@stable_sea/sdk 0.2.20 → 0.2.21

package/README.md

@@ -142,6 +142,12 @@ Use the member client before issuing an API key. Signup uses the existing
 business-email/OTP flow. After account and authenticator setup, sign in and select
 your business using the same session flow as Terminal.
 
+Where the signup bot challenge is on, `GET /identity/bot_challenge_settings`
+answers `required: true`, and the screener submit and code resend refuse a
+request without a Cloudflare Turnstile `challenge_token` (`bot_challenge_required`,
+`bot_challenge_failed`). Turnstile issues tokens only to its widget on a hostname
+the site key allows.
+
 Read `/onboarding/status` and `/compliance/kyb/fields` to discover the current
 requirements and saved answers. Review registry proposals before confirming
 prefilled answers. Draft writes retain their native revision checks: send the

package/dist/gen/schema.d.ts

@@ -1491,7 +1491,7 @@ export interface components {
             /** @enum {string} */
             payment_rail: "onchain_ethereum" | "onchain_stellar" | "onchain_solana";
             /** @enum {string} */
-            symbol?: "USDC" | "XLM";
+            symbol?: "USDC" | "XLM" | "YLDS";
         };
         ExternalWalletHolding: {
             /** @description The quantity held, in the token's own units. Exact, never rounded, and always above zero. */

package/dist/gen/session-schema.d.ts

@@ -839,6 +839,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/identity/bot_challenge_settings": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get bot challenge settings
+         * @description Reports whether the signup screener submit and the signup code resend require a bot-challenge token, and the public site key to render the challenge widget with. Public.
+         */
+        get: operations["identity.bot_challenge_settings.get"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/identity/business/networks": {
         parameters: {
             query?: never;
@@ -1708,7 +1728,7 @@ export interface paths {
         put?: never;
         /**
          * Resend signup OTP
-         * @description Re-issues the OTP for an in-flight screener session by re-running registration step 1 for the supplied business email, minting a fresh OTP and re-delivering the email. Acknowledges the same way for an address that already has an account, which is then emailed a sign-in prompt rather than a code: this endpoint never reveals whether an address is registered.
+         * @description Re-issues the OTP for an in-flight screener session by re-running registration step 1 for the supplied business email, minting a fresh OTP and re-delivering the email. Acknowledges the same way for an address that already has an account, which is then emailed a sign-in prompt rather than a code: this endpoint never reveals whether an address is registered. While GET /identity/bot_challenge_settings answers required=true, a request without a valid challenge_token is refused (bot_challenge_required / bot_challenge_failed) before any email.
          */
         post: operations["signup.screener.resend_otp"];
         delete?: never;
@@ -1728,7 +1748,7 @@ export interface paths {
         put?: never;
         /**
          * Submit signup screener
-         * @description Validates the screener payload (business email + business name) and starts an identity registration session. Answers the same way for an address that already has an account, which is then emailed a sign-in prompt rather than a code: this endpoint never reveals whether an address is registered.
+         * @description Validates the screener payload (business email + business name) and starts an identity registration session. Answers the same way for an address that already has an account, which is then emailed a sign-in prompt rather than a code: this endpoint never reveals whether an address is registered. While GET /identity/bot_challenge_settings answers required=true, a request without a valid challenge_token is refused (bot_challenge_required / bot_challenge_failed) before any email or CRM lead.
          */
         post: operations["signup.screener.submit"];
         delete?: never;
@@ -2491,6 +2511,12 @@ export interface components {
             /** @description Required for Live keys; omitted for Test keys */
             totp_code?: string;
         };
+        SignupBotChallengeSettings: {
+            /** @description Whether POST /signup/screener/submit and POST /signup/screener/resend_otp refuse a request without a valid challenge_token. */
+            required: boolean;
+            /** @description The public site key to render the challenge widget with. Empty when required is false. */
+            site_key: string;
+        };
         NetworksOutput: {
             networks: components["schemas"]["NetworksNetworkItem"][] | null;
             /** @description Whether this deployment accepts changes to the networks. */
@@ -2979,6 +3005,8 @@ export interface components {
             Success?: boolean;
         };
         SignupResendOTPInput: {
+            /** @description The bot-challenge token the widget issued for the resend_otp action. Required while GET /identity/bot_challenge_settings answers required=true; ignored otherwise. Single use. */
+            challenge_token?: string;
             email?: string;
             otp_session_id?: string;
         };
@@ -2987,6 +3015,8 @@ export interface components {
         };
         SignupScreenerSubmitInput: {
             business_name?: string;
+            /** @description The bot-challenge token the widget issued for the signup action. Required while GET /identity/bot_challenge_settings answers required=true; ignored otherwise. Single use. */
+            challenge_token?: string;
             email?: string;
             first_name?: string;
             last_name?: string;
@@ -5903,6 +5933,35 @@ export interface operations {
             };
         };
     };
+    "identity.bot_challenge_settings.get": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SignupBotChallengeSettings"];
+                };
+            };
+            /** @description Error response. */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+        };
+    };
     "identity.business.networks.get": {
         parameters: {
             query?: never;
@@ -8064,6 +8123,33 @@ export interface operations {
                     "application/json": components["schemas"]["SignupResendOTPAck"];
                 };
             };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Service Unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
             /** @description Error response. */
             default: {
                 headers: {
@@ -8097,6 +8183,33 @@ export interface operations {
                     "application/json": components["schemas"]["SignupScreenerSubmitOutput"];
                 };
             };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Service Unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
             /** @description Error response. */
             default: {
                 headers: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable_sea/sdk",
-  "version": "0.2.20",
+  "version": "0.2.21",
   "type": "module",
   "sideEffects": false,
   "files": [