 delegates authorization to */
+            address: string;
+            /** @enum {string} */
+            kind: "Eip7702DelegationTarget";
+        } | {
+            /** @enum {string} */
+            kind: "RoleSession";
+            /** @description The session identity role */
+            role_id: string;
+        } | {
+            /** @enum {string} */
+            kind: "SolanaTx";
+        } | {
+            /** @description Actual Sui receivers */
+            actual_receivers: string[];
+            /** @enum {string} */
+            kind: "SuiReceivers";
+        } | (components["schemas"]["SourceIp"] & {
+            /** @enum {string} */
+            kind: "SourceIpAllowlisted";
+        }) | {
+            /** @enum {string} */
+            kind: "CelPolicyMatched";
+            /** @description The CEL program that was evaluated */
+            program: string;
+        } | {
+            /** @enum {string} */
+            kind: "OperationAllowlisted";
+            operation: components["schemas"]["OperationKind"];
+        } | {
+            /** @enum {string} */
+            kind: "TaprootValueLimit";
+            /**
+             * Format: int64
+             * @description The limit (in SAT) specified by the policy
+             */
+            policy_limit: number;
+            /**
+             * Format: int64
+             * @description The transaction value (in SAT)
+             */
+            transaction_value: number;
+        } | {
+            /** @description The size (in bytes) of the full stderr */
+            full_stderr_length: number;
+            /** @description The size (in bytes) of the full stdout */
+            full_stdout_length: number;
+            /** @enum {string} */
+            kind: "WasmResult";
+            /** @description Standard error of the wasm policy execution, truncated to 1024 bytes */
+            stderr: string;
+            /** @description Standard output of the wasm policy execution, truncated to 1024 bytes */
+            stdout: string;
+        } | (components["schemas"]["CallWebhookResult"] & {
+            /** @enum {string} */
+            kind: "WebhookResult";
+        }) | {
+            current_time: components["schemas"]["EpochDateTime"];
+            /** @enum {string} */
+            kind: "TimeLockExpired";
+            lock_until: components["schemas"]["EpochDateTime"];
+        };
         /**
          * @description The access-controlled actions that can be performed on a named policy.
          * @enum {string}
          */
         PolicyAction: "read:*" | "read" | "read:policy" | "read:logs" | "update:*" | "update" | "update:name" | "update:rules" | "update:metadata" | "update:editPolicy" | "update:owner" | "update:acl" | "delete" | "attach" | "sign" | "invoke";
+        /**
+         * @description MFA policy provenance
+         * @enum {string}
+         */
+        PolicyAttachedTo: "Org" | "Key" | "KeyInRole" | "Role" | "User" | "EditPolicy";
         /** @description The id for attaching a named policy to a key, role, or key in role. */
         PolicyAttachedToId: OneOf<[
             {
@@ -8121,6 +8498,45 @@ export interface components {
         PolicyErrorCode: components["schemas"]["PolicyErrorOwnCodes"] | components["schemas"]["EvmTxDepositErrorCode"];
         /** @enum {string} */
         PolicyErrorOwnCodes: "MfaHttpRequestMismatch" | "MfaExpired" | "Inapplicable" | "SuiTxReceiversDisallowedTransactionKind" | "SuiTxReceiversDisallowedTransferAddress" | "SuiTxReceiversDisallowedCommand" | "BtcTxDisallowedOutputs" | "BtcSignatureExceededValue" | "BtcValueOverflow" | "BtcSighashTypeDisallowed" | "Eip7702AddressMismatch" | "EvmTxReceiverMismatch" | "EvmTxChainIdMismatch" | "EvmTxSenderMismatch" | "EvmTxExceededValue" | "EvmTxExceededGasCost" | "EvmTxGasCostUndefined" | "EvmDataDisallowed" | "Erc20DataInvalid" | "EvmContractAddressUndefined" | "EvmContractChainIdUndefined" | "EvmDataNotDefined" | "EvmDataInvalid" | "EvmContractNotInAllowlist" | "Erc20ExceededTransferLimit" | "Erc20ReceiverMismatch" | "Erc20ExceededApproveLimit" | "Erc20SpenderMismatch" | "EvmFunctionNotInAllowlist" | "EvmFunctionCallInvalid" | "EvmFunctionCallDisallowedArg" | "PolicyDisjunctionError" | "PolicyNegationError" | "Eth2ExceededMaxUnstake" | "Eth2ConcurrentUnstaking" | "NotInIpv4Allowlist" | "NotInOriginAllowlist" | "NotInOperationAllowlist" | "InvalidSourceIp" | "RawSigningNotAllowed" | "DiffieHellmanExchangeNotAllowed" | "Eip712SigningNotAllowed" | "OidcSourceNotAllowed" | "NoOidcAuthSourcesDefined" | "AddKeyToRoleDisallowed" | "KeysAlreadyInRole" | "KeyInMultipleRoles" | "KeyAccessError" | "RequireRoleSessionKeyAccessError" | "BtcMessageSigningNotAllowed" | "Eip191SigningNotAllowed" | "Eip7702SigningNotAllowed" | "TaprootSigningDisallowed" | "SegwitSigningDisallowed" | "PsbtSigningDisallowed" | "BabylonStakingDisallowed" | "TimeLocked" | "CelPolicyDenied" | "BabylonStakingNetwork" | "BabylonStakingParamsVersion" | "BabylonStakingExplicitParams" | "BabylonStakingStakerPk" | "BabylonStakingFinalityProviderPk" | "BabylonStakingLockTime" | "BabylonStakingValue" | "BabylonStakingChangeAddress" | "BabylonStakingFee" | "BabylonStakingWithdrawalAddress" | "BabylonStakingBbnAddress" | "SolanaInstructionCountLow" | "SolanaInstructionCountHigh" | "SolanaNotInInstructionAllowlist" | "SolanaInstructionMismatch" | "WasmPoliciesDisabled" | "WasmPolicyDenied" | "WasmPolicyFailed" | "WebhookPoliciesDisabled" | "DeniedByWebhook" | "MfaApprovalsNotYetValid" | "ExplicitlyDenied";
+        /** @description Evaluation tree for a policy rule. */
+        PolicyEvalTree: {
+            Leaf: components["schemas"]["LeafProps"];
+        } | {
+            /** @description Evaluation of a negation (i.e., [Deny::Not]) */
+            Not: {
+                child: components["schemas"]["PolicyEvalTree"];
+                outcome: components["schemas"]["EvalOutcome"];
+            };
+        } | {
+            /** @description Evaluation of a [Deny::IfThenElse] policy */
+            IfThenElse: {
+                /** @description Evaluated conditionals */
+                children: components["schemas"]["Conditional"][];
+                else?: components["schemas"]["PolicyEvalTree"] | null;
+                outcome: components["schemas"]["EvalOutcome"];
+            };
+        } | {
+            /** @description Evaluation of a list of policy rules */
+            Concat: {
+                /** @description Evaluation trees of each evaluated policy */
+                children: components["schemas"]["PolicyEvalTree"][];
+                outcome: components["schemas"]["EvalOutcome"];
+            };
+        } | {
+            /** @description Evaluation of a conjunction (i.e., [Deny::And]). */
+            And: {
+                /** @description Evaluation trees of each evaluated conjunct */
+                children: components["schemas"]["PolicyEvalTree"][];
+                outcome: components["schemas"]["EvalOutcome"];
+            };
+        } | {
+            /** @description Evaluation of a disjunction (i.e., [Deny::Or]). */
+            Or: {
+                /** @description Evaluation trees of each evaluated disjunct */
+                children: components["schemas"]["PolicyEvalTree"][];
+                outcome: components["schemas"]["EvalOutcome"];
+            };
+        };
         /** @description A struct containing all the information about a specific version of a policy. */
         PolicyInfo: {
             /** @description The access-control entries for the policy. */
@@ -8262,7 +8678,7 @@ export interface components {
         /** @description Response to a PSBT signing request */
         PsbtSignResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /**
              * @description The PSBT in standard hex serialization, without leading "0x".
@@ -8760,7 +9176,7 @@ export interface components {
         RestrictedActionsMap: {
             [key: string]: components["schemas"]["MemberRole"][];
         };
-        /** @description Parameters for the [`cs_retryTransaction`](RpcMethod::RetryTransaction) method. */
+        /** @description Parameters for the [`cs_transactionRetry`](RpcMethod::RetryTransaction) method. */
         RetryTransactionRequest: components["schemas"]["EvmTxCustomization"] & {
             /** @description The transaction id. */
             id: string;
@@ -8851,6 +9267,37 @@ export interface components {
          * [`BybitRpc`] for the Bybit family, [`CoinbaseRpc`] for the Coinbase family).
          */
         RpcMethod: components["schemas"]["CsRpc"] | components["schemas"]["BinanceRpc"] | components["schemas"]["BybitRpc"] | components["schemas"]["CoinbaseRpc"];
+        /** @description A transaction created by the RPC API. */
+        RpcTransaction: {
+            status: "RpcTransaction";
+        } & Omit<components["schemas"]["RpcTxStatus"], "status"> & Omit<components["schemas"]["TransactionDetails"], "chain"> & components["schemas"]["VersioningFields"] & {
+            /** @description The session identity that created the transaction. */
+            owner: string;
+        };
+        /** @description Information about an existing transaction created by the RPC API. */
+        RpcTransactionInfo: components["schemas"]["RpcTransaction"] & {
+            /** @description The transaction id. */
+            id: string;
+        };
+        /** @description The status of the transaction. */
+        RpcTxStatus: {
+            mfa_ids: string[];
+            /** @enum {string} */
+            status: "MfaRequired";
+        } | {
+            /** @enum {string} */
+            status: "Signed";
+        } | {
+            /** @enum {string} */
+            status: "Submitted";
+        } | {
+            /** @enum {string} */
+            status: "Canceled";
+        } | {
+            error: components["schemas"]["ErrorObj"];
+            /** @enum {string} */
+            status: "Failed";
+        };
         /** @description All scopes for accessing CubeSigner APIs */
         Scope: components["schemas"]["ExplicitScope"] | string;
         /** @description A set of scopes. */
@@ -9012,7 +9459,7 @@ export interface components {
             /** @description Whether MFA is required */
             mfa_requests: components["schemas"]["MfaRequestInfo"][];
             /** @description Optional policy evaluation tree, if requested */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         };
         /**
          * @description The structured input to a Sign-In With Solana request (`SolanaSignInInput` in the spec).
@@ -9047,7 +9494,7 @@ export interface components {
         };
         SignResponse: {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             /** @description The hex-encoded resulting signature. */
             signature: string;
@@ -9276,7 +9723,7 @@ export interface components {
         };
         StakeResponse: ({
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
             deposit_tx: components["schemas"]["DepositTxn"];
         }) & {
@@ -9408,6 +9855,52 @@ export interface components {
             /** @description Blockchain explorer URL for `address`. */
             url?: string | null;
         };
+        /**
+         * @description Parameters for `GET /sapi/v1/capital/deposit/subHisrec`.
+         *
+         * Master-account keys only; use [`DepositHistoryRequest`] for the calling
+         * account's own deposits.
+         */
+        SubAccountDepositHistoryRequest: {
+            /** @description Filter to a specific asset (e.g. `"USDT"`, `"BTC"`). */
+            coin?: string | null;
+            /**
+             * @description Email of the sub-account whose deposit history to fetch. Binance
+             * requires this, so there is no "calling account" fallback here.
+             */
+            email: string;
+            /**
+             * Format: int64
+             * @description Window end (ms since epoch).
+             */
+            endTime?: number | null;
+            /**
+             * Format: int32
+             * @description Page size (Binance max: 200). Note that Binance defaults this to `1`,
+             * not to a full page, so callers should always set it.
+             */
+            limit?: number | null;
+            /**
+             * Format: int32
+             * @description Pagination offset (Binance default: 0).
+             */
+            offset?: number | null;
+            /**
+             * Format: int64
+             * @description Window start (ms since epoch). Binance returns the most recent 90 days
+             * when this and `end_time` are both omitted.
+             */
+            startTime?: number | null;
+            /**
+             * Format: int32
+             * @description Filter by deposit status. Binance values: `0` = pending, `6` = credited
+             * but cannot withdraw, `7` = wrong deposit, `8` = waiting user confirm,
+             * `1` = success. Left as `u8` for forward compatibility.
+             */
+            status?: number | null;
+            /** @description Look up a specific deposit by its on-chain transaction hash. */
+            txId?: string | null;
+        };
         /** @description One sub-account entry in [`ListSubAccountsResponse`]. */
         SubAccountInfo: {
             /**
@@ -9786,11 +10279,6 @@ export interface components {
             /** @enum {string} */
             chain: "Evm";
         };
-        /** @description Information about an existing transaction created by the RPC API. */
-        TransactionInfo: components["schemas"]["Transaction"] & {
-            /** @description The transaction id. */
-            id: string;
-        };
         /**
          * @description Supported queries
          * @enum {string}
@@ -10119,7 +10607,7 @@ export interface components {
             signature: string;
         } & {
             /** @description Optional policy evaluation tree. */
-            policy_eval_tree?: unknown;
+            policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & Record<string, never>;
         /** @description The information needed to update a bucket. */
         UpdateBucketRequest: {
@@ -10744,6 +11232,19 @@ export interface components {
              */
             updated_at: number;
         };
+        /**
+         * @description Versioning fields (e.g., version number, creation time, and last modified times)
+         * that are common to different types of resources.
+         */
+        VersioningFields: {
+            created?: components["schemas"]["EpochDateTime"] | null;
+            last_modified?: components["schemas"]["EpochDateTime"] | null;
+            /**
+             * Format: int64
+             * @description Version of this object
+             */
+            version?: number;
+        };
         /**
          * @description An exit voluntarily submitted a validator who wishes to withdraw.
          * The schema for this message is defined
@@ -11022,7 +11523,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * @description The slash-unbonding transaction signatures as an array of hex strings with no 0x prefix
@@ -11058,7 +11559,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * @description The Babylon address that will receive the staking rewards for this deposit.
@@ -11108,7 +11609,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * Format: int64
@@ -11129,7 +11630,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * @description The full signed query string, ready to be submitted to Binance.
@@ -11144,7 +11645,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /** @description The base64-encoded signature in BIP137 format. */
                     sig: string;
@@ -11180,7 +11681,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * @description The Bybit-bound payload (URL-encoded query for GET, JSON body for
@@ -11212,7 +11713,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * @description The signed JWT, ready to be sent in `Authorization: Bearer <jwt>` to
@@ -11348,7 +11849,7 @@ export interface components {
                     response_type: "encrypted";
                 }) & {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & Record<string, never>;
             };
         };
@@ -11382,7 +11883,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * @description The generated nonces as an array of 0x-prefixed hex strings
@@ -11405,7 +11906,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * @description Hex-encoded RLP encoding of the transaction and its signature
@@ -11620,6 +12121,20 @@ export interface components {
         KeyInfo: {
             content: {
                 "application/json": components["schemas"]["CommonFields"] & {
+                    /**
+                     * @description Key access-control entries
+                     * @example [
+                     *   {
+                     *     "actions": [
+                     *       "manage:key:properties"
+                     *     ],
+                     *     "subjects": [
+                     *       "User#c3b9379c-4e8c-4216-bd0a-65ace53cf98f"
+                     *     ]
+                     *   }
+                     * ]
+                     */
+                    acl?: unknown[] | null;
                     derivation_info?: components["schemas"]["KeyDerivationInfo"] | null;
                     /** @description Whether the key is enabled (only enabled keys may be used for signing) */
                     enabled: boolean;
@@ -12342,7 +12857,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /**
                      * @description The PSBT in standard hex serialization, without leading "0x".
@@ -12513,7 +13028,7 @@ export interface components {
             content: {
                 "application/json": {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     /** @description The hex-encoded resulting signature. */
                     signature: string;
@@ -12577,7 +13092,7 @@ export interface components {
             content: {
                 "application/json": ({
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & {
                     deposit_tx: components["schemas"]["DepositTxn"];
                 }) & {
@@ -12655,7 +13170,7 @@ export interface components {
                     signature: string;
                 } & {
                     /** @description Optional policy evaluation tree. */
-                    policy_eval_tree?: unknown;
+                    policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
                 } & Record<string, never>;
             };
         };