@cubist-labs/cubesigner-sdk 0.4.280 → 0.4.284

package/src/schema.ts

@@ -2367,7 +2367,7 @@ export interface components {
     };
     BabylonCovSignResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * @description The slash-unbonding transaction signatures as an array of hex strings with no 0x prefix
@@ -2516,7 +2516,7 @@ export interface components {
     };
     BabylonRegistrationResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * @description The Babylon address that will receive the staking rewards for this deposit.
@@ -2793,7 +2793,7 @@ export interface components {
         });
     BabylonStakingResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * Format: int64
@@ -2966,7 +2966,6 @@ export interface components {
       | "MissingBybitApiKey"
       | "MissingCoinbaseApiKey"
       | "BinanceKeyMasterMismatch"
-      | "BybitAccountMismatch"
       | "InvalidKeyMaterial"
       | "InvalidHexValue"
       | "InvalidBase32Value"
@@ -3302,6 +3301,7 @@ export interface components {
       | "rpcBtcListUtxos"
       | "rpcRetryTransaction"
       | "rpcCancelTransaction"
+      | "rpcDeleteTransaction"
       | "rpcBinance"
       | "rpcBybit"
       | "rpcCoinbase"
@@ -3483,11 +3483,16 @@ export interface components {
           /** @enum {string} */
           method: "cs_binanceSubAccountDepositAddress";
           params: components["schemas"]["BinanceSubAccountDepositAddressParams"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_binanceSubAccountDepositHistory";
+          params: components["schemas"]["BinanceSubAccountDepositHistoryParams"];
         };
     /** @description Response returned by the typed `binance_sign` endpoint. */
     BinanceSignResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * @description The full signed query string, ready to be submitted to Binance.
@@ -3520,6 +3525,18 @@ export interface components {
       recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
+    BinanceSubAccountDepositHistoryParams: components["schemas"]["SubAccountDepositHistoryRequest"] & {
+      dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: float
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * May only be specified in milliseconds, with up to three decimal places of precision.
+       * If omitted, defaults to 10000. Must not be greater than 60000.
+       */
+      recvWindow?: number | null;
+    };
+    /** @description Parameters envelope for all Binance RPC methods. */
     BinanceSubAccountTransferHistoryParams: components["schemas"]["SubAccountTransferHistoryRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
@@ -3759,7 +3776,7 @@ export interface components {
     /** @description BTC message signing response */
     BtcMessageSignResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /** @description The base64-encoded signature in BIP137 format. */
       sig: string;
@@ -3939,6 +3956,11 @@ export interface components {
       org_id: components["schemas"]["Id"];
       owner: components["schemas"]["Id"];
     };
+    /**
+     * @description Different Bybit account kinds.
+     * @enum {string}
+     */
+    BybitAccountKind: "Main" | "Sub";
     /**
      * @description Wire-format patch payload for [`KeyProperties::BybitApi`].
      *
@@ -3946,6 +3968,7 @@ export interface components {
      * leaves the existing value alone, a JSON `null` clears it, and a value sets it.
      */
     BybitApiPropertiesPatch: {
+      account_kind?: components["schemas"]["BybitAccountKind"] | null;
       /** @description The Bybit-issued API key string. Encrypted server-side before storage. */
       api_key?: string | null;
       /** @description Arbitrary label. Useful for storing the corresponding API key label on the Bybit side. */
@@ -4423,6 +4446,11 @@ export interface components {
           method: "cs_bybitDepositHistory";
           params: components["schemas"]["BybitDepositHistoryParams"];
         }
+      | {
+          /** @enum {string} */
+          method: "cs_bybitSubDepositHistory";
+          params: components["schemas"]["BybitSubDepositHistoryParams"];
+        }
       | {
           /** @enum {string} */
           method: "cs_bybitUniversalTransferHistory";
@@ -4441,7 +4469,7 @@ export interface components {
     /** @description Response returned by the typed `bybit_sign` endpoint. */
     BybitSignResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * @description The Bybit-bound payload (URL-encoded query for GET, JSON body for
@@ -4466,6 +4494,67 @@ export interface components {
        */
       timestamp_ms: number;
     };
+    /**
+     * @description Parameters envelope for all Bybit RPC variants whose payload schema is
+     * derived from a `*Request` struct. (`BybitQueryUserParams` and
+     * `BybitQuerySubMembersParams` have no per-variant payload and are defined
+     * directly below.)
+     */
+    BybitSubDepositHistoryParams: components["schemas"]["BybitSubDepositHistoryRequest"] & {
+      dryRun?: components["schemas"]["BybitDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: int32
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * Specified in milliseconds. If omitted, defaults to 10000.
+       */
+      recvWindow?: number | null;
+    };
+    /**
+     * @description Parameters for `GET /v5/asset/deposit/query-sub-member-record`.
+     *
+     * Master-only: returns the deposit records of the sub-account named by
+     * `sub_member_id`. Bybit exposes these to the parent account's credentials
+     * alone; a sub-account key reads its own deposits through
+     * [`BybitDepositHistoryRequest`] instead.
+     *
+     * By default, queries records from the last 30 days; otherwise, `endTime` -
+     * `startTime` must be less than 30 days.
+     */
+    BybitSubDepositHistoryRequest: {
+      /** @description Filter by coin symbol (uppercase). */
+      coin?: string | null;
+      /** @description Pagination cursor (the `nextPageCursor` from a prior response). */
+      cursor?: string | null;
+      /**
+       * Format: int64
+       * @description End timestamp (ms since epoch).
+       */
+      endTime?: number | null;
+      /** @description Filter by Bybit-internal deposit id. */
+      id?: string | null;
+      /**
+       * Format: int32
+       * @description Page size, `[1, 50]`. Defaults to 50.
+       */
+      limit?: number | null;
+      /**
+       * Format: int64
+       * @description Start timestamp (ms since epoch). The span between `start_time` and
+       * `end_time` must not exceed 30 days.
+       */
+      startTime?: number | null;
+      /**
+       * @description UID of the sub-account whose deposit history to fetch. Bybit requires
+       * this, so there is no "calling account" fallback on this endpoint.
+       */
+      subMemberId: string;
+      /**
+       * @description Filter by on-chain transaction id. Data before 2024-01-01 is not
+       * queryable via this field.
+       */
+      txID?: string | null;
+    };
     /** @description One entry in [`BybitQuerySubMembersResponse::sub_members`]. */
     BybitSubMember: {
       /**
@@ -4780,20 +4869,51 @@ export interface components {
        */
       recvWindow?: number | null;
     };
-    /** @description Parameters for `GET /v5/asset/withdraw/query-record`. */
+    /**
+     * @description Parameters for `GET /v5/asset/withdraw/query-record`.
+     *
+     * Master-only: Bybit answers this endpoint for the master UID's API key
+     * alone, and has no sub-account equivalent, because sub-accounts cannot
+     * withdraw to an external address.
+     *
+     * By default, queries records from the last 30 days; otherwise, `endTime` -
+     * `startTime` must be less than 30 days.
+     */
     BybitWithdrawalsRequest: {
       /** @description Filter by coin symbol. */
       coin?: string | null;
+      /** @description Pagination cursor (the `nextPageCursor` from a prior response). */
+      cursor?: string | null;
+      /**
+       * Format: int64
+       * @description End timestamp (ms since epoch).
+       */
+      endTime?: number | null;
       /**
        * Format: int32
-       * @description Page size.
+       * @description Page size, `[1, 50]`. Defaults to 50.
        */
       limit?: number | null;
+      /**
+       * Format: int64
+       * @description Start timestamp (ms since epoch). The span between `start_time` and
+       * `end_time` must not exceed 30 days.
+       */
+      startTime?: number | null;
+      /** @description Filter by on-chain transaction id. */
+      txID?: string | null;
       /**
        * @description Filter by Bybit-assigned withdrawal id (the `id` returned by
        * [`BybitRpc::Withdraw`]).
        */
       withdrawID?: string | null;
+      /**
+       * Format: int32
+       * @description Which kinds of withdrawal to return: `0` on-chain only, `1` off-chain
+       * (internal Bybit-to-Bybit) only, `2` both. Bybit defaults to `0`, so
+       * internal transfers out are invisible unless this is set to `1` or `2`.
+       */
+      withdrawType?: number | null;
     };
     /** @description Response of `GET /v5/asset/withdraw/query-record`. */
     BybitWithdrawalsResponse: {
@@ -4805,10 +4925,20 @@ export interface components {
       /** @description Withdrawal records matching the query. */
       rows: components["schemas"]["BybitWithdrawEntry"][];
     };
+    /** @description Return type of [proxy::call_webhook] */
+    CallWebhookResult: {
+      /** @description The response body */
+      body: string;
+      /**
+       * Format: int32
+       * @description The HTTP status of the response
+       */
+      status: number;
+    };
     CancelInvitationRequest: {
       email: components["schemas"]["Email"];
     };
-    /** @description Parameters for the [`cs_cancelTransaction`](RpcMethod::CancelTransaction) method. */
+    /** @description Parameters for the [`cs_transactionCancel`](RpcMethod::CancelTransaction) method. */
     CancelTransactionRequest: {
       /** @description The transaction id. */
       id: string;
@@ -5130,7 +5260,7 @@ export interface components {
     /** @description Response returned by the typed `coinbase_sign` endpoint. */
     CoinbaseSignResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * @description The signed JWT, ready to be sent in `Authorization: Bearer <jwt>` to
@@ -5196,6 +5326,11 @@ export interface components {
         [key: string]: number;
       };
     };
+    /** @description Evaluation of a single if-then-else conditional. */
+    Conditional: {
+      if: components["schemas"]["PolicyEvalTree"];
+      then?: components["schemas"]["PolicyEvalTree"] | null;
+    };
     ConfigureEmailRequest: {
       auth: {
         smtp: string;
@@ -5289,6 +5424,11 @@ export interface components {
      */
     ContactLabel: "cubist:erc20_token" | "cubist:spl_token";
     CreateAndUpdateKeyProperties: {
+      /**
+       * @description Set this key's access-control entries.
+       * For an existing key, this overwrites the current acl, if any.
+       */
+      acl?: unknown;
       edit_policy?: components["schemas"]["EditPolicy"] | null;
       /**
        * @description Set this key's metadata. If this value is `null`, the metadata is erased. If the field is
@@ -5524,7 +5664,7 @@ export interface components {
          */
         scopes?: components["schemas"]["Scope"][] | null;
       };
-    /** @description Parameters for the [`cs_createTransaction`](RpcMethod::CreateTransaction) method. */
+    /** @description Parameters for the [`cs_transactionCreate`](RpcMethod::CreateTransaction) method. */
     CreateTransactionRequest: {
       type: "CreateTransactionRequest";
     } & Omit<components["schemas"]["CreateEvmTransactionRequest"], "type"> & {
@@ -5544,27 +5684,32 @@ export interface components {
     CsRpc:
       | {
           /** @enum {string} */
-          method: "cs_createTransaction";
+          method: "cs_transactionCreate";
           params: components["schemas"]["CreateTransactionRequest"];
         }
       | {
           /** @enum {string} */
-          method: "cs_retryTransaction";
+          method: "cs_transactionRetry";
           params: components["schemas"]["RetryTransactionRequest"];
         }
       | {
           /** @enum {string} */
-          method: "cs_cancelTransaction";
+          method: "cs_transactionCancel";
           params: components["schemas"]["CancelTransactionRequest"];
         }
       | {
           /** @enum {string} */
-          method: "cs_getTransaction";
+          method: "cs_transactionDelete";
+          params: components["schemas"]["DeleteTransactionRequest"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_transactionGet";
           params: components["schemas"]["GetTransactionRequest"];
         }
       | {
           /** @enum {string} */
-          method: "cs_listTransactions";
+          method: "cs_transactionList";
           params: components["schemas"]["ListTransactionsRequest"];
         }
       | {
@@ -5604,6 +5749,22 @@ export interface components {
       /** @description Custom EVM chains. */
       evm: components["schemas"]["EvmCustomChain"][];
     };
+    /** @description Parameters for the [`cs_transactionDelete`](RpcMethod::DeleteTransaction) method. */
+    DeleteTransactionRequest: {
+      /**
+       * @description Whether to force the deletion.
+       *
+       * Transactions that are not "submitted" or "canceled" will not be deleted unless
+       * this is true.
+       *
+       * **Note:** force deleting a pending transaction may prevent follow-up transactions
+       * from succeeding, and require manual intervention (e.g. specifying the key nonce).
+       * We strongly advise canceling the transaction first.
+       */
+      force?: boolean | null;
+      /** @description The transaction id. */
+      id: string;
+    };
     /** @description One deposit entry in [`DepositHistoryResponse`]. */
     DepositHistoryEntry: {
       /** @description Destination address the deposit was sent to. */
@@ -5902,7 +6063,7 @@ export interface components {
         }
     ) & {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & Record<string, never>;
     /**
      * @description A policy which governs when and who is allowed to update the entity this policy is
@@ -6229,7 +6390,7 @@ export interface components {
     /** @description Response generated when creating EOTS nonces */
     EotsCreateNonceResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * @description The generated nonces as an array of 0x-prefixed hex strings
@@ -6307,7 +6468,7 @@ export interface components {
       /** @description Error message */
       message: string;
       /** @description Optional policy evaluation tree (included in signer responses, when requested) */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
       /** @description Optional request identifier */
       request_id?: string;
     };
@@ -6375,7 +6536,7 @@ export interface components {
     };
     Eth1SignResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * @description Hex-encoded RLP encoding of the transaction and its signature
@@ -6431,6 +6592,11 @@ export interface components {
       eth2_sign_request: Record<string, never>;
       network: components["schemas"]["Network"];
     };
+    /**
+     * @description Auto-generated discriminant enum variants
+     * @enum {string}
+     */
+    EvalOutcome: "Permitted" | "Inapplicable" | "Denied" | "MfaRequired";
     /**
      * @description Representation of an event. This type is used to serialize events to CloudWatch Logs and to
      * deserialize them when analyzing the logs.
@@ -6651,6 +6817,7 @@ export interface components {
       | "sign:binance:listSubAccounts"
       | "sign:binance:coinInfo"
       | "sign:binance:subAccountDepositAddress"
+      | "sign:binance:subAccountDepositHistory"
       | "sign:bybit:*"
       | "sign:bybit:queryUser"
       | "sign:bybit:querySubMembers"
@@ -6661,6 +6828,7 @@ export interface components {
       | "sign:bybit:withdrawals"
       | "sign:bybit:queryCoinInfo"
       | "sign:bybit:depositHistory"
+      | "sign:bybit:subDepositHistory"
       | "sign:bybit:universalTransferHistory"
       | "sign:bybit:queryWithdrawAddress"
       | "sign:bybit:querySubDepositAddress"
@@ -6742,6 +6910,7 @@ export interface components {
       | "manage:key:update:*"
       | "manage:key:update:owner"
       | "manage:key:update:policy"
+      | "manage:key:update:acl"
       | "manage:key:update:enabled"
       | "manage:key:update:region"
       | "manage:key:update:metadata"
@@ -6897,12 +7066,14 @@ export interface components {
       | "orgAccess:*"
       | "orgAccess:child:*"
       | "rpc:*"
-      | "rpc:createTransaction:*"
-      | "rpc:createTransaction:evm"
-      | "rpc:retryTransaction"
-      | "rpc:cancelTransaction"
-      | "rpc:getTransaction"
-      | "rpc:listTransactions"
+      | "rpc:transaction:*"
+      | "rpc:transaction:create:*"
+      | "rpc:transaction:create:evm"
+      | "rpc:transaction:retry"
+      | "rpc:transaction:cancel"
+      | "rpc:transaction:delete"
+      | "rpc:transaction:get"
+      | "rpc:transaction:list"
       | "rpc:btcListUtxos"
       | "rpc:binance"
       | "rpc:bybit"
@@ -7137,7 +7308,7 @@ export interface components {
     GetKeysInOrgRequest: {
       key_type?: components["schemas"]["KeyType"] | null;
     };
-    /** @description Parameters for the [`cs_getTransaction`](RpcMethod::GetTransaction) method. */
+    /** @description Parameters for the [`cs_transactionGet`](RpcMethod::GetTransaction) method. */
     GetTransactionRequest: {
       id: components["schemas"]["Id"];
     };
@@ -7614,7 +7785,7 @@ export interface components {
     };
     /** @description Valid `result` from the JSON-RPC API. */
     JsonRpcResult:
-      | components["schemas"]["TransactionInfo"]
+      | components["schemas"]["RpcTransactionInfo"]
       | components["schemas"]["ListTransactionsPaginatedResponse"]
       | components["schemas"]["SubAccountTransferResponse"]
       | components["schemas"]["UniversalTransferResponse"]
@@ -7714,6 +7885,20 @@ export interface components {
       role_id: string;
     };
     KeyInfo: components["schemas"]["CommonFields"] & {
+      /**
+       * @description Key access-control entries
+       * @example [
+       *   {
+       *     "actions": [
+       *       "manage:key:properties"
+       *     ],
+       *     "subjects": [
+       *       "User#c3b9379c-4e8c-4216-bd0a-65ace53cf98f"
+       *     ]
+       *   }
+       * ]
+       */
+      acl?: unknown[] | null;
       derivation_info?: components["schemas"]["KeyDerivationInfo"] | null;
       /** @description Whether the key is enabled (only enabled keys may be used for signing) */
       enabled: boolean;
@@ -7874,6 +8059,44 @@ export interface components {
      * so that they can pass this back to us as a url query parameter.
      */
     LastEvalKey: string;
+    /**
+     * @description The base policy evaluation result associated with a [leaf][PolicyEvalTree::Leaf] node.
+     *
+     * This type is very similar to [BasePolicyEvalResult], except that it contains only the
+     * information we want to include in the evaluation tree that we send back to the client.
+     */
+    LeafNodeResult: OneOf<
+      [
+        {
+          evidence: components["schemas"]["PermitEvidence"];
+          /** @enum {string} */
+          outcome: "Permitted";
+        },
+        {
+          op: components["schemas"]["OperationKind"];
+          /** @enum {string} */
+          outcome: "Inapplicable";
+        },
+        {
+          error_code: components["schemas"]["PolicyErrorCode"];
+          message: string;
+          /** @description Additional structured details about the denial */
+          more_info?: unknown;
+          /** @enum {string} */
+          outcome: "Denied";
+        },
+        {
+          /** @enum {string} */
+          outcome: "MfaRequired";
+        },
+      ]
+    >;
+    /** @description Properties of a [PolicyEvalTree::Leaf] node. */
+    LeafProps: components["schemas"]["LeafNodeResult"] & {
+      provenance: components["schemas"]["PolicyAttachedTo"];
+      /** @description The leaf rule that was evaluated */
+      rule: unknown;
+    };
     /**
      * @description Parameters for `cs_coinbaseListAccounts`.
      *
@@ -7962,7 +8185,7 @@ export interface components {
      */
     ListTransactionsPaginatedResponse: {
       /** @description A list of transaction infos. */
-      transactions: components["schemas"]["TransactionInfo"][];
+      transactions: components["schemas"]["RpcTransactionInfo"][];
     } & {
       /**
        * @description If set, the content of `response` does not contain the entire result set.
@@ -7971,7 +8194,7 @@ export interface components {
        */
       last_evaluated_key?: string | null;
     };
-    /** @description Parameters for the [`cs_listTransactions`](RpcMethod::ListTransactions) method. */
+    /** @description Parameters for the [`cs_transactionList`](RpcMethod::ListTransactions) method. */
     ListTransactionsRequest: components["schemas"]["Page"] & {
       /**
        * @description Optional user or role id.
@@ -7980,10 +8203,10 @@ export interface components {
        */
       owner?: string | null;
     };
-    /** @description The response to [`cs_listTransactions`](super::request::CsRpc::ListTransactions) */
+    /** @description The response to [`cs_transactionList`](super::request::CsRpc::ListTransactions) */
     ListTransactionsResponse: {
       /** @description A list of transaction infos. */
-      transactions: components["schemas"]["TransactionInfo"][];
+      transactions: components["schemas"]["RpcTransactionInfo"][];
     };
     LoginRequest: components["schemas"]["OidcLoginRequest"];
     /**
@@ -8085,7 +8308,7 @@ export interface components {
       /** @description Organization id */
       org_id: string;
       /** @description Optional policy evaluation tree (included in signer responses, when requested) */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
       session?: components["schemas"]["NewSessionResponse"] | null;
     };
     /** @description Org-wide MFA requirements. */
@@ -8366,6 +8589,7 @@ export interface components {
       | "BinanceListSubAccounts"
       | "BinanceCoinInfo"
       | "BinanceSubAccountDepositAddress"
+      | "BinanceSubAccountDepositHistory"
       | "BlobSign"
       | "BtcMessageSign"
       | "BtcSign"
@@ -8378,6 +8602,7 @@ export interface components {
       | "BybitWithdrawals"
       | "BybitQueryCoinInfo"
       | "BybitDepositHistory"
+      | "BybitSubDepositHistory"
       | "BybitUniversalTransferHistory"
       | "BybitQueryWithdrawAddress"
       | "BybitQuerySubDepositAddress"
@@ -9297,6 +9522,192 @@ export interface components {
       message_tx?: components["schemas"]["TypedTransaction"] | null;
     }) &
       Record<string, never>;
+    /** @description Different kinds of evidence policy checkers can return to support their decision. */
+    PermitEvidence:
+      | {
+          /** @enum {string} */
+          kind: "ExplicitlyPermitted";
+          /** @description Optional message */
+          message?: string | null;
+        }
+      | {
+          approvals: {
+            [key: string]: {
+              [key: string]: components["schemas"]["ApprovalInfo"];
+            };
+          };
+          /** @enum {string} */
+          kind: "MfaApproved";
+          policy: components["schemas"]["MfaPolicy"];
+        }
+      | {
+          /** @enum {string} */
+          kind: "BabylonStaking";
+        }
+      | {
+          /** @enum {string} */
+          kind: "BtcReceivers";
+          /** @description The actual receivers of a Bitcoin transaction */
+          receivers: string[];
+        }
+      | {
+          /** @enum {string} */
+          kind: "BtcValueLimit";
+          /**
+           * Format: int64
+           * @description The new total (in SAT), including the current transaction
+           */
+          new_total: number;
+          /**
+           * Format: int64
+           * @description The limit (in SAT) specified by the policy
+           */
+          policy_limit: number;
+        }
+      | {
+          /**
+           * Format: int64
+           * @description Actual EVM chain
+           */
+          chain_id: number;
+          /** @enum {string} */
+          kind: "EvmChainDoesNotApply";
+        }
+      | {
+          /** @enum {string} */
+          kind: "EvmTransferOnly";
+        }
+      | {
+          /** @enum {string} */
+          kind: "EvmNotErc20";
+        }
+      | {
+          /** @enum {string} */
+          kind: "EvmErc20";
+        }
+      | {
+          /** @description The address of the contract being called */
+          address?: string | null;
+          /** @description The name of the contract method being called */
+          function: string;
+          /** @enum {string} */
+          kind: "EvmContractCall";
+        }
+      | {
+          /** @description The arguments of the contract method being called */
+          args: string[][];
+          /** @description The name of the contract method being called */
+          function: string;
+          /** @enum {string} */
+          kind: "EvmAbiConstrainedFunction";
+        }
+      | {
+          /** @enum {string} */
+          kind: "EvmGasCostLimit";
+          /** @description The policy gas cost limit (in WEI) */
+          policy_gas_cost_limit: string;
+          /** @description The transaction max gas cost (in WEI) */
+          tx_max_gas_cost: string;
+        }
+      | {
+          /** @enum {string} */
+          kind: "EvmValueLimit";
+          /** @description The new total (in WEI), including the current transaction */
+          new_total: string;
+          /** @description The limit (in WEI) specified by the policy */
+          policy_limit: string;
+        }
+      | {
+          /** @enum {string} */
+          kind: "EvmDeposit";
+          /** @description The details of the deposit transaction */
+          spec: Record<string, never>;
+        }
+      | {
+          /** @enum {string} */
+          kind: "EvmReceiver";
+          /** @description The actual receiver of an EVM transaction */
+          receiver?: string | null;
+        }
+      | {
+          /** @description The actual chain id of an EVM transaction or EIP-7702 authorization request */
+          chain_id: string;
+          /** @enum {string} */
+          kind: "EvmChainId";
+        }
+      | {
+          /** @description The contract address EIP-7702 delegates authorization to */
+          address: string;
+          /** @enum {string} */
+          kind: "Eip7702DelegationTarget";
+        }
+      | {
+          /** @enum {string} */
+          kind: "RoleSession";
+          /** @description The session identity role */
+          role_id: string;
+        }
+      | {
+          /** @enum {string} */
+          kind: "SolanaTx";
+        }
+      | {
+          /** @description Actual Sui receivers */
+          actual_receivers: string[];
+          /** @enum {string} */
+          kind: "SuiReceivers";
+        }
+      | (components["schemas"]["SourceIp"] & {
+          /** @enum {string} */
+          kind: "SourceIpAllowlisted";
+        })
+      | {
+          /** @enum {string} */
+          kind: "CelPolicyMatched";
+          /** @description The CEL program that was evaluated */
+          program: string;
+        }
+      | {
+          /** @enum {string} */
+          kind: "OperationAllowlisted";
+          operation: components["schemas"]["OperationKind"];
+        }
+      | {
+          /** @enum {string} */
+          kind: "TaprootValueLimit";
+          /**
+           * Format: int64
+           * @description The limit (in SAT) specified by the policy
+           */
+          policy_limit: number;
+          /**
+           * Format: int64
+           * @description The transaction value (in SAT)
+           */
+          transaction_value: number;
+        }
+      | {
+          /** @description The size (in bytes) of the full stderr */
+          full_stderr_length: number;
+          /** @description The size (in bytes) of the full stdout */
+          full_stdout_length: number;
+          /** @enum {string} */
+          kind: "WasmResult";
+          /** @description Standard error of the wasm policy execution, truncated to 1024 bytes */
+          stderr: string;
+          /** @description Standard output of the wasm policy execution, truncated to 1024 bytes */
+          stdout: string;
+        }
+      | (components["schemas"]["CallWebhookResult"] & {
+          /** @enum {string} */
+          kind: "WebhookResult";
+        })
+      | {
+          current_time: components["schemas"]["EpochDateTime"];
+          /** @enum {string} */
+          kind: "TimeLockExpired";
+          lock_until: components["schemas"]["EpochDateTime"];
+        };
     /**
      * @description The access-controlled actions that can be performed on a named policy.
      * @enum {string}
@@ -9318,6 +9729,11 @@ export interface components {
       | "attach"
       | "sign"
       | "invoke";
+    /**
+     * @description MFA policy provenance
+     * @enum {string}
+     */
+    PolicyAttachedTo: "Org" | "Key" | "KeyInRole" | "Role" | "User" | "EditPolicy";
     /** @description The id for attaching a named policy to a key, role, or key in role. */
     PolicyAttachedToId: OneOf<
       [
@@ -9453,6 +9869,51 @@ export interface components {
       | "DeniedByWebhook"
       | "MfaApprovalsNotYetValid"
       | "ExplicitlyDenied";
+    /** @description Evaluation tree for a policy rule. */
+    PolicyEvalTree:
+      | {
+          Leaf: components["schemas"]["LeafProps"];
+        }
+      | {
+          /** @description Evaluation of a negation (i.e., [Deny::Not]) */
+          Not: {
+            child: components["schemas"]["PolicyEvalTree"];
+            outcome: components["schemas"]["EvalOutcome"];
+          };
+        }
+      | {
+          /** @description Evaluation of a [Deny::IfThenElse] policy */
+          IfThenElse: {
+            /** @description Evaluated conditionals */
+            children: components["schemas"]["Conditional"][];
+            else?: components["schemas"]["PolicyEvalTree"] | null;
+            outcome: components["schemas"]["EvalOutcome"];
+          };
+        }
+      | {
+          /** @description Evaluation of a list of policy rules */
+          Concat: {
+            /** @description Evaluation trees of each evaluated policy */
+            children: components["schemas"]["PolicyEvalTree"][];
+            outcome: components["schemas"]["EvalOutcome"];
+          };
+        }
+      | {
+          /** @description Evaluation of a conjunction (i.e., [Deny::And]). */
+          And: {
+            /** @description Evaluation trees of each evaluated conjunct */
+            children: components["schemas"]["PolicyEvalTree"][];
+            outcome: components["schemas"]["EvalOutcome"];
+          };
+        }
+      | {
+          /** @description Evaluation of a disjunction (i.e., [Deny::Or]). */
+          Or: {
+            /** @description Evaluation trees of each evaluated disjunct */
+            children: components["schemas"]["PolicyEvalTree"][];
+            outcome: components["schemas"]["EvalOutcome"];
+          };
+        };
     /** @description A struct containing all the information about a specific version of a policy. */
     PolicyInfo: {
       /** @description The access-control entries for the policy. */
@@ -9614,7 +10075,7 @@ export interface components {
     /** @description Response to a PSBT signing request */
     PsbtSignResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /**
        * @description The PSBT in standard hex serialization, without leading "0x".
@@ -10122,7 +10583,7 @@ export interface components {
     RestrictedActionsMap: {
       [key: string]: components["schemas"]["MemberRole"][];
     };
-    /** @description Parameters for the [`cs_retryTransaction`](RpcMethod::RetryTransaction) method. */
+    /** @description Parameters for the [`cs_transactionRetry`](RpcMethod::RetryTransaction) method. */
     RetryTransactionRequest: components["schemas"]["EvmTxCustomization"] & {
       /** @description The transaction id. */
       id: string;
@@ -10220,6 +10681,44 @@ export interface components {
       | components["schemas"]["BinanceRpc"]
       | components["schemas"]["BybitRpc"]
       | components["schemas"]["CoinbaseRpc"];
+    /** @description A transaction created by the RPC API. */
+    RpcTransaction: {
+      status: "RpcTransaction";
+    } & Omit<components["schemas"]["RpcTxStatus"], "status"> &
+      Omit<components["schemas"]["TransactionDetails"], "chain"> &
+      components["schemas"]["VersioningFields"] & {
+        /** @description The session identity that created the transaction. */
+        owner: string;
+      };
+    /** @description Information about an existing transaction created by the RPC API. */
+    RpcTransactionInfo: components["schemas"]["RpcTransaction"] & {
+      /** @description The transaction id. */
+      id: string;
+    };
+    /** @description The status of the transaction. */
+    RpcTxStatus:
+      | {
+          mfa_ids: string[];
+          /** @enum {string} */
+          status: "MfaRequired";
+        }
+      | {
+          /** @enum {string} */
+          status: "Signed";
+        }
+      | {
+          /** @enum {string} */
+          status: "Submitted";
+        }
+      | {
+          /** @enum {string} */
+          status: "Canceled";
+        }
+      | {
+          error: components["schemas"]["ErrorObj"];
+          /** @enum {string} */
+          status: "Failed";
+        };
     /** @description All scopes for accessing CubeSigner APIs */
     Scope: components["schemas"]["ExplicitScope"] | string;
     /** @description A set of scopes. */
@@ -10392,7 +10891,7 @@ export interface components {
       /** @description Whether MFA is required */
       mfa_requests: components["schemas"]["MfaRequestInfo"][];
       /** @description Optional policy evaluation tree, if requested */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     };
     /**
      * @description The structured input to a Sign-In With Solana request (`SolanaSignInInput` in the spec).
@@ -10427,7 +10926,7 @@ export interface components {
     };
     SignResponse: {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       /** @description The hex-encoded resulting signature. */
       signature: string;
@@ -10694,7 +11193,7 @@ export interface components {
     };
     StakeResponse: ({
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & {
       deposit_tx: components["schemas"]["DepositTxn"];
     }) & {
@@ -10826,6 +11325,52 @@ export interface components {
       /** @description Blockchain explorer URL for `address`. */
       url?: string | null;
     };
+    /**
+     * @description Parameters for `GET /sapi/v1/capital/deposit/subHisrec`.
+     *
+     * Master-account keys only; use [`DepositHistoryRequest`] for the calling
+     * account's own deposits.
+     */
+    SubAccountDepositHistoryRequest: {
+      /** @description Filter to a specific asset (e.g. `"USDT"`, `"BTC"`). */
+      coin?: string | null;
+      /**
+       * @description Email of the sub-account whose deposit history to fetch. Binance
+       * requires this, so there is no "calling account" fallback here.
+       */
+      email: string;
+      /**
+       * Format: int64
+       * @description Window end (ms since epoch).
+       */
+      endTime?: number | null;
+      /**
+       * Format: int32
+       * @description Page size (Binance max: 200). Note that Binance defaults this to `1`,
+       * not to a full page, so callers should always set it.
+       */
+      limit?: number | null;
+      /**
+       * Format: int32
+       * @description Pagination offset (Binance default: 0).
+       */
+      offset?: number | null;
+      /**
+       * Format: int64
+       * @description Window start (ms since epoch). Binance returns the most recent 90 days
+       * when this and `end_time` are both omitted.
+       */
+      startTime?: number | null;
+      /**
+       * Format: int32
+       * @description Filter by deposit status. Binance values: `0` = pending, `6` = credited
+       * but cannot withdraw, `7` = wrong deposit, `8` = waiting user confirm,
+       * `1` = success. Left as `u8` for forward compatibility.
+       */
+      status?: number | null;
+      /** @description Look up a specific deposit by its on-chain transaction hash. */
+      txId?: string | null;
+    };
     /** @description One sub-account entry in [`ListSubAccountsResponse`]. */
     SubAccountInfo: {
       /**
@@ -11204,11 +11749,6 @@ export interface components {
       /** @enum {string} */
       chain: "Evm";
     };
-    /** @description Information about an existing transaction created by the RPC API. */
-    TransactionInfo: components["schemas"]["Transaction"] & {
-      /** @description The transaction id. */
-      id: string;
-    };
     /**
      * @description Supported queries
      * @enum {string}
@@ -11555,7 +12095,7 @@ export interface components {
       signature: string;
     } & {
       /** @description Optional policy evaluation tree. */
-      policy_eval_tree?: unknown;
+      policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
     } & Record<string, never>;
     /** @description The information needed to update a bucket. */
     UpdateBucketRequest: {
@@ -12184,6 +12724,19 @@ export interface components {
        */
       updated_at: number;
     };
+    /**
+     * @description Versioning fields (e.g., version number, creation time, and last modified times)
+     * that are common to different types of resources.
+     */
+    VersioningFields: {
+      created?: components["schemas"]["EpochDateTime"] | null;
+      last_modified?: components["schemas"]["EpochDateTime"] | null;
+      /**
+       * Format: int64
+       * @description Version of this object
+       */
+      version?: number;
+    };
     /**
      * @description An exit voluntarily submitted a validator who wishes to withdraw.
      * The schema for this message is defined
@@ -12465,7 +13018,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * @description The slash-unbonding transaction signatures as an array of hex strings with no 0x prefix
@@ -12501,7 +13054,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * @description The Babylon address that will receive the staking rewards for this deposit.
@@ -12551,7 +13104,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * Format: int64
@@ -12572,7 +13125,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * @description The full signed query string, ready to be submitted to Binance.
@@ -12587,7 +13140,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /** @description The base64-encoded signature in BIP137 format. */
           sig: string;
@@ -12623,7 +13176,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * @description The Bybit-bound payload (URL-encoded query for GET, JSON body for
@@ -12655,7 +13208,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * @description The signed JWT, ready to be sent in `Authorization: Bearer <jwt>` to
@@ -12794,7 +13347,7 @@ export interface components {
             }
         ) & {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & Record<string, never>;
       };
     };
@@ -12828,7 +13381,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * @description The generated nonces as an array of 0x-prefixed hex strings
@@ -12851,7 +13404,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * @description Hex-encoded RLP encoding of the transaction and its signature
@@ -13066,6 +13619,20 @@ export interface components {
     KeyInfo: {
       content: {
         "application/json": components["schemas"]["CommonFields"] & {
+          /**
+           * @description Key access-control entries
+           * @example [
+           *   {
+           *     "actions": [
+           *       "manage:key:properties"
+           *     ],
+           *     "subjects": [
+           *       "User#c3b9379c-4e8c-4216-bd0a-65ace53cf98f"
+           *     ]
+           *   }
+           * ]
+           */
+          acl?: unknown[] | null;
           derivation_info?: components["schemas"]["KeyDerivationInfo"] | null;
           /** @description Whether the key is enabled (only enabled keys may be used for signing) */
           enabled: boolean;
@@ -13792,7 +14359,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /**
            * @description The PSBT in standard hex serialization, without leading "0x".
@@ -13963,7 +14530,7 @@ export interface components {
       content: {
         "application/json": {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           /** @description The hex-encoded resulting signature. */
           signature: string;
@@ -14027,7 +14594,7 @@ export interface components {
       content: {
         "application/json": ({
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & {
           deposit_tx: components["schemas"]["DepositTxn"];
         }) & {
@@ -14105,7 +14672,7 @@ export interface components {
           signature: string;
         } & {
           /** @description Optional policy evaluation tree. */
-          policy_eval_tree?: unknown;
+          policy_eval_tree?: components["schemas"]["PolicyEvalTree"] | null;
         } & Record<string, never>;
       };
     };