squarefi-bff-api-module 1.36.91 → 1.36.93

package/dist/api/frontend.d.ts

@@ -80,6 +80,9 @@ export declare const frontend: {
         exchangeRates: {
             list: (params?: API.Frontend.Reference.ExchangeRates.List.Request) => Promise<API.Frontend.Reference.ExchangeRates.List.Response>;
         };
+        orderTypes: {
+            list: (params?: API.Frontend.Reference.OrderTypes.List.Request) => Promise<API.Frontend.Reference.OrderTypes.List.Response>;
+        };
     };
     notificationPreferences: {
         get: () => Promise<API.Frontend.NotificationPreferences.Get.Response>;

package/dist/api/frontend.js

@@ -158,6 +158,10 @@ export const frontend = {
         exchangeRates: {
             list: (params = {}) => apiClientV1Frontend.getRequest('/frontend/reference/exchange_rates', { params }),
         },
+        // Only the types enabled for the tenant (a `tenant_order_type_rates` row), paged — 50 by default, 500 at most.
+        orderTypes: {
+            list: (params = {}) => apiClientV1Frontend.getRequest('/frontend/reference/order_types', { params }),
+        },
     },
     // IN_APP stays on (400 INBOX_CHANNEL_LOCKED); channels vary by tenant (TELEGRAM needs a bot); PUT upserts any subset.
     notificationPreferences: {

package/dist/api/types/autogen/apiV1External.types.d.ts

@@ -5016,7 +5016,7 @@ export interface paths {
                      *     with `status`. Any other value is rejected with 400.
                      *
                      *     Every key is checked before the query runs (SFI-2693): an unknown field, a value of the
-                     *     wrong type (e.g. a status that does not exist, a non-uuid id) or an object on a plain
+                     *     wrong type (e.g. a status that does not exist, an `order_type` that is neither enabled for the tenant — see `/reference/order_types` — nor among the wallet's orders, or a non-uuid id) or an object on a plain
                      *     field answers 400 `INVALID_REQUEST`, and `details.field` names the field. An object is
                      *     accepted on `meta` only — `[{"meta":{"direction":"out"}}]` matches `meta->>direction`.
                      *      */
@@ -5025,8 +5025,10 @@ export interface paths {
                     date_to?: string;
                     /** @description Part of the recipient's name or nickname (`meta.counterparty_account_name`,
                      *     `meta.counterparty_account_nickname`), case-insensitive. Combines with `filters`,
-                     *     sorting and pagination; `pagination` counts the matches only. Up to 100 characters;
-                     *     `*`, `%`, `"` and `\` are ignored.
+                     *     sorting and pagination; `pagination` counts the matches only. `*`, `%`, `"` and `\`
+                     *     are ignored without splitting the word (`des%ign` finds "Design"); `_` matches itself.
+                     *     Up to 100 characters: a longer value answers 400 `INVALID_REQUEST` with
+                     *     `details.field` = `search`.
                      *      */
                     search?: string;
                     /** @description If `true`, includes dust orders (amount below render threshold for either currency). Defaults to `false` — dust orders are hidden. */
@@ -5138,8 +5140,10 @@ export interface paths {
          *     status NEW can be approved. Orders
          *     created with `scheduled_at` move to EXPECTED instead — no funds are
          *     debited until execution at the requested time.
-         *     A scheduled order is approved only while its `scheduled_at` is at least
-         *     one hour away; a later approve answers 400 `SCHEDULED_AT_TOO_SOON`
+         *     A scheduled order is approved only inside its `approval_window`: an
+         *     earlier approve answers 400 `SCHEDULED_APPROVAL_NOT_OPEN` with
+         *     `details.approvable_from`; once `scheduled_at` is less than one hour
+         *     away, 400 `SCHEDULED_AT_TOO_SOON`
          *     (create the payment again with a new date).
          *
          */
@@ -5168,7 +5172,7 @@ export interface paths {
                         };
                     };
                 };
-                /** @description Insufficient funds (`INSUFFICIENT_FUNDS` — the order is released back to NEW), a scheduled order less than an hour before its `scheduled_at` (`SCHEDULED_AT_TOO_SOON`), or validation error */
+                /** @description Insufficient funds (`INSUFFICIENT_FUNDS` — the order is released back to NEW), a scheduled order before its approval window opens (`SCHEDULED_APPROVAL_NOT_OPEN`, `details.approvable_from`) or less than an hour before its `scheduled_at` (`SCHEDULED_AT_TOO_SOON`), or validation error */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -5361,7 +5365,7 @@ export interface paths {
                         note?: string;
                         /**
                          * Format: date-time
-                         * @description Optional. Schedule the transfer for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once. If the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve at least 1 hour before scheduled_at.
+                         * @description Optional. Schedule the transfer for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once. If the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve inside the `approval_window` of the order (from the order signature lifetime minus 1 hour before scheduled_at until 1 hour before it); a draft not approved by then is canceled.
                          * @example 2026-07-20T12:00:00Z
                          */
                         scheduled_at?: string;
@@ -8564,21 +8568,47 @@ export interface components {
                 id?: string;
                 name?: string | null;
             } | null;
+            /** @description Who created the order — for a scheduled payment, who scheduled it (pair it with `created_at`). Null when no user of the tenant created it: an API key, an operator, the system, or a legacy order with no creation record. Returned by the order list and the single-order reads. */
+            created_by?: {
+                /**
+                 * Format: uuid
+                 * @description User id of the author.
+                 */
+                id: string;
+                /**
+                 * @description First and last name from the profile; null when it has neither.
+                 * @example Jane Brown
+                 */
+                name: string | null;
+            } | null;
             /**
              * Format: date-time
              * @description Requested execution time for scheduled payments (status EXPECTED); null for immediate orders
              */
             scheduled_at?: string | null;
-            /** @description Why a scheduled payment failed — set on a scheduled order in `FAILED`, null on any other scheduled order, absent on an immediate one. A scheduled payment is attempted once and never retried: `INSUFFICIENT_FUNDS` means nothing was debited and the payment can be created again; `PROVIDER_ERROR` — the payment was debited and the provider side failed; `EXECUTION_ERROR` — any other reason. */
+            /** @description Why a scheduled payment failed — set on a scheduled order in `FAILED`, and on one in `CANCELED` that was never approved (`NOT_APPROVED`); null on any other scheduled order, absent on an immediate one. A scheduled payment is attempted once and never retried: `INSUFFICIENT_FUNDS` means nothing was debited and the payment can be created again; `PROVIDER_ERROR` — the payment was debited and the provider side failed; `EXECUTION_ERROR` — any other reason; `NOT_APPROVED` — the draft was not approved before its approval window closed and was canceled, nothing was debited. */
             scheduled_failure?: {
                 /** @enum {string} */
-                code: "INSUFFICIENT_FUNDS" | "PROVIDER_ERROR" | "EXECUTION_ERROR";
+                code: "INSUFFICIENT_FUNDS" | "PROVIDER_ERROR" | "EXECUTION_ERROR" | "NOT_APPROVED";
                 /**
                  * @description Customer-facing text of the code.
                  * @example The balance was insufficient at the scheduled time.
                  */
                 message: string;
             } | null;
+            /** @description When a scheduled payment draft can be approved — set on a scheduled order in `NEW`, null on any other scheduled order, absent on an immediate one. Approve before `opens_at` returns 400 `SCHEDULED_APPROVAL_NOT_OPEN`, after `closes_at` 400 `SCHEDULED_AT_TOO_SOON`; a draft still unapproved when the window closes is canceled (`scheduled_failure.code` `NOT_APPROVED`). The window follows the order signature lifetime, so it can move when that setting changes. */
+            approval_window?: {
+                /**
+                 * Format: date-time
+                 * @description From this moment the draft can be approved.
+                 */
+                opens_at: string;
+                /**
+                 * Format: date-time
+                 * @description Last moment to approve: 1 hour before `scheduled_at`.
+                 */
+                closes_at: string;
+            } | null;
             /** Format: date-time */
             created_at?: string;
             /** Format: date-time */
@@ -8630,7 +8660,7 @@ export interface components {
             note?: string;
             /**
              * Format: date-time
-             * @description Optional. Schedule the payment for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in `EXPECTED` status and executes automatically at the requested time, once: the balance is checked then, and if it does not cover the payment the order fails with `scheduled_failure.code` `INSUFFICIENT_FUNDS` and is not retried. Approve at least 1 hour before `scheduled_at`.
+             * @description Optional. Schedule the payment for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in `EXPECTED` status and executes automatically at the requested time, once: the balance is checked then, and if it does not cover the payment the order fails with `scheduled_failure.code` `INSUFFICIENT_FUNDS` and is not retried. Approve inside the `approval_window` of the order: from `opens_at` (the order signature lifetime minus 1 hour before `scheduled_at`) until 1 hour before `scheduled_at`; a draft not approved by then is canceled.
              * @example 2026-07-20T12:00:00Z
              */
             scheduled_at?: string;
@@ -8682,7 +8712,7 @@ export interface components {
             note?: string;
             /**
              * Format: date-time
-             * @description Optional. Schedule the payment for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in `EXPECTED` status and executes automatically at the requested time, once: the balance is checked then, and if it does not cover the payment the order fails with `scheduled_failure.code` `INSUFFICIENT_FUNDS` and is not retried. Approve at least 1 hour before `scheduled_at`.
+             * @description Optional. Schedule the payment for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in `EXPECTED` status and executes automatically at the requested time, once: the balance is checked then, and if it does not cover the payment the order fails with `scheduled_failure.code` `INSUFFICIENT_FUNDS` and is not retried. Approve inside the `approval_window` of the order: from `opens_at` (the order signature lifetime minus 1 hour before `scheduled_at`) until 1 hour before `scheduled_at`; a draft not approved by then is canceled.
              * @example 2026-07-20T12:00:00Z
              */
             scheduled_at?: string;

package/dist/api/types/autogen/apiV1Frontend.types.d.ts

@@ -8683,7 +8683,7 @@ export interface paths {
                         is_reverse?: boolean;
                         /**
                          * Format: date-time
-                         * @description Optional. Schedule the transfer for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once. If the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve at least 1 hour before scheduled_at.
+                         * @description Optional. Schedule the transfer for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once. If the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve inside the `approval_window` of the order (from the order signature lifetime minus 1 hour before scheduled_at until 1 hour before it); a draft not approved by then is canceled.
                          */
                         scheduled_at?: string;
                         /** @description Optional supporting documents persisted with the order. */
@@ -9356,8 +9356,10 @@ export interface paths {
          *     (request the OTP for the order being approved). Orders created with
          *     `scheduled_at` move to EXPECTED instead — no funds are debited until
          *     execution at the requested time.
-         *     A scheduled order is approved only while its `scheduled_at` is at least
-         *     one hour away; a later approve answers 400 `SCHEDULED_AT_TOO_SOON`
+         *     A scheduled order is approved only inside its `approval_window`: an
+         *     earlier approve answers 400 `SCHEDULED_APPROVAL_NOT_OPEN` with
+         *     `details.approvable_from`; once `scheduled_at` is less than one hour
+         *     away, 400 `SCHEDULED_AT_TOO_SOON`
          *     (create the payment again with a new date).
          *
          */
@@ -9392,7 +9394,7 @@ export interface paths {
                         };
                     };
                 };
-                /** @description Insufficient funds (`INSUFFICIENT_FUNDS` — the order is released back to NEW), a scheduled order less than an hour before its `scheduled_at` (`SCHEDULED_AT_TOO_SOON`), or validation error */
+                /** @description Insufficient funds (`INSUFFICIENT_FUNDS` — the order is released back to NEW), a scheduled order before its approval window opens (`SCHEDULED_APPROVAL_NOT_OPEN`, `details.approvable_from`) or less than an hour before its `scheduled_at` (`SCHEDULED_AT_TOO_SOON`), or validation error */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -9839,7 +9841,7 @@ export interface paths {
                      *     Any other value is rejected with 400.
                      *
                      *     Every key is checked before the query runs (SFI-2693): an unknown field, a value of the
-                     *     wrong type (e.g. a status that does not exist, a non-uuid id) or an object on a plain
+                     *     wrong type (e.g. a status that does not exist, an `order_type` that is neither enabled for the tenant — see `/reference/order_types` — nor among the wallet's orders, or a non-uuid id) or an object on a plain
                      *     field answers 400 `INVALID_REQUEST`, and `details.field` names the field. An object is
                      *     accepted on `meta` only — `[{"meta":{"direction":"out"}}]` matches `meta->>direction`.
                      *      */
@@ -9848,8 +9850,10 @@ export interface paths {
                     date_to?: string;
                     /** @description Part of the recipient's name or nickname (`meta.counterparty_account_name`,
                      *     `meta.counterparty_account_nickname`), case-insensitive. Combines with `filters`,
-                     *     sorting and pagination; `pagination` counts the matches only. Up to 100 characters;
-                     *     `*`, `%`, `"` and `\` are ignored.
+                     *     sorting and pagination; `pagination` counts the matches only. `*`, `%`, `"` and `\`
+                     *     are ignored without splitting the word (`des%ign` finds "Design"); `_` matches itself.
+                     *     Up to 100 characters: a longer value answers 400 `INVALID_REQUEST` with
+                     *     `details.field` = `search`.
                      *      */
                     search?: string;
                     /** @description If `true`, includes dust orders (amount below render threshold for either currency). Defaults to `false` — dust orders are hidden. */
@@ -9877,7 +9881,7 @@ export interface paths {
                         };
                     };
                 };
-                /** @description `INVALID_REQUEST` — `filters` is not a JSON array, `mass_payout_id` / `rfi_case_id` is not a uuid, `scheduled` is not `all` / `upcoming` / `past`, or a filter names an unknown field or carries a value of the wrong type (`details.field` names it) */
+                /** @description `INVALID_REQUEST` — `filters` is not a JSON array, `mass_payout_id` / `rfi_case_id` is not a uuid, `scheduled` is not `all` / `upcoming` / `past`, a filter names an unknown field or carries a value of the wrong type, or `search` is longer than 100 characters (`details.field` names the field) */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -10039,15 +10043,17 @@ export interface paths {
                      *     Any other value is rejected with 400.
                      *
                      *     Every key is checked before the query runs (SFI-2693): an unknown field, a value of the
-                     *     wrong type (e.g. a status that does not exist, a non-uuid id) or an object on a plain
+                     *     wrong type (e.g. a status that does not exist, an `order_type` that is neither enabled for the tenant — see `/reference/order_types` — nor among the wallet's orders, or a non-uuid id) or an object on a plain
                      *     field answers 400 `INVALID_REQUEST`, and `details.field` names the field. An object is
                      *     accepted on `meta` only — `[{"meta":{"direction":"out"}}]` matches `meta->>direction`.
                      *      */
                     filters?: string;
                     /** @description Part of the recipient's name or nickname (`meta.counterparty_account_name`,
                      *     `meta.counterparty_account_nickname`), case-insensitive. Combines with `filters`,
-                     *     sorting and pagination; `pagination` counts the matches only. Up to 100 characters;
-                     *     `*`, `%`, `"` and `\` are ignored.
+                     *     sorting and pagination; `pagination` counts the matches only. `*`, `%`, `"` and `\`
+                     *     are ignored without splitting the word (`des%ign` finds "Design"); `_` matches itself.
+                     *     Up to 100 characters: a longer value answers 400 `INVALID_REQUEST` with
+                     *     `details.field` = `search`.
                      *      */
                     search?: string;
                     /** @description If `true`, includes dust orders (amount below render threshold for either currency). Defaults to `false` — dust orders are hidden. */
@@ -10070,7 +10076,7 @@ export interface paths {
                         "text/csv": string;
                     };
                 };
-                /** @description `INVALID_REQUEST` — `filters` is not a JSON array, `mass_payout_id` / `rfi_case_id` is not a uuid, `scheduled` is not `all` / `upcoming` / `past`, or a filter names an unknown field or carries a value of the wrong type (`details.field` names it) */
+                /** @description `INVALID_REQUEST` — `filters` is not a JSON array, `mass_payout_id` / `rfi_case_id` is not a uuid, `scheduled` is not `all` / `upcoming` / `past`, a filter names an unknown field or carries a value of the wrong type, or `search` is longer than 100 characters (`details.field` names the field) */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -17585,21 +17591,47 @@ export interface components {
                 /** @description Batch name — null only when the batch can no longer be resolved. */
                 name?: string | null;
             } | null;
+            /** @description Who created the order — for a scheduled payment, who scheduled it (pair it with `created_at`). Null when no user of the tenant created it: an API key, an operator, the system, or a legacy order with no creation record. Returned by the order list and the single-order reads. */
+            created_by?: {
+                /**
+                 * Format: uuid
+                 * @description User id of the author.
+                 */
+                id: string;
+                /**
+                 * @description First and last name from the profile; null when it has neither.
+                 * @example Jane Brown
+                 */
+                name: string | null;
+            } | null;
             /**
              * Format: date-time
              * @description Requested execution time for scheduled payments (status EXPECTED); null for immediate orders
              */
             scheduled_at?: string | null;
-            /** @description Why a scheduled payment failed — set on a scheduled order in `FAILED`, null on any other scheduled order, absent on an immediate one. A scheduled payment is attempted once and never retried: `INSUFFICIENT_FUNDS` means nothing was debited and the payment can be created again; `PROVIDER_ERROR` — the payment was debited and the provider side failed; `EXECUTION_ERROR` — any other reason. */
+            /** @description Why a scheduled payment failed — set on a scheduled order in `FAILED`, and on one in `CANCELED` that was never approved (`NOT_APPROVED`); null on any other scheduled order, absent on an immediate one. A scheduled payment is attempted once and never retried: `INSUFFICIENT_FUNDS` means nothing was debited and the payment can be created again; `PROVIDER_ERROR` — the payment was debited and the provider side failed; `EXECUTION_ERROR` — any other reason; `NOT_APPROVED` — the draft was not approved before its approval window closed and was canceled, nothing was debited. */
             scheduled_failure?: {
                 /** @enum {string} */
-                code: "INSUFFICIENT_FUNDS" | "PROVIDER_ERROR" | "EXECUTION_ERROR";
+                code: "INSUFFICIENT_FUNDS" | "PROVIDER_ERROR" | "EXECUTION_ERROR" | "NOT_APPROVED";
                 /**
                  * @description Customer-facing text of the code.
                  * @example The balance was insufficient at the scheduled time.
                  */
                 message: string;
             } | null;
+            /** @description When a scheduled payment draft can be approved — set on a scheduled order in `NEW`, null on any other scheduled order, absent on an immediate one. Approve before `opens_at` returns 400 `SCHEDULED_APPROVAL_NOT_OPEN`, after `closes_at` 400 `SCHEDULED_AT_TOO_SOON`; a draft still unapproved when the window closes is canceled (`scheduled_failure.code` `NOT_APPROVED`). The window follows the order signature lifetime, so it can move when that setting changes. */
+            approval_window?: {
+                /**
+                 * Format: date-time
+                 * @description From this moment the draft can be approved.
+                 */
+                opens_at: string;
+                /**
+                 * Format: date-time
+                 * @description Last moment to approve: 1 hour before `scheduled_at`.
+                 */
+                closes_at: string;
+            } | null;
             /** Format: date-time */
             created_at: string;
             /** Format: date-time */
@@ -17749,7 +17781,7 @@ export interface components {
             note?: string;
             /**
              * Format: date-time
-             * @description Optional. Schedule the payment for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once: if the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve at least 1 hour before scheduled_at.
+             * @description Optional. Schedule the payment for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once: if the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve inside the `approval_window` of the order: from `opens_at` (the order signature lifetime minus 1 hour before scheduled_at) until 1 hour before scheduled_at; a draft not approved by then is canceled.
              */
             scheduled_at?: string;
             /** @description Optional supporting documents persisted with the order. */
@@ -17780,7 +17812,7 @@ export interface components {
             note?: string;
             /**
              * Format: date-time
-             * @description Optional. Schedule the payment for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once: if the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve at least 1 hour before scheduled_at.
+             * @description Optional. Schedule the payment for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once: if the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve inside the `approval_window` of the order: from `opens_at` (the order signature lifetime minus 1 hour before scheduled_at) until 1 hour before scheduled_at; a draft not approved by then is canceled.
              */
             scheduled_at?: string;
             /** @description Optional supporting documents persisted with the order. */
@@ -18473,7 +18505,7 @@ export interface components {
             /** Format: uuid */
             id: string;
             /** @enum {string} */
-            type: "DEPOSIT_RECEIVED" | "DEPOSIT_NOT_ACCEPTED" | "TRANSFER_RECEIVED" | "ORDER_STATUS_CHANGED" | "KYC_STATUS_CHANGED" | "ANNOUNCEMENT" | "SYSTEM_MESSAGE" | "MASS_PAYOUT_STATUS_CHANGED" | "CARD_OTP" | "RFI_REQUESTED" | "RFI_RESOLVED" | "REPORT_READY" | "SCHEDULED_PAYMENT_REMINDER" | "SCHEDULED_PAYMENT_LOW_BALANCE";
+            type: "DEPOSIT_RECEIVED" | "DEPOSIT_NOT_ACCEPTED" | "TRANSFER_RECEIVED" | "ORDER_STATUS_CHANGED" | "KYC_STATUS_CHANGED" | "ANNOUNCEMENT" | "SYSTEM_MESSAGE" | "MASS_PAYOUT_STATUS_CHANGED" | "CARD_OTP" | "RFI_REQUESTED" | "RFI_RESOLVED" | "REPORT_READY" | "SCHEDULED_PAYMENT_REMINDER" | "SCHEDULED_PAYMENT_LOW_BALANCE" | "SCHEDULED_PAYMENT_APPROVAL_REQUIRED";
             /** @description Structured fact snapshot; the client renders the presentation. Shape depends on `type`; evolution is additive-only. */
             payload: Record<string, never>;
             /** Format: uuid */

package/dist/api/types/autogen/apiV1Legacy.types.d.ts

@@ -2697,8 +2697,8 @@ export interface paths {
          *
          *     **Filter Examples:**
          *     - Filter by status: `[{"status":"COMPLETE"}]`
-         *     - Filter by order type: `[{"order_type":"EXCHANGE"}]`
-         *     - Multiple filters: `[{"status":"PENDING"},{"order_type":"L2F_WIRE_OFFRAMP"}]`
+         *     - Filter by order type: `[{"order_type":"EXCHANGE_OMNI"}]`
+         *     - Multiple filters: `[{"status":"PENDING"},{"order_type":"WITHDRAWAL_CRYPTO"}]`
          *     - Filter by meta field: `[{"meta->>workflow_status":"PROCESSING"}]`
          *     - Find an order by your own reference: `[{"meta->>reference":"invoice-2026-04-001"}]`
          *
@@ -2721,7 +2721,7 @@ export interface paths {
                      *
                      *     **Available filter fields:**
                      *     - `status` - Order status (PENDING, PROCESSING, COMPLETE, FAILED, CANCELED)
-                     *     - `order_type` - Order type (EXCHANGE, WITHDRAWAL_CRYPTO, L2F_WIRE_OFFRAMP, etc.)
+                     *     - `order_type` - Order type (EXCHANGE_OMNI, WITHDRAWAL_CRYPTO, etc.)
                      *     - `from_uuid` - Source currency UUID
                      *     - `to_uuid` - Destination currency UUID
                      *     - `meta->>key` - JSONB meta field by key with the text operator (e.g., {"meta->>workflow_status":"PROCESSING"})
@@ -2733,7 +2733,7 @@ export interface paths {
                      *     - By your own reference: `[{"meta->>reference":"invoice-2026-04-001"}]`
                      *
                      *     Every key is checked before the query runs (SFI-2693): an unknown field, a value of the
-                     *     wrong type (e.g. a status that does not exist, a non-uuid id) or an object on a plain
+                     *     wrong type (e.g. a status that does not exist, an `order_type` that is neither enabled for the tenant — see `/reference/order_types` — nor among the wallet's orders, or a non-uuid id) or an object on a plain
                      *     field answers 400 `INVALID_REQUEST`, and `details.field` names the field. An object is
                      *     accepted on `meta` only — `[{"meta":{"direction":"out"}}]` matches `meta->>direction`.
                      *
@@ -2746,8 +2746,10 @@ export interface paths {
                     date_to?: string;
                     /** @description Part of the recipient's name or nickname (`meta.counterparty_account_name`,
                      *     `meta.counterparty_account_nickname`), case-insensitive. Combines with `filters`,
-                     *     sorting and pagination; `pagination` counts the matches only. Up to 100 characters;
-                     *     `*`, `%`, `"` and `\` are ignored.
+                     *     sorting and pagination; `pagination` counts the matches only. `*`, `%`, `"` and `\`
+                     *     are ignored without splitting the word (`des%ign` finds "Design"); `_` matches itself.
+                     *     Up to 100 characters: a longer value answers 400 `INVALID_REQUEST` with
+                     *     `details.field` = `search`.
                      *      */
                     search?: string;
                     /** @description If `true`, includes dust orders (amount below render threshold for either currency). Defaults to `false` — dust orders are hidden. */

package/dist/api/types/autogen/apiV1Tenant.types.d.ts

@@ -1563,6 +1563,11 @@ export interface paths {
                         middle_name?: string;
                         /** Format: date */
                         date_of_birth?: string;
+                        /**
+                         * @description Gender of an individual as reported by the verification
+                         * @enum {string|null}
+                         */
+                        gender?: "M" | "F" | null;
                         /** @description ISO 3166-1 alpha-3 country code */
                         nationality?: string;
                         country_of_birth?: string;
@@ -1737,6 +1742,11 @@ export interface paths {
                         middle_name?: string;
                         /** Format: date */
                         date_of_birth?: string;
+                        /**
+                         * @description Gender of an individual as reported by the verification
+                         * @enum {string|null}
+                         */
+                        gender?: "M" | "F" | null;
                         nationality?: string;
                         country_of_birth?: string;
                         occupation?: string;
@@ -2698,7 +2708,7 @@ export interface paths {
                         note?: string;
                         /**
                          * Format: date-time
-                         * @description Optional. Schedule the transfer for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once. If the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve at least 1 hour before scheduled_at.
+                         * @description Optional. Schedule the transfer for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once. If the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve inside the `approval_window` of the order (from the order signature lifetime minus 1 hour before scheduled_at until 1 hour before it); a draft not approved by then is canceled.
                          */
                         scheduled_at?: string;
                         documents?: Record<string, never>[];
@@ -3373,7 +3383,7 @@ export interface paths {
                      *     `status`. Malformed JSON or a non-array value is rejected with 400.
                      *
                      *     Every key is checked before the query runs (SFI-2693): an unknown field, a value of the
-                     *     wrong type (e.g. a status that does not exist, a non-uuid id) or an object on a plain
+                     *     wrong type (e.g. a status that does not exist, an `order_type` that is neither enabled for the tenant — see `/reference/order_types` — nor among the wallet's orders, or a non-uuid id) or an object on a plain
                      *     field answers 400 `INVALID_REQUEST`, and `details.field` names the field. An object is
                      *     accepted on `meta` only — `[{"meta":{"direction":"out"}}]` matches `meta->>direction`.
                      *
@@ -3386,8 +3396,10 @@ export interface paths {
                     date_to?: string;
                     /** @description Part of the recipient's name or nickname (`meta.counterparty_account_name`,
                      *     `meta.counterparty_account_nickname`), case-insensitive. Combines with `filters`,
-                     *     sorting and pagination; `pagination` counts the matches only. Up to 100 characters;
-                     *     `*`, `%`, `"` and `\` are ignored.
+                     *     sorting and pagination; `pagination` counts the matches only. `*`, `%`, `"` and `\`
+                     *     are ignored without splitting the word (`des%ign` finds "Design"); `_` matches itself.
+                     *     Up to 100 characters: a longer value answers 400 `INVALID_REQUEST` with
+                     *     `details.field` = `search`.
                      *      */
                     search?: string;
                     /** @description If `true`, includes dust orders (amount below render threshold for either currency). Defaults to `false` — dust orders are hidden. */
@@ -3415,7 +3427,7 @@ export interface paths {
                         };
                     };
                 };
-                /** @description Invalid `filters` (not a JSON array), non-uuid `mass_payout_id`, `scheduled` other than `all` / `upcoming` / `past`, or a filter with an unknown field or a value of the wrong type (`details.field` names it) */
+                /** @description Invalid `filters` (not a JSON array), non-uuid `mass_payout_id`, `scheduled` other than `all` / `upcoming` / `past`, a filter with an unknown field or a value of the wrong type, or `search` longer than 100 characters (`details.field` names the field) */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -3584,8 +3596,10 @@ export interface paths {
          *     status NEW can be approved. Orders
          *     created with `scheduled_at` move to EXPECTED instead — no funds are
          *     debited until execution at the requested time.
-         *     A scheduled order is approved only while its `scheduled_at` is at least
-         *     one hour away; a later approve answers 400 `SCHEDULED_AT_TOO_SOON`
+         *     A scheduled order is approved only inside its `approval_window`: an
+         *     earlier approve answers 400 `SCHEDULED_APPROVAL_NOT_OPEN` with
+         *     `details.approvable_from`; once `scheduled_at` is less than one hour
+         *     away, 400 `SCHEDULED_AT_TOO_SOON`
          *     (create the payment again with a new date).
          *
          */
@@ -3614,7 +3628,7 @@ export interface paths {
                         };
                     };
                 };
-                /** @description Insufficient funds (`INSUFFICIENT_FUNDS` — the order is released back to NEW), a scheduled order less than an hour before its `scheduled_at` (`SCHEDULED_AT_TOO_SOON`), or validation error */
+                /** @description Insufficient funds (`INSUFFICIENT_FUNDS` — the order is released back to NEW), a scheduled order before its approval window opens (`SCHEDULED_APPROVAL_NOT_OPEN`, `details.approvable_from`) or less than an hour before its `scheduled_at` (`SCHEDULED_AT_TOO_SOON`), or validation error */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -8849,7 +8863,7 @@ export interface components {
             /** Format: date-time */
             updated_at?: string;
         };
-        /** @description Documents to file for the KYC entity. Each entry is stored as a document of its type; an earlier document of the same type stays on record (several documents of one type are allowed). All entries of one request form one batch in the given order, so a multi-file document (e.g. the pages of a bank statement) is sent as several entries of the same type in one request. A document is removed through DELETE /admin/kyc_entity/{entity_id}/documents/{document_id}. */
+        /** @description Documents to file for the KYC entity. Each entry is stored as a document of its type; an earlier document of the same type stays on record (several documents of one type are allowed). All entries of one request form one batch in the given order, so a multi-file document (e.g. the pages of a bank statement) is sent as several entries of the same type in one request. A file already on record under its type is not filed again and keeps its dates; to change them, remove the document and file it again. A document is removed through DELETE /admin/kyc_entity/{entity_id}/documents/{document_id}. */
         KycDocumentsInput: {
             /**
              * @description Document type: supplementary, gov_id_front, gov_id_back, gov_id_hand_hold, selfie, proof_of_address, auth_letter, formation_doc, proof_of_ownership, certificate_of_registration_doc, business_registration_doc, share_structure, constitution_or_annual_report, articles_of_association, ubo_declaration, partnership_mins_of_meeting, partnership_deed, certificate_of_incumbency, regulatory_license, state_registry_doc, good_standing_cert, business_proof_of_address, invoices, contracts, financial_statements, source_of_funds, business_bank_statement, source_of_wealth_ubo, customer_supplier_agreements.
@@ -8861,6 +8875,18 @@ export interface components {
              * @description http(s) URL of the file.
              */
             link: string;
+            /**
+             * Format: date
+             * @description Issue date printed on the document (`YYYY-MM-DD`), when it has one.
+             * @example 2020-01-15
+             */
+            issuance_date?: string | null;
+            /**
+             * Format: date
+             * @description Expiry date printed on the document (`YYYY-MM-DD`), when it has one.
+             * @example 2030-01-14
+             */
+            expiration_date?: string | null;
         }[];
         KycEntity: {
             /** Format: uuid */
@@ -8878,6 +8904,11 @@ export interface components {
             middle_name?: string | null;
             /** Format: date-time */
             date_of_birth?: string | null;
+            /**
+             * @description Gender of an individual as reported by the verification — the form the cardholder endpoints take. Null when unknown.
+             * @enum {string|null}
+             */
+            gender?: "M" | "F" | null;
             nationality?: string | null;
             country_of_birth?: string | null;
             occupation?: string | null;
@@ -8912,6 +8943,16 @@ export interface components {
                 type?: string;
                 /** Format: uri */
                 link?: string;
+                /**
+                 * Format: date
+                 * @description Issue date printed on the document (`YYYY-MM-DD`); null when it has none or it is unknown. For an identity document this is the issue date the cardholder endpoints take — read it off the newest `gov_id_front` entry (the list is oldest first).
+                 */
+                issuance_date?: string | null;
+                /**
+                 * Format: date
+                 * @description Expiry date printed on the document (`YYYY-MM-DD`); null when it has none or it is unknown. For an identity document this is the expiry date the cardholder endpoints take — read it off the newest `gov_id_front` entry (the list is oldest first).
+                 */
+                expiration_date?: string | null;
                 /**
                  * Format: uuid
                  * @description Beneficial owner the document belongs to; null for the entity itself.
@@ -9328,7 +9369,7 @@ export interface components {
             note?: string;
             /**
              * Format: date-time
-             * @description Optional. Schedule the payment for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once: if the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve at least 1 hour before scheduled_at.
+             * @description Optional. Schedule the payment for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once: if the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve inside the `approval_window` of the order: from `opens_at` (the order signature lifetime minus 1 hour before scheduled_at) until 1 hour before scheduled_at; a draft not approved by then is canceled.
              */
             scheduled_at?: string;
         };
@@ -9357,7 +9398,7 @@ export interface components {
             note?: string;
             /**
              * Format: date-time
-             * @description Optional. Schedule the payment for a future time (min 1 hour, max 90 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once: if the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve at least 1 hour before scheduled_at.
+             * @description Optional. Schedule the payment for a future time (min 1 hour, max 30 days ahead). No funds are reserved; after approval the order waits in EXPECTED status and executes automatically, once: if the balance does not cover it then, it fails with `scheduled_failure.code` INSUFFICIENT_FUNDS and is not retried. Approve inside the `approval_window` of the order: from `opens_at` (the order signature lifetime minus 1 hour before scheduled_at) until 1 hour before scheduled_at; a draft not approved by then is canceled.
              */
             scheduled_at?: string;
         };
@@ -9409,21 +9450,47 @@ export interface components {
                 id?: string;
                 name?: string | null;
             } | null;
+            /** @description Who created the order — for a scheduled payment, who scheduled it (pair it with `created_at`). Null when no user of the tenant created it: an API key, an operator, the system, or a legacy order with no creation record. Returned by the order list and the single-order reads. */
+            created_by?: {
+                /**
+                 * Format: uuid
+                 * @description User id of the author.
+                 */
+                id: string;
+                /**
+                 * @description First and last name from the profile; null when it has neither.
+                 * @example Jane Brown
+                 */
+                name: string | null;
+            } | null;
             /**
              * Format: date-time
              * @description Requested execution time for scheduled payments (status EXPECTED); null for immediate orders
              */
             scheduled_at?: string | null;
-            /** @description Why a scheduled payment failed — set on a scheduled order in `FAILED`, null on any other scheduled order, absent on an immediate one. A scheduled payment is attempted once and never retried: `INSUFFICIENT_FUNDS` means nothing was debited and the payment can be created again; `PROVIDER_ERROR` — the payment was debited and the provider side failed; `EXECUTION_ERROR` — any other reason. */
+            /** @description Why a scheduled payment failed — set on a scheduled order in `FAILED`, and on one in `CANCELED` that was never approved (`NOT_APPROVED`); null on any other scheduled order, absent on an immediate one. A scheduled payment is attempted once and never retried: `INSUFFICIENT_FUNDS` means nothing was debited and the payment can be created again; `PROVIDER_ERROR` — the payment was debited and the provider side failed; `EXECUTION_ERROR` — any other reason; `NOT_APPROVED` — the draft was not approved before its approval window closed and was canceled, nothing was debited. */
             scheduled_failure?: {
                 /** @enum {string} */
-                code: "INSUFFICIENT_FUNDS" | "PROVIDER_ERROR" | "EXECUTION_ERROR";
+                code: "INSUFFICIENT_FUNDS" | "PROVIDER_ERROR" | "EXECUTION_ERROR" | "NOT_APPROVED";
                 /**
                  * @description Customer-facing text of the code.
                  * @example The balance was insufficient at the scheduled time.
                  */
                 message: string;
             } | null;
+            /** @description When a scheduled payment draft can be approved — set on a scheduled order in `NEW`, null on any other scheduled order, absent on an immediate one. Approve before `opens_at` returns 400 `SCHEDULED_APPROVAL_NOT_OPEN`, after `closes_at` 400 `SCHEDULED_AT_TOO_SOON`; a draft still unapproved when the window closes is canceled (`scheduled_failure.code` `NOT_APPROVED`). The window follows the order signature lifetime, so it can move when that setting changes. */
+            approval_window?: {
+                /**
+                 * Format: date-time
+                 * @description From this moment the draft can be approved.
+                 */
+                opens_at: string;
+                /**
+                 * Format: date-time
+                 * @description Last moment to approve: 1 hour before `scheduled_at`.
+                 */
+                closes_at: string;
+            } | null;
             /** Format: date-time */
             created_at?: string;
             /** Format: date-time */

package/dist/api/types/autogen/apiV2.types.d.ts

@@ -1604,6 +1604,18 @@ export interface components {
             type: "supplementary" | "gov_id_front" | "gov_id_back" | "gov_id_hand_hold" | "selfie" | "proof_of_address" | "auth_letter" | "formation_doc" | "proof_of_ownership" | "certificate_of_registration_doc" | "business_registration_doc" | "share_structure" | "constitution_or_annual_report" | "articles_of_association" | "ubo_declaration" | "partnership_mins_of_meeting" | "partnership_deed" | "certificate_of_incumbency" | "regulatory_license" | "state_registry_doc" | "good_standing_cert" | "business_proof_of_address" | "invoices" | "contracts" | "financial_statements" | "source_of_funds" | "business_bank_statement" | "source_of_wealth_ubo" | "customer_supplier_agreements";
             /** Format: uri */
             link: string;
+            /**
+             * Format: date
+             * @description Issue date printed on the document (YYYY-MM-DD), when it has one.
+             * @example 2020-01-15
+             */
+            issuance_date?: Record<string, never> | null;
+            /**
+             * Format: date
+             * @description Expiry date printed on the document (YYYY-MM-DD), when it has one.
+             * @example 2030-01-14
+             */
+            expiration_date?: Record<string, never> | null;
             /** @example bff */
             readonly source?: string;
             /**
@@ -1688,6 +1700,11 @@ export interface components {
             /** @default false */
             dao_status: boolean | null;
             date_of_birth?: string | null;
+            /**
+             * @description Gender of an individual as the KYC provider reports it: M or F; null when unknown.
+             * @enum {string|null}
+             */
+            gender?: "M" | "F" | null;
             due_diligence_form?: components["schemas"]["KycEntityDueDiligenceFormEntity"] | null;
             email?: string | null;
             export_country?: string | null;

package/dist/api/types/types.d.ts

@@ -891,6 +891,15 @@ export declare namespace API {
                 }
                 export {};
             }
+            namespace OrderTypes {
+                type OrderTypesRoot = pathsV1Frontend['/frontend/reference/order_types'];
+                export type OrderType = componentsV1Frontend['schemas']['ReferenceOrderType'];
+                export namespace List {
+                    type Request = NonNullable<OrderTypesRoot['get']['parameters']['query']>;
+                    type Response = OrderTypesRoot['get']['responses'][200]['content']['application/json'];
+                }
+                export {};
+            }
         }
         namespace NotificationPreferences {
             type NotificationPreferencesRoot = pathsV1Frontend['/frontend/notification-preferences'];
@@ -2702,6 +2711,8 @@ export declare namespace API {
             type Order = componentsV1Frontend['schemas']['Order'];
             type ScheduledFailure = NonNullable<Order['scheduled_failure']>;
             type ScheduledFailureCode = ScheduledFailure['code'];
+            type ApprovalWindow = NonNullable<Order['approval_window']>;
+            type OrderAuthor = NonNullable<Order['created_by']>;
             type OrderEnvelope = {
                 success?: boolean;
                 data?: Order;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "squarefi-bff-api-module",
-  "version": "1.36.91",
+  "version": "1.36.93",
   "description": "Squarefi BFF API client module",
   "type": "module",
   "main": "./dist/index.js",