@stable_sea/sdk 0.2.20 → 0.2.23

package/README.md

@@ -142,6 +142,12 @@ Use the member client before issuing an API key. Signup uses the existing
 business-email/OTP flow. After account and authenticator setup, sign in and select
 your business using the same session flow as Terminal.
 
+Where the signup bot challenge is on, `GET /identity/bot_challenge_settings`
+answers `required: true`, and the screener submit and code resend refuse a
+request without a Cloudflare Turnstile `challenge_token` (`bot_challenge_required`,
+`bot_challenge_failed`). Turnstile issues tokens only to its widget on a hostname
+the site key allows.
+
 Read `/onboarding/status` and `/compliance/kyb/fields` to discover the current
 requirements and saved answers. Review registry proposals before confirming
 prefilled answers. Draft writes retain their native revision checks: send the

package/dist/gen/schema.d.ts

@@ -1491,7 +1491,7 @@ export interface components {
             /** @enum {string} */
             payment_rail: "onchain_ethereum" | "onchain_stellar" | "onchain_solana";
             /** @enum {string} */
-            symbol?: "USDC" | "XLM";
+            symbol?: "USDC" | "XLM" | "YLDS";
         };
         ExternalWalletHolding: {
             /** @description The quantity held, in the token's own units. Exact, never rounded, and always above zero. */

package/dist/gen/session-schema.d.ts

@@ -4,6 +4,46 @@
  */
 
 export interface paths {
+    "/compliance/additional_signers": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the business's additional authorized signers
+         * @description The authorized signers the business has beside the one on its KYB form, oldest first, each with a name, a job title and when they were added. Any member of the business may read it. Carries no email, no identity details and no WisdomTree step. The list is not paginated: has_more is always false.
+         */
+        get: operations["compliance.additional_signers.list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/compliance/additional_signers/{id}/remove": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Remove an additional authorized signer
+         * @description An admin of the business (permissions_manage) removes one of the business's additional authorized signers, saying why. No Stable Sea approval is needed: the removal takes effect at once, is recorded on the audit ledger with the admin and the reason, and is emailed to Stable Sea compliance, to the business's admins and to the removed person. The signer stays on record as removed, and the same person can be added again later with a new request. The authorized signer on the KYB form (the business's controller at its custodian) cannot be removed here and is unchanged; nothing is sent to the custodian. Answers with the removed signer as they were listed. Refused when the signer is not one of the business's (additional_signer_not_found), was already removed (additional_signer_already_removed, and nothing is recorded), or the reason is blank (signer_change_invalid).
+         */
+        post: operations["compliance.additional_signers.remove"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/compliance/documents": {
         parameters: {
             query?: never;
@@ -666,7 +706,7 @@ export interface paths {
         put?: never;
         /**
          * Request an authorized signer change
-         * @description An admin of the business (permissions_manage) names an active member as the new authorized signer and says why. The named member must accept, then a compliance operator approves; nothing on the KYB form changes until then. Refused when the member is not an active member of the business, is already the signer, or the business already has an open request. Opens a re-verification record that the request's approval, rejection or cancellation settles, and tells the business's admins, the outgoing signer and the new signer by email.
+         * @description An admin of the business (permissions_manage) names an active member as the new authorized signer, or as an additional authorized signer (kind add, beside the current one), and says why. The named member must accept, then a compliance operator approves; nothing on the KYB form changes until then. A replace (the default) changes the signer on the KYB form, who is the business's controller at its custodian. An add records a second signer, changes neither the form nor the controller, and has its KYC sent to WisdomTree by compliance. Refused when the member is not an active member of the business, the kind is neither replace nor add, the business already has an open request, the member is already the signer a replace would name (signer_change_already_signer), or the member is already an authorized signer in a way the request cannot change (signer_change_member_already_signer): for an add, the signer on the KYB form or an additional signer already; for a replace, an additional signer. Opens a re-verification record that the request's approval, rejection or cancellation settles, and tells the business's admins and the new signer by email, and, for a replace, the outgoing signer.
          */
         post: operations["compliance.signer_changes.create"];
         delete?: never;
@@ -839,6 +879,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/identity/bot_challenge_settings": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get bot challenge settings
+         * @description Reports whether the signup screener submit and the signup code resend require a bot-challenge token, and the public site key to render the challenge widget with. Public.
+         */
+        get: operations["identity.bot_challenge_settings.get"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/identity/business/networks": {
         parameters: {
             query?: never;
@@ -1708,7 +1768,7 @@ export interface paths {
         put?: never;
         /**
          * Resend signup OTP
-         * @description Re-issues the OTP for an in-flight screener session by re-running registration step 1 for the supplied business email, minting a fresh OTP and re-delivering the email. Acknowledges the same way for an address that already has an account, which is then emailed a sign-in prompt rather than a code: this endpoint never reveals whether an address is registered.
+         * @description Re-issues the OTP for an in-flight screener session by re-running registration step 1 for the supplied business email, minting a fresh OTP and re-delivering the email. Acknowledges the same way for an address that already has an account, which is then emailed a sign-in prompt rather than a code: this endpoint never reveals whether an address is registered. While GET /identity/bot_challenge_settings answers required=true, a request without a valid challenge_token is refused (bot_challenge_required / bot_challenge_failed) before any email.
          */
         post: operations["signup.screener.resend_otp"];
         delete?: never;
@@ -1728,7 +1788,7 @@ export interface paths {
         put?: never;
         /**
          * Submit signup screener
-         * @description Validates the screener payload (business email + business name) and starts an identity registration session. Answers the same way for an address that already has an account, which is then emailed a sign-in prompt rather than a code: this endpoint never reveals whether an address is registered.
+         * @description Validates the screener payload (business email + business name) and starts an identity registration session. Answers the same way for an address that already has an account, which is then emailed a sign-in prompt rather than a code: this endpoint never reveals whether an address is registered. While GET /identity/bot_challenge_settings answers required=true, a request without a valid challenge_token is refused (bot_challenge_required / bot_challenge_failed) before any email or CRM lead.
          */
         post: operations["signup.screener.submit"];
         delete?: never;
@@ -1781,22 +1841,20 @@ export interface paths {
 export type webhooks = Record<string, never>;
 export interface components {
     schemas: {
-        Page_DocumentsView: {
-            data: components["schemas"]["DocumentsView"][] | null;
+        Page_ComplianceAdditionalSignerBusinessView: {
+            data: components["schemas"]["ComplianceAdditionalSignerBusinessView"][] | null;
             has_more: boolean;
             next_cursor: string | null;
             total_count?: number | null;
         };
-        DocumentsView: {
-            created_by?: string;
+        ComplianceAdditionalSignerBusinessView: {
             /** Format: date-time */
-            created_ts?: string;
-            file_name?: string;
-            /** Format: int64 */
-            file_size?: number;
-            file_type?: string;
-            group_id?: string;
-            id?: string;
+            added_ts: string;
+            first_name: string;
+            id: string;
+            individual_id: string;
+            job_title: string;
+            last_name: string;
         };
         HttputilAPIError: {
             error?: components["schemas"]["HttputilAPIErrorBody"];
@@ -1830,6 +1888,26 @@ export interface components {
             /** @description RFC 6901 JSON Pointer to the offending field. */
             pointer?: string;
         };
+        ComplianceRemoveAdditionalSignerBody: {
+            reason: string;
+        };
+        Page_DocumentsView: {
+            data: components["schemas"]["DocumentsView"][] | null;
+            has_more: boolean;
+            next_cursor: string | null;
+            total_count?: number | null;
+        };
+        DocumentsView: {
+            created_by?: string;
+            /** Format: date-time */
+            created_ts?: string;
+            file_name?: string;
+            /** Format: int64 */
+            file_size?: number;
+            file_type?: string;
+            group_id?: string;
+            id?: string;
+        };
         DocumentsCreateInput: {
             contents_b64?: string[] | null;
             filenames?: string[] | null;
@@ -2385,6 +2463,7 @@ export interface components {
             group_id: string;
             id: string;
             incoming: components["schemas"]["ComplianceSignerChangeSigner"];
+            kind: components["schemas"]["ComplianceSignerChangeKind"];
             new_signer_id: string;
             outgoing: components["schemas"]["ComplianceSignerChangeSigner"];
             reason: string;
@@ -2403,9 +2482,12 @@ export interface components {
             last_name: string;
         };
         /** @enum {string} */
+        ComplianceSignerChangeKind: "replace" | "add";
+        /** @enum {string} */
         ComplianceSignerChangeState: "awaiting_signer" | "awaiting_approval" | "approved" | "rejected" | "cancelled";
         ComplianceCreateSignerChangeInput: {
             job_title: string;
+            kind?: components["schemas"]["ComplianceSignerChangeKind"];
             new_signer_id: string;
             reason: string;
         };
@@ -2491,6 +2573,12 @@ export interface components {
             /** @description Required for Live keys; omitted for Test keys */
             totp_code?: string;
         };
+        SignupBotChallengeSettings: {
+            /** @description Whether POST /signup/screener/submit and POST /signup/screener/resend_otp refuse a request without a valid challenge_token. */
+            required: boolean;
+            /** @description The public site key to render the challenge widget with. Empty when required is false. */
+            site_key: string;
+        };
         NetworksOutput: {
             networks: components["schemas"]["NetworksNetworkItem"][] | null;
             /** @description Whether this deployment accepts changes to the networks. */
@@ -2979,6 +3067,8 @@ export interface components {
             Success?: boolean;
         };
         SignupResendOTPInput: {
+            /** @description The bot-challenge token the widget issued for the resend_otp action. Required while GET /identity/bot_challenge_settings answers required=true; ignored otherwise. Single use. */
+            challenge_token?: string;
             email?: string;
             otp_session_id?: string;
         };
@@ -2987,6 +3077,8 @@ export interface components {
         };
         SignupScreenerSubmitInput: {
             business_name?: string;
+            /** @description The bot-challenge token the widget issued for the signup action. Required while GET /identity/bot_challenge_settings answers required=true; ignored otherwise. Single use. */
+            challenge_token?: string;
             email?: string;
             first_name?: string;
             last_name?: string;
@@ -3041,6 +3133,133 @@ export interface components {
 }
 export type $defs = Record<string, never>;
 export interface operations {
+    "compliance.additional_signers.list": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Page_ComplianceAdditionalSignerBusinessView"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Error response. */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+        };
+    };
+    "compliance.additional_signers.remove": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["ComplianceRemoveAdditionalSignerBody"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ComplianceAdditionalSignerBusinessView"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Error response. */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+        };
+    };
     "compliance.documents.list": {
         parameters: {
             query?: {
@@ -5903,6 +6122,35 @@ export interface operations {
             };
         };
     };
+    "identity.bot_challenge_settings.get": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SignupBotChallengeSettings"];
+                };
+            };
+            /** @description Error response. */
+            default: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+        };
+    };
     "identity.business.networks.get": {
         parameters: {
             query?: never;
@@ -8064,6 +8312,33 @@ export interface operations {
                     "application/json": components["schemas"]["SignupResendOTPAck"];
                 };
             };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Service Unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
             /** @description Error response. */
             default: {
                 headers: {
@@ -8097,6 +8372,33 @@ export interface operations {
                     "application/json": components["schemas"]["SignupScreenerSubmitOutput"];
                 };
             };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
+            /** @description Service Unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["HttputilAPIError"];
+                };
+            };
             /** @description Error response. */
             default: {
                 headers: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stable_sea/sdk",
-  "version": "0.2.20",
+  "version": "0.2.23",
   "type": "module",
   "sideEffects": false,
   "files": [
@@ -35,10 +35,10 @@
     "openapi-fetch": "0.17.0"
   },
   "devDependencies": {
-    "@types/node": "26.6.4",
+    "@types/node": "26.6.5",
     "openapi-typescript": "7.13.0",
     "typescript": "5.9.3",
-    "vitest": "5.0.3"
+    "vitest": "5.0.4"
   },
   "overrides": {
     "js-yaml": "^5.4.3",