@xkova/sdk 0.1.0-alpha.7 → 0.1.0-alpha.8

package/dist/held-approval.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Narrow a governance hold before reading a mutation's entity result.
+ *
+ * On a workspace with a seeded/configured governance requirement, a
+ * create-shaped mutation (for example, `createTreasuryCounterparty` or
+ * treasury signer changes) may not execute: it returns a `HeldApproval`
+ * (`{ status: 'pending_approval', pending_approval_request_id }`) instead of
+ * the entity. No entity is created. Independently eligible approvers complete
+ * the required approval, then the same call is reissued through normal policy.
+ *
+ * Narrow BEFORE reading entity fields:
+ *
+ *   const res = await client.treasury.createCounterparty(body, opts);
+ *   if (isHeldApproval(res)) {
+ *     await waitForApproval(res.pending_approval_request_id); // your flow
+ *     return client.treasury.createCounterparty(body, opts); // same request
+ *   }
+ *   res.id; // safely the entity now
+ *
+ * This helper grants no approval, signer authority or permission to retry a
+ * changed request. Existing entity-shaped responses are not governance holds.
+ */
+import type { components } from './generated/types.js';
+export type HeldApproval = components['schemas']['HeldApproval'];
+/** True when a mutation response is a governance hold rather than the entity. */
+export declare function isHeldApproval(res: unknown): res is HeldApproval;
+/**
+ * Thrown by `assertNotHeld` when a mutation was governance-held. Carries the
+ * approval request id so a script that does not implement the attest flow
+ * fails loudly with the pointer a human needs.
+ */
+export declare class XKOVAHeldApprovalError extends Error {
+    readonly pendingApprovalRequestId: string;
+    constructor(held: HeldApproval, action?: string);
+}
+/**
+ * Unwrap a `entity | HeldApproval` union for callers that treat a hold as
+ * exceptional (scripts, one-shot provisioning). Returns the entity, or throws
+ * `XKOVAHeldApprovalError` carrying the approval request id.
+ */
+export declare function assertNotHeld<T>(res: T | HeldApproval, action?: string): T;

package/dist/held-approval.js

@@ -0,0 +1,33 @@
+/** True when a mutation response is a governance hold rather than the entity. */
+export function isHeldApproval(res) {
+    return (typeof res === 'object' &&
+        res !== null &&
+        res.status === 'pending_approval' &&
+        typeof res
+            .pending_approval_request_id === 'string');
+}
+/**
+ * Thrown by `assertNotHeld` when a mutation was governance-held. Carries the
+ * approval request id so a script that does not implement the attest flow
+ * fails loudly with the pointer a human needs.
+ */
+export class XKOVAHeldApprovalError extends Error {
+    pendingApprovalRequestId;
+    constructor(held, action) {
+        super(`${action ?? 'The mutation'} was held for governance approval ` +
+            `(approval request ${held.pending_approval_request_id}). Attest the ` +
+            `request, then re-issue the same call.`);
+        this.name = 'XKOVAHeldApprovalError';
+        this.pendingApprovalRequestId = held.pending_approval_request_id;
+    }
+}
+/**
+ * Unwrap a `entity | HeldApproval` union for callers that treat a hold as
+ * exceptional (scripts, one-shot provisioning). Returns the entity, or throws
+ * `XKOVAHeldApprovalError` carrying the approval request id.
+ */
+export function assertNotHeld(res, action) {
+    if (isHeldApproval(res))
+        throw new XKOVAHeldApprovalError(res, action);
+    return res;
+}

package/dist/index.d.ts

@@ -5,6 +5,7 @@ export { generateIdempotencyKey, withIdempotency } from './idempotency.js';
 export { withRetry, type RetryPolicy } from './retry.js';
 export { collectCursor, paginateCursor, type CursorPage, type PaginateCursorOptions, } from './cursor.js';
 export { XKOVAApiError, XKOVAUploadError } from './errors.js';
+export { isHeldApproval, assertNotHeld, XKOVAHeldApprovalError, type HeldApproval, } from './held-approval.js';
 export { type PollOptions } from './resources/workflows.js';
 export { type XKOVAMemberSessionContext } from './resources/account-holders.js';
 export { verifyWebhookSignature, type VerifyWebhookSignatureResult } from './webhook.js';

package/dist/index.js

@@ -4,5 +4,6 @@ export { generateIdempotencyKey, withIdempotency } from './idempotency.js';
 export { withRetry } from './retry.js';
 export { collectCursor, paginateCursor, } from './cursor.js';
 export { XKOVAApiError, XKOVAUploadError } from './errors.js';
+export { isHeldApproval, assertNotHeld, XKOVAHeldApprovalError, } from './held-approval.js';
 export { verifyWebhookSignature } from './webhook.js';
 export { verifyInclusion, verifyConsistency, verifySth, } from './rwa-verify.js';

package/dist/request-signing.js

@@ -11,6 +11,10 @@ const CONDITIONAL_HEADERS = [
     'idempotency-key',
     'x-member-session-id',
     'x-xkova-publishable-key',
+    'x-xkova-workforce-key',
+    'x-workforce-session',
+    'x-xkova-human-authorization',
+    'origin',
     'x-account-holder-id',
     'x-sender-wallet-id',
     'x-sandbox-scenario',
@@ -78,6 +82,8 @@ export async function signXKOVARequest(input) {
 function requiredComponents(headers, bodyPresent) {
     const components = [...BASE_COMPONENTS];
     for (const header of CONDITIONAL_HEADERS) {
+        if (header === 'origin' && !headers.has('x-xkova-workforce-key'))
+            continue;
         if (headers.has(header) ||
             (bodyPresent && (header === 'content-digest' || header === 'content-type'))) {
             components.push(header);

package/dist/resources/treasury.d.ts

@@ -0,0 +1,404 @@
+/** Tenant treasury wallets and transfers. Signer authority is verified by the API. */
+import { Resource, type ReqBody, type Query } from './base.js';
+import type { XKOVAMutationOptions } from '../client.js';
+export declare class TreasuryResource extends Resource {
+    listWallets(query?: Query<'listTreasuryWallets'>): Promise<{
+        data?: import("../generated/types.js").components["schemas"]["TreasuryWallet"][];
+    }>;
+    createWallet(body: ReqBody<'createTreasuryWallet'>, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        tenant_id: string;
+        chain_id: string;
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        address: string;
+        name: string;
+        threshold: number;
+        state: "deploying" | "active" | "decommissioned";
+        is_revenue_treasury: boolean;
+        signers: import("../generated/types.js").components["schemas"]["TreasurySigner"][];
+        deploy_tx_hash: string | null;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        updated_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+    }>;
+    getWallet(id: string): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        tenant_id: string;
+        chain_id: string;
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        address: string;
+        name: string;
+        threshold: number;
+        state: "deploying" | "active" | "decommissioned";
+        is_revenue_treasury: boolean;
+        signers: import("../generated/types.js").components["schemas"]["TreasurySigner"][];
+        deploy_tx_hash: string | null;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        updated_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+    }>;
+    walletBalance(id: string): Promise<{
+        treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        chain_id: string;
+        balances: import("../generated/types.js").components["schemas"]["TreasuryBalance"][];
+        fetched_at: string;
+    }>;
+    listSigners(id: string): Promise<{
+        data?: import("../generated/types.js").components["schemas"]["TreasurySigner"][];
+    }>;
+    addSigner(id: string, body: ReqBody<'addTreasurySigner'>, opts?: XKOVAMutationOptions): Promise<{
+        status: "pending_approval";
+        pending_approval_request_id: import("../generated/types.js").components["schemas"]["ApprovalRequestId"];
+    } | {
+        wallet: import("../generated/types.js").components["schemas"]["TreasuryWallet"];
+        draft_transfer_id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+    }>;
+    changeThreshold(id: string, body: ReqBody<'changeTreasuryThreshold'>, opts?: XKOVAMutationOptions): Promise<{
+        status: "pending_approval";
+        pending_approval_request_id: import("../generated/types.js").components["schemas"]["ApprovalRequestId"];
+    } | {
+        wallet: import("../generated/types.js").components["schemas"]["TreasuryWallet"];
+        draft_transfer_id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+    }>;
+    listTransfers(walletId: string, query?: Query<'listTreasuryTransfers'>): Promise<{
+        data: unknown[];
+        next_cursor: string | null;
+        has_more: boolean;
+    } & {
+        data?: import("../generated/types.js").components["schemas"]["TreasuryTransfer"][];
+    }>;
+    draftTransfer(walletId: string, body: ReqBody<'draftTreasuryTransfer'>, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+        treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        initiated_by_staff_id: import("../generated/types.js").components["schemas"]["StaffId"];
+        kind: import("../generated/types.js").components["schemas"]["TreasuryTransferKind"];
+        to_address: string;
+        asset_token_address: string | null;
+        amount: string | null;
+        safe_nonce: string;
+        safe_tx_hash: string;
+        state: import("../generated/types.js").components["schemas"]["TreasuryTransferState"];
+        memo?: string | null;
+        tax_classification?: string | null;
+        counterparty_id?: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyId"] | null;
+        signatures: import("../generated/types.js").components["schemas"]["TreasuryTransferSignature"][];
+        threshold: number;
+        threshold_met: boolean;
+        signing_context?: import("../generated/types.js").components["schemas"]["TreasuryTransferSigningContext"] | null;
+        execute_tx_hash: string | null;
+        failure_reason_code: string | null;
+        failure_reason_detail: string | null;
+        failure_retryable: boolean;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        executed_at: string | null;
+        confirmed_at: string | null;
+    }>;
+    getTransfer(id: string, query?: Query<'getTreasuryTransfer'>): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+        treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        initiated_by_staff_id: import("../generated/types.js").components["schemas"]["StaffId"];
+        kind: import("../generated/types.js").components["schemas"]["TreasuryTransferKind"];
+        to_address: string;
+        asset_token_address: string | null;
+        amount: string | null;
+        safe_nonce: string;
+        safe_tx_hash: string;
+        state: import("../generated/types.js").components["schemas"]["TreasuryTransferState"];
+        memo?: string | null;
+        tax_classification?: string | null;
+        counterparty_id?: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyId"] | null;
+        signatures: import("../generated/types.js").components["schemas"]["TreasuryTransferSignature"][];
+        threshold: number;
+        threshold_met: boolean;
+        signing_context?: import("../generated/types.js").components["schemas"]["TreasuryTransferSigningContext"] | null;
+        execute_tx_hash: string | null;
+        failure_reason_code: string | null;
+        failure_reason_detail: string | null;
+        failure_retryable: boolean;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        executed_at: string | null;
+        confirmed_at: string | null;
+    }>;
+    submitTransferSignature(id: string, body: ReqBody<'submitTreasuryTransferSignature'>, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+        treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        initiated_by_staff_id: import("../generated/types.js").components["schemas"]["StaffId"];
+        kind: import("../generated/types.js").components["schemas"]["TreasuryTransferKind"];
+        to_address: string;
+        asset_token_address: string | null;
+        amount: string | null;
+        safe_nonce: string;
+        safe_tx_hash: string;
+        state: import("../generated/types.js").components["schemas"]["TreasuryTransferState"];
+        memo?: string | null;
+        tax_classification?: string | null;
+        counterparty_id?: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyId"] | null;
+        signatures: import("../generated/types.js").components["schemas"]["TreasuryTransferSignature"][];
+        threshold: number;
+        threshold_met: boolean;
+        signing_context?: import("../generated/types.js").components["schemas"]["TreasuryTransferSigningContext"] | null;
+        execute_tx_hash: string | null;
+        failure_reason_code: string | null;
+        failure_reason_detail: string | null;
+        failure_retryable: boolean;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        executed_at: string | null;
+        confirmed_at: string | null;
+    }>;
+    executeTransfer(id: string, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+        treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        initiated_by_staff_id: import("../generated/types.js").components["schemas"]["StaffId"];
+        kind: import("../generated/types.js").components["schemas"]["TreasuryTransferKind"];
+        to_address: string;
+        asset_token_address: string | null;
+        amount: string | null;
+        safe_nonce: string;
+        safe_tx_hash: string;
+        state: import("../generated/types.js").components["schemas"]["TreasuryTransferState"];
+        memo?: string | null;
+        tax_classification?: string | null;
+        counterparty_id?: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyId"] | null;
+        signatures: import("../generated/types.js").components["schemas"]["TreasuryTransferSignature"][];
+        threshold: number;
+        threshold_met: boolean;
+        signing_context?: import("../generated/types.js").components["schemas"]["TreasuryTransferSigningContext"] | null;
+        execute_tx_hash: string | null;
+        failure_reason_code: string | null;
+        failure_reason_detail: string | null;
+        failure_retryable: boolean;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        executed_at: string | null;
+        confirmed_at: string | null;
+    }>;
+    cancelTransfer(id: string, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+        treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        initiated_by_staff_id: import("../generated/types.js").components["schemas"]["StaffId"];
+        kind: import("../generated/types.js").components["schemas"]["TreasuryTransferKind"];
+        to_address: string;
+        asset_token_address: string | null;
+        amount: string | null;
+        safe_nonce: string;
+        safe_tx_hash: string;
+        state: import("../generated/types.js").components["schemas"]["TreasuryTransferState"];
+        memo?: string | null;
+        tax_classification?: string | null;
+        counterparty_id?: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyId"] | null;
+        signatures: import("../generated/types.js").components["schemas"]["TreasuryTransferSignature"][];
+        threshold: number;
+        threshold_met: boolean;
+        signing_context?: import("../generated/types.js").components["schemas"]["TreasuryTransferSigningContext"] | null;
+        execute_tx_hash: string | null;
+        failure_reason_code: string | null;
+        failure_reason_detail: string | null;
+        failure_retryable: boolean;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        executed_at: string | null;
+        confirmed_at: string | null;
+    }>;
+    decommissionWallet(id: string, opts?: XKOVAMutationOptions): Promise<void>;
+    designateRevenueWallet(id: string, opts?: XKOVAMutationOptions): Promise<{
+        status: "pending_approval";
+        pending_approval_request_id: import("../generated/types.js").components["schemas"]["ApprovalRequestId"];
+    } | {
+        id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        tenant_id: string;
+        chain_id: string;
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        address: string;
+        name: string;
+        threshold: number;
+        state: "deploying" | "active" | "decommissioned";
+        is_revenue_treasury: boolean;
+        signers: import("../generated/types.js").components["schemas"]["TreasurySigner"][];
+        deploy_tx_hash: string | null;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        updated_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+    }>;
+    deleteSigner(id: string, staffId: string, opts?: XKOVAMutationOptions): Promise<{
+        status: "pending_approval";
+        pending_approval_request_id: import("../generated/types.js").components["schemas"]["ApprovalRequestId"];
+    } | {
+        wallet: import("../generated/types.js").components["schemas"]["TreasuryWallet"];
+        draft_transfer_id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+    }>;
+    walletTransactions(id: string, query?: Query<'getTreasuryWalletTransactions'>): Promise<{
+        data: unknown[];
+        next_cursor: string | null;
+        has_more: boolean;
+    } & {
+        data?: import("../generated/types.js").components["schemas"]["TreasuryTransfer"][];
+    }>;
+    listNftHoldings(walletId: string, query?: Query<'listTreasuryNftHoldings'>): Promise<{
+        data: import("../generated/types.js").components["schemas"]["TreasuryNftHolding"][];
+        next_cursor: string | null;
+        has_more: boolean;
+    }>;
+    draftNftTransfer(walletId: string, body: ReqBody<'draftTreasuryNftTransfer'>, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryTransferId"];
+        treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        chain: import("../generated/types.js").components["schemas"]["ChainDescriptor"];
+        initiated_by_staff_id: import("../generated/types.js").components["schemas"]["StaffId"];
+        kind: import("../generated/types.js").components["schemas"]["TreasuryTransferKind"];
+        to_address: string;
+        asset_token_address: string | null;
+        amount: string | null;
+        safe_nonce: string;
+        safe_tx_hash: string;
+        state: import("../generated/types.js").components["schemas"]["TreasuryTransferState"];
+        memo?: string | null;
+        tax_classification?: string | null;
+        counterparty_id?: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyId"] | null;
+        signatures: import("../generated/types.js").components["schemas"]["TreasuryTransferSignature"][];
+        threshold: number;
+        threshold_met: boolean;
+        signing_context?: import("../generated/types.js").components["schemas"]["TreasuryTransferSigningContext"] | null;
+        execute_tx_hash: string | null;
+        failure_reason_code: string | null;
+        failure_reason_detail: string | null;
+        failure_retryable: boolean;
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        executed_at: string | null;
+        confirmed_at: string | null;
+    }>;
+    listAssets(query: Query<'listTreasuryAssets'>): Promise<{
+        data?: import("../generated/types.js").components["schemas"]["TreasuryAsset"][];
+    }>;
+    listCounterparties(query?: Query<'listTreasuryCounterparties'>): Promise<{
+        data: unknown[];
+        next_cursor: string | null;
+        has_more: boolean;
+    } & {
+        data?: import("../generated/types.js").components["schemas"]["TreasuryCounterparty"][];
+    }>;
+    createCounterparty(body: ReqBody<'createTreasuryCounterparty'>, opts?: XKOVAMutationOptions): Promise<{
+        status: "pending_approval";
+        pending_approval_request_id: import("../generated/types.js").components["schemas"]["ApprovalRequestId"];
+    } | {
+        id: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyId"];
+        display_name: string;
+        legal_name: string | null;
+        tax_id: string | null;
+        tax_id_type: "ein" | "ssn" | "foreign" | "none";
+        classification_default: string | null;
+        addresses: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyAddress"][];
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        updated_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+    }>;
+    updateCounterparty(id: string, body: ReqBody<'updateTreasuryCounterparty'>, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyId"];
+        display_name: string;
+        legal_name: string | null;
+        tax_id: string | null;
+        tax_id_type: "ein" | "ssn" | "foreign" | "none";
+        classification_default: string | null;
+        addresses: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyAddress"][];
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        updated_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+    }>;
+    addCounterpartyAddress(id: string, body: ReqBody<'addTreasuryCounterpartyAddress'>, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["TreasuryCounterpartyAddressId"];
+        chain_id: string;
+        address: string;
+        added_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+    }>;
+    deleteCounterpartyAddress(id: string, addressId: string, opts?: XKOVAMutationOptions): Promise<void>;
+    listRevenueChanges(): Promise<{
+        data: import("../generated/types.js").components["schemas"]["RevenueTreasuryChange"][];
+    }>;
+    createRevenueChange(body: ReqBody<'createRevenueTreasuryChange'>, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeId"];
+        from_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        to_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        required_approvals: number;
+        signature_count: number;
+        state: "open" | "partially_approved" | "ready_to_apply" | "applied" | "cancelled";
+        signatures: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeSignature"][];
+        signing_context: {
+            [key: string]: unknown;
+        };
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        approved_at: string | null;
+        applied_at: string | null;
+        cancelled_at: string | null;
+    } | {
+        status: "pending_approval";
+        pending_approval_request_id: import("../generated/types.js").components["schemas"]["ApprovalRequestId"];
+    }>;
+    getRevenueChange(id: string): Promise<{
+        id: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeId"];
+        from_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        to_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        required_approvals: number;
+        signature_count: number;
+        state: "open" | "partially_approved" | "ready_to_apply" | "applied" | "cancelled";
+        signatures: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeSignature"][];
+        signing_context: {
+            [key: string]: unknown;
+        };
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        approved_at: string | null;
+        applied_at: string | null;
+        cancelled_at: string | null;
+    }>;
+    applyRevenueChange(id: string, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeId"];
+        from_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        to_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        required_approvals: number;
+        signature_count: number;
+        state: "open" | "partially_approved" | "ready_to_apply" | "applied" | "cancelled";
+        signatures: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeSignature"][];
+        signing_context: {
+            [key: string]: unknown;
+        };
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        approved_at: string | null;
+        applied_at: string | null;
+        cancelled_at: string | null;
+    }>;
+    cancelRevenueChange(id: string, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeId"];
+        from_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        to_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        required_approvals: number;
+        signature_count: number;
+        state: "open" | "partially_approved" | "ready_to_apply" | "applied" | "cancelled";
+        signatures: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeSignature"][];
+        signing_context: {
+            [key: string]: unknown;
+        };
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        approved_at: string | null;
+        applied_at: string | null;
+        cancelled_at: string | null;
+    }>;
+    signRevenueChange(id: string, body: ReqBody<'signRevenueTreasuryChange'>, opts?: XKOVAMutationOptions): Promise<{
+        id: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeId"];
+        from_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        to_treasury_wallet_id: import("../generated/types.js").components["schemas"]["TreasuryWalletId"];
+        required_approvals: number;
+        signature_count: number;
+        state: "open" | "partially_approved" | "ready_to_apply" | "applied" | "cancelled";
+        signatures: import("../generated/types.js").components["schemas"]["RevenueTreasuryChangeSignature"][];
+        signing_context: {
+            [key: string]: unknown;
+        };
+        created_at: import("../generated/types.js").components["schemas"]["TimestampUtc"];
+        approved_at: string | null;
+        applied_at: string | null;
+        cancelled_at: string | null;
+    }>;
+    tax1099Summary(query: Query<'getTax1099Summary'>): Promise<{
+        year: number;
+        counterparties: import("../generated/types.js").components["schemas"]["Tax1099SummaryRow"][];
+    }>;
+    /** 1099-MISC as raw CSV. */
+    tax1099Csv(query: Query<'getTax1099Csv'>): Promise<string>;
+    /** Treasury transactions as raw CSV. */
+    taxTransactionsCsv(query: Query<'getTaxTransactionsCsv'>): Promise<string>;
+}

package/dist/resources/treasury.js

@@ -0,0 +1,115 @@
+/** Tenant treasury wallets and transfers. Signer authority is verified by the API. */
+import { Resource } from './base.js';
+export class TreasuryResource extends Resource {
+    // ── Wallets (Safes) ──────────────────────────────────────────────
+    listWallets(query = {}) {
+        return this.getJson('/treasury/wallets', query);
+    }
+    createWallet(body, opts) {
+        return this.postJson('/treasury/wallets', body, opts);
+    }
+    getWallet(id) {
+        return this.getJson(`/treasury/wallets/${this.enc(id)}`);
+    }
+    walletBalance(id) {
+        return this.getJson(`/treasury/wallets/${this.enc(id)}/balance`);
+    }
+    listSigners(id) {
+        return this.getJson(`/treasury/wallets/${this.enc(id)}/signers`);
+    }
+    addSigner(id, body, opts) {
+        return this.postJson(`/treasury/wallets/${this.enc(id)}/signers`, body, opts);
+    }
+    changeThreshold(id, body, opts) {
+        return this.postJson(`/treasury/wallets/${this.enc(id)}/threshold`, body, opts);
+    }
+    // ── Transfers (draft → sign → execute) ───────────────────────────
+    listTransfers(walletId, query = {}) {
+        return this.getJson(`/treasury/wallets/${this.enc(walletId)}/transfers`, query);
+    }
+    draftTransfer(walletId, body, opts) {
+        return this.postJson(`/treasury/wallets/${this.enc(walletId)}/transfers`, body, opts);
+    }
+    getTransfer(id, query = {}) {
+        return this.getJson(`/treasury/transfers/${this.enc(id)}`, query);
+    }
+    submitTransferSignature(id, body, opts) {
+        return this.postJson(`/treasury/transfers/${this.enc(id)}/signatures`, body, opts);
+    }
+    executeTransfer(id, opts) {
+        return this.postJson(`/treasury/transfers/${this.enc(id)}/execute`, undefined, opts);
+    }
+    cancelTransfer(id, opts) {
+        return this.postJson(`/treasury/transfers/${this.enc(id)}/cancel`, undefined, opts);
+    }
+    // ── Wallet lifecycle + NFT holdings ──────────────────────────────
+    decommissionWallet(id, opts) {
+        return this.postJson(`/treasury/wallets/${this.enc(id)}/decommission`, undefined, opts);
+    }
+    designateRevenueWallet(id, opts) {
+        return this.postJson(`/treasury/wallets/${this.enc(id)}/designate-revenue`, undefined, opts);
+    }
+    deleteSigner(id, staffId, opts) {
+        return this.deleteJson(`/treasury/wallets/${this.enc(id)}/signers/${this.enc(staffId)}`, opts);
+    }
+    walletTransactions(id, query = {}) {
+        return this.getJson(`/treasury/wallets/${this.enc(id)}/transactions`, query);
+    }
+    listNftHoldings(walletId, query = {}) {
+        return this.getJson(`/treasury/wallets/${this.enc(walletId)}/nft-holdings`, query);
+    }
+    draftNftTransfer(walletId, body, opts) {
+        return this.postJson(`/treasury/wallets/${this.enc(walletId)}/nft-transfers`, body, opts);
+    }
+    // ── Available assets ─────────────────────────────────────────────
+    listAssets(query) {
+        return this.getJson('/treasury/assets', query);
+    }
+    // ── Counterparties ───────────────────────────────────────────────
+    listCounterparties(query = {}) {
+        return this.getJson('/treasury/counterparties', query);
+    }
+    createCounterparty(body, opts) {
+        return this.postJson('/treasury/counterparties', body, opts);
+    }
+    updateCounterparty(id, body, opts) {
+        return this.patchJson(`/treasury/counterparties/${this.enc(id)}`, body, opts);
+    }
+    addCounterpartyAddress(id, body, opts) {
+        return this.postJson(`/treasury/counterparties/${this.enc(id)}/addresses`, body, opts);
+    }
+    deleteCounterpartyAddress(id, addressId, opts) {
+        return this.deleteJson(`/treasury/counterparties/${this.enc(id)}/addresses/${this.enc(addressId)}`, opts);
+    }
+    // ── Revenue-treasury change ceremonies ───────────────────────────
+    listRevenueChanges() {
+        return this.getJson('/treasury/revenue-changes');
+    }
+    createRevenueChange(body, opts) {
+        return this.postJson('/treasury/revenue-changes', body, opts);
+    }
+    getRevenueChange(id) {
+        return this.getJson(`/treasury/revenue-changes/${this.enc(id)}`);
+    }
+    applyRevenueChange(id, opts) {
+        return this.postJson(`/treasury/revenue-changes/${this.enc(id)}/apply`, undefined, opts);
+    }
+    cancelRevenueChange(id, opts) {
+        return this.postJson(`/treasury/revenue-changes/${this.enc(id)}/cancel`, undefined, opts);
+    }
+    signRevenueChange(id, body, opts) {
+        return this.postJson(`/treasury/revenue-changes/${this.enc(id)}/signatures`, body, opts);
+    }
+    // ── Tax exports ──────────────────────────────────────────────────
+    tax1099Summary(query) {
+        return this.getJson('/treasury/tax/1099-summary', query);
+    }
+    /** 1099-MISC as raw CSV. */
+    tax1099Csv(query) {
+        return this.getText('/treasury/tax/1099-misc.csv', query);
+    }
+    /** Treasury transactions as raw CSV. */
+    taxTransactionsCsv(query) {
+        return this.getText('/treasury/tax/transactions.csv', query);
+    }
+}