@dynamic-labs-sdk/client 1.33.1 → 1.33.3

package/dist/modules/sessionKeys/signBusinessAccountIntent/signBusinessAccountIntent.d.ts

@@ -8,6 +8,17 @@ import type { DynamicClient } from '../../../client/types';
  * There is deliberately no `expiresAt`. How long an intent stays redeemable is
  * the account's governance to decide, measured from `createdAt` — an
  * initiator-chosen expiry would be an initiator-chosen authorization lifetime.
+ *
+ * @example
+ * ```ts
+ * const result = await addBusinessAccountMember({ businessAccountId, targetIdentity, role: 'admin' });
+ * if (isBusinessAccountActionRequired(result)) {
+ *   const intent: BusinessAccountIntent = result.intent;
+ * }
+ * ```
+ *
+ * @see {@link signBusinessAccountIntent} for signing one of these.
+ * @see {@link BusinessAccountActionRequired} for where an unsigned intent is returned.
  */
 export type BusinessAccountIntent = {
     actionType: string;
@@ -22,7 +33,17 @@ export type BusinessAccountIntent = {
 type SignBusinessAccountIntentParams = {
     intent: BusinessAccountIntent;
 };
-/** The signed intent and the signature over its canonical form. */
+/**
+ * The signed intent and the signature over its canonical form.
+ *
+ * @example
+ * ```ts
+ * const signed: SignBusinessAccountIntentResult = await signBusinessAccountIntent({ intent });
+ * ```
+ *
+ * @see {@link signBusinessAccountIntent} for producing this shape.
+ * @see {@link SignedBusinessAccountIntent} for resending it to a governed mutation.
+ */
 export type SignBusinessAccountIntentResult = {
     intent: BusinessAccountIntent;
     intentSignature: string;
@@ -40,7 +61,7 @@ export type SignBusinessAccountIntentResult = {
  * WebCrypto verify expects.
  *
  * @param params.intent - The intent to sign.
- * @param client - The Dynamic client instance.
+ * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
  * @returns The intent alongside the P1363 hex signature over its canonical form.
  *
  * @example
@@ -50,16 +71,27 @@ export type SignBusinessAccountIntentResult = {
  *
  * @see {@link signBusinessAccountApproval} for a co-signer approving this intent.
  * @see {@link BusinessAccountIntent} for the shape being signed.
+ * @noHook A local crypto step inside a larger flow, not a standalone server mutation a component would drive loading/error state around.
  * @notInstrumented
  */
-export declare const signBusinessAccountIntent: ({ intent }: SignBusinessAccountIntentParams, client: DynamicClient) => Promise<SignBusinessAccountIntentResult>;
+export declare const signBusinessAccountIntent: ({ intent }: SignBusinessAccountIntentParams, client?: DynamicClient) => Promise<SignBusinessAccountIntentResult>;
 type SignBusinessAccountApprovalParams = {
     /** Defaults to now. Accepted for tests and for a caller that has already
      *  recorded when the human consented. */
     approvedAt?: string;
     intent: BusinessAccountIntent;
 };
-/** An approval's signature and the timestamp it was signed over. */
+/**
+ * An approval's signature and the timestamp it was signed over.
+ *
+ * @example
+ * ```ts
+ * const { approvedAt, signature }: SignBusinessAccountApprovalResult = await signBusinessAccountApproval({ intent });
+ * ```
+ *
+ * @see {@link signBusinessAccountApproval} for producing this shape.
+ * @see {@link approveBusinessAccountProposal} for the usual way to approve a proposal instead.
+ */
 export type SignBusinessAccountApprovalResult = {
     approvedAt: string;
     signature: string;
@@ -78,7 +110,7 @@ export type SignBusinessAccountApprovalResult = {
  *
  * @param params.intent - The intent being approved.
  * @param params.approvedAt - When the approver consented. Defaults to now.
- * @param client - The Dynamic client instance.
+ * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
  * @returns The timestamp signed over, alongside the P1363 hex signature.
  *
  * @example
@@ -88,8 +120,9 @@ export type SignBusinessAccountApprovalResult = {
  *
  * @see {@link signBusinessAccountIntent} for the initiator's own signature over the intent.
  * @see {@link BusinessAccountIntent} for the shape being approved.
+ * @noHook A local crypto step inside a larger flow — {@link approveBusinessAccountProposal} already wraps it for the normal approve-a-proposal case.
  * @notInstrumented
  */
-export declare const signBusinessAccountApproval: ({ intent, approvedAt, }: SignBusinessAccountApprovalParams, client: DynamicClient) => Promise<SignBusinessAccountApprovalResult>;
+export declare const signBusinessAccountApproval: ({ intent, approvedAt, }: SignBusinessAccountApprovalParams, client?: DynamicClient) => Promise<SignBusinessAccountApprovalResult>;
 export {};
 //# sourceMappingURL=signBusinessAccountIntent.d.ts.map

package/dist/modules/sessionKeys/signBusinessAccountIntent/signBusinessAccountIntent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signBusinessAccountIntent.d.ts","sourceRoot":"","sources":["../../../../src/modules/sessionKeys/signBusinessAccountIntent/signBusinessAccountIntent.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAM3D;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAAC;CACnD,CAAC;AAEF,KAAK,+BAA+B,GAAG;IACrC,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,+BAA+B,GAAG;IAC5C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,yBAAyB,eACxB,+BAA+B,UACnC,aAAa,KACpB,OAAO,CAAC,+BAA+B,CASzC,CAAC;AAEF,KAAK,iCAAiC,GAAG;IACvC;6CACyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF,oEAAoE;AACpE,MAAM,MAAM,iCAAiC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,eAAO,MAAM,2BAA2B,4BAInC,iCAAiC,UAC5B,aAAa,KACpB,OAAO,CAAC,iCAAiC,CAY3C,CAAC"}
+{"version":3,"file":"signBusinessAccountIntent.d.ts","sourceRoot":"","sources":["../../../../src/modules/sessionKeys/signBusinessAccountIntent/signBusinessAccountIntent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAAC;CACnD,CAAC;AAEF,KAAK,+BAA+B,GAAG;IACrC,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,yBAAyB,eACxB,+BAA+B,WACnC,aAAa,KACpB,OAAO,CAAC,+BAA+B,CASzC,CAAC;AAEF,KAAK,iCAAiC,GAAG;IACvC;6CACyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qBAAqB,CAAC;CAC/B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,2BAA2B,4BAInC,iCAAiC,WAC5B,aAAa,KACpB,OAAO,CAAC,iCAAiC,CAY3C,CAAC"}

package/dist/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.d.ts

@@ -1,8 +1,10 @@
 import type { DynamicClient } from '../../../../client/types';
-import type { BusinessAccountActionRequired, BusinessAccountMember, BusinessAccountMemberRole, TargetIdentity } from '../businessAccounts.types';
+import type { BusinessAccountActionRequired, BusinessAccountMember, BusinessAccountMemberRole, SignedBusinessAccountIntent, TargetIdentity } from '../businessAccounts.types';
 type AddMemberParams = {
+    autoExecute?: boolean;
     businessAccountId: string;
     role?: BusinessAccountMemberRole;
+    signed?: SignedBusinessAccountIntent;
     targetIdentity: TargetIdentity;
 };
 /**
@@ -16,18 +18,22 @@ type AddMemberParams = {
  *
  * When the account governs `addMember`, nothing is written and the 202 body is
  * returned instead — first the intent to sign, then the proposal collecting
- * approvals. Narrow it with `isBusinessAccountActionRequired`.
+ * approvals. Narrow it with `isBusinessAccountActionRequired`. Resend with
+ * `signed` (from `signBusinessAccountIntent`) to move past `INTENT_REQUIRED`.
  *
  * @param params.businessAccountId - The ID of the business account.
  * @param params.targetIdentity - The member to add (userId, or identifier + identifierType).
  * @param [params.role] - The member role: a built-in (`admin`, `viewer`) or a
  *   role this account defined. Defaults to `viewer`. `owner` is rejected — use
  *   `transferBusinessAccountOwnership`.
+ * @param [params.autoExecute] - Whether to apply on the completing approval.
+ *   Only meaningful on the first call.
+ * @param [params.signed] - A previously-signed intent, to resend past `INTENT_REQUIRED`.
  * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
  * @returns The created business account member, or the outstanding action required.
  * @throws {UnexpectedConsentResponseError} When a governed account answers 202 with an unrecognized body.
  * @notInstrumented
  */
-export declare const addBusinessAccountMember: ({ businessAccountId, targetIdentity, role }: AddMemberParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountMember>;
+export declare const addBusinessAccountMember: ({ businessAccountId, targetIdentity, role, autoExecute, signed }: AddMemberParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountMember>;
 export {};
 //# sourceMappingURL=addBusinessAccountMember.d.ts.map

package/dist/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"addBusinessAccountMember.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,yBAAyB,EACzB,cAAc,EACf,MAAM,2BAA2B,CAAC;AAGnC,KAAK,eAAe,GAAG;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,yBAAyB,CAAC;IACjC,cAAc,EAAE,cAAc,CAAC;CAChC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,wBAAwB,gDACU,eAAe,WACpD,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAqC/D,CAAC"}
+{"version":3,"file":"addBusinessAccountMember.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACf,MAAM,2BAA2B,CAAC;AAInC,KAAK,eAAe,GAAG;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,yBAAyB,CAAC;IACjC,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,cAAc,EAAE,cAAc,CAAC;CAChC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,wBAAwB,qEAC+B,eAAe,WACzE,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAsC/D,CAAC"}

package/dist/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.d.ts

@@ -1,7 +1,9 @@
 import type { DynamicClient } from '../../../../client/types';
-import type { BusinessAccountActionRequired, BusinessAccountDetail } from '../businessAccounts.types';
+import type { BusinessAccountActionRequired, BusinessAccountDetail, SignedBusinessAccountIntent } from '../businessAccounts.types';
 type AddWalletParams = {
+    autoExecute?: boolean;
     businessAccountId?: string;
+    signed?: SignedBusinessAccountIntent;
     walletId: string;
 };
 /**
@@ -15,14 +17,19 @@ type AddWalletParams = {
  *
  * When the account governs `linkWallet`, nothing is written and the 202 body is
  * returned instead — first the intent to sign, then the proposal collecting
- * approvals. Narrow it with `isBusinessAccountActionRequired`.
+ * approvals. Narrow it with `isBusinessAccountActionRequired`. Resend with
+ * `signed` (from `signBusinessAccountIntent`) to move past `INTENT_REQUIRED`.
  *
  * @param [params.businessAccountId] - The business account to link to; found-or-created when omitted.
  * @param params.walletId - The ID of the wallet to link.
+ * @param [params.autoExecute] - Whether to apply on the completing approval.
+ *   Only meaningful on the first call.
+ * @param [params.signed] - A previously-signed intent, to resend past `INTENT_REQUIRED`.
  * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
  * @returns The updated business account detail, or the outstanding action required.
+ * @throws {UnexpectedConsentResponseError} When a governed account answers 202 with an unrecognized body.
  * @notInstrumented
  */
-export declare const addWalletToBusinessAccount: ({ businessAccountId, walletId }: AddWalletParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountDetail>;
+export declare const addWalletToBusinessAccount: ({ businessAccountId, walletId, autoExecute, signed }: AddWalletParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountDetail>;
 export {};
 //# sourceMappingURL=addWalletToBusinessAccount.d.ts.map

package/dist/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"addWalletToBusinessAccount.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AAEnC,KAAK,eAAe,GAAG;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B,oCACJ,eAAe,WACxC,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CA2C/D,CAAC"}
+{"version":3,"file":"addWalletToBusinessAccount.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAG9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AAInC,KAAK,eAAe,GAAG;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,0BAA0B,yDACiB,eAAe,WAC7D,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAkC/D,CAAC"}

package/dist/modules/waas/businessAccounts/approveBusinessAccountProposal/approveBusinessAccountProposal.d.ts

@@ -0,0 +1,43 @@
+import type { DynamicClient } from '../../../../client/types';
+import type { BusinessAccountProposal } from '../businessAccounts.types';
+type ApproveProposalParams = {
+    businessAccountId: string;
+    proposal: BusinessAccountProposal;
+};
+/**
+ * Signs and records this session's approval of a pending proposal.
+ *
+ * The signature is over the intent AS STORED on `proposal`, which is why it's
+ * read off the proposal rather than rebuilt — a re-derived intent would carry
+ * a different `intentId` and fail verification. Run this signed in as the
+ * approver: the session key that signs is theirs, and the enclave reads who
+ * they are from the bearer token, not from any field here. An initiator can
+ * never approve their own proposal.
+ *
+ * With `autoExecute` on, the approval that completes the quorum also applies
+ * the change and the returned proposal reads `status: 'executed'` — the
+ * caller's cue to refresh the account rather than inferring readiness from
+ * the tally.
+ *
+ * @param params.businessAccountId - The business account the proposal belongs to.
+ * @param params.proposal - The proposal to approve, as returned by
+ *   `listBusinessAccountProposals` or `getBusinessAccount`.
+ * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+ * @returns The proposal after recording this approval.
+ *
+ * @example
+ * ```ts
+ * const pending = await listBusinessAccountProposals({ businessAccountId, status: 'pending' });
+ * const updated = await approveBusinessAccountProposal({ businessAccountId, proposal: pending[0] });
+ * if (updated.status === 'executed') {
+ *   // refresh the account — the change is live
+ * }
+ * ```
+ *
+ * @see {@link vetoBusinessAccountProposal} for refusing a proposal instead.
+ * @see {@link executeBusinessAccountProposal} for applying a satisfied one with `autoExecute` off.
+ * @notInstrumented
+ */
+export declare const approveBusinessAccountProposal: ({ businessAccountId, proposal }: ApproveProposalParams, client?: DynamicClient) => Promise<BusinessAccountProposal>;
+export {};
+//# sourceMappingURL=approveBusinessAccountProposal.d.ts.map

package/dist/modules/waas/businessAccounts/approveBusinessAccountProposal/approveBusinessAccountProposal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approveBusinessAccountProposal.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/approveBusinessAccountProposal/approveBusinessAccountProposal.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAG9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE,KAAK,qBAAqB,GAAG;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,uBAAuB,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,8BAA8B,oCACR,qBAAqB,WAC9C,aAAa,KACpB,OAAO,CAAC,uBAAuB,CAwBjC,CAAC"}

package/dist/modules/waas/businessAccounts/approveBusinessAccountProposal/index.d.ts

@@ -0,0 +1,2 @@
+export { approveBusinessAccountProposal } from './approveBusinessAccountProposal';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/businessAccounts/approveBusinessAccountProposal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/approveBusinessAccountProposal/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/modules/waas/businessAccounts/businessAccounts.types.d.ts

@@ -280,6 +280,255 @@ export type BusinessAccountActionRequired = {
     proposalId?: string;
     reason: 'APPROVALS_REQUIRED' | 'INTENT_REQUIRED';
 };
+/**
+ * A previously-signed intent, ready to resend so a governed mutation can move
+ * past `INTENT_REQUIRED` to `APPROVALS_REQUIRED`. Build it with
+ * `signBusinessAccountIntent({ intent: actionRequired.intent })`, then pass it
+ * back into the same mutation call as `signed`.
+ *
+ * @example
+ * ```ts
+ * const first = await addBusinessAccountMember({ businessAccountId, targetIdentity, role: 'admin' });
+ * if (isBusinessAccountActionRequired(first) && first.reason === 'INTENT_REQUIRED') {
+ *   const signed = await signBusinessAccountIntent({ intent: first.intent });
+ *   const second = await addBusinessAccountMember({ businessAccountId, targetIdentity, role: 'admin', signed });
+ * }
+ * ```
+ *
+ * @see {@link signBusinessAccountIntent} for producing this shape.
+ * @see {@link BusinessAccountActionRequired} for the `intent` a fresh attempt returns.
+ */
+export type SignedBusinessAccountIntent = {
+    intent: BusinessAccountMutationIntent;
+    intentSignature: string;
+};
+/**
+ * The new document version after a governance-configuration change applies
+ * immediately (ungoverned, or the completing approval of a governed one).
+ * Distinct from the domain objects other mutations return (a member, a
+ * detail) because `setGovernance`/`defineRole`/`deleteRole` change the
+ * account's authorization document itself, which has no separate summary
+ * shape of its own.
+ *
+ * @example
+ * ```ts
+ * const result = await setBusinessAccountGovernance({ businessAccountId, governance });
+ * if (!isBusinessAccountActionRequired(result)) {
+ *   console.log(result.version);
+ * }
+ * ```
+ *
+ * @see {@link setBusinessAccountGovernance}
+ * @see {@link defineBusinessAccountRole}
+ * @see {@link deleteBusinessAccountRole}
+ */
+export type BusinessAccountMutationVersion = {
+    version: number;
+};
+/**
+ * A role this account has defined, and the built-in role it inherits
+ * authority from. Inheriting is real: a holder of a role inheriting `admin`
+ * passes every admin-gated check, under the role's own name rather than
+ * `admin` itself.
+ *
+ * @example
+ * ```ts
+ * const roles = await listBusinessAccountRoles({ businessAccountId });
+ * console.log(roles.cfo?.inherits); // 'admin'
+ * ```
+ *
+ * @see {@link listBusinessAccountRoles}
+ * @see {@link defineBusinessAccountRole}
+ */
+export type BusinessAccountRoleDefinition = {
+    inherits: BuiltInBusinessAccountMemberRole;
+};
+/**
+ * Roles this account has defined, keyed by role name. Empty when none are —
+ * that's an answer, not a missing resource.
+ *
+ * @example
+ * ```ts
+ * const roles = await listBusinessAccountRoles({ businessAccountId });
+ * const cfoInherits = roles.cfo?.inherits;
+ * ```
+ *
+ * @see {@link listBusinessAccountRoles}
+ * @see {@link BusinessAccountRoleDefinition} for one role's shape.
+ */
+export type BusinessAccountRoleDefinitions = Record<string, BusinessAccountRoleDefinition>;
+/**
+ * Scopes a governance requirement to a subset of the changes it would
+ * otherwise match. A field only takes effect on the action(s) whose change
+ * actually carries it — `newRole` never matches `addMember`, for
+ * example, since nothing about adding a member names a role being left. Leave
+ * a requirement's `when` unset to apply it to every change of that action.
+ *
+ * `initiatorRoles` and `initiatorUserIds` describe the proposer rather than
+ * the change, so they apply everywhere regardless of action.
+ *
+ * @example
+ * ```ts
+ * const when: BusinessAccountRequirementCondition = { role: 'admin' };
+ * ```
+ *
+ * @see {@link BusinessAccountGovernanceRequirement} for where this is embedded.
+ * @see {@link setBusinessAccountGovernance} for writing a requirement with one.
+ */
+export type BusinessAccountRequirementCondition = {
+    initiatorRoles?: string[];
+    initiatorUserIds?: string[];
+    newRole?: string;
+    role?: string;
+    targetUserIds?: string[];
+    walletIds?: string[];
+};
+/**
+ * A governance rule: how many approvals a governed action needs, from whom,
+ * and under what condition it applies. This is the definition shape —
+ * `getBusinessAccountGovernance` returns it, `setBusinessAccountGovernance`
+ * takes it back. Distinct from `BusinessAccountApprovalRequirement`, which is
+ * the read-only tally of how close a specific proposal is to meeting one of
+ * these.
+ *
+ * @example
+ * ```ts
+ * const requirement: BusinessAccountGovernanceRequirement = {
+ *   id: 'one-admin',
+ *   schemaVersion: 1,
+ *   requiredApprovals: 1,
+ *   eligibleApproverRoles: ['admin'],
+ * };
+ * ```
+ *
+ * @see {@link BusinessAccountGovernance} for how these are keyed by action.
+ * @see {@link BusinessAccountApprovalRequirement} for the read-only tally shape.
+ * @see {@link setBusinessAccountGovernance}
+ */
+export type BusinessAccountGovernanceRequirement = {
+    approverCapabilities?: string[];
+    /** Seconds from the signed intent in which the change must be BOTH
+     *  approved and executed — one deadline, not separate approve-by and
+     *  execute-by clocks. Absent defaults to 24 hours; capped at 30 days. */
+    completeWithinSeconds?: number;
+    eligibleApproverRoles?: string[];
+    eligibleInitiatorRoles?: string[];
+    id: string;
+    mandatoryApproverRoles?: string[];
+    requiredApprovals: number;
+    schemaVersion: number;
+    when?: BusinessAccountRequirementCondition;
+};
+/**
+ * The governance rules in force, keyed by governed action, exactly as
+ * `getBusinessAccountGovernance` returns it and `setBusinessAccountGovernance`
+ * accepts it back. Empty when the account governs nothing — that is an
+ * answer, not a missing resource.
+ *
+ * @example
+ * ```ts
+ * const governance = await getBusinessAccountGovernance({ businessAccountId });
+ * const addMemberRules = governance.addMember ?? [];
+ * ```
+ *
+ * @see {@link getBusinessAccountGovernance}
+ * @see {@link setBusinessAccountGovernance}
+ */
+export type BusinessAccountGovernance = Record<string, BusinessAccountGovernanceRequirement[]>;
+/**
+ * One recorded consent on a proposal: who approved, when, and whether they
+ * later withdrew it. A withdrawal sets `revokedAt` rather than deleting the
+ * row — consent is recorded as given and taken back, not erased.
+ *
+ * @example
+ * ```ts
+ * const stillCounts = proposal.approvals.filter((a) => !a.revokedAt);
+ * ```
+ *
+ * @see {@link BusinessAccountProposal} for where this is embedded.
+ * @see {@link withdrawBusinessAccountProposalApproval} for what sets `revokedAt`.
+ */
+export type BusinessAccountProposalApprovalRecord = {
+    approvedAt: string;
+    approverUserId: string;
+    revokedAt: string | null;
+};
+/**
+ * A user a proposed change is about — the member being added, the signer
+ * being removed, the new owner — resolved for display. Empty for a change
+ * that names no user, such as `setGovernance`.
+ *
+ * @example
+ * ```ts
+ * const names = proposal.subjects?.map((s) => s.email ?? s.userId);
+ * ```
+ *
+ * @see {@link BusinessAccountProposal} for where this is embedded.
+ * @see {@link listBusinessAccountProposals} for where proposals are fetched.
+ */
+export type BusinessAccountProposalSubject = {
+    email: string | null;
+    userId: string;
+};
+/**
+ * A governed mutation waiting on consent: what was proposed, who has signed,
+ * and how each governance requirement is tracking. Untrusted workflow state —
+ * the enclave verifies every signature when the proposal is executed, and the
+ * signature on file is over `intent` exactly as stored, so an approver must
+ * sign these bytes verbatim rather than re-derive the intent.
+ *
+ * `approvalRequirements` is authoritative for readiness — do not infer it
+ * from counting `approvals`, which includes approvers outside a rule's pool
+ * and approvers demoted since they signed.
+ *
+ * @example
+ * ```ts
+ * const pending = await listBusinessAccountProposals({ businessAccountId, status: 'pending' });
+ * const ready = pending.filter((p) => p.approvalRequirements?.every((r) => r.satisfied));
+ * ```
+ *
+ * @see {@link listBusinessAccountProposals}
+ * @see {@link approveBusinessAccountProposal}
+ * @see {@link executeBusinessAccountProposal}
+ */
+export type BusinessAccountProposal = {
+    actionType: string;
+    approvalRequirements?: BusinessAccountApprovalRequirement[];
+    approvals: BusinessAccountProposalApprovalRecord[];
+    autoExecute?: boolean;
+    businessAccountId: string;
+    completeBy: string;
+    consumedAt: string | null;
+    createdAt: string;
+    id: string;
+    initiatorUserId: string;
+    intent: BusinessAccountMutationIntent;
+    status: 'executed' | 'expired' | 'pending' | 'vetoed';
+    subjects?: BusinessAccountProposalSubject[];
+};
+/**
+ * A proposal's tally when execution is attempted before its quorum is met.
+ * Not a failure: the caller may try again once more approvals land.
+ * `intent` is echoed back so a caller who executed too early can hand
+ * remaining approvers the exact bytes to sign, without a separate fetch.
+ *
+ * @example
+ * ```ts
+ * const result = await executeBusinessAccountProposal({ businessAccountId, proposalId });
+ * if ('reason' in result) {
+ *   console.log(result.approvalRequirements.map((r) => r.satisfied));
+ * }
+ * ```
+ *
+ * @see {@link executeBusinessAccountProposal}
+ * @see {@link BusinessAccountApprovalRequirement} for what each entry in `approvalRequirements` means.
+ */
+export type BusinessAccountProposalStillPending = {
+    approvalRequirements: BusinessAccountApprovalRequirement[];
+    intent: BusinessAccountMutationIntent;
+    proposalId: string;
+    reason: 'APPROVALS_REQUIRED';
+};
 export type BusinessAccountsApi = {
     addMember: (params: {
         businessAccountId: string;

package/dist/modules/waas/businessAccounts/businessAccounts.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"businessAccounts.types.d.ts","sourceRoot":"","sources":["../../../../src/modules/waas/businessAccounts/businessAccounts.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG;IACpD,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,4BAA4B,EAAE,CAAC;CAC1C,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,gCAAgC,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5E;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,yBAAyB,GACjC,gCAAgC,GAChC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE7D,MAAM,MAAM,mCAAmC,GAC3C,OAAO,GACP,aAAa,GACb,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,IAAI,CAAC;AAET,MAAM,MAAM,cAAc,GAAG,GAAG,YAAY,EAAE,CAAC;AAE/C,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAKF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,mCAAmC,CAAC;IAErD,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAAC;CACnD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,oBAAoB,CAAC,EAAE,kCAAkC,EAAE,CAAC;IAC5D,MAAM,EAAE,6BAA6B,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,oBAAoB,GAAG,iBAAiB,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,CAAC,MAAM,EAAE;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,mCAAmC,CAAC;QACrD,IAAI,CAAC,EAAE,yBAAyB,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,MAAM,EAAE;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,yBAAyB,CAAC;QACvC,cAAc,EAAE,cAAc,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrC,0BAA0B,EAAE,CAAC,MAAM,EAAE;QACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAAC,CAAC;IACrE,qBAAqB,EAAE,CAAC,IAAI,CAAC,EAAE;QAC7B,OAAO,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KACpC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/B,kBAAkB,EAAE,CAAC,MAAM,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC;KAC3B,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrC,oBAAoB,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC1D,CAAC"}
+{"version":3,"file":"businessAccounts.types.d.ts","sourceRoot":"","sources":["../../../../src/modules/waas/businessAccounts/businessAccounts.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG;IACpD,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,4BAA4B,EAAE,CAAC;CAC1C,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,gCAAgC,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5E;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,yBAAyB,GACjC,gCAAgC,GAChC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE7D,MAAM,MAAM,mCAAmC,GAC3C,OAAO,GACP,aAAa,GACb,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,IAAI,CAAC;AAET,MAAM,MAAM,cAAc,GAAG,GAAG,YAAY,EAAE,CAAC;AAE/C,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAKF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,mCAAmC,CAAC;IAErD,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAAC;CACnD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,oBAAoB,CAAC,EAAE,kCAAkC,EAAE,CAAC;IAC5D,MAAM,EAAE,6BAA6B,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,oBAAoB,GAAG,iBAAiB,CAAC;CAClD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,6BAA6B,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,QAAQ,EAAE,gCAAgC,CAAC;CAC5C,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,8BAA8B,GAAG,MAAM,CACjD,MAAM,EACN,6BAA6B,CAC9B,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,mCAAmC,GAAG;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,oCAAoC,GAAG;IACjD,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;6EAEyE;IACzE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,mCAAmC,CAAC;CAC5C,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAC5C,MAAM,EACN,oCAAoC,EAAE,CACvC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,qCAAqC,GAAG;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,kCAAkC,EAAE,CAAC;IAC5D,SAAS,EAAE,qCAAqC,EAAE,CAAC;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,6BAA6B,CAAC;IACtC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,EAAE,8BAA8B,EAAE,CAAC;CAC7C,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,mCAAmC,GAAG;IAChD,oBAAoB,EAAE,kCAAkC,EAAE,CAAC;IAC3D,MAAM,EAAE,6BAA6B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,oBAAoB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,CAAC,MAAM,EAAE;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,mCAAmC,CAAC;QACrD,IAAI,CAAC,EAAE,yBAAyB,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,MAAM,EAAE;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,yBAAyB,CAAC;QACvC,cAAc,EAAE,cAAc,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrC,0BAA0B,EAAE,CAAC,MAAM,EAAE;QACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAAC,CAAC;IACrE,qBAAqB,EAAE,CAAC,IAAI,CAAC,EAAE;QAC7B,OAAO,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KACpC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/B,kBAAkB,EAAE,CAAC,MAAM,EAAE;QAC3B,iBAAiB,EAAE,MAAM,CAAC;KAC3B,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrC,oBAAoB,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC1D,CAAC"}

package/dist/modules/waas/businessAccounts/defineBusinessAccountRole/defineBusinessAccountRole.d.ts

@@ -0,0 +1,45 @@
+import type { DynamicClient } from '../../../../client/types';
+import type { BuiltInBusinessAccountMemberRole, BusinessAccountActionRequired, BusinessAccountMutationVersion, SignedBusinessAccountIntent } from '../businessAccounts.types';
+type DefineRoleParams = {
+    autoExecute?: boolean;
+    businessAccountId: string;
+    inherits: Exclude<BuiltInBusinessAccountMemberRole, 'owner'>;
+    role: string;
+    signed?: SignedBusinessAccountIntent;
+};
+/**
+ * Defines a custom role that inherits the authority of a built-in one.
+ * Inheriting is real: a holder passes every check gated on the base role,
+ * under the custom name rather than the base name itself. A role cannot
+ * inherit `owner` — use `transferBusinessAccountOwnership` to grant ownership.
+ *
+ * When the account governs `defineRole`, nothing is written and the 202 body
+ * is returned instead. Resend with `signed` (from `signBusinessAccountIntent`)
+ * to move past `INTENT_REQUIRED`.
+ *
+ * @param params.businessAccountId - The business account defining the role.
+ * @param params.role - The new role's name.
+ * @param params.inherits - The built-in role (`admin` or `viewer`) this role inherits.
+ * @param [params.autoExecute] - Whether to apply on the completing approval.
+ *   Only meaningful on the first call.
+ * @param [params.signed] - A previously-signed intent, to resend past `INTENT_REQUIRED`.
+ * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+ * @returns The new document version, or the outstanding action required.
+ *
+ * @example
+ * ```ts
+ * await defineBusinessAccountRole({
+ *   businessAccountId,
+ *   role: 'cfo',
+ *   inherits: 'admin',
+ * });
+ * ```
+ *
+ * @see {@link deleteBusinessAccountRole}
+ * @see {@link listBusinessAccountRoles}
+ * @throws {UnexpectedConsentResponseError} When a governed account answers 202 with an unrecognized body.
+ * @notInstrumented
+ */
+export declare const defineBusinessAccountRole: ({ businessAccountId, role, inherits, autoExecute, signed }: DefineRoleParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountMutationVersion>;
+export {};
+//# sourceMappingURL=defineBusinessAccountRole.d.ts.map

package/dist/modules/waas/businessAccounts/defineBusinessAccountRole/defineBusinessAccountRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defineBusinessAccountRole.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/defineBusinessAccountRole/defineBusinessAccountRole.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,KAAK,EACV,gCAAgC,EAChC,6BAA6B,EAC7B,8BAA8B,EAC9B,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AAInC,KAAK,gBAAgB,GAAG;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,2BAA2B,CAAC;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,yBAAyB,+DACwB,gBAAgB,WACpE,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,8BAA8B,CA4BxE,CAAC"}

package/dist/modules/waas/businessAccounts/defineBusinessAccountRole/index.d.ts

@@ -0,0 +1,2 @@
+export { defineBusinessAccountRole } from './defineBusinessAccountRole';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/businessAccounts/defineBusinessAccountRole/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/defineBusinessAccountRole/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/modules/waas/businessAccounts/deleteBusinessAccountRole/deleteBusinessAccountRole.d.ts

@@ -0,0 +1,41 @@
+import type { DynamicClient } from '../../../../client/types';
+import type { BusinessAccountActionRequired, BusinessAccountMutationVersion, SignedBusinessAccountIntent } from '../businessAccounts.types';
+type DeleteRoleParams = {
+    autoExecute?: boolean;
+    businessAccountId: string;
+    role: string;
+    signed?: SignedBusinessAccountIntent;
+};
+/**
+ * Deletes a custom role definition. Holders are not removed and keep every
+ * capability they had — they're demoted to the role's inherited base (e.g. a
+ * deleted `cfo` role that inherited `admin` leaves its holders reading
+ * `admin`), since only the name goes away, not the authority. Refused with
+ * `ROLE_REFERENCED_BY_GOVERNANCE` while a governance requirement still names
+ * the role — remove it from governance first.
+ *
+ * When the account governs `deleteRole`, nothing is written and the 202 body
+ * is returned instead. Resend with `signed` (from `signBusinessAccountIntent`)
+ * to move past `INTENT_REQUIRED`.
+ *
+ * @param params.businessAccountId - The business account the role belongs to.
+ * @param params.role - The role's name.
+ * @param [params.autoExecute] - Whether to apply on the completing approval.
+ *   Only meaningful on the first call.
+ * @param [params.signed] - A previously-signed intent, to resend past `INTENT_REQUIRED`.
+ * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+ * @returns The new document version, or the outstanding action required.
+ *
+ * @example
+ * ```ts
+ * await deleteBusinessAccountRole({ businessAccountId, role: 'cfo' });
+ * ```
+ *
+ * @see {@link defineBusinessAccountRole}
+ * @see {@link listBusinessAccountRoles}
+ * @throws {UnexpectedConsentResponseError} When a governed account answers 202 with an unrecognized body.
+ * @notInstrumented
+ */
+export declare const deleteBusinessAccountRole: ({ businessAccountId, role, autoExecute, signed }: DeleteRoleParams, client?: DynamicClient) => Promise<BusinessAccountActionRequired | BusinessAccountMutationVersion>;
+export {};
+//# sourceMappingURL=deleteBusinessAccountRole.d.ts.map

package/dist/modules/waas/businessAccounts/deleteBusinessAccountRole/deleteBusinessAccountRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteBusinessAccountRole.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/deleteBusinessAccountRole/deleteBusinessAccountRole.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,KAAK,EACV,6BAA6B,EAC7B,8BAA8B,EAC9B,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AAInC,KAAK,gBAAgB,GAAG;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,2BAA2B,CAAC;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,yBAAyB,qDACc,gBAAgB,WAC1D,aAAa,KACpB,OAAO,CAAC,6BAA6B,GAAG,8BAA8B,CA4BxE,CAAC"}

package/dist/modules/waas/businessAccounts/deleteBusinessAccountRole/index.d.ts

@@ -0,0 +1,2 @@
+export { deleteBusinessAccountRole } from './deleteBusinessAccountRole';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/waas/businessAccounts/deleteBusinessAccountRole/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/waas/businessAccounts/deleteBusinessAccountRole/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}