@dynamic-labs/sdk-api 0.33.0 → 0.35.0

package/src/apis/SDKApi.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import { Account, AddBusinessAccountMemberSdkRequest, AddBusinessAccountSignerSdkRequest, AleoCuratedPricesResponse, AleoProverEncryptedRequest, AleoProverPubkeyResponse, AttachSourceRequest, BackupKeySharesToLocationsRequest, BackupKeySharesToLocationsResponse, BusinessAccount, BusinessAccountDetail, BusinessAccountList, BusinessAccountMember, ChainEnum, CheckoutTransaction, CheckoutTransactionCreateRequest, CheckoutTransactionCreateResponse, CoinbaseOnrampGetBuyUrlRequest, CoinbaseOnrampGetBuyUrlResponse, CoinbaseOnrampOrderCreateRequest, CoinbaseOnrampOrderResponse, CompletePasskeyRecoveryRequest, ConnectRequest, CreateBusinessAccountSdkRequest, CreateEmbeddedWalletsRequest, CreateExchangeTransferRequest, CreateRoomsRequest, CreateRoomsResponse, CreateRoomsWithoutWalletIdRequest, CreateRoomsWithoutWalletIdResponse, CreateWaasAccountRequest, CreateWalletAccountRequest, CryptoDotComPaymentCreateRequest, CryptoDotComPaymentResponse, Currency, DelegatedShareDeliveryRequest, DelegatedShareDeliveryResponse, DeleteDeviceRegistrationResponse, DeleteEmbeddedWalletsRequest, DeleteUserPasskeyRequest, DeviceRegistrationsResponse, EmailProviderResponse, EmailVerificationCreateRequest, EmailVerificationCreateResponse, EmailVerificationMfaRequest, EmailVerificationRetryRequest, EmailVerificationVerifyRequest, EmbeddedWalletAuthToken, EmbeddedWalletAuthType, EmbeddedWalletChainEnum, EmbeddedWalletPasscodeClaimRequest, EmbeddedWalletSecret, ExchangeKeyEnum, ExchangeTransaction, ExchangeTransferResponse, ExportAleoViewKeyRequest, ExportEmbeddedWalletResponse, ExportWaasWalletPrivateKeyRequest, ExternalAuthAssertionResponse, ExternalAuthSigninRequest, FarcasterSignInRequest, Flow, FlowAttachSourceRequest, FlowPrepareSigningRequest, FlowQuoteRequest, FlowRecordBroadcastRequest, FlowSourceResponse, GeneratedTokenResponse, GetAvailableEVMGaslessRelayerResponse, GetEVMSponsoredTransactionStatusResponse, GetPasskeyAuthenticationOptionsResponse, GetPasskeyRegistrationOptionsResponse, GetUserPasskeysResponse, GlobalWalletConnection, GlobalWalletConnectionCreateRequest, GlobalWalletSettings, HealthcheckResponse, ImportWaasPrivateKeyRequest, InitEmailAuthRequest, InitEmailAuthResponse, InitPasskeyRecoveryRequest, InitPasskeyRecoveryResponse, InlineObject1, InlineObject2, InlineObject3, InlineObject4, InlineObject5, InlineResponse2001, InlineResponse2002, InlineResponse2003, InlineResponse2004, InlineResponse2005, InlineResponse2006, InlineResponse2007, InlineResponse2008, InlineResponse2009, JwksResponse, LinkBusinessAccountWalletSdkRequest, MFAAuthRecoveryDevicePostRequest, MFAAuthTotpDevicePostRequest, MFADevice, MFAGetRecoveryCodesResponse, MFAListDevicesResponse, MFAMethodsResponse, MFARegenRecoveryCodesResponse, MFARegisterPasskeyDeviceGetResponse, MFARegisterPasskeyDevicePostRequest, MFARegisterTotpDeviceGetResponse, MFARegisterTotpDevicePostRequest, MFAUpdateDeviceRequest, MergeUserConflictResolutions, MoonPayCurrenciesResponse, MultichainAccountBalanceResponse, MultichainAccountBalancesRequest, NetworkConfigurationResponse, NonceResponse, NoncesResponse, OauthInitAuthRequest, OauthProviderLoginUrl, OauthRequest, OauthResultRequest, OauthResultResponse, OpenRoomResponse, OpenRoomResponseForReshare, OpenRoomResponseWithServerKeygenIds, PasskeyAuthRequest, PasskeyRegisterRequest, PrefetchRequest, ProjectSettings, ProviderEnum, PublishEvents, RealtimeAuthTokenResponse, RecoverMultipleClientKeySharesRequest, RecoverMultipleClientKeySharesResponse, RefreshKeySharesRequest, RefreshKeySharesResponse, RegisterEmbeddedWalletSessionKeyResponse, RegisterSessionKeyRequest, ReshareRequest, ScanWebsiteUrlRequest, ScanWebsiteUrlResponse, ScreenTransactionRequest, ScreenTransactionResponse, ScreeningPolicyScopeEnum, SdkSettingsRequest, SdkUser, SignAleoRequestWithWaasRequest, SignMessageWithWaasRequest, SimulateEVMTransactionRequest, SimulateSVMTransactionRequest, SimulateTransactionResponse, SimulateUserOpRequest, SmsVerificationCreateRequest, SmsVerificationCreateResponse, SmsVerificationRetryRequest, SmsVerificationVerifyRequest, SolanaTransactionOptimizationRequest, SolanaTransactionOptimizationResponse, SponsorEVMTransactionRequest, SponsorEVMTransactionResponse, SponsorSVMTransactionRequest, SponsorSVMTransactionResponse, SsoProviderCheckRequest, SsoProviderCheckResponse, StepUpCheckRequest, StepUpCheckResponse, SupportedOfframpsResponse, SupportedOnrampsResponse, SwapQuoteRequest, SwapQuoteResponse, SwapStatusRequest, SwapStatusResponse, TelegramPostRequest, TokenBalance, TransactionFeeEstimateRequest, TransactionFeeEstimateResponse, TransferBusinessAccountOwnershipSdkRequest, TransferDestinationResponse, TurnkeyCreateWalletAccountsRequestBody, TurnkeyDeleteEmbeddedWalletsRequestBody, UpdateBusinessAccountMemberRoleSdkRequest, UpdateBusinessAccountSdkRequest, UpdateRecoveryEmailRequest, UpdateSelfResponse, UpdateUserPasskeyRequest, UpdateWaasWalletSettingsRequest, UpdateWaasWalletSettingsResponse, UpgradeEmbeddedWalletToV2Request, UserFields, UserFieldsCheckParams, UserFieldsCheckResponse, UserOauthAccessTokenResponse, UserPasskey, UserWalletSelectionRequest, VerifyRequest, VerifyResponse, VerifyUnlinkRequest, WaasPolicyLayerResponse, WaasPolicyLayerUpdateRequest, WaasSignerPolicyLayerUpdateRequest, WaasTransactionBroadcastRequest, WaasTransactionBroadcastResponse, WalletSanctionsResponse, WalletTransactionsResponse, YieldVaultActionRequest, YieldVaultActionResponse, YieldVaultClaimRequest, YieldVaultDetails, YieldVaultListResponse, YieldVaultPosition, YieldVaultRewardsResponse } from '../models';
+import { Account, AddBusinessAccountMemberSdkRequest, AddBusinessAccountSignerSdkRequest, AleoCuratedPricesResponse, AleoProverEncryptedRequest, AleoProverPubkeyResponse, ApproveBusinessAccountProposalSdkRequest, AttachSourceRequest, BackupKeySharesToLocationsRequest, BackupKeySharesToLocationsResponse, BusinessAccount, BusinessAccountDetail, BusinessAccountGovernanceResponse, BusinessAccountList, BusinessAccountMember, BusinessAccountMutationVersion, BusinessAccountProposal, BusinessAccountProposalStatus, BusinessAccountRolesResponse, ChainEnum, CheckoutTransaction, CheckoutTransactionCreateRequest, CheckoutTransactionCreateResponse, CoinbaseOnrampGetBuyUrlRequest, CoinbaseOnrampGetBuyUrlResponse, CoinbaseOnrampOrderCreateRequest, CoinbaseOnrampOrderResponse, CompletePasskeyRecoveryRequest, ConnectRequest, CreateBusinessAccountSdkRequest, CreateEmbeddedWalletsRequest, CreateExchangeTransferRequest, CreateRoomsRequest, CreateRoomsResponse, CreateRoomsWithoutWalletIdRequest, CreateRoomsWithoutWalletIdResponse, CreateWaasAccountRequest, CreateWalletAccountRequest, CryptoDotComPaymentCreateRequest, CryptoDotComPaymentResponse, Currency, DefineBusinessAccountRoleSdkRequest, DelegatedShareDeliveryRequest, DelegatedShareDeliveryResponse, DeleteBusinessAccountRoleSdkRequest, DeleteDeviceRegistrationResponse, DeleteEmbeddedWalletsRequest, DeleteUserPasskeyRequest, DeviceRegistrationsResponse, EmailProviderResponse, EmailVerificationCreateRequest, EmailVerificationCreateResponse, EmailVerificationMfaRequest, EmailVerificationRetryRequest, EmailVerificationVerifyRequest, EmbeddedWalletAuthToken, EmbeddedWalletAuthType, EmbeddedWalletChainEnum, EmbeddedWalletPasscodeClaimRequest, EmbeddedWalletSecret, ExchangeKeyEnum, ExchangeTransaction, ExchangeTransferResponse, ExportAleoViewKeyRequest, ExportEmbeddedWalletResponse, ExportWaasWalletPrivateKeyRequest, ExternalAuthAssertionResponse, ExternalAuthSigninRequest, FarcasterSignInRequest, Flow, FlowAttachSourceRequest, FlowPrepareSigningRequest, FlowQuoteRequest, FlowRecordBroadcastRequest, FlowSourceResponse, GeneratedTokenResponse, GetAvailableEVMGaslessRelayerResponse, GetEVMSponsoredTransactionStatusResponse, GetPasskeyAuthenticationOptionsResponse, GetPasskeyRegistrationOptionsResponse, GetUserPasskeysResponse, GlobalWalletConnection, GlobalWalletConnectionCreateRequest, GlobalWalletSettings, HealthcheckResponse, ImportWaasPrivateKeyRequest, InitEmailAuthRequest, InitEmailAuthResponse, InitPasskeyRecoveryRequest, InitPasskeyRecoveryResponse, InlineObject1, InlineObject2, InlineObject3, InlineObject4, InlineObject5, InlineResponse2001, InlineResponse2002, InlineResponse2003, InlineResponse2004, InlineResponse2005, InlineResponse2006, InlineResponse2007, InlineResponse2008, InlineResponse2009, JwksResponse, LinkBusinessAccountWalletSdkRequest, MFAAuthRecoveryDevicePostRequest, MFAAuthTotpDevicePostRequest, MFADevice, MFAGetRecoveryCodesResponse, MFAListDevicesResponse, MFAMethodsResponse, MFARegenRecoveryCodesResponse, MFARegisterPasskeyDeviceGetResponse, MFARegisterPasskeyDevicePostRequest, MFARegisterTotpDeviceGetResponse, MFARegisterTotpDevicePostRequest, MFAUpdateDeviceRequest, MergeUserConflictResolutions, MoonPayCurrenciesResponse, MultichainAccountBalanceResponse, MultichainAccountBalancesRequest, NetworkConfigurationResponse, NonceResponse, NoncesResponse, OauthInitAuthRequest, OauthProviderLoginUrl, OauthRequest, OauthResultRequest, OauthResultResponse, OpenRoomResponse, OpenRoomResponseForReshare, OpenRoomResponseWithServerKeygenIds, PasskeyAuthRequest, PasskeyRegisterRequest, PrefetchRequest, ProjectSettings, ProviderEnum, PublishEvents, RealtimeAuthTokenResponse, RecoverMultipleClientKeySharesRequest, RecoverMultipleClientKeySharesResponse, RefreshKeySharesRequest, RefreshKeySharesResponse, RegisterEmbeddedWalletSessionKeyResponse, RegisterSessionKeyRequest, RemoveBusinessAccountMemberSdkRequest, RemoveBusinessAccountSignerSdkRequest, RemoveBusinessAccountWalletSdkRequest, ReshareRequest, ScanWebsiteUrlRequest, ScanWebsiteUrlResponse, ScreenTransactionRequest, ScreenTransactionResponse, ScreeningPolicyScopeEnum, SdkSettingsRequest, SdkUser, SetBusinessAccountGovernanceSdkRequest, SignAleoRequestWithWaasRequest, SignMessageWithWaasRequest, SimulateEVMTransactionRequest, SimulateSVMTransactionRequest, SimulateTransactionResponse, SimulateUserOpRequest, SmsVerificationCreateRequest, SmsVerificationCreateResponse, SmsVerificationRetryRequest, SmsVerificationVerifyRequest, SolanaTransactionOptimizationRequest, SolanaTransactionOptimizationResponse, SponsorEVMTransactionRequest, SponsorEVMTransactionResponse, SponsorSVMTransactionRequest, SponsorSVMTransactionResponse, SsoProviderCheckRequest, SsoProviderCheckResponse, StepUpCheckRequest, StepUpCheckResponse, SupportedOfframpsResponse, SupportedOnrampsResponse, SwapQuoteRequest, SwapQuoteResponse, SwapStatusRequest, SwapStatusResponse, TelegramPostRequest, TokenBalance, TransactionFeeEstimateRequest, TransactionFeeEstimateResponse, TransferBusinessAccountOwnershipSdkRequest, TransferDestinationResponse, TurnkeyCreateWalletAccountsRequestBody, TurnkeyDeleteEmbeddedWalletsRequestBody, UpdateBusinessAccountMemberRoleSdkRequest, UpdateBusinessAccountSdkRequest, UpdateRecoveryEmailRequest, UpdateSelfResponse, UpdateUserPasskeyRequest, UpdateWaasWalletSettingsRequest, UpdateWaasWalletSettingsResponse, UpgradeEmbeddedWalletToV2Request, UserFields, UserFieldsCheckParams, UserFieldsCheckResponse, UserOauthAccessTokenResponse, UserPasskey, UserWalletSelectionRequest, VerifyRequest, VerifyResponse, VerifyUnlinkRequest, WaasPolicyLayerResponse, WaasPolicyLayerUpdateRequest, WaasSignerPolicyLayerUpdateRequest, WaasTransactionBroadcastRequest, WaasTransactionBroadcastResponse, WalletSanctionsResponse, WalletTransactionsResponse, YieldVaultActionRequest, YieldVaultActionResponse, YieldVaultClaimRequest, YieldVaultDetails, YieldVaultListResponse, YieldVaultPosition, YieldVaultRewardsResponse } from '../models';
 export interface AttachFlowSourceRequest {
     environmentId: string;
     flowId: string;
@@ -1134,10 +1134,20 @@ export interface SdkAddBusinessAccountSignerRequest {
     walletId: string;
     addBusinessAccountSignerSdkRequest: AddBusinessAccountSignerSdkRequest;
 }
+export interface SdkApproveBusinessAccountProposalRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+    approveBusinessAccountProposalSdkRequest: ApproveBusinessAccountProposalSdkRequest;
+}
 export interface SdkBusinessAccountByIdOptionsRequest {
     environmentId: string;
     businessAccountId: string;
 }
+export interface SdkBusinessAccountGovernanceOptionsRequest {
+    environmentId: string;
+    businessAccountId: string;
+}
 export interface SdkBusinessAccountLinkWalletOptionsRequest {
     environmentId: string;
 }
@@ -1154,6 +1164,42 @@ export interface SdkBusinessAccountPolicyLayerOptionsRequest {
     environmentId: string;
     businessAccountId: string;
 }
+export interface SdkBusinessAccountProposalApprovalsOptionsRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+}
+export interface SdkBusinessAccountProposalExecuteOptionsRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+}
+export interface SdkBusinessAccountProposalOptionsRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+}
+export interface SdkBusinessAccountProposalVetoOptionsRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+}
+export interface SdkBusinessAccountProposalsAwaitingApprovalOptionsRequest {
+    environmentId: string;
+}
+export interface SdkBusinessAccountProposalsOptionsRequest {
+    environmentId: string;
+    businessAccountId: string;
+}
+export interface SdkBusinessAccountRoleOptionsRequest {
+    environmentId: string;
+    businessAccountId: string;
+    role: string;
+}
+export interface SdkBusinessAccountRolesOptionsRequest {
+    environmentId: string;
+    businessAccountId: string;
+}
 export interface SdkBusinessAccountTransferOwnershipOptionsRequest {
     environmentId: string;
     businessAccountId: string;
@@ -1181,14 +1227,51 @@ export interface SdkCreateBusinessAccountRequest {
     environmentId: string;
     createBusinessAccountSdkRequest?: CreateBusinessAccountSdkRequest;
 }
+export interface SdkDefineBusinessAccountRoleRequest {
+    environmentId: string;
+    businessAccountId: string;
+    defineBusinessAccountRoleSdkRequest: DefineBusinessAccountRoleSdkRequest;
+}
+export interface SdkDeleteBusinessAccountRoleRequest {
+    environmentId: string;
+    businessAccountId: string;
+    role: string;
+    deleteBusinessAccountRoleSdkRequest?: DeleteBusinessAccountRoleSdkRequest;
+}
+export interface SdkExecuteBusinessAccountProposalRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+}
 export interface SdkGetBusinessAccountByIdRequest {
     environmentId: string;
     businessAccountId: string;
 }
+export interface SdkGetBusinessAccountGovernanceRequest {
+    environmentId: string;
+    businessAccountId: string;
+}
+export interface SdkGetBusinessAccountProposalRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+}
 export interface SdkLinkBusinessAccountWalletRequest {
     environmentId: string;
     linkBusinessAccountWalletSdkRequest: LinkBusinessAccountWalletSdkRequest;
 }
+export interface SdkListBusinessAccountProposalsRequest {
+    environmentId: string;
+    businessAccountId: string;
+    status?: BusinessAccountProposalStatus;
+}
+export interface SdkListBusinessAccountProposalsAwaitingApprovalRequest {
+    environmentId: string;
+}
+export interface SdkListBusinessAccountRolesRequest {
+    environmentId: string;
+    businessAccountId: string;
+}
 export interface SdkListBusinessAccountsRequest {
     environmentId: string;
     externalRef?: Array<string>;
@@ -1197,17 +1280,25 @@ export interface SdkRemoveBusinessAccountMemberRequest {
     environmentId: string;
     businessAccountId: string;
     userId: string;
+    removeBusinessAccountMemberSdkRequest?: RemoveBusinessAccountMemberSdkRequest;
 }
 export interface SdkRemoveBusinessAccountSignerRequest {
     environmentId: string;
     businessAccountId: string;
     walletId: string;
     signerId: string;
+    removeBusinessAccountSignerSdkRequest?: RemoveBusinessAccountSignerSdkRequest;
 }
 export interface SdkRemoveBusinessAccountWalletRequest {
     environmentId: string;
     businessAccountId: string;
     walletId: string;
+    removeBusinessAccountWalletSdkRequest?: RemoveBusinessAccountWalletSdkRequest;
+}
+export interface SdkSetBusinessAccountGovernanceRequest {
+    environmentId: string;
+    businessAccountId: string;
+    setBusinessAccountGovernanceSdkRequest: SetBusinessAccountGovernanceSdkRequest;
 }
 export interface SdkSettingsOptionsRequest {
     environmentId: string;
@@ -1228,6 +1319,16 @@ export interface SdkUpdateBusinessAccountMemberRoleRequest {
     userId: string;
     updateBusinessAccountMemberRoleSdkRequest: UpdateBusinessAccountMemberRoleSdkRequest;
 }
+export interface SdkVetoBusinessAccountProposalRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+}
+export interface SdkWithdrawBusinessAccountProposalApprovalRequest {
+    environmentId: string;
+    businessAccountId: string;
+    proposalId: string;
+}
 export interface SelectUserWalletRequest {
     environmentId: string;
     userWalletSelectionRequest: UserWalletSelectionRequest;
@@ -4090,12 +4191,12 @@ export declare class SDKApi extends runtime.BaseAPI {
      */
     screenTransactionOptions(requestParameters: ScreenTransactionOptionsRequest, initOverrides?: RequestInit): Promise<void>;
     /**
-     * Caller must be an owner or admin of the business account. Target user is resolved by `userId` OR `identifier + type` (email/externalUserId create-or-resolve; id direct lookup). Idempotent: if the target is already an active member the existing row is returned with 200.
+     * Owner or admin by default; an account whose governance sets `eligibleInitiatorRoles` for `addMember` can widen that. Target user is resolved by `userId` OR `identifier + type` (email/externalUserId create-or-resolve; id direct lookup). Idempotent: an already-active member returns the existing row with 200.  When the account governs `addMember` the response is 202, not 201 — first with the intent to sign, then with the proposal collecting approvals. Neither is a failure.
      * SDK — add a member to a business account
      */
     sdkAddBusinessAccountMemberRaw(requestParameters: SdkAddBusinessAccountMemberRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountMember>>;
     /**
-     * Caller must be an owner or admin of the business account. Target user is resolved by `userId` OR `identifier + type` (email/externalUserId create-or-resolve; id direct lookup). Idempotent: if the target is already an active member the existing row is returned with 200.
+     * Owner or admin by default; an account whose governance sets `eligibleInitiatorRoles` for `addMember` can widen that. Target user is resolved by `userId` OR `identifier + type` (email/externalUserId create-or-resolve; id direct lookup). Idempotent: an already-active member returns the existing row with 200.  When the account governs `addMember` the response is 202, not 201 — first with the intent to sign, then with the proposal collecting approvals. Neither is a failure.
      * SDK — add a member to a business account
      */
     sdkAddBusinessAccountMember(requestParameters: SdkAddBusinessAccountMemberRequest, initOverrides?: RequestInit): Promise<BusinessAccountMember>;
@@ -4109,6 +4210,16 @@ export declare class SDKApi extends runtime.BaseAPI {
      * SDK — add a signer to a wallet in a business account
      */
     sdkAddBusinessAccountSigner(requestParameters: SdkAddBusinessAccountSignerRequest, initOverrides?: RequestInit): Promise<string>;
+    /**
+     * Records the caller\'s consent, signed with their session key. Requires step-up authentication: approving is the act that authorizes the mutation, so it carries the same weight as performing it.  Recording an approval does not apply the change — call execute once the requirements are satisfied. An initiator can never approve their own intent; the enclave refuses it and so does this endpoint.
+     * SDK — approve a proposal
+     */
+    sdkApproveBusinessAccountProposalRaw(requestParameters: SdkApproveBusinessAccountProposalRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountProposal>>;
+    /**
+     * Records the caller\'s consent, signed with their session key. Requires step-up authentication: approving is the act that authorizes the mutation, so it carries the same weight as performing it.  Recording an approval does not apply the change — call execute once the requirements are satisfied. An initiator can never approve their own intent; the enclave refuses it and so does this endpoint.
+     * SDK — approve a proposal
+     */
+    sdkApproveBusinessAccountProposal(requestParameters: SdkApproveBusinessAccountProposalRequest, initOverrides?: RequestInit): Promise<BusinessAccountProposal>;
     /**
      * Options call for this endpoint
      */
@@ -4117,6 +4228,14 @@ export declare class SDKApi extends runtime.BaseAPI {
      * Options call for this endpoint
      */
     sdkBusinessAccountByIdOptions(requestParameters: SdkBusinessAccountByIdOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountGovernanceOptionsRaw(requestParameters: SdkBusinessAccountGovernanceOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountGovernanceOptions(requestParameters: SdkBusinessAccountGovernanceOptionsRequest, initOverrides?: RequestInit): Promise<void>;
     /**
      * Options call for this endpoint
      */
@@ -4149,6 +4268,70 @@ export declare class SDKApi extends runtime.BaseAPI {
      * Options call for this endpoint
      */
     sdkBusinessAccountPolicyLayerOptions(requestParameters: SdkBusinessAccountPolicyLayerOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalApprovalsOptionsRaw(requestParameters: SdkBusinessAccountProposalApprovalsOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalApprovalsOptions(requestParameters: SdkBusinessAccountProposalApprovalsOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalExecuteOptionsRaw(requestParameters: SdkBusinessAccountProposalExecuteOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalExecuteOptions(requestParameters: SdkBusinessAccountProposalExecuteOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalOptionsRaw(requestParameters: SdkBusinessAccountProposalOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalOptions(requestParameters: SdkBusinessAccountProposalOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalVetoOptionsRaw(requestParameters: SdkBusinessAccountProposalVetoOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalVetoOptions(requestParameters: SdkBusinessAccountProposalVetoOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalsAwaitingApprovalOptionsRaw(requestParameters: SdkBusinessAccountProposalsAwaitingApprovalOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalsAwaitingApprovalOptions(requestParameters: SdkBusinessAccountProposalsAwaitingApprovalOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalsOptionsRaw(requestParameters: SdkBusinessAccountProposalsOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountProposalsOptions(requestParameters: SdkBusinessAccountProposalsOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountRoleOptionsRaw(requestParameters: SdkBusinessAccountRoleOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountRoleOptions(requestParameters: SdkBusinessAccountRoleOptionsRequest, initOverrides?: RequestInit): Promise<void>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountRolesOptionsRaw(requestParameters: SdkBusinessAccountRolesOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Options call for this endpoint
+     */
+    sdkBusinessAccountRolesOptions(requestParameters: SdkBusinessAccountRolesOptionsRequest, initOverrides?: RequestInit): Promise<void>;
     /**
      * Options call for this endpoint
      */
@@ -4199,6 +4382,36 @@ export declare class SDKApi extends runtime.BaseAPI {
      * SDK — create a business account
      */
     sdkCreateBusinessAccount(requestParameters: SdkCreateBusinessAccountRequest, initOverrides?: RequestInit): Promise<BusinessAccount>;
+    /**
+     * Defines a role that inherits a built-in one. The role lives only in the signed authorization document, so there is no separate role resource. Requires step-up authentication.
+     * SDK — define a customer role for a business account
+     */
+    sdkDefineBusinessAccountRoleRaw(requestParameters: SdkDefineBusinessAccountRoleRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountMutationVersion>>;
+    /**
+     * Defines a role that inherits a built-in one. The role lives only in the signed authorization document, so there is no separate role resource. Requires step-up authentication.
+     * SDK — define a customer role for a business account
+     */
+    sdkDefineBusinessAccountRole(requestParameters: SdkDefineBusinessAccountRoleRequest, initOverrides?: RequestInit): Promise<BusinessAccountMutationVersion>;
+    /**
+     * Refused while the role still holds members or is named by an approval requirement, so a delete cannot strand people or leave a rule unsatisfiable. Requires step-up authentication.
+     * SDK — delete a customer role from a business account
+     */
+    sdkDeleteBusinessAccountRoleRaw(requestParameters: SdkDeleteBusinessAccountRoleRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountMutationVersion>>;
+    /**
+     * Refused while the role still holds members or is named by an approval requirement, so a delete cannot strand people or leave a rule unsatisfiable. Requires step-up authentication.
+     * SDK — delete a customer role from a business account
+     */
+    sdkDeleteBusinessAccountRole(requestParameters: SdkDeleteBusinessAccountRoleRequest, initOverrides?: RequestInit): Promise<BusinessAccountMutationVersion>;
+    /**
+     * Submits the stored intent and its unrevoked approvals to the enclave, which decides whether the requirements are met. On success the original mutation runs — the same code path an ungoverned account takes — and the proposal is consumed.  Returns 202 with the requirement tallies when consent is still short, leaving the proposal open so more approvals can arrive. No step-up: the approvals are what authorize the change, and the caller adds no consent of their own.
+     * SDK — apply a proposal whose approvals now satisfy it
+     */
+    sdkExecuteBusinessAccountProposalRaw(requestParameters: SdkExecuteBusinessAccountProposalRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountMutationVersion>>;
+    /**
+     * Submits the stored intent and its unrevoked approvals to the enclave, which decides whether the requirements are met. On success the original mutation runs — the same code path an ungoverned account takes — and the proposal is consumed.  Returns 202 with the requirement tallies when consent is still short, leaving the proposal open so more approvals can arrive. No step-up: the approvals are what authorize the change, and the caller adds no consent of their own.
+     * SDK — apply a proposal whose approvals now satisfy it
+     */
+    sdkExecuteBusinessAccountProposal(requestParameters: SdkExecuteBusinessAccountProposalRequest, initOverrides?: RequestInit): Promise<BusinessAccountMutationVersion>;
     /**
      * Returns 404 if the caller is not a member of the business account (404 not 403 so we don\'t leak business-account existence).
      * SDK — get a business account with embedded members and signers
@@ -4209,6 +4422,26 @@ export declare class SDKApi extends runtime.BaseAPI {
      * SDK — get a business account with embedded members and signers
      */
     sdkGetBusinessAccountById(requestParameters: SdkGetBusinessAccountByIdRequest, initOverrides?: RequestInit): Promise<BusinessAccountDetail>;
+    /**
+     * Readable by any member: names which of the account\'s actions need consent before attempting one. Also needed to use `PUT`, which replaces the section wholesale — changing one action means merging against this value first.  Empty object when nothing is governed; that is an answer, not a 404.
+     * SDK — read the approval requirements in force
+     */
+    sdkGetBusinessAccountGovernanceRaw(requestParameters: SdkGetBusinessAccountGovernanceRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountGovernanceResponse>>;
+    /**
+     * Readable by any member: names which of the account\'s actions need consent before attempting one. Also needed to use `PUT`, which replaces the section wholesale — changing one action means merging against this value first.  Empty object when nothing is governed; that is an answer, not a 404.
+     * SDK — read the approval requirements in force
+     */
+    sdkGetBusinessAccountGovernance(requestParameters: SdkGetBusinessAccountGovernanceRequest, initOverrides?: RequestInit): Promise<BusinessAccountGovernanceResponse>;
+    /**
+     * Returns the stored intent verbatim. An approver signs THESE bytes: a re-derived intent would carry a different `intentId` and `createdAt`, and every approval already collected would stop verifying.
+     * SDK — read one proposal, including the intent to sign
+     */
+    sdkGetBusinessAccountProposalRaw(requestParameters: SdkGetBusinessAccountProposalRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountProposal>>;
+    /**
+     * Returns the stored intent verbatim. An approver signs THESE bytes: a re-derived intent would carry a different `intentId` and `createdAt`, and every approval already collected would stop verifying.
+     * SDK — read one proposal, including the intent to sign
+     */
+    sdkGetBusinessAccountProposal(requestParameters: SdkGetBusinessAccountProposalRequest, initOverrides?: RequestInit): Promise<BusinessAccountProposal>;
     /**
      * Brings an existing user wallet under a business account so signers can be added to it. No MPC ceremony — the owner already holds a valid share set, so this transfers the wallet\'s ownership to the business account (`businessAccountId` set, `userId` cleared) and registers the caller as an owner member + `endUser` signer bound to their existing share set. When `businessAccountId` is omitted, the per-wallet business account is found-or-created (unnamed). Idempotent.
      * SDK — add an existing wallet to a business account
@@ -4219,6 +4452,36 @@ export declare class SDKApi extends runtime.BaseAPI {
      * SDK — add an existing wallet to a business account
      */
     sdkLinkBusinessAccountWallet(requestParameters: SdkLinkBusinessAccountWalletRequest, initOverrides?: RequestInit): Promise<BusinessAccountDetail>;
+    /**
+     * Every proposal for the account, newest first. Any member may read them: knowing what is pending is what lets an approver act, and the list carries no signing material — only who has already consented.
+     * SDK — list the governed mutations awaiting approval
+     */
+    sdkListBusinessAccountProposalsRaw(requestParameters: SdkListBusinessAccountProposalsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<Array<BusinessAccountProposal>>>;
+    /**
+     * Every proposal for the account, newest first. Any member may read them: knowing what is pending is what lets an approver act, and the list carries no signing material — only who has already consented.
+     * SDK — list the governed mutations awaiting approval
+     */
+    sdkListBusinessAccountProposals(requestParameters: SdkListBusinessAccountProposalsRequest, initOverrides?: RequestInit): Promise<Array<BusinessAccountProposal>>;
+    /**
+     * Every pending proposal waiting on the caller, across all the business accounts they belong to in this environment — without it an approver can only learn of one out of band.  Scoped to the caller\'s own memberships, so it can never include another tenant\'s proposals. Proposals the caller initiated are excluded: proposing is not approving.
+     * SDK — list proposals awaiting the caller\'s approval, across accounts
+     */
+    sdkListBusinessAccountProposalsAwaitingApprovalRaw(requestParameters: SdkListBusinessAccountProposalsAwaitingApprovalRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<Array<BusinessAccountProposal>>>;
+    /**
+     * Every pending proposal waiting on the caller, across all the business accounts they belong to in this environment — without it an approver can only learn of one out of band.  Scoped to the caller\'s own memberships, so it can never include another tenant\'s proposals. Proposals the caller initiated are excluded: proposing is not approving.
+     * SDK — list proposals awaiting the caller\'s approval, across accounts
+     */
+    sdkListBusinessAccountProposalsAwaitingApproval(requestParameters: SdkListBusinessAccountProposalsAwaitingApprovalRequest, initOverrides?: RequestInit): Promise<Array<BusinessAccountProposal>>;
+    /**
+     * Readable by any member. Names the roles the account has defined and the built-in each inherits, which is what a caller needs before referring to one in governance or when assigning a member.  Returns an empty object when none are defined; that is an answer, not a missing resource.
+     * SDK — list the customer-defined roles for a business account
+     */
+    sdkListBusinessAccountRolesRaw(requestParameters: SdkListBusinessAccountRolesRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountRolesResponse>>;
+    /**
+     * Readable by any member. Names the roles the account has defined and the built-in each inherits, which is what a caller needs before referring to one in governance or when assigning a member.  Returns an empty object when none are defined; that is an answer, not a missing resource.
+     * SDK — list the customer-defined roles for a business account
+     */
+    sdkListBusinessAccountRoles(requestParameters: SdkListBusinessAccountRolesRequest, initOverrides?: RequestInit): Promise<BusinessAccountRolesResponse>;
     /**
      * SDK — list business accounts the caller is a member of
      */
@@ -4238,12 +4501,12 @@ export declare class SDKApi extends runtime.BaseAPI {
      */
     sdkRemoveBusinessAccountMember(requestParameters: SdkRemoveBusinessAccountMemberRequest, initOverrides?: RequestInit): Promise<InlineResponse2008>;
     /**
-     * Severs the signer\'s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers\' share sets are independent MPC pairs and remain intact.  Authorization is enforced by auth-service (owner or admin). Returns 409 if removing the signer would leave the wallet with zero active signers.
+     * Severs the signer\'s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers\' share sets are independent MPC pairs and remain intact.  Authorization is enforced by auth-service — owner or admin by default, wider if the account\'s governance sets `eligibleInitiatorRoles` for `removeSignerFromWallet`. Returns 409 if removing the signer would leave the wallet with zero active signers.
      * SDK — remove a signer from a wallet in a business account
      */
     sdkRemoveBusinessAccountSignerRaw(requestParameters: SdkRemoveBusinessAccountSignerRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<InlineResponse2009>>;
     /**
-     * Severs the signer\'s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers\' share sets are independent MPC pairs and remain intact.  Authorization is enforced by auth-service (owner or admin). Returns 409 if removing the signer would leave the wallet with zero active signers.
+     * Severs the signer\'s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers\' share sets are independent MPC pairs and remain intact.  Authorization is enforced by auth-service — owner or admin by default, wider if the account\'s governance sets `eligibleInitiatorRoles` for `removeSignerFromWallet`. Returns 409 if removing the signer would leave the wallet with zero active signers.
      * SDK — remove a signer from a wallet in a business account
      */
     sdkRemoveBusinessAccountSigner(requestParameters: SdkRemoveBusinessAccountSignerRequest, initOverrides?: RequestInit): Promise<InlineResponse2009>;
@@ -4257,6 +4520,16 @@ export declare class SDKApi extends runtime.BaseAPI {
      * SDK — remove a wallet from a business account
      */
     sdkRemoveBusinessAccountWallet(requestParameters: SdkRemoveBusinessAccountWalletRequest, initOverrides?: RequestInit): Promise<BusinessAccountDetail>;
+    /**
+     * Replaces the governance section wholesale, matching the enclave: a caller sending one action\'s rules drops the others. Requires step-up authentication, because governance decides what every other mutation requires.
+     * SDK — replace the approval requirements for a business account
+     */
+    sdkSetBusinessAccountGovernanceRaw(requestParameters: SdkSetBusinessAccountGovernanceRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountMutationVersion>>;
+    /**
+     * Replaces the governance section wholesale, matching the enclave: a caller sending one action\'s rules drops the others. Requires step-up authentication, because governance decides what every other mutation requires.
+     * SDK — replace the approval requirements for a business account
+     */
+    sdkSetBusinessAccountGovernance(requestParameters: SdkSetBusinessAccountGovernanceRequest, initOverrides?: RequestInit): Promise<BusinessAccountMutationVersion>;
     /**
      */
     sdkSettingsOptionsRaw(requestParameters: SdkSettingsOptionsRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<void>>;
@@ -4291,6 +4564,26 @@ export declare class SDKApi extends runtime.BaseAPI {
      * SDK — change a member\'s role (admin ↔ viewer)
      */
     sdkUpdateBusinessAccountMemberRole(requestParameters: SdkUpdateBusinessAccountMemberRoleRequest, initOverrides?: RequestInit): Promise<BusinessAccountMember>;
+    /**
+     * Terminal, and different from withdrawing an approval: a veto ends the proposal rather than reducing its count. Requires step-up authentication — killing a proposal is destructive and irreversible, so it carries the same weight as approving one.  Enforced by the application rather than the signed document, because the absence of a veto is not provable in a stateless request. It works because the application is the only path to the enclave, so declining to forward genuinely stops it.
+     * SDK — kill a proposal
+     */
+    sdkVetoBusinessAccountProposalRaw(requestParameters: SdkVetoBusinessAccountProposalRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountProposal>>;
+    /**
+     * Terminal, and different from withdrawing an approval: a veto ends the proposal rather than reducing its count. Requires step-up authentication — killing a proposal is destructive and irreversible, so it carries the same weight as approving one.  Enforced by the application rather than the signed document, because the absence of a veto is not provable in a stateless request. It works because the application is the only path to the enclave, so declining to forward genuinely stops it.
+     * SDK — kill a proposal
+     */
+    sdkVetoBusinessAccountProposal(requestParameters: SdkVetoBusinessAccountProposalRequest, initOverrides?: RequestInit): Promise<BusinessAccountProposal>;
+    /**
+     * Marks the caller\'s approval revoked rather than deleting it, so the record that consent was given and then taken back survives. A revoked approval stops being forwarded to the enclave, which is what makes withdrawal actually reduce the count.
+     * SDK — withdraw the caller\'s approval
+     */
+    sdkWithdrawBusinessAccountProposalApprovalRaw(requestParameters: SdkWithdrawBusinessAccountProposalApprovalRequest, initOverrides?: RequestInit): Promise<runtime.ApiResponse<BusinessAccountProposal>>;
+    /**
+     * Marks the caller\'s approval revoked rather than deleting it, so the record that consent was given and then taken back survives. A revoked approval stops being forwarded to the enclave, which is what makes withdrawal actually reduce the count.
+     * SDK — withdraw the caller\'s approval
+     */
+    sdkWithdrawBusinessAccountProposalApproval(requestParameters: SdkWithdrawBusinessAccountProposalApprovalRequest, initOverrides?: RequestInit): Promise<BusinessAccountProposal>;
     /**
      * When a user selects a wallet to be the primary wallet in a multi-wallet enabled environment, this endpoint is called to record this on the backend.
      * Update primary wallet selection