@settlemint/dalp-cli 3.1.33-main.43208452773 → 3.1.33-main.43226609968

package/src/generated/openapi-surface.json

@@ -9551,6 +9551,108 @@
         }
       ]
     },
+    "bankRail/clientLinkDecision": {
+      "name": "bankRail/clientLinkDecision",
+      "method": "POST",
+      "url": "/api/v2/bank-rail/connections/{connectionId}/client-links/{clientLinkId}/decisions",
+      "summary": "Decide a client's delivery request",
+      "description": "Approves or rejects the link's open delivery request, named by its approval id, with an optional reason. `approve` reads the gateway again and switches delivery to it; it is refused with `delivery-stale`, after closing the request and raising a case, when the gateway or a check no longer matches the request. `reject` keeps the client's credits minting to its wallet. The manager who opened the request cannot decide it (`same-actor`). Refused with `state` when the request is no longer open.",
+      "help": "Approves or rejects the link's open delivery request, named by its approval id, with an optional reason. `approve` reads the gateway again and switches delivery to it; it is refused with `delivery-stale`, after closing the request and raising a case, when the gateway or a check no longer matches the request. `reject` keeps the client's credits minting to its wallet. The manager who opened the request cannot decide it (`same-actor`). Refused with `state` when the request is no longer open.",
+      "tags": [
+        "Bank rail"
+      ],
+      "pathParams": [
+        {
+          "name": "connectionId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        },
+        {
+          "name": "clientLinkId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "queryParams": [],
+      "headerParams": [
+        {
+          "name": "Idempotency-Key",
+          "in": "header",
+          "required": false,
+          "description": "Retry key for one mutation. Reuse it only for the same method, path, and body on a route that documents replay safety. If omitted, the platform generates a UUIDv7 key; replay-safe writes echo it in the `Idempotency-Key` response header. A lost response still requires status reconciliation.",
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "requestBodyDescription": "Approves or rejects the link's open delivery request. An approval reads the gateway again and sets delivery to the gateway only when every check still passes; a rejection keeps the client's credits minting to its wallet.",
+      "hasRequestBody": true,
+      "bodyIsComplex": false,
+      "bodyFields": [
+        {
+          "name": "decision",
+          "in": "query",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": [
+            "approve",
+            "reject"
+          ],
+          "pattern": null,
+          "examples": [
+            "approve",
+            "reject"
+          ],
+          "fields": []
+        },
+        {
+          "name": "approvalId",
+          "in": "query",
+          "required": true,
+          "description": "The link's open delivery request.",
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        },
+        {
+          "name": "reason",
+          "in": "query",
+          "required": false,
+          "description": "Why the request is decided, kept on the approval.",
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "examples": [
+        {
+          "description": "Approves or rejects the link's open delivery request, named by its approval id, with an optional reason. `approve` reads the gateway again and switches delivery to it; it is refused with `delivery-stale`, after closing the request and raising a case, when the gateway or a check no longer matches the request. `reject` keeps the client's credits minting to its wallet. The manager who opened the request cannot decide it (`same-actor`). Refused with `state` when the request is no longer open.",
+          "path": {
+            "connectionId": "<connectionId>",
+            "clientLinkId": "<clientLinkId>"
+          }
+        }
+      ]
+    },
     "bankRail/clientLinkDelete": {
       "name": "bankRail/clientLinkDelete",
       "method": "DELETE",
@@ -9613,6 +9715,68 @@
         }
       ]
     },
+    "bankRail/clientLinkTransition": {
+      "name": "bankRail/clientLinkTransition",
+      "method": "POST",
+      "url": "/api/v2/bank-rail/connections/{connectionId}/client-links/{clientLinkId}/transitions",
+      "summary": "Switch a client's credit delivery",
+      "description": "`enable-gateway-delivery` reads the client's custody gateway, runs the delivery checks and opens a delivery request that another bank rail manager decides; it names the link's rowVersion. It is refused with `booked-mode` when the connection books credits without minting, `preconditions-failed` when a check fails, `delivery-request-open` when a request is already open and `row-version` when the link moved, and answers a retryable 503 when the gateway cannot be read. `disable-gateway-delivery` sends the client's future credits back to its wallet at once and withdraws an open delivery request. It names the link's rowVersion; a replay that finds the link already delivering to the wallet returns it unchanged. Credits whose mint already settled keep delivering.",
+      "help": "`enable-gateway-delivery` reads the client's custody gateway, runs the delivery checks and opens a delivery request that another bank rail manager decides; it names the link's rowVersion. It is refused with `booked-mode` when the connection books credits without minting, `preconditions-failed` when a check fails, `delivery-request-open` when a request is already open and `row-version` when the link moved, and answers a retryable 503 when the gateway cannot be read. `disable-gateway-delivery` sends the client's future credits back to its wallet at once and withdraws an open delivery request. It names the link's rowVersion; a replay that finds the link already delivering to the wallet returns it unchanged. Credits whose mint already settled keep delivering.",
+      "tags": [
+        "Bank rail"
+      ],
+      "pathParams": [
+        {
+          "name": "connectionId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        },
+        {
+          "name": "clientLinkId",
+          "in": "path",
+          "required": true,
+          "description": null,
+          "type": "string",
+          "enum": null,
+          "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|[fF]{8}-[fF]{4}-[fF]{4}-[fF]{4}-[fF]{12})$",
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "queryParams": [],
+      "headerParams": [
+        {
+          "name": "Idempotency-Key",
+          "in": "header",
+          "required": false,
+          "description": "Retry key for one mutation. Reuse it only for the same method, path, and body on a route that documents replay safety. If omitted, the platform generates a UUIDv7 key; replay-safe writes echo it in the `Idempotency-Key` response header. A lost response still requires status reconciliation.",
+          "type": "string",
+          "enum": null,
+          "pattern": null,
+          "examples": [],
+          "fields": []
+        }
+      ],
+      "requestBodyDescription": "enable-gateway-delivery reads the client's gateway and, when every check passes, opens a request another bank rail manager decides; the client's credits keep minting to its wallet until then. disable-gateway-delivery sends the client's future credits back to its wallet at once and withdraws an open delivery request. Credits whose mint already settled keep delivering.",
+      "hasRequestBody": true,
+      "bodyIsComplex": true,
+      "bodyFields": [],
+      "examples": [
+        {
+          "description": "`enable-gateway-delivery` reads the client's custody gateway, runs the delivery checks and opens a delivery request that another bank rail manager decides; it names the link's rowVersion. It is refused with `booked-mode` when the connection books credits without minting, `preconditions-failed` when a check fails, `delivery-request-open` when a request is already open and `row-version` when the link moved, and answers a retryable 503 when the gateway cannot be read. `disable-gateway-delivery` sends the client's future credits back to its wallet at once and withdraws an open delivery request. It names the link's rowVersion; a replay that finds the link already delivering to the wallet returns it unchanged. Credits whose mint already settled keep delivering.",
+          "path": {
+            "connectionId": "<connectionId>",
+            "clientLinkId": "<clientLinkId>"
+          }
+        }
+      ]
+    },
     "bankRail/clientLinksList": {
       "name": "bankRail/clientLinksList",
       "method": "GET",
@@ -12877,8 +13041,8 @@
       "method": "GET",
       "url": "/api/v2/wallets/allocations/{allocationId}",
       "summary": "Read a wallet allocation",
-      "description": "Returns the durable allocation that creates a Canton party wallet. Use the allocation id from the 202 accept body. When status is awaiting-existing-approval, use lifecycleRequestId with the custody-account approval flow. An allocation of another organization answers the same not-found response as a missing allocation.",
-      "help": "Returns the durable allocation that creates a Canton party wallet. Use the allocation id from the 202 accept body. When status is awaiting-existing-approval, use lifecycleRequestId with the custody-account approval flow. An allocation of another organization answers the same not-found response as a missing allocation.",
+      "description": "Returns the durable allocation that creates a Canton party wallet. Use the allocation id from the 202 accept body. When status is awaiting-existing-approval, use lifecycleRequestId with the custody-account approval flow. An allocation of another organization answers the same not-found response as a missing allocation. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
+      "help": "Returns the durable allocation that creates a Canton party wallet. Use the allocation id from the 202 accept body. When status is awaiting-existing-approval, use lifecycleRequestId with the custody-account approval flow. An allocation of another organization answers the same not-found response as a missing allocation. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
       "tags": [
         "Wallets"
       ],
@@ -12903,7 +13067,7 @@
       "bodyFields": [],
       "examples": [
         {
-          "description": "Returns the durable allocation that creates a Canton party wallet. Use the allocation id from the 202 accept body. When status is awaiting-existing-approval, use lifecycleRequestId with the custody-account approval flow. An allocation of another organization answers the same not-found response as a missing allocation.",
+          "description": "Returns the durable allocation that creates a Canton party wallet. Use the allocation id from the 202 accept body. When status is awaiting-existing-approval, use lifecycleRequestId with the custody-account approval flow. An allocation of another organization answers the same not-found response as a missing allocation. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
           "path": {
             "allocationId": "<allocationId>"
           }
@@ -12915,8 +13079,8 @@
       "method": "POST",
       "url": "/api/v2/wallets",
       "summary": "Create a wallet",
-      "description": "Creates a custody-held wallet. Family canton allocates a Canton external party whose topology is signed automatically by the organization's custody-held Ed25519 key. A finished allocation returns 200. Background work and existing-signer approval return 202 with a status URL; the allocation status exposes the lifecycle request to approve.",
-      "help": "Creates a custody-held wallet. Family canton allocates a Canton external party whose topology is signed automatically by the organization's custody-held Ed25519 key. A finished allocation returns 200. Background work and existing-signer approval return 202 with a status URL; the allocation status exposes the lifecycle request to approve.",
+      "description": "Creates a custody-held wallet. Family canton allocates a Canton external party whose topology is signed automatically by the organization's custody-held Ed25519 key. A finished allocation returns 200. Background work and existing-signer approval return 202 with a status URL; the allocation status exposes the lifecycle request to approve. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
+      "help": "Creates a custody-held wallet. Family canton allocates a Canton external party whose topology is signed automatically by the organization's custody-held Ed25519 key. A finished allocation returns 200. Background work and existing-signer approval return 202 with a status URL; the allocation status exposes the lifecycle request to approve. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
       "tags": [
         "Wallets"
       ],
@@ -12995,8 +13159,8 @@
       "method": "GET",
       "url": "/api/v2/wallets",
       "summary": "List wallets",
-      "description": "Returns one page of custody-held wallets for the selected participant in the active organization. Canton party wallets currently populate this list. Sort defaults to cantonPartyId ascending. Filter on family, party id, participant id, network id, or signer wallet id. Repeating the request is safe.",
-      "help": "Returns one page of custody-held wallets for the selected participant in the active organization. Canton party wallets currently populate this list. Sort defaults to cantonPartyId ascending. Filter on family, party id, participant id, network id, or signer wallet id. Repeating the request is safe.",
+      "description": "Returns one page of custody-held wallets for the selected participant in the active organization. Canton party wallets currently populate this list. Sort defaults to cantonPartyId ascending. Filter on family, party id, participant id, network id, or signer wallet id. Repeating the request is safe. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
+      "help": "Returns one page of custody-held wallets for the selected participant in the active organization. Canton party wallets currently populate this list. Sort defaults to cantonPartyId ascending. Filter on family, party id, participant id, network id, or signer wallet id. Repeating the request is safe. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
       "tags": [
         "Wallets"
       ],
@@ -13139,7 +13303,7 @@
       "bodyFields": [],
       "examples": [
         {
-          "description": "Returns one page of custody-held wallets for the selected participant in the active organization. Canton party wallets currently populate this list. Sort defaults to cantonPartyId ascending. Filter on family, party id, participant id, network id, or signer wallet id. Repeating the request is safe.",
+          "description": "Returns one page of custody-held wallets for the selected participant in the active organization. Canton party wallets currently populate this list. Sort defaults to cantonPartyId ascending. Filter on family, party id, participant id, network id, or signer wallet id. Repeating the request is safe. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
           "query": {
             "sort": "family"
           }
@@ -13151,8 +13315,8 @@
       "method": "GET",
       "url": "/api/v2/wallets/{walletId}",
       "summary": "Read a wallet",
-      "description": "Returns one custody-held wallet in the active organization. For a Canton party wallet the identifier is the external party id. A wallet that belongs to another organization answers the same not-found response as a missing wallet.",
-      "help": "Returns one custody-held wallet in the active organization. For a Canton party wallet the identifier is the external party id. A wallet that belongs to another organization answers the same not-found response as a missing wallet.",
+      "description": "Returns one custody-held wallet in the active organization. For a Canton party wallet the identifier is the external party id. A wallet that belongs to another organization answers the same not-found response as a missing wallet. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
+      "help": "Returns one custody-held wallet in the active organization. For a Canton party wallet the identifier is the external party id. A wallet that belongs to another organization answers the same not-found response as a missing wallet. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
       "tags": [
         "Wallets"
       ],
@@ -13177,7 +13341,7 @@
       "bodyFields": [],
       "examples": [
         {
-          "description": "Returns one custody-held wallet in the active organization. For a Canton party wallet the identifier is the external party id. A wallet that belongs to another organization answers the same not-found response as a missing wallet.",
+          "description": "Returns one custody-held wallet in the active organization. For a Canton party wallet the identifier is the external party id. A wallet that belongs to another organization answers the same not-found response as a missing wallet. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
           "path": {
             "walletId": "<walletId>"
           }
@@ -13189,8 +13353,8 @@
       "method": "POST",
       "url": "/api/v2/wallets/{walletId}/submissions",
       "summary": "Submit a DAML command (escape hatch)",
-      "description": "Submits a hand-built DAML command for a custody-held Canton party wallet through interactive submission. This is the escape hatch, not the ordinary write path: the caller supplies the template id, the choice name and the argument record itself, so a command that names them wrongly is refused by the ledger rather than by this platform. Reach for it only for a choice the platform does not yet model as a typed operation. For token issuance, burning, transfer, transfer acceptance and holding unlock, use the typed Canton token operations on the family-aware token collections under /api/v2/tokens/{assetId}, which state the operation in business terms and build the Daml themselves; for delivery-versus-payment use the XvP writes at /api/v2/addons/xvp-settlements, /api/v2/addons/xvp-settlements/{settlementAddress}/approvals and /api/v2/addons/xvp-settlements/{settlementAddress}/executions. When approval is required, the platform authorizes the command intent and re-prepares a fresh hash after approval. A settled command returns 200. When the platform accepts the work and finishes it in the background, the response is 202 with a status URL.",
-      "help": "Submits a hand-built DAML command for a custody-held Canton party wallet through interactive submission. This is the escape hatch, not the ordinary write path: the caller supplies the template id, the choice name and the argument record itself, so a command that names them wrongly is refused by the ledger rather than by this platform. Reach for it only for a choice the platform does not yet model as a typed operation. For token issuance, burning, transfer, transfer acceptance and holding unlock, use the typed Canton token operations on the family-aware token collections under /api/v2/tokens/{assetId}, which state the operation in business terms and build the Daml themselves; for delivery-versus-payment use the XvP writes at /api/v2/addons/xvp-settlements, /api/v2/addons/xvp-settlements/{settlementAddress}/approvals and /api/v2/addons/xvp-settlements/{settlementAddress}/executions. When approval is required, the platform authorizes the command intent and re-prepares a fresh hash after approval. A settled command returns 200. When the platform accepts the work and finishes it in the background, the response is 202 with a status URL.",
+      "description": "Submits a hand-built DAML command for a custody-held Canton party wallet through interactive submission. This is the escape hatch, not the ordinary write path: the caller supplies the template id, the choice name and the argument record itself, so a command that names them wrongly is refused by the ledger rather than by this platform. Reach for it only for a choice the platform does not yet model as a typed operation. For token issuance, burning, transfer, transfer acceptance and holding unlock, use the typed Canton token operations on the family-aware token collections under /api/v2/tokens/{assetId}, which state the operation in business terms and build the Daml themselves; for delivery-versus-payment use the XvP writes at /api/v2/addons/xvp-settlements, /api/v2/addons/xvp-settlements/{settlementAddress}/approvals and /api/v2/addons/xvp-settlements/{settlementAddress}/executions. When approval is required, the platform authorizes the command intent and re-prepares a fresh hash after approval. A settled command returns 200. When the platform accepts the work and finishes it in the background, the response is 202 with a status URL. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
+      "help": "Submits a hand-built DAML command for a custody-held Canton party wallet through interactive submission. This is the escape hatch, not the ordinary write path: the caller supplies the template id, the choice name and the argument record itself, so a command that names them wrongly is refused by the ledger rather than by this platform. Reach for it only for a choice the platform does not yet model as a typed operation. For token issuance, burning, transfer, transfer acceptance and holding unlock, use the typed Canton token operations on the family-aware token collections under /api/v2/tokens/{assetId}, which state the operation in business terms and build the Daml themselves; for delivery-versus-payment use the XvP writes at /api/v2/addons/xvp-settlements, /api/v2/addons/xvp-settlements/{settlementAddress}/approvals and /api/v2/addons/xvp-settlements/{settlementAddress}/executions. When approval is required, the platform authorizes the command intent and re-prepares a fresh hash after approval. A settled command returns 200. When the platform accepts the work and finishes it in the background, the response is 202 with a status URL. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
       "tags": [
         "Wallets"
       ],
@@ -13250,7 +13414,7 @@
       ],
       "examples": [
         {
-          "description": "Submits a hand-built DAML command for a custody-held Canton party wallet through interactive submission. This is the escape hatch, not the ordinary write path: the caller supplies the template id, the choice name and the argument record itself, so a command that names them wrongly is refused by the ledger rather than by this platform. Reach for it only for a choice the platform does not yet model as a typed operation. For token issuance, burning, transfer, transfer acceptance and holding unlock, use the typed Canton token operations on the family-aware token collections under /api/v2/tokens/{assetId}, which state the operation in business terms and build the Daml themselves; for delivery-versus-payment use the XvP writes at /api/v2/addons/xvp-settlements, /api/v2/addons/xvp-settlements/{settlementAddress}/approvals and /api/v2/addons/xvp-settlements/{settlementAddress}/executions. When approval is required, the platform authorizes the command intent and re-prepares a fresh hash after approval. A settled command returns 200. When the platform accepts the work and finishes it in the background, the response is 202 with a status URL.",
+          "description": "Submits a hand-built DAML command for a custody-held Canton party wallet through interactive submission. This is the escape hatch, not the ordinary write path: the caller supplies the template id, the choice name and the argument record itself, so a command that names them wrongly is refused by the ledger rather than by this platform. Reach for it only for a choice the platform does not yet model as a typed operation. For token issuance, burning, transfer, transfer acceptance and holding unlock, use the typed Canton token operations on the family-aware token collections under /api/v2/tokens/{assetId}, which state the operation in business terms and build the Daml themselves; for delivery-versus-payment use the XvP writes at /api/v2/addons/xvp-settlements, /api/v2/addons/xvp-settlements/{settlementAddress}/approvals and /api/v2/addons/xvp-settlements/{settlementAddress}/executions. When approval is required, the platform authorizes the command intent and re-prepares a fresh hash after approval. A settled command returns 200. When the platform accepts the work and finishes it in the background, the response is 202 with a status URL. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
           "path": {
             "walletId": "<walletId>"
           }
@@ -13262,8 +13426,8 @@
       "method": "POST",
       "url": "/api/v2/wallets/submissions/{submissionId}/decision",
       "summary": "Decide a DAML command intent",
-      "description": "Records an organization-owner or platform-administrator approval decision, then idempotently signals the durable Canton submission. Repeating the same decision is safe.",
-      "help": "Records an organization-owner or platform-administrator approval decision, then idempotently signals the durable Canton submission. Repeating the same decision is safe.",
+      "description": "Records an organization-owner or platform-administrator approval decision, then idempotently signals the durable Canton submission. Repeating the same decision is safe. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
+      "help": "Records an organization-owner or platform-administrator approval decision, then idempotently signals the durable Canton submission. Repeating the same decision is safe. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
       "tags": [
         "Wallets"
       ],
@@ -13318,7 +13482,7 @@
       ],
       "examples": [
         {
-          "description": "Records an organization-owner or platform-administrator approval decision, then idempotently signals the durable Canton submission. Repeating the same decision is safe.",
+          "description": "Records an organization-owner or platform-administrator approval decision, then idempotently signals the durable Canton submission. Repeating the same decision is safe. Available only on a deployment that has `features.canton` switched on. While it is off, this route answers `404 ROUTE_NOT_FOUND`, the same answer as a route that does not exist.",
           "path": {
             "submissionId": "<submissionId>"
           }
@@ -56944,8 +57108,8 @@
       "method": "POST",
       "url": "/api/v2/tokens",
       "summary": "Create a token",
-      "description": "Deploys a new token for the active organization on the request chain, using a factory the organization can use. By default the platform queues the deployment and answers with the transaction identifier, its current state, and the status URL under status 202. A caller that sends Prefer: wait=<seconds> waits for settlement and receives the indexed token plus transaction hashes. Follow progress on the creation stream. A second identical call starts another deployment. The body may be the Canton instrument member instead: a member whose `type` is `canton` creates a Canton instrument, which the platform submits as one workflow of admin-single-party ledger commands and answers with the settled Canton arm under 201, or with the accepted shape when the work finishes in the background.",
-      "help": "Deploys a new token for the active organization on the request chain, using a factory the organization can use. By default the platform queues the deployment and answers with the transaction identifier, its current state, and the status URL under status 202. A caller that sends Prefer: wait=<seconds> waits for settlement and receives the indexed token plus transaction hashes. Follow progress on the creation stream. A second identical call starts another deployment. The body may be the Canton instrument member instead: a member whose `type` is `canton` creates a Canton instrument, which the platform submits as one workflow of admin-single-party ledger commands and answers with the settled Canton arm under 201, or with the accepted shape when the work finishes in the background.",
+      "description": "Deploys a new token for the active organization on the request chain, using a factory the organization can use. By default the platform queues the deployment and answers with the transaction identifier, its current state, and the status URL under status 202. A caller that sends Prefer: wait=<seconds> waits for settlement and receives the indexed token plus transaction hashes. Follow progress on the creation stream. A second identical call starts another deployment. The body may be the Canton instrument member instead: a member whose `type` is `canton` creates a Canton instrument, which the platform submits as one workflow of admin-single-party ledger commands and answers with the settled Canton arm under 201, or with the accepted shape when the work finishes in the background. `templateId` is required for `dalp-asset` and optional for a classic asset type. The platform creates a classic type only when its operator turned on legacy asset creation, and otherwise refuses it with HTTP 422 and `TOKEN_CREATE_ASSET_FAMILY_DEPRECATED`. A classic type created without a template gets no template checks; with one, it gets only the check that the template is published and not hidden from Issue asset, and is refused with `TemplateFeaturesUnavailable` when the template declares features.",
+      "help": "Deploys a new token for the active organization on the request chain, using a factory the organization can use. By default the platform queues the deployment and answers with the transaction identifier, its current state, and the status URL under status 202. A caller that sends Prefer: wait=<seconds> waits for settlement and receives the indexed token plus transaction hashes. Follow progress on the creation stream. A second identical call starts another deployment. The body may be the Canton instrument member instead: a member whose `type` is `canton` creates a Canton instrument, which the platform submits as one workflow of admin-single-party ledger commands and answers with the settled Canton arm under 201, or with the accepted shape when the work finishes in the background. `templateId` is required for `dalp-asset` and optional for a classic asset type. The platform creates a classic type only when its operator turned on legacy asset creation, and otherwise refuses it with HTTP 422 and `TOKEN_CREATE_ASSET_FAMILY_DEPRECATED`. A classic type created without a template gets no template checks; with one, it gets only the check that the template is published and not hidden from Issue asset, and is refused with `TemplateFeaturesUnavailable` when the template declares features.",
       "tags": [
         "Token creation"
       ],

package/src/lib/errors.ts

@@ -1,11 +1,13 @@
 import { findDalpSdkError, isDalpApiError } from "@settlemint/dalp-sdk";
 import { buildErrorCta, extractResourceLinks, type CliCtaBlock, type ResourceLinks } from "./cli-cta.ts";
+import type { GatedFeature } from "./feature-gated-operations.ts";
 
 export interface CliErrorContext {
   readonly code: string;
   readonly fallbackMessage: string;
   readonly fallbackWhy: string;
   readonly fallbackFix: string;
+  readonly gatedFeature?: GatedFeature;
 }
 
 export interface RenderedCliError {
@@ -171,8 +173,25 @@ function normalizeFailure(error: unknown, context: CliErrorContext): NormalizedF
   };
 }
 
+const ROUTE_NOT_FOUND_CODE = "ROUTE_NOT_FOUND";
+
+function featureNotEnabledFailure(feature: GatedFeature): NormalizedFailure {
+  return {
+    code: "FEATURE_NOT_ENABLED",
+    message: `${feature.name} is not enabled on this deployment.`,
+    why: `The platform answered with an unknown route because ${feature.name} is switched off (${feature.setting}), so it does not serve this command.`,
+    fix: `Ask the operator of this deployment to switch ${feature.name} on, or use a deployment that has it enabled.`,
+    retryable: false,
+    category: "domain",
+  };
+}
+
 export function renderSdkErrorForCli(error: unknown, context: CliErrorContext): RenderedCliError {
-  const failure = normalizeFailure(error, context);
+  const normalized = normalizeFailure(error, context);
+  const failure =
+    context.gatedFeature !== undefined && normalized.code === ROUTE_NOT_FOUND_CODE
+      ? featureNotEnabledFailure(context.gatedFeature)
+      : normalized;
   return {
     code: failure.code,
     message: failure.message,

package/src/lib/feature-gated-operations.ts

@@ -0,0 +1,18 @@
+export interface GatedFeature {
+  readonly name: string;
+  readonly setting: string;
+}
+
+const FEATURE_GATED_OPERATION_GROUPS: Readonly<Record<string, GatedFeature>> = {
+  cantonV2: { name: "Canton", setting: "features.canton" },
+};
+
+export const gatedFeatureOfOperation = (operationName: string): GatedFeature | undefined => {
+  const group = operationName.split(".", 1)[0] ?? "";
+  return Object.hasOwn(FEATURE_GATED_OPERATION_GROUPS, group) ? FEATURE_GATED_OPERATION_GROUPS[group] : undefined;
+};
+
+export const gatedFeatureContext = (operationName: string): { readonly gatedFeature?: GatedFeature } => {
+  const gatedFeature = gatedFeatureOfOperation(operationName);
+  return gatedFeature === undefined ? {} : { gatedFeature };
+};

package/src/lib/register-operations.ts

@@ -3,6 +3,7 @@ import { Cli, z } from "incur";
 import { buildErrorCta, buildSuccessCtaFromResult, renderCtaText, type CliCtaBlock } from "./cli-cta.ts";
 import { createCliStatus } from "./cli-status.ts";
 import { renderSdkErrorForCli } from "./errors.ts";
+import { gatedFeatureContext } from "./feature-gated-operations.ts";
 import { INDEX_COMMAND } from "@settlemint/dalp-sdk/routes";
 import { listCliOperations, operationHintKey, type OperationDescriptor } from "./operation-inventory.ts";
 import { tagDescription, type SurfaceOperation } from "./openapi-surface.ts";
@@ -447,6 +448,7 @@ function makeLeafHandler(ops: ReadonlyArray<OperationDescriptor>) {
             fallbackMessage: "Operation failed.",
             fallbackWhy: "The DALP API rejected the request or the network call failed.",
             fallbackFix: "Verify authentication, organization context, and args/options, then retry.",
+            ...gatedFeatureContext(descriptor.name),
           }
         );
 
@@ -480,6 +482,7 @@ function makeLeafHandler(ops: ReadonlyArray<OperationDescriptor>) {
               fallbackMessage: "SSE stream failed",
               fallbackWhy: "The Server-Sent Events stream ended with an error before a terminal event.",
               fallbackFix: "Retry the stream command, or poll the matching status endpoint.",
+              ...gatedFeatureContext(descriptor.name),
             });
             const failed = status.fail(rendered.message);
             if (failed !== undefined) {