@settlemint/dalp-cli 3.1.33-main.42972921875 → 3.1.33-main.42986756300

package/dist/{openapi-surface-2xx8evkb.json → openapi-surface-z2yjxj98.json}

@@ -10315,8 +10315,8 @@
       "method": "POST",
       "url": "/api/v2/bank-rail/connections/{connectionId}/credits/{creditId}/transitions",
       "summary": "Retry, allocate or return a parked bank credit",
-      "description": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
-      "help": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
+      "description": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again, and so does one parked as `payer-account-not-verified`, `aml-rejected` or `aml-held`: a second bank rail manager must approve it, whatever the bank-rail approval setting, before it mints. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
+      "help": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again, and so does one parked as `payer-account-not-verified`, `aml-rejected` or `aml-held`: a second bank rail manager must approve it, whatever the bank-rail approval setting, before it mints. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
       "tags": [
         "Bank rail"
       ],
@@ -10364,7 +10364,7 @@
       "bodyFields": [],
       "examples": [
         {
-          "description": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
+          "description": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again, and so does one parked as `payer-account-not-verified`, `aml-rejected` or `aml-held`: a second bank rail manager must approve it, whatever the bank-rail approval setting, before it mints. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
           "path": {
             "connectionId": "<connectionId>",
             "creditId": "<creditId>"
@@ -10714,6 +10714,224 @@
         }
       ]
     },
+    "bankRail/fiatScreeningSettingsRead": {
+      "name": "bankRail/fiatScreeningSettingsRead",
+      "method": "GET",
+      "url": "/api/v2/bank-rail/connections/{connectionId}/screening-settings",
+      "summary": "Read a bank connection's screening settings",
+      "description": "Returns how the connection screens its fiat flows: the linked compliance provider that receives every confirmed credit and every cash-out as a fiat transaction (null leaves AML screening off), the provider's verification level when it needs one, and whether a credit must come from one of the client's active bank accounts (on by default). A connection that never saved settings returns the defaults with rowVersion 0.",
+      "help": "Returns how the connection screens its fiat flows: the linked compliance provider that receives every confirmed credit and every cash-out as a fiat transaction (null leaves AML screening off), the provider's verification level when it needs one, and whether a credit must come from one of the client's active bank accounts (on by default). A connection that never saved settings returns the defaults with rowVersion 0.",
+      "tags": [
+        "Bank rail"
+      ],
+      "pathParams": [
+        {
+          "name": "connectionId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "queryParams": [],
+      "headerParams": [],
+      "requestBodyDescription": null,
+      "hasRequestBody": false,
+      "bodyIsComplex": false,
+      "bodyFields": [],
+      "examples": [
+        {
+          "description": "Returns how the connection screens its fiat flows: the linked compliance provider that receives every confirmed credit and every cash-out as a fiat transaction (null leaves AML screening off), the provider's verification level when it needs one, and whether a credit must come from one of the client's active bank accounts (on by default). A connection that never saved settings returns the defaults with rowVersion 0.",
+          "path": {
+            "connectionId": "<connectionId>"
+          }
+        }
+      ]
+    },
+    "bankRail/fiatScreeningSettingsUpdate": {
+      "name": "bankRail/fiatScreeningSettingsUpdate",
+      "method": "PUT",
+      "url": "/api/v2/bank-rail/connections/{connectionId}/screening-settings",
+      "summary": "Replace a bank connection's screening settings",
+      "description": "Replaces the connection's screening settings when expectedRowVersion matches the stored row (0 for a connection that never saved any). The change applies to the next credit or cash-out the rail screens; a transaction already screened keeps its verdict. Turning the payer check off lets a credit from any account mint. The change is audited.",
+      "help": "Replaces the connection's screening settings when expectedRowVersion matches the stored row (0 for a connection that never saved any). The change applies to the next credit or cash-out the rail screens; a transaction already screened keeps its verdict. Turning the payer check off lets a credit from any account mint. The change is audited.",
+      "tags": [
+        "Bank rail"
+      ],
+      "pathParams": [
+        {
+          "name": "connectionId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "queryParams": [],
+      "headerParams": [
+        {
+          "name": "Idempotency-Key",
+          "in": "header",
+          "required": false,
+          "description": "Retry key for one mutation. Reuse it only for the same method, path, and body on a route that documents replay safety. If omitted, the platform generates a UUIDv7 key; replay-safe writes echo it in the `Idempotency-Key` response header. A lost response still requires status reconciliation.",
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "requestBodyDescription": "Replaces how a bank connection screens its fiat flows.",
+      "hasRequestBody": true,
+      "bodyIsComplex": true,
+      "bodyFields": [
+        {
+          "name": "payerAccountCheck",
+          "in": "query",
+          "required": true,
+          "description": "Whether a credit must come from one of the client's active bank accounts. On by default: a credit from any other account is held as payer-account-not-verified and mints nothing.",
+          "type": "boolean",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        },
+        {
+          "name": "expectedRowVersion",
+          "in": "query",
+          "required": true,
+          "description": "The rowVersion of the settings you read; 0 when the connection has never saved any. A change made since you read them is refused.",
+          "type": "integer",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "examples": [
+        {
+          "description": "Replaces the connection's screening settings when expectedRowVersion matches the stored row (0 for a connection that never saved any). The change applies to the next credit or cash-out the rail screens; a transaction already screened keeps its verdict. Turning the payer check off lets a credit from any account mint. The change is audited.",
+          "path": {
+            "connectionId": "<connectionId>"
+          }
+        }
+      ]
+    },
+    "bankRail/fiatScreeningsList": {
+      "name": "bankRail/fiatScreeningsList",
+      "method": "GET",
+      "url": "/api/v2/bank-rail/connections/{connectionId}/fiat-screenings",
+      "summary": "List a bank connection's fiat screenings",
+      "description": "Returns one page of the fiat transactions the rail screened on the connection, in screening order: the AML provider's verdict and score, the payer check, and the second manager's release when one was needed. filter[from] and filter[to] bound the date range the rail first screened the transaction in, `from` inclusive and `to` exclusive; page through the range to export it.",
+      "help": "Returns one page of the fiat transactions the rail screened on the connection, in screening order: the AML provider's verdict and score, the payer check, and the second manager's release when one was needed. filter[from] and filter[to] bound the date range the rail first screened the transaction in, `from` inclusive and `to` exclusive; page through the range to export it.",
+      "tags": [
+        "Bank rail"
+      ],
+      "pathParams": [
+        {
+          "name": "connectionId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "queryParams": [
+        {
+          "name": "filter",
+          "in": "query",
+          "required": false,
+          "description": null,
+          "type": "object",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": [
+            {
+              "name": "from",
+              "in": "query",
+              "required": false,
+              "description": null,
+              "type": "string",
+              "enum": null,
+              "pattern": null,
+              "examples": [],
+              "fields": []
+            },
+            {
+              "name": "to",
+              "in": "query",
+              "required": false,
+              "description": null,
+              "type": "string",
+              "enum": null,
+              "pattern": null,
+              "examples": [],
+              "fields": []
+            }
+          ]
+        },
+        {
+          "name": "page",
+          "in": "query",
+          "required": false,
+          "description": "JSON:API page window. Send `page[offset]` (first item index, from 0; a deep offset costs more, so a list that returns `meta.nextCursor` is better read with `page[cursor]`) and `page[limit]` (page size, 1-200, default 50). The response `links` object repeats these query parameters.",
+          "type": "object",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": [
+            {
+              "name": "offset",
+              "in": "query",
+              "required": false,
+              "description": null,
+              "type": "number",
+              "enum": null,
+              "pattern": null,
+              "examples": [],
+              "fields": []
+            },
+            {
+              "name": "limit",
+              "in": "query",
+              "required": false,
+              "description": null,
+              "type": "number",
+              "enum": null,
+              "pattern": null,
+              "examples": [],
+              "fields": []
+            }
+          ]
+        }
+      ],
+      "headerParams": [],
+      "requestBodyDescription": null,
+      "hasRequestBody": false,
+      "bodyIsComplex": false,
+      "bodyFields": [],
+      "examples": [
+        {
+          "description": "Returns one page of the fiat transactions the rail screened on the connection, in screening order: the AML provider's verdict and score, the payer check, and the second manager's release when one was needed. filter[from] and filter[to] bound the date range the rail first screened the transaction in, `from` inclusive and `to` exclusive; page through the range to export it.",
+          "path": {
+            "connectionId": "<connectionId>"
+          }
+        }
+      ]
+    },
     "bankRail/participantBankAccountCreate": {
       "name": "bankRail/participantBankAccountCreate",
       "method": "POST",
@@ -79389,8 +79607,8 @@
       "method": "PATCH",
       "url": "/api/v2/users/{userId}/profile",
       "summary": "Save a user profile",
-      "description": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. With `approve: true` (Save and approve), an identity manager also approves every unreviewed field as of the new version. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
-      "help": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. With `approve: true` (Save and approve), an identity manager also approves every unreviewed field as of the new version. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
+      "description": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. A version an identity manager corrected waits for a different reviewer to approve it, and `approve: true` is refused. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
+      "help": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. A version an identity manager corrected waits for a different reviewer to approve it, and `approve: true` is refused. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
       "tags": [
         "Users"
       ],
@@ -79431,7 +79649,7 @@
           "name": "approve",
           "in": "query",
           "required": false,
-          "description": null,
+          "description": "Refused when `true`: a profile is approved by an identity manager who did not edit it. Save without it, then have another identity manager approve the version through the profile decisions endpoint.",
           "type": "boolean",
           "enum": null,
           "pattern": null,
@@ -79441,7 +79659,7 @@
       ],
       "examples": [
         {
-          "description": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. With `approve: true` (Save and approve), an identity manager also approves every unreviewed field as of the new version. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
+          "description": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. A version an identity manager corrected waits for a different reviewer to approve it, and `approve: true` is refused. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
           "path": {
             "userId": "<userId>"
           }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@settlemint/dalp-cli",
-  "version": "3.1.33-main.42972921875",
+  "version": "3.1.33-main.42986756300",
   "private": false,
   "description": "CLI for the Digital Asset Lifecycle Platform — manage tokens, identities, compliance, and more from the command line.",
   "homepage": "https://settlemint.com",
@@ -50,14 +50,14 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
-    "@settlemint/dalp-sdk": "3.1.33-main.42972921875",
+    "@settlemint/dalp-sdk": "3.1.33-main.42986756300",
     "incur": "0.7.1",
     "zod": "4.6.7"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "0.18.5",
-    "@testkit/effect-bun-test": "3.1.33-main.42972921875",
-    "@tools/typescript-config": "3.1.33-main.42972921875",
+    "@testkit/effect-bun-test": "3.1.33-main.42986756300",
+    "@tools/typescript-config": "3.1.33-main.42986756300",
     "@types/bun": "1.4.4",
     "publint": "0.3.25"
   },

package/src/generated/openapi-surface.json

@@ -10315,8 +10315,8 @@
       "method": "POST",
       "url": "/api/v2/bank-rail/connections/{connectionId}/credits/{creditId}/transitions",
       "summary": "Retry, allocate or return a parked bank credit",
-      "description": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
-      "help": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
+      "description": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again, and so does one parked as `payer-account-not-verified`, `aml-rejected` or `aml-held`: a second bank rail manager must approve it, whatever the bank-rail approval setting, before it mints. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
+      "help": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again, and so does one parked as `payer-account-not-verified`, `aml-rejected` or `aml-held`: a second bank rail manager must approve it, whatever the bank-rail approval setting, before it mints. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
       "tags": [
         "Bank rail"
       ],
@@ -10364,7 +10364,7 @@
       "bodyFields": [],
       "examples": [
         {
-          "description": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
+          "description": "Transitions a parked credit. `retry` sends a credit that parked before anything minted back to minting; a `mint-unapproved` credit asks for mint approval again, and so does one parked as `payer-account-not-verified`, `aml-rejected` or `aml-held`: a second bank rail manager must approve it, whatever the bank-rail approval setting, before it mints. `allocate` asks to move the suspense to a client of the connection, and `return-to-payer` asks to burn it under the bank's refund reference; each opens an approval and the credit waits in `awaiting-checker`. Refused when the credit's phase does not permit the transition.",
           "path": {
             "connectionId": "<connectionId>",
             "creditId": "<creditId>"
@@ -10714,6 +10714,224 @@
         }
       ]
     },
+    "bankRail/fiatScreeningSettingsRead": {
+      "name": "bankRail/fiatScreeningSettingsRead",
+      "method": "GET",
+      "url": "/api/v2/bank-rail/connections/{connectionId}/screening-settings",
+      "summary": "Read a bank connection's screening settings",
+      "description": "Returns how the connection screens its fiat flows: the linked compliance provider that receives every confirmed credit and every cash-out as a fiat transaction (null leaves AML screening off), the provider's verification level when it needs one, and whether a credit must come from one of the client's active bank accounts (on by default). A connection that never saved settings returns the defaults with rowVersion 0.",
+      "help": "Returns how the connection screens its fiat flows: the linked compliance provider that receives every confirmed credit and every cash-out as a fiat transaction (null leaves AML screening off), the provider's verification level when it needs one, and whether a credit must come from one of the client's active bank accounts (on by default). A connection that never saved settings returns the defaults with rowVersion 0.",
+      "tags": [
+        "Bank rail"
+      ],
+      "pathParams": [
+        {
+          "name": "connectionId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "queryParams": [],
+      "headerParams": [],
+      "requestBodyDescription": null,
+      "hasRequestBody": false,
+      "bodyIsComplex": false,
+      "bodyFields": [],
+      "examples": [
+        {
+          "description": "Returns how the connection screens its fiat flows: the linked compliance provider that receives every confirmed credit and every cash-out as a fiat transaction (null leaves AML screening off), the provider's verification level when it needs one, and whether a credit must come from one of the client's active bank accounts (on by default). A connection that never saved settings returns the defaults with rowVersion 0.",
+          "path": {
+            "connectionId": "<connectionId>"
+          }
+        }
+      ]
+    },
+    "bankRail/fiatScreeningSettingsUpdate": {
+      "name": "bankRail/fiatScreeningSettingsUpdate",
+      "method": "PUT",
+      "url": "/api/v2/bank-rail/connections/{connectionId}/screening-settings",
+      "summary": "Replace a bank connection's screening settings",
+      "description": "Replaces the connection's screening settings when expectedRowVersion matches the stored row (0 for a connection that never saved any). The change applies to the next credit or cash-out the rail screens; a transaction already screened keeps its verdict. Turning the payer check off lets a credit from any account mint. The change is audited.",
+      "help": "Replaces the connection's screening settings when expectedRowVersion matches the stored row (0 for a connection that never saved any). The change applies to the next credit or cash-out the rail screens; a transaction already screened keeps its verdict. Turning the payer check off lets a credit from any account mint. The change is audited.",
+      "tags": [
+        "Bank rail"
+      ],
+      "pathParams": [
+        {
+          "name": "connectionId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "queryParams": [],
+      "headerParams": [
+        {
+          "name": "Idempotency-Key",
+          "in": "header",
+          "required": false,
+          "description": "Retry key for one mutation. Reuse it only for the same method, path, and body on a route that documents replay safety. If omitted, the platform generates a UUIDv7 key; replay-safe writes echo it in the `Idempotency-Key` response header. A lost response still requires status reconciliation.",
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "requestBodyDescription": "Replaces how a bank connection screens its fiat flows.",
+      "hasRequestBody": true,
+      "bodyIsComplex": true,
+      "bodyFields": [
+        {
+          "name": "payerAccountCheck",
+          "in": "query",
+          "required": true,
+          "description": "Whether a credit must come from one of the client's active bank accounts. On by default: a credit from any other account is held as payer-account-not-verified and mints nothing.",
+          "type": "boolean",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        },
+        {
+          "name": "expectedRowVersion",
+          "in": "query",
+          "required": true,
+          "description": "The rowVersion of the settings you read; 0 when the connection has never saved any. A change made since you read them is refused.",
+          "type": "integer",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "examples": [
+        {
+          "description": "Replaces the connection's screening settings when expectedRowVersion matches the stored row (0 for a connection that never saved any). The change applies to the next credit or cash-out the rail screens; a transaction already screened keeps its verdict. Turning the payer check off lets a credit from any account mint. The change is audited.",
+          "path": {
+            "connectionId": "<connectionId>"
+          }
+        }
+      ]
+    },
+    "bankRail/fiatScreeningsList": {
+      "name": "bankRail/fiatScreeningsList",
+      "method": "GET",
+      "url": "/api/v2/bank-rail/connections/{connectionId}/fiat-screenings",
+      "summary": "List a bank connection's fiat screenings",
+      "description": "Returns one page of the fiat transactions the rail screened on the connection, in screening order: the AML provider's verdict and score, the payer check, and the second manager's release when one was needed. filter[from] and filter[to] bound the date range the rail first screened the transaction in, `from` inclusive and `to` exclusive; page through the range to export it.",
+      "help": "Returns one page of the fiat transactions the rail screened on the connection, in screening order: the AML provider's verdict and score, the payer check, and the second manager's release when one was needed. filter[from] and filter[to] bound the date range the rail first screened the transaction in, `from` inclusive and `to` exclusive; page through the range to export it.",
+      "tags": [
+        "Bank rail"
+      ],
+      "pathParams": [
+        {
+          "name": "connectionId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "queryParams": [
+        {
+          "name": "filter",
+          "in": "query",
+          "required": false,
+          "description": null,
+          "type": "object",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": [
+            {
+              "name": "from",
+              "in": "query",
+              "required": false,
+              "description": null,
+              "type": "string",
+              "enum": null,
+              "pattern": null,
+              "examples": [],
+              "fields": []
+            },
+            {
+              "name": "to",
+              "in": "query",
+              "required": false,
+              "description": null,
+              "type": "string",
+              "enum": null,
+              "pattern": null,
+              "examples": [],
+              "fields": []
+            }
+          ]
+        },
+        {
+          "name": "page",
+          "in": "query",
+          "required": false,
+          "description": "JSON:API page window. Send `page[offset]` (first item index, from 0; a deep offset costs more, so a list that returns `meta.nextCursor` is better read with `page[cursor]`) and `page[limit]` (page size, 1-200, default 50). The response `links` object repeats these query parameters.",
+          "type": "object",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": [
+            {
+              "name": "offset",
+              "in": "query",
+              "required": false,
+              "description": null,
+              "type": "number",
+              "enum": null,
+              "pattern": null,
+              "examples": [],
+              "fields": []
+            },
+            {
+              "name": "limit",
+              "in": "query",
+              "required": false,
+              "description": null,
+              "type": "number",
+              "enum": null,
+              "pattern": null,
+              "examples": [],
+              "fields": []
+            }
+          ]
+        }
+      ],
+      "headerParams": [],
+      "requestBodyDescription": null,
+      "hasRequestBody": false,
+      "bodyIsComplex": false,
+      "bodyFields": [],
+      "examples": [
+        {
+          "description": "Returns one page of the fiat transactions the rail screened on the connection, in screening order: the AML provider's verdict and score, the payer check, and the second manager's release when one was needed. filter[from] and filter[to] bound the date range the rail first screened the transaction in, `from` inclusive and `to` exclusive; page through the range to export it.",
+          "path": {
+            "connectionId": "<connectionId>"
+          }
+        }
+      ]
+    },
     "bankRail/participantBankAccountCreate": {
       "name": "bankRail/participantBankAccountCreate",
       "method": "POST",
@@ -79389,8 +79607,8 @@
       "method": "PATCH",
       "url": "/api/v2/users/{userId}/profile",
       "summary": "Save a user profile",
-      "description": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. With `approve: true` (Save and approve), an identity manager also approves every unreviewed field as of the new version. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
-      "help": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. With `approve: true` (Save and approve), an identity manager also approves every unreviewed field as of the new version. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
+      "description": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. A version an identity manager corrected waits for a different reviewer to approve it, and `approve: true` is refused. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
+      "help": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. A version an identity manager corrected waits for a different reviewer to approve it, and `approve: true` is refused. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
       "tags": [
         "Users"
       ],
@@ -79431,7 +79649,7 @@
           "name": "approve",
           "in": "query",
           "required": false,
-          "description": null,
+          "description": "Refused when `true`: a profile is approved by an identity manager who did not edit it. Save without it, then have another identity manager approve the version through the profile decisions endpoint.",
           "type": "boolean",
           "enum": null,
           "pattern": null,
@@ -79441,7 +79659,7 @@
       ],
       "examples": [
         {
-          "description": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. With `approve: true` (Save and approve), an identity manager also approves every unreviewed field as of the new version. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
+          "description": "Saves profile values keyed by section slug and field key, and fixed fields by name, as one new version of the profile the user holds in the active organization; a key left out keeps its value and an empty string clears it. A user saves their own fixed and user-filled fields. An identity manager of the active organization saves any field of another user. A saved fixed or user-filled field becomes unreviewed; a manager-filled field is approved by the manager who saved it. A version an identity manager corrected waits for a different reviewer to approve it, and `approve: true` is refused. Only sections the organization sees are written. A field outside them, a field the caller may not write, or a value that does not fit its definition answers 400 naming each field as `<slug>.<key>`, never a value.",
           "path": {
             "userId": "<userId>"
           }

package/src/hosted-mcp.ts

@@ -14,6 +14,9 @@ export type HostedExecutionMode = (typeof HOSTED_EXECUTION_MODES)[number];
 
 export const PREPARE_GROUP = "prepare";
 
+export const PREPARE_GROUP_DESCRIPTION =
+  "Prepare a write for a person to review and sign in DALP. With execution mandate, a tool that runs under a mandate executes the write at once as the organisation's agent principal, and no person signs.";
+
 export interface PrepareToolField {
   readonly description: string;
   readonly required: boolean;
@@ -24,6 +27,7 @@ export interface PrepareTool {
   readonly name: string;
   readonly description: string;
   readonly fields: Readonly<Record<string, PrepareToolField>>;
+  readonly runsUnderMandate: boolean;
 }
 
 export interface PrepareCall {
@@ -57,7 +61,7 @@ const executionOption = z
   .enum(HOSTED_EXECUTION_MODES)
   .default("inbox")
   .describe(
-    "inbox (default): post the prepared write to the member's DALP inbox, where a person reviews and signs it. mandate: execute as the organisation's agent principal, only inside its mandate."
+    "inbox (default): post the prepared write to the member's DALP inbox, where a person reviews and signs it. mandate: execute the write at once as the organisation's agent principal, only inside its mandate, and no person signs."
   );
 
 const fieldOption = (field: PrepareToolField) => {
@@ -70,7 +74,7 @@ type PrepareOptions = Readonly<Record<string, string | undefined>>;
 
 const prepareCommand = (tool: PrepareTool) => ({
   description: tool.description,
-  mcp: { annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false } },
+  mcp: { annotations: { readOnlyHint: false, destructiveHint: tool.runsUnderMandate, idempotentHint: false } },
   options: z.object({
     assetId: z.string().describe("The asset the write acts on: its contract address."),
     ...Object.fromEntries(Object.entries(tool.fields).map(([name, field]) => [name, fieldOption(field)])),
@@ -115,7 +119,7 @@ export function makeHostedMcpTools(input: { readonly prepareTools: ReadonlyArray
   const cli = Cli.create("dalp", { version: CLI_VERSION, vars: hostedVars });
   registerGeneratedOperations(cli, reads);
   const prepare = Cli.create(PREPARE_GROUP, {
-    description: "Prepare a write for a person to review and sign in DALP.",
+    description: PREPARE_GROUP_DESCRIPTION,
     vars: hostedVars,
   });
   for (const tool of input.prepareTools) {