@dynamic-labs/sdk-api 0.33.0 → 0.34.0

package/src/apis/SDKApi.cjs

@@ -18,6 +18,7 @@ require('../models/TimeUnitEnum.cjs');
 var AleoCuratedPricesResponse = require('../models/AleoCuratedPricesResponse.cjs');
 var AleoProverEncryptedRequest = require('../models/AleoProverEncryptedRequest.cjs');
 var AleoProverPubkeyResponse = require('../models/AleoProverPubkeyResponse.cjs');
+var ApproveBusinessAccountProposalSdkRequest = require('../models/ApproveBusinessAccountProposalSdkRequest.cjs');
 require('../models/AssignableBusinessAccountMemberRole.cjs');
 var AttachSourceRequest = require('../models/AttachSourceRequest.cjs');
 require('../models/AttestationConveyancePreference.cjs');
@@ -58,8 +59,17 @@ var MFADevice = require('../models/MFADevice.cjs');
 var BusinessAccount = require('../models/BusinessAccount.cjs');
 require('../models/BusinessAccountActionEnum.cjs');
 var BusinessAccountMember = require('../models/BusinessAccountMember.cjs');
+require('../models/BusinessAccountApprovalRequirement.cjs');
+require('../models/BusinessAccountApprovalsPending.cjs');
 var BusinessAccountDetail = require('../models/BusinessAccountDetail.cjs');
+var BusinessAccountGovernanceResponse = require('../models/BusinessAccountGovernanceResponse.cjs');
+require('../models/BusinessAccountGovernedAction.cjs');
 var BusinessAccountList = require('../models/BusinessAccountList.cjs');
+var BusinessAccountMutationVersion = require('../models/BusinessAccountMutationVersion.cjs');
+var BusinessAccountProposal = require('../models/BusinessAccountProposal.cjs');
+require('../models/BusinessAccountProposalStatus.cjs');
+require('../models/BusinessAccountRoleDefinition.cjs');
+var BusinessAccountRolesResponse = require('../models/BusinessAccountRolesResponse.cjs');
 require('../models/CaptchaProviderEnum.cjs');
 require('../models/DestinationTypeEnum.cjs');
 require('../models/ChainalysisExists.cjs');
@@ -108,9 +118,11 @@ require('../models/CustomHostnameStatusEnum.cjs');
 require('../models/CustomHostnameUsageEnum.cjs');
 require('../models/CustomHostnameVerificationType.cjs');
 require('../models/DnsRecordType.cjs');
+var DefineBusinessAccountRoleSdkRequest = require('../models/DefineBusinessAccountRoleSdkRequest.cjs');
 require('../models/DelegatedAccessEncryptionPublicKey.cjs');
 var DelegatedShareDeliveryRequest = require('../models/DelegatedShareDeliveryRequest.cjs');
 var DelegatedShareDeliveryResponse = require('../models/DelegatedShareDeliveryResponse.cjs');
+var DeleteBusinessAccountRoleSdkRequest = require('../models/DeleteBusinessAccountRoleSdkRequest.cjs');
 var DeleteDeviceRegistrationResponse = require('../models/DeleteDeviceRegistrationResponse.cjs');
 var DeleteEmbeddedWalletsRequest = require('../models/DeleteEmbeddedWalletsRequest.cjs');
 var DeleteUserPasskeyRequest = require('../models/DeleteUserPasskeyRequest.cjs');
@@ -260,6 +272,9 @@ var RefreshKeySharesRequest = require('../models/RefreshKeySharesRequest.cjs');
 var RefreshKeySharesResponse = require('../models/RefreshKeySharesResponse.cjs');
 var RegisterEmbeddedWalletSessionKeyResponse = require('../models/RegisterEmbeddedWalletSessionKeyResponse.cjs');
 var RegisterSessionKeyRequest = require('../models/RegisterSessionKeyRequest.cjs');
+var RemoveBusinessAccountMemberSdkRequest = require('../models/RemoveBusinessAccountMemberSdkRequest.cjs');
+var RemoveBusinessAccountSignerSdkRequest = require('../models/RemoveBusinessAccountSignerSdkRequest.cjs');
+var RemoveBusinessAccountWalletSdkRequest = require('../models/RemoveBusinessAccountWalletSdkRequest.cjs');
 require('../models/ReshareKind.cjs');
 var ReshareRequest = require('../models/ReshareRequest.cjs');
 require('../models/RoomTypeEnum.cjs');
@@ -276,6 +291,7 @@ require('../models/ScreeningPolicyScopeEnum.cjs');
 require('../models/ScreeningReason.cjs');
 require('../models/SdkEnvironmentIdWaasWalletIdAdditionalAddressesAdditionalAddresses.cjs');
 var SdkSettingsRequest = require('../models/SdkSettingsRequest.cjs');
+var SetBusinessAccountGovernanceSdkRequest = require('../models/SetBusinessAccountGovernanceSdkRequest.cjs');
 var SignAleoRequestWithWaasRequest = require('../models/SignAleoRequestWithWaasRequest.cjs');
 require('../models/SignMessageRawSign.cjs');
 var SignMessageWithWaasRequest = require('../models/SignMessageWithWaasRequest.cjs');
@@ -8885,7 +8901,7 @@ class SDKApi extends runtime.BaseAPI {
         await this.screenTransactionOptionsRaw(requestParameters, initOverrides);
     }
     /**
-     * Caller must be an owner or admin of the business account. Target user is resolved by `userId` OR `identifier + type` (email/externalUserId create-or-resolve; id direct lookup). Idempotent: if the target is already an active member the existing row is returned with 200.
+     * Owner or admin by default; an account whose governance sets `eligibleInitiatorRoles` for `addMember` can widen that. Target user is resolved by `userId` OR `identifier + type` (email/externalUserId create-or-resolve; id direct lookup). Idempotent: an already-active member returns the existing row with 200.  When the account governs `addMember` the response is 202, not 201 — first with the intent to sign, then with the proposal collecting approvals. Neither is a failure.
      * SDK — add a member to a business account
      */
     async sdkAddBusinessAccountMemberRaw(requestParameters, initOverrides) {
@@ -8918,7 +8934,7 @@ class SDKApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountMember.BusinessAccountMemberFromJSON(jsonValue));
     }
     /**
-     * Caller must be an owner or admin of the business account. Target user is resolved by `userId` OR `identifier + type` (email/externalUserId create-or-resolve; id direct lookup). Idempotent: if the target is already an active member the existing row is returned with 200.
+     * Owner or admin by default; an account whose governance sets `eligibleInitiatorRoles` for `addMember` can widen that. Target user is resolved by `userId` OR `identifier + type` (email/externalUserId create-or-resolve; id direct lookup). Idempotent: an already-active member returns the existing row with 200.  When the account governs `addMember` the response is 202, not 201 — first with the intent to sign, then with the proposal collecting approvals. Neither is a failure.
      * SDK — add a member to a business account
      */
     async sdkAddBusinessAccountMember(requestParameters, initOverrides) {
@@ -8969,6 +8985,50 @@ class SDKApi extends runtime.BaseAPI {
         const response = await this.sdkAddBusinessAccountSignerRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Records the caller\'s consent, signed with their session key. Requires step-up authentication: approving is the act that authorizes the mutation, so it carries the same weight as performing it.  Recording an approval does not apply the change — call execute once the requirements are satisfied. An initiator can never approve their own intent; the enclave refuses it and so does this endpoint.
+     * SDK — approve a proposal
+     */
+    async sdkApproveBusinessAccountProposalRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkApproveBusinessAccountProposal.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkApproveBusinessAccountProposal.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkApproveBusinessAccountProposal.');
+        }
+        if (requestParameters.approveBusinessAccountProposalSdkRequest === null || requestParameters.approveBusinessAccountProposalSdkRequest === undefined) {
+            throw new runtime.RequiredError('approveBusinessAccountProposalSdkRequest', 'Required parameter requestParameters.approveBusinessAccountProposalSdkRequest was null or undefined when calling sdkApproveBusinessAccountProposal.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ApproveBusinessAccountProposalSdkRequest.ApproveBusinessAccountProposalSdkRequestToJSON(requestParameters.approveBusinessAccountProposalSdkRequest),
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountProposal.BusinessAccountProposalFromJSON(jsonValue));
+    }
+    /**
+     * Records the caller\'s consent, signed with their session key. Requires step-up authentication: approving is the act that authorizes the mutation, so it carries the same weight as performing it.  Recording an approval does not apply the change — call execute once the requirements are satisfied. An initiator can never approve their own intent; the enclave refuses it and so does this endpoint.
+     * SDK — approve a proposal
+     */
+    async sdkApproveBusinessAccountProposal(requestParameters, initOverrides) {
+        const response = await this.sdkApproveBusinessAccountProposalRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Options call for this endpoint
      */
@@ -8995,6 +9055,32 @@ class SDKApi extends runtime.BaseAPI {
     async sdkBusinessAccountByIdOptions(requestParameters, initOverrides) {
         await this.sdkBusinessAccountByIdOptionsRaw(requestParameters, initOverrides);
     }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountGovernanceOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountGovernanceOptions.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkBusinessAccountGovernanceOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/governance`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountGovernanceOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountGovernanceOptionsRaw(requestParameters, initOverrides);
+    }
     /**
      * Options call for this endpoint
      */
@@ -9099,6 +9185,226 @@ class SDKApi extends runtime.BaseAPI {
     async sdkBusinessAccountPolicyLayerOptions(requestParameters, initOverrides) {
         await this.sdkBusinessAccountPolicyLayerOptionsRaw(requestParameters, initOverrides);
     }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalApprovalsOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountProposalApprovalsOptions.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkBusinessAccountProposalApprovalsOptions.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkBusinessAccountProposalApprovalsOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalApprovalsOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountProposalApprovalsOptionsRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalExecuteOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountProposalExecuteOptions.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkBusinessAccountProposalExecuteOptions.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkBusinessAccountProposalExecuteOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/execute`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalExecuteOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountProposalExecuteOptionsRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountProposalOptions.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkBusinessAccountProposalOptions.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkBusinessAccountProposalOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountProposalOptionsRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalVetoOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountProposalVetoOptions.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkBusinessAccountProposalVetoOptions.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkBusinessAccountProposalVetoOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/veto`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalVetoOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountProposalVetoOptionsRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalsAwaitingApprovalOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountProposalsAwaitingApprovalOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/proposals`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalsAwaitingApprovalOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountProposalsAwaitingApprovalOptionsRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalsOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountProposalsOptions.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkBusinessAccountProposalsOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountProposalsOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountProposalsOptionsRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountRoleOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountRoleOptions.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkBusinessAccountRoleOptions.');
+        }
+        if (requestParameters.role === null || requestParameters.role === undefined) {
+            throw new runtime.RequiredError('role', 'Required parameter requestParameters.role was null or undefined when calling sdkBusinessAccountRoleOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/roles/{role}`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"role"}}`, encodeURIComponent(String(requestParameters.role))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountRoleOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountRoleOptionsRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountRolesOptionsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkBusinessAccountRolesOptions.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkBusinessAccountRolesOptions.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/roles`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))),
+            method: 'OPTIONS',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Options call for this endpoint
+     */
+    async sdkBusinessAccountRolesOptions(requestParameters, initOverrides) {
+        await this.sdkBusinessAccountRolesOptionsRaw(requestParameters, initOverrides);
+    }
     /**
      * Options call for this endpoint
      */
@@ -9273,6 +9579,127 @@ class SDKApi extends runtime.BaseAPI {
         const response = await this.sdkCreateBusinessAccountRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Defines a role that inherits a built-in one. The role lives only in the signed authorization document, so there is no separate role resource. Requires step-up authentication.
+     * SDK — define a customer role for a business account
+     */
+    async sdkDefineBusinessAccountRoleRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkDefineBusinessAccountRole.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkDefineBusinessAccountRole.');
+        }
+        if (requestParameters.defineBusinessAccountRoleSdkRequest === null || requestParameters.defineBusinessAccountRoleSdkRequest === undefined) {
+            throw new runtime.RequiredError('defineBusinessAccountRoleSdkRequest', 'Required parameter requestParameters.defineBusinessAccountRoleSdkRequest was null or undefined when calling sdkDefineBusinessAccountRole.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/roles`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))),
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: DefineBusinessAccountRoleSdkRequest.DefineBusinessAccountRoleSdkRequestToJSON(requestParameters.defineBusinessAccountRoleSdkRequest),
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountMutationVersion.BusinessAccountMutationVersionFromJSON(jsonValue));
+    }
+    /**
+     * Defines a role that inherits a built-in one. The role lives only in the signed authorization document, so there is no separate role resource. Requires step-up authentication.
+     * SDK — define a customer role for a business account
+     */
+    async sdkDefineBusinessAccountRole(requestParameters, initOverrides) {
+        const response = await this.sdkDefineBusinessAccountRoleRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Refused while the role still holds members or is named by an approval requirement, so a delete cannot strand people or leave a rule unsatisfiable. Requires step-up authentication.
+     * SDK — delete a customer role from a business account
+     */
+    async sdkDeleteBusinessAccountRoleRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkDeleteBusinessAccountRole.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkDeleteBusinessAccountRole.');
+        }
+        if (requestParameters.role === null || requestParameters.role === undefined) {
+            throw new runtime.RequiredError('role', 'Required parameter requestParameters.role was null or undefined when calling sdkDeleteBusinessAccountRole.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/roles/{role}`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"role"}}`, encodeURIComponent(String(requestParameters.role))),
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+            body: DeleteBusinessAccountRoleSdkRequest.DeleteBusinessAccountRoleSdkRequestToJSON(requestParameters.deleteBusinessAccountRoleSdkRequest),
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountMutationVersion.BusinessAccountMutationVersionFromJSON(jsonValue));
+    }
+    /**
+     * Refused while the role still holds members or is named by an approval requirement, so a delete cannot strand people or leave a rule unsatisfiable. Requires step-up authentication.
+     * SDK — delete a customer role from a business account
+     */
+    async sdkDeleteBusinessAccountRole(requestParameters, initOverrides) {
+        const response = await this.sdkDeleteBusinessAccountRoleRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Submits the stored intent and its unrevoked approvals to the enclave, which decides whether the requirements are met. On success the original mutation runs — the same code path an ungoverned account takes — and the proposal is consumed.  Returns 202 with the requirement tallies when consent is still short, leaving the proposal open so more approvals can arrive. No step-up: the approvals are what authorize the change, and the caller adds no consent of their own.
+     * SDK — apply a proposal whose approvals now satisfy it
+     */
+    async sdkExecuteBusinessAccountProposalRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkExecuteBusinessAccountProposal.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkExecuteBusinessAccountProposal.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkExecuteBusinessAccountProposal.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/execute`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountMutationVersion.BusinessAccountMutationVersionFromJSON(jsonValue));
+    }
+    /**
+     * Submits the stored intent and its unrevoked approvals to the enclave, which decides whether the requirements are met. On success the original mutation runs — the same code path an ungoverned account takes — and the proposal is consumed.  Returns 202 with the requirement tallies when consent is still short, leaving the proposal open so more approvals can arrive. No step-up: the approvals are what authorize the change, and the caller adds no consent of their own.
+     * SDK — apply a proposal whose approvals now satisfy it
+     */
+    async sdkExecuteBusinessAccountProposal(requestParameters, initOverrides) {
+        const response = await this.sdkExecuteBusinessAccountProposalRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Returns 404 if the caller is not a member of the business account (404 not 403 so we don\'t leak business-account existence).
      * SDK — get a business account with embedded members and signers
@@ -9309,6 +9736,81 @@ class SDKApi extends runtime.BaseAPI {
         const response = await this.sdkGetBusinessAccountByIdRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Readable by any member: names which of the account\'s actions need consent before attempting one. Also needed to use `PUT`, which replaces the section wholesale — changing one action means merging against this value first.  Empty object when nothing is governed; that is an answer, not a 404.
+     * SDK — read the approval requirements in force
+     */
+    async sdkGetBusinessAccountGovernanceRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkGetBusinessAccountGovernance.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkGetBusinessAccountGovernance.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/governance`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountGovernanceResponse.BusinessAccountGovernanceResponseFromJSON(jsonValue));
+    }
+    /**
+     * Readable by any member: names which of the account\'s actions need consent before attempting one. Also needed to use `PUT`, which replaces the section wholesale — changing one action means merging against this value first.  Empty object when nothing is governed; that is an answer, not a 404.
+     * SDK — read the approval requirements in force
+     */
+    async sdkGetBusinessAccountGovernance(requestParameters, initOverrides) {
+        const response = await this.sdkGetBusinessAccountGovernanceRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Returns the stored intent verbatim. An approver signs THESE bytes: a re-derived intent would carry a different `intentId` and `createdAt`, and every approval already collected would stop verifying.
+     * SDK — read one proposal, including the intent to sign
+     */
+    async sdkGetBusinessAccountProposalRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkGetBusinessAccountProposal.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkGetBusinessAccountProposal.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkGetBusinessAccountProposal.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountProposal.BusinessAccountProposalFromJSON(jsonValue));
+    }
+    /**
+     * Returns the stored intent verbatim. An approver signs THESE bytes: a re-derived intent would carry a different `intentId` and `createdAt`, and every approval already collected would stop verifying.
+     * SDK — read one proposal, including the intent to sign
+     */
+    async sdkGetBusinessAccountProposal(requestParameters, initOverrides) {
+        const response = await this.sdkGetBusinessAccountProposalRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Brings an existing user wallet under a business account so signers can be added to it. No MPC ceremony — the owner already holds a valid share set, so this transfers the wallet\'s ownership to the business account (`businessAccountId` set, `userId` cleared) and registers the caller as an owner member + `endUser` signer bound to their existing share set. When `businessAccountId` is omitted, the per-wallet business account is found-or-created (unnamed). Idempotent.
      * SDK — add an existing wallet to a business account
@@ -9347,6 +9849,114 @@ class SDKApi extends runtime.BaseAPI {
         const response = await this.sdkLinkBusinessAccountWalletRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Every proposal for the account, newest first. Any member may read them: knowing what is pending is what lets an approver act, and the list carries no signing material — only who has already consented.
+     * SDK — list the governed mutations awaiting approval
+     */
+    async sdkListBusinessAccountProposalsRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkListBusinessAccountProposals.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkListBusinessAccountProposals.');
+        }
+        const queryParameters = {};
+        if (requestParameters.status !== undefined) {
+            queryParameters['status'] = requestParameters.status;
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(BusinessAccountProposal.BusinessAccountProposalFromJSON));
+    }
+    /**
+     * Every proposal for the account, newest first. Any member may read them: knowing what is pending is what lets an approver act, and the list carries no signing material — only who has already consented.
+     * SDK — list the governed mutations awaiting approval
+     */
+    async sdkListBusinessAccountProposals(requestParameters, initOverrides) {
+        const response = await this.sdkListBusinessAccountProposalsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Every pending proposal waiting on the caller, across all the business accounts they belong to in this environment — without it an approver can only learn of one out of band.  Scoped to the caller\'s own memberships, so it can never include another tenant\'s proposals. Proposals the caller initiated are excluded: proposing is not approving.
+     * SDK — list proposals awaiting the caller\'s approval, across accounts
+     */
+    async sdkListBusinessAccountProposalsAwaitingApprovalRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkListBusinessAccountProposalsAwaitingApproval.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/proposals`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(BusinessAccountProposal.BusinessAccountProposalFromJSON));
+    }
+    /**
+     * Every pending proposal waiting on the caller, across all the business accounts they belong to in this environment — without it an approver can only learn of one out of band.  Scoped to the caller\'s own memberships, so it can never include another tenant\'s proposals. Proposals the caller initiated are excluded: proposing is not approving.
+     * SDK — list proposals awaiting the caller\'s approval, across accounts
+     */
+    async sdkListBusinessAccountProposalsAwaitingApproval(requestParameters, initOverrides) {
+        const response = await this.sdkListBusinessAccountProposalsAwaitingApprovalRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Readable by any member. Names the roles the account has defined and the built-in each inherits, which is what a caller needs before referring to one in governance or when assigning a member.  Returns an empty object when none are defined; that is an answer, not a missing resource.
+     * SDK — list the customer-defined roles for a business account
+     */
+    async sdkListBusinessAccountRolesRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkListBusinessAccountRoles.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkListBusinessAccountRoles.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/roles`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountRolesResponse.BusinessAccountRolesResponseFromJSON(jsonValue));
+    }
+    /**
+     * Readable by any member. Names the roles the account has defined and the built-in each inherits, which is what a caller needs before referring to one in governance or when assigning a member.  Returns an empty object when none are defined; that is an answer, not a missing resource.
+     * SDK — list the customer-defined roles for a business account
+     */
+    async sdkListBusinessAccountRoles(requestParameters, initOverrides) {
+        const response = await this.sdkListBusinessAccountRolesRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * SDK — list business accounts the caller is a member of
      */
@@ -9397,6 +10007,7 @@ class SDKApi extends runtime.BaseAPI {
         }
         const queryParameters = {};
         const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
         if (this.configuration && this.configuration.accessToken) {
             const token = this.configuration.accessToken;
             const tokenString = await token("bearerAuth", []);
@@ -9409,6 +10020,7 @@ class SDKApi extends runtime.BaseAPI {
             method: 'DELETE',
             headers: headerParameters,
             query: queryParameters,
+            body: RemoveBusinessAccountMemberSdkRequest.RemoveBusinessAccountMemberSdkRequestToJSON(requestParameters.removeBusinessAccountMemberSdkRequest),
         }, initOverrides);
         return new runtime.JSONApiResponse(response, (jsonValue) => InlineResponse2008.InlineResponse2008FromJSON(jsonValue));
     }
@@ -9421,7 +10033,7 @@ class SDKApi extends runtime.BaseAPI {
         return await response.value();
     }
     /**
-     * Severs the signer\'s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers\' share sets are independent MPC pairs and remain intact.  Authorization is enforced by auth-service (owner or admin). Returns 409 if removing the signer would leave the wallet with zero active signers.
+     * Severs the signer\'s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers\' share sets are independent MPC pairs and remain intact.  Authorization is enforced by auth-service — owner or admin by default, wider if the account\'s governance sets `eligibleInitiatorRoles` for `removeSignerFromWallet`. Returns 409 if removing the signer would leave the wallet with zero active signers.
      * SDK — remove a signer from a wallet in a business account
      */
     async sdkRemoveBusinessAccountSignerRaw(requestParameters, initOverrides) {
@@ -9439,6 +10051,7 @@ class SDKApi extends runtime.BaseAPI {
         }
         const queryParameters = {};
         const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
         if (this.configuration && this.configuration.accessToken) {
             const token = this.configuration.accessToken;
             const tokenString = await token("bearerAuth", []);
@@ -9451,11 +10064,12 @@ class SDKApi extends runtime.BaseAPI {
             method: 'DELETE',
             headers: headerParameters,
             query: queryParameters,
+            body: RemoveBusinessAccountSignerSdkRequest.RemoveBusinessAccountSignerSdkRequestToJSON(requestParameters.removeBusinessAccountSignerSdkRequest),
         }, initOverrides);
         return new runtime.JSONApiResponse(response, (jsonValue) => InlineResponse2009.InlineResponse2009FromJSON(jsonValue));
     }
     /**
-     * Severs the signer\'s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers\' share sets are independent MPC pairs and remain intact.  Authorization is enforced by auth-service (owner or admin). Returns 409 if removing the signer would leave the wallet with zero active signers.
+     * Severs the signer\'s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers\' share sets are independent MPC pairs and remain intact.  Authorization is enforced by auth-service — owner or admin by default, wider if the account\'s governance sets `eligibleInitiatorRoles` for `removeSignerFromWallet`. Returns 409 if removing the signer would leave the wallet with zero active signers.
      * SDK — remove a signer from a wallet in a business account
      */
     async sdkRemoveBusinessAccountSigner(requestParameters, initOverrides) {
@@ -9478,6 +10092,7 @@ class SDKApi extends runtime.BaseAPI {
         }
         const queryParameters = {};
         const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
         if (this.configuration && this.configuration.accessToken) {
             const token = this.configuration.accessToken;
             const tokenString = await token("bearerAuth", []);
@@ -9490,6 +10105,7 @@ class SDKApi extends runtime.BaseAPI {
             method: 'DELETE',
             headers: headerParameters,
             query: queryParameters,
+            body: RemoveBusinessAccountWalletSdkRequest.RemoveBusinessAccountWalletSdkRequestToJSON(requestParameters.removeBusinessAccountWalletSdkRequest),
         }, initOverrides);
         return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountDetail.BusinessAccountDetailFromJSON(jsonValue));
     }
@@ -9501,6 +10117,47 @@ class SDKApi extends runtime.BaseAPI {
         const response = await this.sdkRemoveBusinessAccountWalletRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Replaces the governance section wholesale, matching the enclave: a caller sending one action\'s rules drops the others. Requires step-up authentication, because governance decides what every other mutation requires.
+     * SDK — replace the approval requirements for a business account
+     */
+    async sdkSetBusinessAccountGovernanceRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkSetBusinessAccountGovernance.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkSetBusinessAccountGovernance.');
+        }
+        if (requestParameters.setBusinessAccountGovernanceSdkRequest === null || requestParameters.setBusinessAccountGovernanceSdkRequest === undefined) {
+            throw new runtime.RequiredError('setBusinessAccountGovernanceSdkRequest', 'Required parameter requestParameters.setBusinessAccountGovernanceSdkRequest was null or undefined when calling sdkSetBusinessAccountGovernance.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/governance`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))),
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: SetBusinessAccountGovernanceSdkRequest.SetBusinessAccountGovernanceSdkRequestToJSON(requestParameters.setBusinessAccountGovernanceSdkRequest),
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountMutationVersion.BusinessAccountMutationVersionFromJSON(jsonValue));
+    }
+    /**
+     * Replaces the governance section wholesale, matching the enclave: a caller sending one action\'s rules drops the others. Requires step-up authentication, because governance decides what every other mutation requires.
+     * SDK — replace the approval requirements for a business account
+     */
+    async sdkSetBusinessAccountGovernance(requestParameters, initOverrides) {
+        const response = await this.sdkSetBusinessAccountGovernanceRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      */
     async sdkSettingsOptionsRaw(requestParameters, initOverrides) {
@@ -9646,6 +10303,84 @@ class SDKApi extends runtime.BaseAPI {
         const response = await this.sdkUpdateBusinessAccountMemberRoleRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Terminal, and different from withdrawing an approval: a veto ends the proposal rather than reducing its count. Requires step-up authentication — killing a proposal is destructive and irreversible, so it carries the same weight as approving one.  Enforced by the application rather than the signed document, because the absence of a veto is not provable in a stateless request. It works because the application is the only path to the enclave, so declining to forward genuinely stops it.
+     * SDK — kill a proposal
+     */
+    async sdkVetoBusinessAccountProposalRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkVetoBusinessAccountProposal.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkVetoBusinessAccountProposal.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkVetoBusinessAccountProposal.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/veto`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountProposal.BusinessAccountProposalFromJSON(jsonValue));
+    }
+    /**
+     * Terminal, and different from withdrawing an approval: a veto ends the proposal rather than reducing its count. Requires step-up authentication — killing a proposal is destructive and irreversible, so it carries the same weight as approving one.  Enforced by the application rather than the signed document, because the absence of a veto is not provable in a stateless request. It works because the application is the only path to the enclave, so declining to forward genuinely stops it.
+     * SDK — kill a proposal
+     */
+    async sdkVetoBusinessAccountProposal(requestParameters, initOverrides) {
+        const response = await this.sdkVetoBusinessAccountProposalRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Marks the caller\'s approval revoked rather than deleting it, so the record that consent was given and then taken back survives. A revoked approval stops being forwarded to the enclave, which is what makes withdrawal actually reduce the count.
+     * SDK — withdraw the caller\'s approval
+     */
+    async sdkWithdrawBusinessAccountProposalApprovalRaw(requestParameters, initOverrides) {
+        if (requestParameters.environmentId === null || requestParameters.environmentId === undefined) {
+            throw new runtime.RequiredError('environmentId', 'Required parameter requestParameters.environmentId was null or undefined when calling sdkWithdrawBusinessAccountProposalApproval.');
+        }
+        if (requestParameters.businessAccountId === null || requestParameters.businessAccountId === undefined) {
+            throw new runtime.RequiredError('businessAccountId', 'Required parameter requestParameters.businessAccountId was null or undefined when calling sdkWithdrawBusinessAccountProposalApproval.');
+        }
+        if (requestParameters.proposalId === null || requestParameters.proposalId === undefined) {
+            throw new runtime.RequiredError('proposalId', 'Required parameter requestParameters.proposalId was null or undefined when calling sdkWithdrawBusinessAccountProposalApproval.');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals`.replace(`{${"environmentId"}}`, encodeURIComponent(String(requestParameters.environmentId))).replace(`{${"businessAccountId"}}`, encodeURIComponent(String(requestParameters.businessAccountId))).replace(`{${"proposalId"}}`, encodeURIComponent(String(requestParameters.proposalId))),
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => BusinessAccountProposal.BusinessAccountProposalFromJSON(jsonValue));
+    }
+    /**
+     * Marks the caller\'s approval revoked rather than deleting it, so the record that consent was given and then taken back survives. A revoked approval stops being forwarded to the enclave, which is what makes withdrawal actually reduce the count.
+     * SDK — withdraw the caller\'s approval
+     */
+    async sdkWithdrawBusinessAccountProposalApproval(requestParameters, initOverrides) {
+        const response = await this.sdkWithdrawBusinessAccountProposalApprovalRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * When a user selects a wallet to be the primary wallet in a multi-wallet enabled environment, this endpoint is called to record this on the backend.
      * Update primary wallet selection